last executing test programs: 47.994423083s ago: executing program 1 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x5, "ff899fd8736a4a55d45b2c257a0c9fed"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 40.748615425s ago: executing program 0 (id=351): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r1) 40.566632048s ago: executing program 1 (id=352): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) recvfrom$unix(r2, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f0000000000)=@tcp6=r2, 0x1}, 0x20) 35.766969169s ago: executing program 0 (id=353): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) recvfrom$unix(r2, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) 34.399473293s ago: executing program 1 (id=354): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000005c0)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x7e}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) r0 = userfaultfd(0x80001) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000000c0)='nfs\x00', 0x8004, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TCSETSF2(r2, 0x402c542d, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 30.09974349s ago: executing program 0 (id=355): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0xfe61}}, 0x880) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) close(r0) open(0x0, 0x10d2fe, 0x20) 16.629545994s ago: executing program 1 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad388a8", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 13.898822552s ago: executing program 0 (id=357): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r1) 7.709134209s ago: executing program 0 (id=358): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) recvfrom$unix(r2, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f0000000000)=@tcp6=r2, 0x1}, 0x20) 6.820994072s ago: executing program 1 (id=359): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) recvfrom$unix(r2, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) 1.030512989s ago: executing program 1 (id=360): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 0 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59544' (ED25519) to the list of known hosts. syzkaller login: [ 449.676369][ T3189] cgroup: Unknown subsys name 'net' [ 450.522155][ T3189] cgroup: Unknown subsys name 'cpuset' [ 450.864970][ T3189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 525.466663][ T3189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 648.104957][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.691579][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.761792][ T3201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.055994][ T3201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.633498][ T3203] hsr_slave_0: entered promiscuous mode [ 667.821598][ T3203] hsr_slave_1: entered promiscuous mode [ 668.046260][ T3201] hsr_slave_0: entered promiscuous mode [ 668.080569][ T3201] hsr_slave_1: entered promiscuous mode [ 668.109997][ T3201] debugfs: 'hsr0' already exists in 'hsr' [ 668.114032][ T3201] Cannot create hsr debugfs directory [ 679.296951][ T3203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.524836][ T3203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.677513][ T3203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.165461][ T3203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 681.656899][ T3201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.777515][ T3201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.923393][ T3201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.071577][ T3201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.934595][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.932839][ T3201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.641503][ T3201] veth0_vlan: entered promiscuous mode [ 748.380240][ T3201] veth1_vlan: entered promiscuous mode [ 749.579625][ T3203] veth0_vlan: entered promiscuous mode [ 750.286711][ T3203] veth1_vlan: entered promiscuous mode [ 751.357333][ T3201] veth0_macvtap: entered promiscuous mode [ 751.704157][ T3201] veth1_macvtap: entered promiscuous mode [ 753.354334][ T3203] veth0_macvtap: entered promiscuous mode [ 754.125805][ T3203] veth1_macvtap: entered promiscuous mode [ 754.823457][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.827891][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.883225][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.995243][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.716384][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.740878][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.744932][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.747197][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.306811][ T3201] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 788.660064][ T3826] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3'. [ 794.687048][ T31] audit: type=1804 audit(793.370:2): pid=3836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5" name="file2" dev="ramfs" ino=2850 res=1 errno=0 [ 814.275524][ T3853] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 814.900986][ T3855] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 855.042081][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 855.046137][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 855.103899][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 859.613363][ T3879] binder: 3878:3879 unknown command 0 [ 859.614846][ T3879] binder: 3878:3879 ioctl c0306201 200000000080 returned -22 [ 861.563989][ T3881] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 863.001820][ T31] audit: type=1326 audit(861.