last executing test programs: 1h28m27.57151516s ago: executing program 0 (id=465): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 1h28m23.149772438s ago: executing program 0 (id=468): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r1}) 1h28m19.413881279s ago: executing program 0 (id=469): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) 1h28m14.774799006s ago: executing program 0 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 1h28m9.308558476s ago: executing program 0 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20040000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 1h28m2.955232272s ago: executing program 0 (id=474): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @random="38dddb1d96d1"}, 0x14) 1h27m55.81352545s ago: executing program 32 (id=474): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @random="38dddb1d96d1"}, 0x14) 5m56.391910959s ago: executing program 2 (id=1264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r1, @local}, 0x10) 5m35.755871353s ago: executing program 2 (id=1266): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x80, 0x3a, '\xe5J\x83\x8f4\xc0\x1e\xe8ey$Ee\xcb\xfe\xdd]>\x14\xcf\xa1\x9fT\xf9\xf1 \xa4i\v\x14\xd3\xd2\xafD-\"\x81\xf3C)\x1c\v\x83\x00\xf6\xdb\xb8*!`r\x10\x91\x1f\x86Q\xd7\xdc\xad\xf3\x17\x80\xfe^\xc4G\xc4d`\xbfkk\xa4\xfe\xc7\xec*\xaeR\x11R\xbdb\x1a\xbd6t\x05oY\xe7^\xbd\x16Y\\x\xf7\xfe\x89\xban\x10c\xef\xa3\xd94\xec\r\xb5q\xd5v\xf6', 0x3a, '\xd9\x01\x1c\x00\xf6\xcb\xb5\x0f\xe4\xa8\x00\x00IY\x05\x03[\x1d\xbd\x94u\xd4?\x10b\xa6\x03\xa7m\xa0\xf1\x00\x00\x00\xb2L\xacgq\xb9\x85\xe6K\xf7\xbc\x8f\xa9\xe8(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\xd4', 0x3a, './file/file0'}, 0xe4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'wg0\x00'}) 4m52.158597966s ago: executing program 2 (id=1267): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000040)="19", 0x1}}, 0x0) 4m37.172025762s ago: executing program 2 (id=1269): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1, 0x8, 0x6) 4m20.869536281s ago: executing program 2 (id=1270): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) 4m13.105906996s ago: executing program 2 (id=1272): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 3m30.171836901s ago: executing program 33 (id=1272): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 3m0.379535246s ago: executing program 1 (id=1277): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0) 2m26.319217773s ago: executing program 1 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r0) 2m8.654658888s ago: executing program 1 (id=1279): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 1m35.288315547s ago: executing program 1 (id=1280): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYRES8=0xffffffffffffffff], 0x401, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000780)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0x2}, 0x0, 0x0, 0x200, 0x7, 0xfffffffffffff734, 0x40, 0x5, 0x4, 0x0, 0x344c}) 1m24.929235756s ago: executing program 1 (id=1281): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 45.157950474s ago: executing program 1 (id=1282): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {0x6, 0x14}, {0xffe7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) 0s ago: executing program 34 (id=1282): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {0x6, 0x14}, {0xffe7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46459' (ED25519) to the list of known hosts. syzkaller login: [ 461.542496][ C0] sched: DL replenish lagged too much [ 497.004356][ T3221] cgroup: Unknown subsys name 'net' [ 497.659729][ T3221] cgroup: Unknown subsys name 'cpuset' [ 497.797193][ T3221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 579.232906][ T3221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 704.425592][ T3232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.556713][ T3232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.970654][ T3234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.146481][ T3234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.028257][ T3232] hsr_slave_0: entered promiscuous mode [ 723.108178][ T3232] hsr_slave_1: entered promiscuous mode [ 726.600842][ T3234] hsr_slave_0: entered promiscuous mode [ 726.669169][ T3234] hsr_slave_1: entered promiscuous mode [ 726.729961][ T3234] debugfs: 'hsr0' already exists in 'hsr' [ 726.735966][ T3234] Cannot create hsr debugfs directory [ 738.107349][ T3232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.337404][ T3232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.488641][ T3232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.713887][ T3232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.838882][ T3234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.280754][ T3234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.447613][ T3234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.706722][ T3234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 756.633782][ T3232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.356531][ T3234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.938121][ T3234] veth0_vlan: entered promiscuous mode [ 817.780856][ T3234] veth1_vlan: entered promiscuous mode [ 819.946161][ T3232] veth0_vlan: entered promiscuous mode [ 820.837728][ T3232] veth1_vlan: entered promiscuous mode [ 821.708024][ T3234] veth0_macvtap: entered promiscuous mode [ 822.549642][ T3234] veth1_macvtap: entered promiscuous mode [ 824.526439][ T3232] veth0_macvtap: entered promiscuous mode [ 825.046547][ T3232] veth1_macvtap: entered promiscuous mode [ 825.306792][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.469109][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.483561][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.595098][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.398871][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.559110][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.574727][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.577713][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.097636][ T3234] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1003.205656][ T4058] ptrace attach of "/syz-executor exec"[4059] was attempted by ""[4058] [ 1061.157688][ T35] audit: type=1326 audit(1059.