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3882 comm="syz.0.22" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 870.454991][ T3888] netlink: 7 bytes leftover after parsing attributes in process `syz.1.25'. [ 893.941011][ T3905] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 917.606419][ T3920] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 918.297542][ T3922] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 940.347430][ T3813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 941.117977][ T3813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.123245][ T3813] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 941.124915][ T3813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.283903][ T3813] usb 1-1: config 0 descriptor?? [ 944.706809][ T3813] usbhid 1-1:0.0: can't add hid device: -71 [ 944.801132][ T3813] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 945.164759][ T3813] usb 1-1: USB disconnect, device number 2 [ 947.581998][ T3812] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 948.450510][ T3812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.453354][ T3812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 948.455250][ T3812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.822024][ T3812] usb 1-1: config 0 descriptor?? [ 949.010351][ T3812] hub 1-1:0.0: USB hub found [ 950.713068][ T3812] hub 1-1:0.0: 1 port detected [ 953.201137][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 955.753501][ T3814] usb 1-1: USB disconnect, device number 3 [ 962.611573][ T3972] syzkaller0: entered promiscuous mode [ 962.613219][ T3972] syzkaller0: entered allmulticast mode [ 986.614407][ T3992] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 990.857795][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 999.397391][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802a2b6400: rx timeout, send abort [ 999.412336][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802a2b6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1000.632197][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801e85f800: rx timeout, send abort [ 1001.135791][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801e85f800: abort rx timeout. Force session deactivation [ 1020.105153][ T4013] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 1020.157093][ T4013] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 1035.417094][ T4028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 1057.438475][ T4057] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 1072.213749][ T4084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 1092.866813][ T4107] kthread_run failed with err -4 [ 1100.187332][ T4112] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.230714][ T4112] binder: 4111:4112 ioctl 4018620d 200000004a80 returned -16 [ 1130.628883][ C0] hrtimer: interrupt took 986500 ns [ 1179.086707][ T4155] netlink: 108 bytes leftover after parsing attributes in process `syz.1.81'. [ 1183.585455][ T4157] syzkaller0: entered promiscuous mode [ 1183.587702][ T4157] syzkaller0: entered allmulticast mode [ 1230.873881][ T4183] syzkaller0: entered promiscuous mode [ 1230.875133][ T4183] syzkaller0: entered allmulticast mode [ 1242.866360][ T4200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.508137][ T4216] binder_alloc: 4215: pid 4215 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1293.636433][ T4233] syz_tun: entered allmulticast mode [ 1294.269910][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 1295.835285][ T4233] syz_tun (unregistering): left allmulticast mode [ 1344.564956][ T4258] veth1_macvtap: left promiscuous mode [ 1344.567005][ T4258] macsec0: entered promiscuous mode [ 1345.611877][ T79] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1346.217242][ T79] usb 1-1: Using ep0 maxpacket: 32 [ 1346.350775][ T79] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1346.533614][ T79] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1346.536811][ T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.544555][ T79] usb 1-1: Product: syz [ 1346.546558][ T79] usb 1-1: Manufacturer: syz [ 1346.548145][ T79] usb 1-1: SerialNumber: syz [ 1346.832072][ T79] usb 1-1: config 0 descriptor?? [ 1346.876977][ T4257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1347.165894][ T79] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1348.904610][ T79] usb 1-1: USB disconnect, device number 4 [ 1381.218215][ T4310] IPv6: sit1: Disabled Multicast RS [ 1407.333608][ T4332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 1407.336360][ T4332] netlink: 'syz.0.120': attribute type 7 has an invalid length. [ 1407.350433][ T4332] netlink: 'syz.0.120': attribute type 8 has an invalid length. [ 1407.352504][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 1449.985587][ T4347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 1449.988037][ T4347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 1450.013654][ T4347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 1450.015929][ T4347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 1469.974499][ T4357] syzkaller0: entered promiscuous mode [ 1469.977022][ T4357] syzkaller0: entered allmulticast mode [ 1487.566472][ T4369] pim6reg1: entered promiscuous mode [ 1487.587440][ T4369] pim6reg1: entered allmulticast mode [ 1498.903170][ T3192] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1499.313518][ T3192] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1499.316141][ T3192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1499.325492][ T3192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1499.328121][ T3192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1499.363389][ T3192] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1499.365467][ T3192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.828127][ T3192] usb 1-1: config 0 descriptor?? [ 1504.092479][ T3192] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1504.095830][ T3192] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1504.097821][ T3192] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1504.119989][ T3192] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1504.122728][ T3192] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1505.103140][ T3192] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1514.699704][ T9] usb 1-1: USB disconnect, device number 5 [ 1519.878007][ T4410] netlink: 'syz.0.137': attribute type 4 has an invalid length. [ 1522.329780][ T4412] syz_tun: entered allmulticast mode [ 1522.584313][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 1523.311219][ T4412] syz_tun (unregistering): left allmulticast mode [ 1525.594995][ T3909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1526.102142][ T3909] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1526.103539][ T3909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.220685][ T3909] usb 1-1: config 0 descriptor?? [ 1528.381487][ T31] audit: type=1326 audit(1527.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1528.490258][ T31] audit: type=1326 audit(1527.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1528.675583][ T31] audit: type=1326 audit(1527.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=154 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1528.763475][ T31] audit: type=1326 audit(1527.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1528.911750][ T31] audit: type=1326 audit(1527.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1528.955632][ T31] audit: type=1326 audit(1527.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1529.085764][ T31] audit: type=1326 audit(1527.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1529.347254][ T31] audit: type=1326 audit(1527.860:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1529.981074][ T31] audit: type=1326 audit(1528.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1530.169598][ T31] audit: type=1326 audit(1528.750:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.139" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1530.997271][ T3909] usb 1-1: Cannot read MAC address [ 1531.115377][ T3909] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1531.533659][ T3909] usb 1-1: USB disconnect, device number 6 [ 1557.157270][ T4440] syzkaller0: entered promiscuous mode [ 1557.174379][ T4440] syzkaller0: entered allmulticast mode [ 1647.843411][ T4475] syzkaller0: entered promiscuous mode [ 1647.845833][ T4475] syzkaller0: entered allmulticast mode [ 1652.111188][ T4479] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1652.365765][ T4479] usb 1-1: Using ep0 maxpacket: 32 [ 1652.966783][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.020420][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.022421][ T4479] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1653.023813][ T4479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.315749][ T4479] usb 1-1: config 0 descriptor?? [ 1658.435362][ T4479] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1661.281259][ T4479] usb 1-1: USB disconnect, device number 7 [ 1846.122204][ T4542] lo speed is unknown, defaulting to 1000 [ 1846.193888][ T4542] lo speed is unknown, defaulting to 1000 [ 1846.375327][ T4542] lo speed is unknown, defaulting to 1000 [ 1847.012878][ T4542] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1848.219972][ T4542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1851.200181][ T4542] lo speed is unknown, defaulting to 1000 [ 1851.494919][ T4542] lo speed is unknown, defaulting to 1000 [ 1871.430292][ T4564] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1871.523405][ T4564] xt_TCPMSS: Only works on TCP SYN packets [ 1908.558399][ T4574] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 1909.084061][ T4579] binder_alloc: 4577: binder_alloc_buf, no vma [ 1934.006920][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf802a261000: rx timeout, send abort [ 1934.021876][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802a261000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1934.431286][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8018d2ac00: rx timeout, send abort [ 1934.934377][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8018d2ac00: abort rx timeout. Force session deactivation [ 1963.763492][ T4605] lo speed is unknown, defaulting to 1000 [ 1963.773379][ T4605] lo speed is unknown, defaulting to 1000 [ 1963.895054][ T4605] lo speed is unknown, defaulting to 1000 [ 1964.794760][ T4605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1967.157340][ T4605] lo speed is unknown, defaulting to 1000 [ 1967.487551][ T4605] lo speed is unknown, defaulting to 1000 [ 1977.537567][ T4618] binder_alloc: 4617: pid 4617 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1977.623945][ T4618] binder_alloc: 4617: pid 4617 spamming oneway? 2 buffers allocated for a total size of 5120 [ 2000.743881][ T79] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2001.162131][ T79] usb 1-1: Using ep0 maxpacket: 32 [ 2001.242155][ T79] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2001.244886][ T79] usb 1-1: config 0 has no interface number 0 [ 2001.247274][ T79] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2001.256088][ T79] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2001.495857][ T79] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2001.498209][ T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.503884][ T79] usb 1-1: Product: syz [ 2001.505501][ T79] usb 1-1: Manufacturer: syz [ 2001.507061][ T79] usb 1-1: SerialNumber: syz [ 2001.796589][ T79] usb 1-1: config 0 descriptor?? [ 2006.367458][ T79] appletouch 1-1:0.85: Geyser mode initialized. [ 2006.907118][ T79] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input0 [ 2015.823350][ T79] usb 1-1: USB disconnect, device number 8 [ 2017.263272][ T79] appletouch 1-1:0.85: input: appletouch disconnected [ 2085.932420][ T4682] syzkaller0: entered promiscuous mode [ 2085.965148][ T4682] syzkaller0: entered allmulticast mode [ 2122.165168][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802a262400: rx timeout, send abort [ 2122.182203][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802a262400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2122.397274][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802a261800: rx timeout, send abort [ 2122.903619][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802a261800: abort rx timeout. Force session deactivation [ 2130.856806][ T4701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 2139.893722][ T4707] process 'syz.0.204' launched './file1' with NULL argv: empty string added [ 2144.124706][ T4538] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2144.394464][ T4538] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2157.673982][ T4723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 2159.615017][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 2178.937169][ T4479] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2179.535326][ T4479] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2179.538146][ T4479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2179.582921][ T4479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2179.585788][ T4479] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2179.603120][ T4479] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2179.605594][ T4479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.061233][ T4479] usb 2-1: config 0 descriptor?? [ 