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm="syz.1.59" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 1073.015425][ T4096] ======================================================= [ 1073.015425][ T4096] WARNING: The mand mount option has been deprecated and [ 1073.015425][ T4096] and is ignored by this kernel. Remove the mand [ 1073.015425][ T4096] option from the mount to silence this warning. [ 1073.015425][ T4096] ======================================================= [ 1075.921278][ T4098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1093.358880][ T4105] tc_dump_action: action bad kind [ 1106.600122][ T3933] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1106.991254][ T3933] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 1106.998341][ T3933] usb 1-1: config 0 has no interface number 0 [ 1107.881457][ T3933] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 1107.886339][ T3933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.913141][ T3933] usb 1-1: Product: syz [ 1107.916026][ T3933] usb 1-1: Manufacturer: syz [ 1107.929323][ T3933] usb 1-1: SerialNumber: syz [ 1108.370890][ T3933] usb 1-1: config 0 descriptor?? [ 1108.945944][ T3933] usb_ehset_test 1-1:0.205: probe with driver usb_ehset_test failed with error -32 [ 1111.239881][ T3933] usb 1-1: USB disconnect, device number 2 [ 1128.165374][ T3933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1129.777061][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.781186][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.797096][ T3933] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1129.799018][ T3933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.097298][ T3933] usb 2-1: config 0 descriptor?? [ 1132.144156][ T3933] elo 0003:04E7:0030.0001: item fetching failed at offset 3/7 [ 1132.215551][ T3933] elo 0003:04E7:0030.0001: parse failed [ 1132.236066][ T3933] elo 0003:04E7:0030.0001: probe with driver elo failed with error -22 [ 1132.696339][ T3933] usb 2-1: USB disconnect, device number 2 [ 1152.383281][ T4162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 1158.588840][ C1] Illegal XDP return value 16128 on prog (id 15) dev lo, expect packet loss! [ 1160.130059][ T4164] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1171.466789][ T4174] netlink: 'syz.1.81': attribute type 12 has an invalid length. [ 1207.714855][ T4196] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1304.198047][ T3876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1305.308385][ T3876] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1305.310774][ T3876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.320386][ T3876] usb 1-1: Product: syz [ 1305.323627][ T3876] usb 1-1: Manufacturer: syz [ 1305.325256][ T3876] usb 1-1: SerialNumber: syz [ 1305.599647][ T3876] usb 1-1: config 0 descriptor?? [ 1308.495402][ T3876] usb 1-1: USB disconnect, device number 3 [ 1342.525381][ T4282] veth1_macvtap: left promiscuous mode [ 1374.398475][ T35] audit: type=1800 audit(1373.320:3): pid=4296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="file1" dev="tmpfs" ino=289 res=0 errno=0 [ 1494.008317][ T4361] netlink: 'syz.1.149': attribute type 7 has an invalid length. [ 1496.849221][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.876921][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.880823][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1497.088691][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1497.113365][ T4361] Zero length message leads to an empty skb [ 1534.156222][ T4384] batadv_slave_1: entered promiscuous mode [ 1534.479476][ T4382] batadv_slave_1: left promiscuous mode [ 1542.944225][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1542.948728][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1543.196383][ T36] usb 1-1: device descriptor read/64, error -32 [ 1543.617067][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1544.685650][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1546.024463][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.027079][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.029814][ T36] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1546.048662][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.440255][ T36] usb 1-1: config 0 descriptor?? [ 1551.528952][ T36] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 1551.545418][ T36] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 1551.547769][ T36] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 1551.550333][ T36] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 1551.573160][ T36] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 1551.819951][ T36] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 1552.766611][ T36] usb 1-1: USB disconnect, device number 5 [ 1566.545111][ T35] audit: type=1326 audit(1565.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.1.159" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7fc00000 [ 1592.356272][ T36] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1593.295090][ T36] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.298513][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1593.323971][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1593.353105][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.669104][ T36] usb 2-1: config 0 descriptor?? [ 1593.768868][ T4437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1594.060752][ T36] hub 2-1:0.0: USB hub found [ 1595.607774][ T36] hub 2-1:0.0: 2 ports detected [ 1597.501223][ T3933] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1597.626704][ T36] usb 2-1: Failed to suspend device, error -71 [ 1597.707068][ T36] usb 2-1: USB disconnect, device number 3 [ 1611.728725][ T4464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1678.534783][ T4498] loop1: detected capacity change from 0 to 7 [ 1678.754685][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.758226][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 1678.829728][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.834095][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 1678.838533][ T4498] loop1: unable to read partition table [ 1678.855842][ T4498] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1680.018074][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1680.020786][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 1680.052559][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1680.055979][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 1680.081021][ T4498] loop1: unable to read partition table [ 1680.449600][ T4505] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1680.721376][ T4505] usb 2-1: Using ep0 maxpacket: 16 [ 1680.968907][ T4505] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1681.021455][ T4505] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.026272][ T4505] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1681.518983][ T4505] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1681.525718][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.527772][ T4505] usb 2-1: Product: syz [ 1681.529530][ T4505] usb 2-1: Manufacturer: syz [ 1681.531079][ T4505] usb 2-1: SerialNumber: syz [ 1686.597160][ T4505] usb 2-1: 0:2 : does not exist [ 1687.764802][ T4505] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1689.296533][ T4505] usb 2-1: USB disconnect, device number 4 [ 1700.587332][ T4528] trusted_key: encrypted_key: keyword 'updat' not recognized [ 1769.607744][ T4564] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1778.001234][ T35] audit: type=1326 audit(1776.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.204" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 1831.120485][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.150899][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.555004][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 1870.189691][ T4609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.267019][ T4609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.600430][ T4609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1873.644550][ T4609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.631457][ T4609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1877.665007][ T4609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.998539][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1884.009464][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.189763][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1885.193711][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.139143][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1886.154810][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.826647][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1886.829181][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.996918][ T4634] input: syz0 as /devices/virtual/input/input0 [ 1909.413735][ T4505] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1909.649868][ T4505] usb 1-1: Using ep0 maxpacket: 16 [ 1909.779267][ T4505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1909.784599][ T4505] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1909.786770][ T4505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.367492][ T4505] usb 1-1: config 0 descriptor?? [ 1911.269814][ T4505] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input1 [ 1916.739071][ T4505] bcm5974 1-1:0.0: could not read from device [ 1917.258112][ T4505] input: failed to attach handler mousedev to device input1, error: -5 [ 1917.717017][ T4505] usb 1-1: USB disconnect, device number 6 [ 1918.966993][ T4665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 2044.407041][ T4748] process 'syz.1.257' launched './file2' with NULL argv: empty string added [ 2073.827121][ T1477] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 2074.150843][ T1477] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2074.153624][ T1477] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.155798][ T1477] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2074.160974][ T1477] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2074.163536][ T1477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.400355][ T1477] usb 2-1: config 0 descriptor?? [ 2078.224422][ T1477] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 2078.227865][ T1477] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 2078.361233][ T1477] hid-steam 0003:28DE:1102.0003: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 2078.470839][ T1477] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 2078.695590][ T1477] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0003/input/input3 [ 2079.233412][ T1477] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 2079.236166][ T1477] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 2079.604887][ T1477] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 2079.906154][ T1477] usb 2-1: USB disconnect, device number 5 [ 2081.597812][ T1477] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 2091.819822][ T4798] C: renamed from batadv_slave_0 (while UP) [ 2092.715210][ T4798] netlink: 'syz.1.267': attribute type 8 has an invalid length. [ 2092.717693][ T4798] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2127.748985][ T1477] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2128.155044][ T1477] usb 1-1: Using ep0 maxpacket: 16 [ 2128.466418][ T1477] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 2128.471212][ T1477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2128.517951][ T1477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2128.519519][ T1477] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2128.546568][ T1477] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2128.550540][ T1477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.733669][ T1477] usb 1-1: config 0 descriptor?? [ 2129.654374][ T1477] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 2132.067268][ T1477] usb 1-1: USB disconnect, device number 7 [ 2153.510274][ T4852] block nbd0: not configured, cannot reconfigure [ 2232.238276][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 2249.999257][ T4914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.706211][ T4914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.310497][ T4914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.718438][ T4914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2260.663200][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.539564][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.873791][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.104775][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.889722][ T4967] usb usb1: check_ctrlrecip: process 4967 (syz.0.319) requesting ep 01 but needs 81 [ 2320.844882][ T4991] mmap: syz.0.329 (4991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2358.886680][ T35] audit: type=1326 audit(2357.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.338" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 2437.578617][ T5071] can0: slcan on ttyS3. [ 2438.437536][ T5075] can0 (unregistered): slcan off ttyS3. [ 2439.969694][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2440.445770][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2440.448190][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.755301][ T9] usb 2-1: config 0 descriptor?? [ 2441.005823][ T9] cp210x 2-1:0.0: cp210x converter detected [ 2444.376726][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2447.168269][ T4381] usb 2-1: USB disconnect, device number 6 [ 2447.673641][ T4381] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2447.746876][ T4381] cp210x 2-1:0.0: device disconnected [ 2503.387646][ T5142] binder: 5141:5142 ioctl c018620c 200000000100 returned -1 [ 2516.083876][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 2521.645356][ T5163] vcan0: entered allmulticast mode [ 2536.708736][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 2548.136604][ T5188] tap0: tun_chr_ioctl cmd 1074025675 [ 2548.144986][ T5188] tap0: persist disabled [ 2564.084052][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 2564.618603][ T5206] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2564.621409][ T5206] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2564.656083][ T5206] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 2594.534992][ T5230] random: crng reseeded on system resumption [ 2620.760652][ T5250] tap0: tun_chr_ioctl cmd 1074025677 [ 2620.865930][ T5248] devtmpfs: Cannot change global quota limit on remount [ 2620.960570][ T5250] tap0: linktype set to 774 [ 2627.022846][ T35] audit: type=1326 audit(2625.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.430" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 2627.055952][ T35] audit: type=1326 audit(2625.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.430" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 2627.470856][ T35] audit: type=1326 audit(2626.410:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.430" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 2627.578400][ T35] audit: type=1326 audit(2626.490:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.430" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 2649.234862][ T5270] block nbd0: server does not support multiple connections per device. [ 2649.389349][ T5270] block nbd0: shutting down sockets [ 2656.135921][ T5273] can0: slcan on ttyS3. [ 2657.403332][ T5275] can0 (unregistered): slcan off ttyS3. [ 2696.086623][ T5315] netlink: 'syz.0.450': attribute type 9 has an invalid length. [ 2726.916698][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 2726.919409][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 2742.179184][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 2793.939194][ T1477] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2794.739265][ T1477] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2794.742557][ T1477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2794.913148][ T1477] usb 2-1: config 0 descriptor?? [ 2797.155975][ T1477] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2797.157572][ T1477] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 2797.189421][ T1477] asix 2-1:0.0: probe with driver asix failed with error -71 [ 2797.413738][ T1477] usb 2-1: USB disconnect, device number 7 [ 2815.598301][ T5407] sch_fq: defrate 0 ignored. [ 2838.448400][ T8] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2839.606977][ T8] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2840.906015][ T8] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.193417][ T8] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.530319][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2856.876935][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2857.216996][ T8] bond0 (unregistering): Released all slaves [ 2858.876292][ T8] hsr_slave_0: left promiscuous mode [ 2858.986298][ T8] hsr_slave_1: left promiscuous mode [ 2859.496527][ T8] veth0_macvtap: left promiscuous mode [ 2859.513155][ T8] veth1_vlan: left promiscuous mode [ 2859.519432][ T8] veth0_vlan: left promiscuous mode [ 2888.094771][ T5395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2888.343533][ T5395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2918.504781][ T5395] hsr_slave_0: entered promiscuous mode [ 2918.544696][ T5395] hsr_slave_1: entered promiscuous mode [ 2918.617974][ T5395] debugfs: 'hsr0' already exists in 'hsr' [ 2918.620000][ T5395] Cannot create hsr debugfs directory [ 2933.719490][ T5395] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2934.139560][ T5395] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2934.480630][ T5395] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2934.737458][ T5395] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2971.300395][ T5395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3057.737555][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 3072.149916][ T5395] veth0_vlan: entered promiscuous mode [ 3073.446197][ T5395] veth1_vlan: entered promiscuous mode [ 3077.656775][ T5395] veth0_macvtap: entered promiscuous mode [ 3078.866489][ T5395] veth1_macvtap: entered promiscuous mode [ 3083.543798][ T4364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3083.554936][ T4364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3083.557985][ T4364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3083.560759][ T4364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.168908][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 3223.915612][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 3229.165957][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.664862][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3230.400961][ T5969] bond0 (unregistering): Released all slaves [ 3251.844899][ T6014] dns_resolver: Unsupported content type (98) [ 3317.600876][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 3386.645652][ T35] audit: type=1326 audit(3385.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.577" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 3472.796639][ T5084] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 3568.281096][ T6171] pimreg: entered allmulticast mode [ 3568.354237][ T6176] pimreg: left allmulticast mode [ 3574.980913][ T6180] netlink: 'syz.2.618': attribute type 14 has an invalid length. [ 3593.224406][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3593.300806][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3594.175370][ T6192] tap0: tun_chr_ioctl cmd 2148553947 [ 3636.591353][ T6217] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 3636.591353][ T6217] The task syz.2.630 (6217) triggered the difference, watch for misbehavior. [ 3669.206138][ T6232] tun0: tun_chr_ioctl cmd 1074025676 [ 3669.209442][ T6232] tun0: owner set to 0 [ 3741.634490][ T6271] netlink: 'syz.1.650': attribute type 6 has an invalid length. [ 3742.563078][ T6271] netlink: 'syz.1.650': attribute type 6 has an invalid length. [ 3770.019020][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 3831.448695][ T6315] pim6reg1: mtu less than device minimum [ 3891.597383][ T6349] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.680'. [ 3961.977559][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 4034.257200][ T6424] veth0_to_team: entered promiscuous mode [ 4034.260742][ T6424] veth0_to_team: entered allmulticast mode [ 4046.827866][ T6429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.714'. [ 4066.787873][ T6439] input: syz1 as /devices/virtual/input/input6 [ 4113.208923][ T6465] netem: incorrect gi model size [ 4129.675156][ T6478] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 4129.680415][ T6478] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 4235.346075][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 4235.405549][ T6536] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 4299.058090][ T6572] netlink: 'syz.1.777': attribute type 3 has an invalid length. [ 4305.920982][ T35] audit: type=1326 audit(4304.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.780" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 4309.063021][ T6581] vxcan1: tx address claim with dest, not broadcast [ 4384.625538][ T6316] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 4384.630530][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 4384.916932][ T6316] usb 2-1: device descriptor read/64, error -32 [ 4385.263707][ T6316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 4385.615142][ T6316] usb 2-1: Using ep0 maxpacket: 32 [ 4385.774522][ T6316] usb 2-1: config index 0 descriptor too short (expected 44, got 36) [ 4385.776785][ T6316] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 4385.778672][ T6316] usb 2-1: config 0 has no interface number 0 [ 4385.780851][ T6316] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 4385.801252][ T6316] usb 2-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 4385.815452][ T6316] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 4385.817732][ T6316] usb 2-1: config 0 interface 126 has no altsetting 0 [ 4386.035306][ T6316] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 4386.037700][ T6316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4386.039553][ T6316] usb 2-1: Product: syz [ 4386.041062][ T6316] usb 2-1: Manufacturer: syz [ 4386.135338][ T6316] usb 2-1: SerialNumber: syz [ 4386.586590][ T6316] usb 2-1: config 0 descriptor?? [ 4386.679207][ T6624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4391.140312][ T6316] ir_usb 2-1:0.126: IR Dongle converter detected [ 4391.444984][ T6316] usb 2-1: IRDA class descriptor not found, device not bound [ 4391.975472][ T6316] usb 2-1: USB disconnect, device number 9 [ 4393.938026][ T6636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4436.299155][ T6651] veth1_to_batadv: entered promiscuous mode [ 4463.596170][ T6629] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 4463.967925][ T6629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4463.969355][ T6629] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 4464.053350][ T6629] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 4464.054712][ T6629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 4464.055844][ T6629] usb 2-1: SerialNumber: syz [ 4466.129714][ T6629] usb 2-1: 0:2 : does not exist [ 4467.324921][ T6629] usb 2-1: USB disconnect, device number 10 [ 4485.755958][ T6700] syz.2.815 uses obsolete (PF_INET,SOCK_PACKET) [ 4538.033022][ T35] audit: type=1326 audit(4536.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.822" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 4552.312834][ T35] audit: type=1326 audit(4551.170:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.825" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7fc00000 [ 4565.585813][ T6732] netlink: 52 bytes leftover after parsing attributes in process `syz.1.828'. [ 4622.420071][ T6762] netlink: 176 bytes leftover after parsing attributes in process `syz.1.838'. [ 4622.439284][ T6762] ip6gretap0: entered promiscuous mode [ 4622.637920][ T6762] netlink: 176 bytes leftover after parsing attributes in process `syz.1.838'. [ 4647.096244][ T6771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.841'. [ 4684.517351][ T4948] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 4684.989272][ T4948] usb 2-1: Using ep0 maxpacket: 32 [ 4687.239602][ T4948] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 4687.330439][ T4948] usb 2-1: config 0 has no interface number 0 [ 4687.363882][ T4948] usb 2-1: config 0 interface 12 has no altsetting 0 [ 4688.009279][ T4948] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 4688.088658][ T4948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4688.090925][ T4948] usb 2-1: Product: syz [ 4688.228557][ T4948] usb 2-1: Manufacturer: syz [ 4688.329113][ T4948] usb 2-1: SerialNumber: syz [ 4689.159974][ T4948] usb 2-1: config 0 descriptor?? [ 4693.481222][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 4695.198473][ T4948] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 4695.318927][ T4948] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 4695.321219][ T4948] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 4695.598034][ T4948] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 4697.610479][ T4948] usb 2-1: USB disconnect, device number 11 [ 4793.590185][ T6840] veth3: entered allmulticast mode [ 4868.357211][ C0] vkms_vblank_simulate: vblank timer overrun [ 4896.730498][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 4896.754058][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 4964.634942][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4964.700814][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4976.655947][ T6629] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 4977.226166][ T6629] usb 2-1: Using ep0 maxpacket: 32 [ 4977.794911][ T6629] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 4977.797103][ T6629] usb 2-1: config 0 has no interface number 0 [ 4977.798914][ T6629] usb 2-1: config 0 interface 217 has no altsetting 0 [ 4978.160635][ T6629] usb 2-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=a1.0d [ 4978.177106][ T6629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4978.178602][ T6629] usb 2-1: Product: syz [ 4978.180483][ T6629] usb 2-1: Manufacturer: syz [ 4978.225097][ T6629] usb 2-1: SerialNumber: syz [ 4978.433882][ T6629] usb 2-1: config 0 descriptor?? [ 4980.659488][ T6629] pl2303 2-1:0.217: required endpoints missing [ 4991.236438][ T6629] usb 2-1: USB disconnect, device number 12 [ 5046.085701][ T35] audit: type=1400 audit(5044.950:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A203A0A36202020206970 pid=6962 comm="syz.1.900" [ 5115.274738][ T6992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.906570][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.911253][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.916333][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.919932][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.925278][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.928457][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.933145][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.937469][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5116.941003][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.283757][ T6991] net_ratelimit: 441 callbacks suppressed [ 5120.284370][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.289271][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.294059][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.297456][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.300627][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.305314][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.308598][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.312689][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.315843][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5120.318813][ T6991] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 5252.637565][ T7040] netlink: 80 bytes leftover after parsing attributes in process `syz.2.929'. [ 5294.506568][ T35] audit: type=1326 audit(5549.208:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.1.935" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 5312.159891][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 5316.596873][ C0] vkms_vblank_simulate: vblank timer overrun [ 5346.465891][ T35] audit: type=1326 audit(5601.398:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.2.945" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x0 [ 5347.096251][ T35] audit: type=1326 audit(5601.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.2.945" exe="/syz-executor" sig=31 arch=c00000f3 syscall=436 compat=0 ip=0xdbd46 code=0x0 [ 5356.068703][ T7085] random: crng reseeded on system resumption [ 5368.599565][ T7088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 5453.300424][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 5453.303488][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 5453.339049][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 5453.340557][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 5571.309809][ T7205] loop1: detected capacity change from 0 to 524255232 [ 5578.221444][ T7213] binder: 7212:7213 ioctl c018620c 200000000000 returned -22 [ 5614.305018][ C0] vkms_vblank_simulate: vblank timer overrun [ 5630.923959][ T7243] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1007'. [ 5630.928594][ T7243] netem: invalid attributes len -24 [ 5630.930879][ T7243] netem: change failed [ 5674.717954][ T7267] ip6gretap0: entered promiscuous mode [ 5674.720926][ T7267] macsec1: entered promiscuous mode [ 5674.745883][ T7267] macsec1: entered allmulticast mode [ 5674.748075][ T7267] ip6gretap0: entered allmulticast mode [ 5726.836605][ T7304] input: syz0 as /devices/virtual/input/input7 [ 5860.980537][ T7392] netlink: 'syz.2.1066': attribute type 9 has an invalid length. [ 6012.847301][ T7434] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 6012.850116][ T7434] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 6042.595974][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 6060.480965][ C0] vkms_vblank_simulate: vblank timer overrun [ 6151.648288][ T7477] [U] ^A [ 6186.447719][ T7496] misc userio: No port type given on /dev/userio [ 6301.561798][ C0] hrtimer: interrupt took 1006400 ns [ 6467.526302][ T7581] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1139'. [ 6580.169848][ T7619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1152'. [ 6660.720991][ C0] vkms_vblank_simulate: vblank timer overrun [ 6705.653815][ C0] vkms_vblank_simulate: vblank timer overrun [ 6723.758446][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 6854.886002][ C0] vkms_vblank_simulate: vblank timer overrun [ 6883.465536][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 6883.467202][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 7028.337447][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7028.455459][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7053.830371][ T7764] veth1_vlan: left promiscuous mode [ 7054.316596][ T7764] macvlan1: entered allmulticast mode [ 7058.929943][ T7764] veth1_vlan: entered promiscuous mode [ 7058.987439][ T7764] veth1_vlan: entered allmulticast mode [ 7059.059310][ T7764] macvlan1: entered promiscuous mode [ 7115.209560][ C0] vkms_vblank_simulate: vblank timer overrun [ 7222.105634][ T7813] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 7223.794346][ T7813] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 7262.456285][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7262.577063][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7276.318663][ T7568] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 7278.235541][ T7568] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 7278.237037][ T7568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7278.825367][ T7568] usb 2-1: config 0 descriptor?? [ 7284.354098][ T7568] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 7284.438042][ T7568] asix 2-1:0.0: probe with driver asix failed with error -110 [ 7289.916060][ T7834] $H: renamed from dummy0 (while UP) [ 7290.184629][ T7834] $H: entered promiscuous mode [ 7292.250872][ T7766] usb 2-1: USB disconnect, device number 13 [ 7403.908995][ C0] vkms_vblank_simulate: vblank timer overrun [ 7406.313013][ T7876] netlink: 'syz.2.1234': attribute type 10 has an invalid length. [ 7478.536647][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 7491.448062][ T35] audit: type=1326 audit(7746.278:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7491.450877][ T35] audit: type=1326 audit(7746.278:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7493.637555][ T35] audit: type=1326 audit(7748.538:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=199 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7494.954348][ T35] audit: type=1326 audit(7749.888:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7495.083539][ T35] audit: type=1326 audit(7750.018:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7497.176748][ T35] audit: type=1326 audit(7752.118:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdbd46 code=0x7ffc0000 [ 7497.292481][ T35] audit: type=1326 audit(7752.218:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.1243" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdbd46 code=0x40000 [ 7549.301468][ C0] vkms_vblank_simulate: vblank timer overrun [ 7571.887751][ T7927] capability: warning: `syz.2.1253' uses deprecated v2 capabilities in a way that may be insecure [ 7687.277168][ T7948] CUSE: unknown device info "" [ 7687.278679][ T7948] CUSE: zero length info key specified [ 7703.640415][ T7952] hsr0: entered allmulticast mode [ 7703.773814][ T7952] hsr_slave_0: entered allmulticast mode [ 7703.775935][ T7952] hsr_slave_1: entered allmulticast mode [ 7843.834008][ T7980] syz.1.1274 (7980): drop_caches: 4 [ 7906.501163][ T7981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7925.954062][ T7981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7929.910158][ T7981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7941.588900][ T7981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7970.304554][ T7981] ip6gretap0 (unregistering): left allmulticast mode [ 7997.687454][ T7981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7998.040228][ T7981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7998.927536][ T7981] bond0 (unregistering): (slave $H): Releasing backup interface [ 7999.275079][ T7981] bond0 (unregistering): Released all slaves [ 8006.676304][ T7981] hsr_slave_0: left promiscuous mode [ 8007.406072][ T7981] hsr_slave_1: left promiscuous mode [ 8009.106880][ T7981] veth1_macvtap: left promiscuous mode [ 8009.110589][ T7981] veth0_macvtap: left promiscuous mode [ 8009.150367][ T7981] veth1_vlan: left allmulticast mode [ 8009.199309][ T7981] veth1_vlan: left promiscuous mode [ 8009.280131][ T7981] veth0_vlan: left promiscuous mode [ 8046.746815][ T7981] hsr0 (unregistering): left allmulticast mode [ 8103.503231][ C0] ------------[ cut here ]------------ [ 8103.503908][ C0] WARNING: CPU: 0 PID: 7981 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x260/0x3f0 [ 8103.505254][ C0] Modules linked in: [ 8103.506720][ C0] CPU: 0 UID: 0 PID: 7981 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT [ 8103.507727][ C0] Hardware name: riscv-virtio,qemu (DT) [ 8103.508481][ C0] Workqueue: netns cleanup_net [ 8103.509499][ C0] epc : xfrm_state_fini+0x260/0x3f0 [ 8103.510245][ C0] ra : xfrm_state_fini+0x260/0x3f0 [ 8103.510890][ C0] epc : ffffffff85bc785c ra : ffffffff85bc785c sp : ffff8f8004de77e0 [ 8103.511310][ C0] gp : ffffffff89e99e80 tp : ffffaf8016299a40 t0 : ffff8f8004de76d8 [ 8103.511731][ C0] t1 : fffff5ef0dd9f210 t2 : ffffffff85bc7cf2 s0 : ffff8f8004de7810 [ 8103.512117][ C0] s1 : ffffaf8012b90000 a0 : 0000000000000000 a1 : ffffaf801629aa40 [ 8103.512592][ C0] a2 : 0000000000000000 a3 : ffffffff817db0d6 a4 : 0000000000000002 [ 8103.512985][ C0] a5 : 0000000000000000 a6 : fffff5ef0dd9f211 a7 : ffffaf806ecf9083 [ 8103.513405][ C0] s2 : ffffaf8012b91200 s3 : ffffffff85b872a8 s4 : dfffffff00000000 [ 8103.513856][ C0] s5 : ffff8f8004de79a0 s6 : ffffffff89a71040 s7 : fffffffef1383260 [ 8103.514277][ C0] s8 : ffffffff89a71040 s9 : ffffffff877e5a40 s10: ffffffff89c19300 [ 8103.514705][ C0] s11: fffff1ef009bcf34 t3 : c478ca4c00000000 t4 : fffff5ef0dd9f210 [ 8103.515110][ C0] t5 : fffff5ef0dd9f211 t6 : 0000000000000002 [ 8103.515445][ C0] status: 0000000200000120 badaddr: ffffffff85bc785c cause: 0000000000000003 [ 8103.515956][ C0] [] xfrm_state_fini+0x260/0x3f0 [ 8103.516737][ C0] [] xfrm_net_exit+0x2c/0x6a [ 8103.517529][ C0] [] ops_undo_list+0x262/0x9dc [ 8103.518133][ C0] [] cleanup_net+0x3ee/0x7ec [ 8103.518845][ C0] [] process_one_work+0x842/0x1ea4 [ 8103.519653][ C0] [] worker_thread+0x5d2/0xdec [ 8103.520429][ C0] [] kthread+0x3a4/0x7e0 [ 8103.521118][ C0] [] ret_from_fork_kernel+0x2a/0xbb4 [ 8103.521796][ C0] [] ret_from_fork_kernel_asm+0x16/0x18 [ 8103.523687][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 8103.524657][ C0] CPU: 0 UID: 0 PID: 7981 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT [ 8103.525328][ C0] Hardware name: riscv-virtio,qemu (DT) [ 8103.525651][ C0] Workqueue: netns cleanup_net [ 8103.526384][ C0] Call Trace: [ 8103.526633][ C0] [] dump_backtrace+0x2e/0x3c [ 8103.527475][ C0] [] show_stack+0x30/0x3c [ 8103.528071][ C0] [] dump_stack_lvl+0x110/0x1a6 [ 8103.528714][ C0] [] dump_stack+0x1c/0x24 [ 8103.529285][ C0] [] vpanic+0x368/0x74e [ 8103.529896][ C0] [] trace_suspend_resume+0x0/0x2de [ 8103.530555][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 8103.531218][ C0] [] __warn+0x330/0x4e4 [ 8103.531817][ C0] [] report_bug+0x40c/0x60e [ 8103.532631][ C0] [] handle_break+0x134/0x32a [ 8103.533375][ C0] [] do_trap_break+0x6e/0x8c [ 8103.534222][ C0] [] handle_exception+0x146/0x152 [ 8103.535160][ C0] [] xfrm_state_fini+0x260/0x3f0 [ 8103.535817][ C0] [] xfrm_net_exit+0x2c/0x6a [ 8103.536628][ C0] [] ops_undo_list+0x262/0x9dc [ 8103.537304][ C0] [] cleanup_net+0x3ee/0x7ec [ 8103.537966][ C0] [] process_one_work+0x842/0x1ea4 [ 8103.538786][ C0] [] worker_thread+0x5d2/0xdec [ 8103.539585][ C0] [] kthread+0x3a4/0x7e0 [ 8103.540248][ C0] [] ret_from_fork_kernel+0x2a/0xbb4 [ 8103.540965][ C0] [] ret_from_fork_kernel_asm+0x16/0x18 [ 8103.542241][ C0] SMP: stopping secondary CPUs VM DIAGNOSIS: 18:42:34 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81f0c9f2 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff86432c68 vstvec 0000000000000000 mepc ffffffff80090b56 sepc ffffffff85bc785c vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff85bc785c htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 90847000000ad793 x0/zero 0000000000000000 x1/ra ffffffff81f0c9c2 x2/sp ffff8f8004de6e50 x3/gp ffffffff89e99e80 x4/tp ffffaf8016299a40 x5/t0 7200000000000000 x6/t1 0000000000000001 x7/t2 726678203a206370 x8/s0 ffff8f8004de6e90 x9/s1 0000000000000000 x10/a0 ffffffff91232168 x11/a1 ffffaf8016299a40 x12/a2 0000000000000000 x13/a3 ffffffff81f0c9b0 x14/a4 1ffffffff224642d x15/a5 ffff8f800006d000 x16/a6 ffffffff912323f2 x17/a7 0000000000000003 x18/s2 ffffffff91232120 x19/s3 0000000000000030 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ffffffff81f0c954 x23/s7 0000000000000000 x24/s8 ffffffff9105cfd9 x25/s9 0000000000000010 x26/s10 fffffffef224642f x27/s11 dfffffff00000000 x28/t3 ffffffff9105cfb7 x29/t4 fffff1ef009bcdbc x30/t5 fffff1ef009bcdbd x31/t6 ffffffff9105cfb7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80086f16 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff86432c68 vstvec 0000000000000000 mepc ffffffff804fe33a sepc ffffffff804fe33a vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90847000000ad793 x0/zero 0000000000000000 x1/ra ffffffff80086f12 x2/sp ffff8f8000017e30 x3/gp ffffffff89e99e80 x4/tp ffffaf80136ccec0 x5/t0 ffff8f8000010000 x6/t1 fffffffef13f4930 x7/t2 0000000000000008 x8/s0 ffff8f8000017e60 x9/s1 ffffffff86a0c408 x10/a0 0000000000000000 x11/a1 ffffaf80136ccec0 x12/a2 00000000000f0000 x13/a3 ffffffff8015b6e2 x14/a4 0000000000000002 x15/a5 0000000000010000 x16/a6 fffffffef13f4931 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff91243928 x20/s4 ffffaf8011e9a400 x21/s5 0000000000000004 x22/s6 ffffffff86a5ac00 x23/s7 ffffffff8685e000 x24/s8 ffffffff80086c54 x25/s9 0000000002af31dc x26/s10 0000000000000000 x27/s11 ffff8f800ac5b3e8 x28/t3 4b952e4d00000000 x29/t4 fffffffef13f4930 x30/t5 fffffffef13f4931 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000