2182.214619][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.216467][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.217464][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.235489][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.237764][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.272975][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.274690][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.275988][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.277479][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.291435][ T4479] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 2182.606816][ T4479] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2183.047077][ T4479] usb 2-1: USB disconnect, device number 2 [ 2192.624210][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 2313.722915][ T4538] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2317.852227][ T4538] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2317.872705][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2317.874838][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2317.876408][ T4538] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2317.878169][ T4538] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2317.903116][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.493515][ T4538] usb 2-1: config 0 descriptor?? [ 2320.326206][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.350422][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.351999][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.353383][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.354831][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.356275][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.357613][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.370511][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.372105][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.373483][ T4538] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 2320.596528][ T4538] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2322.656693][ T4538] usb 2-1: USB disconnect, device number 3 [ 2334.903413][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 2335.047146][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 2335.052033][ T4900] netlink: 'syz.0.231': attribute type 30 has an invalid length. [ 2335.386124][ T3353] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2335.401234][ T3353] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2335.404006][ T3353] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2335.406551][ T3353] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2349.677484][ T4907] Zero length message leads to an empty skb [ 2390.405973][ T4926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2396.034934][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 2400.708044][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 2424.916671][ T4951] syzkaller0: entered promiscuous mode [ 2424.936893][ T4951] syzkaller0: entered allmulticast mode [ 2437.317471][ T4961] syzkaller0: entered promiscuous mode [ 2437.336257][ T4961] syzkaller0: entered allmulticast mode [ 2495.763131][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 2497.367815][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 2515.511189][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8016342400: rx timeout, send abort [ 2515.522347][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf8016342400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2515.652289][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8016343400: rx timeout, send abort [ 2516.155369][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8016343400: abort rx timeout. Force session deactivation [ 2577.833974][ T5065] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 2637.939967][ T5093] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2689.405507][ T5122] syzkaller0: entered promiscuous mode [ 2689.414169][ T5122] syzkaller0: entered allmulticast mode [ 2706.015080][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 2731.101358][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 2731.103915][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 2741.641890][ T5180] mmap: syz.0.309 (5180) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2748.457110][ T5184] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 2752.470216][ T5189] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2754.293276][ T5200] veth3: entered promiscuous mode [ 2754.735139][ T5200] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 2771.727442][ C1] vkms_vblank_simulate: vblank timer overrun [ 2779.682395][ T5258] syzkaller0: entered promiscuous mode [ 2779.684698][ T5258] syzkaller0: entered allmulticast mode [ 2779.723278][ T5256] netlink: 'syz.1.318': attribute type 4 has an invalid length. [ 2795.216923][ T5271] syzkaller0: entered promiscuous mode [ 2795.251650][ T5271] syzkaller0: entered allmulticast mode [ 2795.358074][ T5273] syzkaller0: entered promiscuous mode [ 2795.367551][ T5273] syzkaller0: entered allmulticast mode [ 2801.916060][ T5285] syzkaller0: entered promiscuous mode [ 2801.917546][ T5285] syzkaller0: entered allmulticast mode [ 2813.530874][ T5295] syzkaller0: entered promiscuous mode [ 2813.533077][ T5295] syzkaller0: entered allmulticast mode [ 2823.035104][ T4538] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2823.417292][ T4538] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2823.429894][ T4538] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 2823.431494][ T4538] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2823.932750][ T4538] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2823.935127][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2823.936892][ T4538] usb 2-1: Product: syz [ 2823.938413][ T4538] usb 2-1: Manufacturer: syz [ 2824.000390][ T4538] usb 2-1: SerialNumber: syz [ 2824.469807][ T4538] usb 2-1: config 0 descriptor?? [ 2824.876073][ T5305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2825.615579][ T4538] usb 2-1: selecting invalid altsetting 0 [ 2827.599994][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.668826][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.695093][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.724823][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.801347][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.808253][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.875740][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.947572][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2827.995205][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.055385][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.074800][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.102107][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.134208][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.157165][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.201638][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.207882][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.267524][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.316571][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.383615][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.407690][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.484254][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.514214][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.541445][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.573990][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.613530][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.698347][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.707986][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.732067][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.745702][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.771733][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.776743][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.827582][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.867678][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.907375][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2828.961299][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.015590][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.065084][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.102682][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.133819][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.181897][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.187663][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.256835][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.322410][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2829.410369][ T5318] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2834.586960][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 2837.707299][ T5305] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2837.786010][ T5305] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 2838.023490][ T4705] usb 2-1: USB disconnect, device number 4 [ 2841.679603][ T5350] syzkaller0: entered promiscuous mode [ 2841.680954][ T5350] syzkaller0: entered allmulticast mode [ 2852.642112][ T5056] lo speed is unknown, defaulting to 1000 [ 2852.645556][ T5056] syz2: Port: 1 Link ACTIVE [ 2897.388315][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 2909.723374][ T4538] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2910.111411][ T4538] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2910.113713][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2910.117092][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2910.161724][ T4538] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2910.164822][ T4538] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2910.166728][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2910.652851][ T4538] usb 2-1: config 0 descriptor?? [ 2912.015382][ T4538] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2919.493375][ T4538] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 2919.500936][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2922.383657][ T4538] usb 2-1: USB disconnect, device number 5 [ 2931.167504][ T5437] syzkaller0: entered promiscuous mode [ 2931.200161][ T5437] syzkaller0: entered allmulticast mode [ 2944.157563][ T5449] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2944.993882][ T5451] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 2944.996341][ T5451] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5451, name: syz.0.361 [ 2944.997509][ T5451] preempt_count: 1, expected: 0 [ 2945.006638][ T5451] RCU nest depth: 0, expected: 0 [ 2945.008142][ T5451] 2 locks held by syz.0.361/5451: [ 2945.010697][ T5451] #0: ffffaf801b3200e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0x7e/0x98 [ 2945.016515][ T5451] #1: ffffaf801b320998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde [ 2945.024349][ T5451] Preemption disabled at: [ 2945.024965][ T5451] [] hook_sb_delete+0x12e/0xbde [ 2945.027390][ T5451] CPU: 0 UID: 0 PID: 5451 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT [ 2945.027813][ T5451] Hardware name: riscv-virtio,qemu (DT) [ 2945.028187][ T5451] Call Trace: [ 2945.028524][ T5451] [] dump_backtrace+0x2e/0x3c [ 2945.028918][ T5451] [] show_stack+0x30/0x3c [ 2945.029330][ T5451] [] dump_stack_lvl+0x12a/0x1a2 [ 2945.030088][ T5451] [] dump_stack+0x1c/0x24 [ 2945.030736][ T5451] [] __might_resched+0x59c/0x5f8 [ 2945.031402][ T5451] [] __might_sleep+0x86/0xca [ 2945.031765][ T5451] [] iput+0x3c/0xb22 [ 2945.032165][ T5451] [] hook_sb_delete+0x86e/0xbde [ 2945.032531][ T5451] [] security_sb_delete+0xac/0x184 [ 2945.032931][ T5451] [] generic_shutdown_super+0xba/0x37c [ 2945.033372][ T5451] [] kill_litter_super+0x74/0xb0 [ 2945.033767][ T5451] [] deactivate_locked_super+0xd8/0x19c [ 2945.034249][ T5451] [] deactivate_super+0x84/0x98 [ 2945.034655][ T5451] [] cleanup_mnt+0x1dc/0x3e6 [ 2945.035170][ T5451] [] __cleanup_mnt+0x1c/0x26 [ 2945.035915][ T5451] [] task_work_run+0x16a/0x25e [ 2945.036238][ T5451] [] exit_to_user_mode_loop+0x110/0x142 [ 2945.036539][ T5451] [] do_trap_ecall_u+0x3f8/0x53a [ 2945.036909][ T5451] [] handle_exception+0x15e/0x16a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2963.285496][ T5224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2964.896570][ T5224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2966.342131][ T5224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2967.395791][ T5224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2972.987945][ T5224] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2973.001103][ T5224] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - f6:e3:ab:cb:0f:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts