last executing test programs: 10m20.197894981s ago: executing program 3 (id=3272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@dccp_packet={0x6, 0x6, "799b08", 0x7e4, 0x21, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {{0x4e22, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x7, "7ef574", 0x9, "924598"}, "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"}}}}}, 0x81a) 10m19.88567426s ago: executing program 3 (id=3275): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000200)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) 10m19.716647995s ago: executing program 3 (id=3276): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0xfffffffc, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 10m19.498218324s ago: executing program 3 (id=3278): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 10m18.506412011s ago: executing program 3 (id=3284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x9}}, 0x3000000, 0x31, 0xffff1893, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 10m18.186708809s ago: executing program 3 (id=3288): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 10m17.416356032s ago: executing program 32 (id=3288): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 7m26.053436395s ago: executing program 5 (id=5032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0x8}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) 7m25.888022709s ago: executing program 5 (id=5037): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m25.379065777s ago: executing program 5 (id=5041): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf94d, 0x3010, 0x2, 0x359}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7m24.530874962s ago: executing program 5 (id=5047): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 7m23.495747791s ago: executing program 5 (id=5062): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x4, 0xfffffffd, 0x68}, 0x2c) 7m23.255264285s ago: executing program 5 (id=5065): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 7m22.898841394s ago: executing program 33 (id=5065): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 5m32.298974058s ago: executing program 2 (id=6144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) 5m32.146135894s ago: executing program 2 (id=6145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="308f6fdcd8ef95ac180e28e3", 0xc, 0x0, 0x0, 0x0) 5m31.973450879s ago: executing program 2 (id=6148): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r0, 0x5, 0x0, 0x0, 0x27, 0x0, {0x1}}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m31.853599615s ago: executing program 2 (id=6151): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 5m30.858862157s ago: executing program 2 (id=6167): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5m30.410070802s ago: executing program 2 (id=6172): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x21) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8000000000000001) splice(r0, 0x0, r3, 0x0, 0x23, 0x7) 5m30.109636255s ago: executing program 34 (id=6172): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x21) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8000000000000001) splice(r0, 0x0, r3, 0x0, 0x23, 0x7) 30.72859464s ago: executing program 7 (id=9179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000200)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 30.566703743s ago: executing program 7 (id=9182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}], 0x1}, 0x10000) 30.408737549s ago: executing program 7 (id=9184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x65, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 30.282939952s ago: executing program 7 (id=9186): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 30.137933328s ago: executing program 7 (id=9189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) close(r0) 29.797713413s ago: executing program 7 (id=9192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 29.600766879s ago: executing program 35 (id=9192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 5.025052227s ago: executing program 0 (id=9436): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) 4.400351125s ago: executing program 1 (id=9446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.193299546s ago: executing program 1 (id=9450): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 3.89749644s ago: executing program 0 (id=9453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.775379423s ago: executing program 0 (id=9455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.583032568s ago: executing program 0 (id=9457): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfff5, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.253822102s ago: executing program 1 (id=9461): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x14, 0xc, "00f9737227af149989fc8dbe43ea6affffffffdc25f5ab60c9e6d680f985881a4c516bdd010f35000000b0000006000800000000000000005c9f00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) close_range(r0, 0xffffffffffffffff, 0x0) 2.589924659s ago: executing program 1 (id=9466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) 2.379015326s ago: executing program 1 (id=9468): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902960003010000000904000000010100000a2401ff0300020102132406040006020000000000000001000000000924030200010000040924050100f8431cfd0924030302030604c0092406040401090009090401000001020000090401010101020000090501090000040000072501000000000904021b000102"], 0x0) 2.129557614s ago: executing program 6 (id=9471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9463c9bfb9b", 0x7}], 0x2}, 0x0) 1.972694867s ago: executing program 6 (id=9473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1.860501383s ago: executing program 6 (id=9474): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x89, 0x0, 0x0, 0x3}}}], 0x18}, 0x1400c0c0) 1.623340351s ago: executing program 6 (id=9477): socket$packet(0x11, 0x2, 0x300) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 1.444327462s ago: executing program 6 (id=9480): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 1.264784715s ago: executing program 6 (id=9482): unshare(0x2c020400) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 1.150025863s ago: executing program 8 (id=9483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x40010062) 1.11090666s ago: executing program 8 (id=9484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0xe}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 1.085929117s ago: executing program 4 (id=9485): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 1.013052184s ago: executing program 8 (id=9486): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 970.790839ms ago: executing program 4 (id=9496): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 649.728533ms ago: executing program 1 (id=9487): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) 649.525781ms ago: executing program 8 (id=9488): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x40810}, 0xae1e003fa9d5a544) read$alg(r1, &(0x7f0000000780)=""/4110, 0x100e) 649.149304ms ago: executing program 4 (id=9490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000240)=[@request_death, @clear_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 517.175491ms ago: executing program 8 (id=9491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x30}, {&(0x7f0000000080)=""/43, 0xffffffffffffffd2}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/173, 0xbb}], 0x5}, 0x2}], 0x2, 0x22, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffbd, 0x40040, 0x0, 0xfffffffffffffe7f) 500.083479ms ago: executing program 4 (id=9492): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000400000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="001000000000000014001a80100405800c000880"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 378.395564ms ago: executing program 0 (id=9493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) unshare(0x22020400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x28e7, 0x0, 0x0, r2, 0x5}) 291.071286ms ago: executing program 8 (id=9494): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40044149, &(0x7f0000000040)=0x5) 261.087239ms ago: executing program 4 (id=9495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x100, 0x0, 0x7, 0x9, 0x40, 0x8}]}) 68.37987ms ago: executing program 0 (id=9497): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 4 (id=9498): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) flock(r0, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) kernel console output (not intermixed with test programs): 9909] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 805.381706][T26944] hsr_slave_0: left promiscuous mode [ 805.399168][T26944] hsr_slave_1: left promiscuous mode [ 805.406269][T26944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.428388][T26944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.479296][T26944] veth1_macvtap: left promiscuous mode [ 805.501829][T26944] veth0_macvtap: left promiscuous mode [ 805.636862][ T5832] Bluetooth: hci1: command tx timeout [ 806.429989][T26944] team0 (unregistering): Port device team_slave_1 removed [ 806.485128][T26944] team0 (unregistering): Port device team_slave_0 removed [ 806.517643][ T795] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 806.689851][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 806.704237][ T795] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 806.718946][ T795] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 806.728266][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.741402][ T795] usb 5-1: config 0 descriptor?? [ 806.750676][T29951] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 806.973099][T29951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.983031][T29951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.997928][ T795] usbhid 5-1:0.0: can't add hid device: -71 [ 807.006286][ T795] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 807.030127][ T795] usb 5-1: USB disconnect, device number 111 [ 807.341680][T29881] chnl_net:caif_netlink_parms(): no params data found [ 807.557505][ T795] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 807.630411][T29881] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.640568][T29881] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.648181][T29881] bridge_slave_0: entered allmulticast mode [ 807.656243][T29881] bridge_slave_0: entered promiscuous mode [ 807.674753][T26944] IPVS: stop unused estimator thread 0... [ 807.682419][T29881] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.698090][T29881] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.709554][T29881] bridge_slave_1: entered allmulticast mode [ 807.717354][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 807.722716][ T5832] Bluetooth: hci1: command tx timeout [ 807.731928][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 807.743396][ T795] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 807.757300][ T795] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 807.766485][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.777406][T29881] bridge_slave_1: entered promiscuous mode [ 807.778435][ T795] usb 5-1: config 0 descriptor?? [ 807.813523][ T795] hub 5-1:0.0: bad descriptor, ignoring hub [ 807.821834][ T795] hub 5-1:0.0: probe with driver hub failed with error -5 [ 807.868710][T29881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.883015][T29881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.942972][T29881] team0: Port device team_slave_0 added [ 807.953492][T29881] team0: Port device team_slave_1 added [ 808.003341][T29881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.010502][T29881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.058313][T29881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.090004][T29881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.106740][T29881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.146074][T29881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.265584][ T795] hid-multitouch 0003:0EEF:72C4.0074: unknown main item tag 0x0 [ 808.279225][ T795] hid-multitouch 0003:0EEF:72C4.0074: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 808.408200][T29881] hsr_slave_0: entered promiscuous mode [ 808.431261][T29881] hsr_slave_1: entered promiscuous mode [ 808.451921][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7955'. [ 808.577354][ T795] usb 5-1: USB disconnect, device number 112 [ 809.449526][ T795] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 809.528055][T29881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 809.554512][T29881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 809.581340][T29881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 809.588163][T26574] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 809.618958][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 809.628639][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.645170][T29881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 809.649661][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.677147][ T795] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 809.686479][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.702422][ T795] usb 2-1: config 0 descriptor?? [ 809.713544][ T795] hub 2-1:0.0: USB hub found [ 809.737131][T26574] usb 5-1: Using ep0 maxpacket: 16 [ 809.778764][T26574] usb 5-1: config 0 interface 0 has no altsetting 0 [ 809.785475][T26574] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 809.797194][ T5832] Bluetooth: hci1: command tx timeout [ 809.819445][T26574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.844131][T26574] usb 5-1: config 0 descriptor?? [ 809.947572][ T795] hub 2-1:0.0: 1 port detected [ 810.037795][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7967'. [ 810.070972][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7967'. [ 810.129158][T29881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.192282][T29881] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.244670][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.251953][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.310692][T26574] hid (null): nested delimiters [ 810.315713][T26574] hid (null): report_id 24797 is invalid [ 810.325159][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.332484][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.355082][T26574] hid (null): bogus close delimiter [ 810.514825][T29881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.528672][T26574] usb 5-1: USB disconnect, device number 113 [ 810.582856][ T795] hub 2-1:0.0: activate --> -90 [ 810.650252][T29881] veth0_vlan: entered promiscuous mode [ 810.685455][T29881] veth1_vlan: entered promiscuous mode [ 810.774122][T29881] veth0_macvtap: entered promiscuous mode [ 810.808654][T29881] veth1_macvtap: entered promiscuous mode [ 810.856003][T29881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.892192][T29881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.913664][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.935657][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.967349][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.993274][ T795] usb 2-1-port1: cannot disable (err = -71) [ 811.006361][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.019776][ T795] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 811.027686][ T5938] usb 2-1: USB disconnect, device number 118 [ 811.064267][ T795] usb 2-1-port1: connect-debounce failed [ 811.146208][ T7259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.176705][ T7259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.245119][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.262212][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.511131][T30065] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 811.529897][T30065] bond1: (slave lo): Enslaving as a backup interface with an up link [ 811.543957][T30065] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 811.877172][ T5832] Bluetooth: hci1: command tx timeout [ 812.554459][T30101] loop7: detected capacity change from 0 to 7 [ 812.563887][T30101] Dev loop7: unable to read RDB block 7 [ 812.569958][T30101] loop7: AHDI p3 p4 [ 812.574054][T30101] loop7: partition table partially beyond EOD, truncated [ 812.583262][T30101] loop7: p3 start 1886353253 is beyond EOD, truncated [ 813.663502][ T795] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 813.830696][ T795] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 813.842442][ T795] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 813.853661][ T795] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 813.865031][ T795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 813.874611][ T795] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.888868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.889129][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.905175][ T795] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 813.913934][ T795] usb 2-1: Product: syz [ 813.919606][ T795] usb 2-1: Manufacturer: syz [ 813.924370][ T795] usb 2-1: SerialNumber: syz [ 813.936107][ T795] usb 2-1: config 0 descriptor?? [ 813.953370][T30133] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 813.973416][ T795] usb 2-1: selecting invalid altsetting 0 [ 814.120851][T30145] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7991'. [ 814.189868][T30145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7991'. [ 816.095734][ T795] usb 2-1: USB disconnect, device number 119 [ 816.723664][T30215] input: syz0 as /devices/virtual/input/input132 [ 818.262189][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057626000: rx timeout, send abort [ 818.273071][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056de0800: rx timeout, send abort [ 818.281720][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057626000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 818.298624][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056de0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 818.505673][ T7259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.550798][ T7259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.689038][ T7259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.699924][ T7259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.838891][ T7259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.866958][ T7259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.016782][ T7259] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 819.031633][ T7259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.064627][ T7259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.075145][ T5920] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 819.087681][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 819.100537][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 819.110398][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 819.126977][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 819.138112][T30267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8040'. [ 819.152645][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 819.179897][T30267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8040'. [ 819.237185][ T5920] usb 7-1: Using ep0 maxpacket: 8 [ 819.244937][ T5920] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 819.265988][ T5920] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.286719][ T5920] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.296533][ T5920] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.334205][ T5920] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.355011][ T5920] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 819.364438][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.517222][ T7259] bridge_slave_1: left allmulticast mode [ 819.523021][ T7259] bridge_slave_1: left promiscuous mode [ 819.529089][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.544034][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.634307][ T5920] usb 7-1: GET_CAPABILITIES returned 0 [ 819.658029][ T5920] usbtmc 7-1:16.0: can't read capabilities [ 819.971300][T30260] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 819.978470][ T5920] usb 7-1: USB disconnect, device number 43 [ 820.116750][ T5938] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 820.288318][ T5938] usb 2-1: config 0 has no interfaces? [ 820.318197][ T5938] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 820.338810][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.356904][ T5938] usb 2-1: Product: syz [ 820.363949][ T5938] usb 2-1: Manufacturer: syz [ 820.369063][ T5938] usb 2-1: SerialNumber: syz [ 820.389598][ T5938] usb 2-1: config 0 descriptor?? [ 820.578397][ T7259] bond0 (unregistering): left promiscuous mode [ 820.585714][ T7259] bond_slave_0: left promiscuous mode [ 820.593807][ T7259] bond_slave_1: left promiscuous mode [ 820.600133][ T7259] bond1 (unregistering): left promiscuous mode [ 820.606506][ T7259] bond2 (unregistering): left promiscuous mode [ 820.617952][ T7259] dummy0: left promiscuous mode [ 820.627679][ T7259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.653409][ T7259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.665528][ T7259] bond0 (unregistering): (slave bond1): Releasing backup interface [ 820.676081][ T7259] bond0 (unregistering): (slave bond2): Releasing backup interface [ 820.689535][ T7259] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 820.701056][ T7259] bond0 (unregistering): Released all slaves [ 820.930640][ T7259] bond1 (unregistering): Released all slaves [ 821.139427][ T7259] bond2 (unregistering): Released all slaves [ 821.241475][ T52] Bluetooth: hci0: command tx timeout [ 821.327458][ T7259] bond3 (unregistering): Released all slaves [ 822.136751][ T7259] batadv0: left promiscuous mode [ 822.192973][ T7259] hsr_slave_0: left promiscuous mode [ 822.227061][ T7259] hsr_slave_1: left promiscuous mode [ 822.263886][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.272289][ T5938] usb 2-1: USB disconnect, device number 120 [ 822.312789][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.337644][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.345619][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.379306][ T7259] team0: left promiscuous mode [ 822.384608][ T7259] team_slave_0: left promiscuous mode [ 822.392458][ T7259] team_slave_1: left promiscuous mode [ 822.402872][ T7259] vlan2: left promiscuous mode [ 822.416704][ T7259] bridge_slave_0: left promiscuous mode [ 822.426026][ T7259] veth0_macvtap: left promiscuous mode [ 822.611954][ T7259] team0 (unregistering): Port device vlan2 removed [ 822.672187][ T7259] pim6reg (unregistering): left allmulticast mode [ 823.274098][ T7259] team0 (unregistering): Port device team_slave_1 removed [ 823.323543][ T52] Bluetooth: hci0: command tx timeout [ 823.333101][ T7259] team0 (unregistering): Port device team_slave_0 removed [ 824.143881][T30268] chnl_net:caif_netlink_parms(): no params data found [ 824.736891][T30268] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.794886][T30268] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.813620][T30268] bridge_slave_0: entered allmulticast mode [ 824.851172][T30268] bridge_slave_0: entered promiscuous mode [ 824.902231][T30268] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.926826][T30268] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.937259][T30268] bridge_slave_1: entered allmulticast mode [ 824.955631][T30268] bridge_slave_1: entered promiscuous mode [ 824.987205][ T7259] IPVS: stop unused estimator thread 0... [ 825.211358][T30268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.256452][T30268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.403097][ T52] Bluetooth: hci0: command tx timeout [ 825.758599][T30268] team0: Port device team_slave_0 added [ 825.792623][T30268] team0: Port device team_slave_1 added [ 826.033224][T30268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.057564][T30268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.119299][T30268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.178337][T30268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.204321][T30268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.243813][T30268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.483655][T30268] hsr_slave_0: entered promiscuous mode [ 826.498070][T30268] hsr_slave_1: entered promiscuous mode [ 826.521915][T30268] debugfs: 'hsr0' already exists in 'hsr' [ 826.534124][T30268] Cannot create hsr debugfs directory [ 827.025833][T30425] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.8086'. [ 827.047799][T30425] netlink: Conntrack attr has 4 unknown bytes [ 827.476972][ T52] Bluetooth: hci0: command tx timeout [ 827.771810][ T5938] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 827.798052][T30449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8094'. [ 827.977065][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 827.994066][T30268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 828.001799][ T5938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.027451][ T5938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.059837][T30268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 828.066765][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 828.073453][ T5938] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 828.091924][T30268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 828.124465][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.144957][T30268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 828.162452][ T5938] usb 2-1: config 0 descriptor?? [ 828.347552][ T57] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 828.419616][T30268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.487698][T30268] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.514130][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.521482][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.548600][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.568309][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 828.597687][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.605006][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.625466][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.646560][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.668873][T30455] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 828.678489][ T5938] cougar 0003:060B:500A.0076: unexpected long global item [ 828.708310][ T5938] cougar 0003:060B:500A.0076: parse failed [ 828.708435][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.735319][ T5938] cougar 0003:060B:500A.0076: probe with driver cougar failed with error -22 [ 828.890483][ T5938] usb 2-1: USB disconnect, device number 121 [ 828.972048][T30268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.002915][ T57] usb 7-1: USB disconnect, device number 44 [ 829.189682][T30268] veth0_vlan: entered promiscuous mode [ 829.252348][T30268] veth1_vlan: entered promiscuous mode [ 829.351357][T30268] veth0_macvtap: entered promiscuous mode [ 829.376924][T30268] veth1_macvtap: entered promiscuous mode [ 829.423750][T30268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.477743][T30268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.545019][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.587797][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.641569][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.718447][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.883631][ T7259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.915492][ T7259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.013672][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.032091][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.858691][T30521] input: syz0 as /devices/virtual/input/input133 [ 831.400416][ T5920] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 831.586730][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 831.593693][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.627569][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.643146][ T5920] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 831.666663][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.688093][ T5920] usb 7-1: config 0 descriptor?? [ 831.928702][T30548] input: syz1 as /devices/virtual/input/input134 [ 832.149514][ T5920] koneplus 0003:1E7D:2D51.0077: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 832.572337][T22973] usb 7-1: USB disconnect, device number 45 [ 832.677189][T30576] netlink: 'syz.7.8131': attribute type 1 has an invalid length. [ 832.761706][T30580] ip6gre1: entered promiscuous mode [ 832.771030][T30580] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 832.781615][T30580] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 832.816283][T30580] bond1: (slave ip6gre1): making interface the new active one [ 832.832172][T30580] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 833.635868][T30607] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 833.679333][T30607] kvm: apic: phys broadcast and lowest prio [ 833.685848][T30607] kvm: Disabled LAPIC found during irq injection [ 833.795725][T30613] binder: 30612:30613 ioctl c0306201 800003c0 returned -14 [ 833.826973][T22973] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 833.891266][T30617] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8149'. [ 833.902502][T30617] netlink: Unknown conntrack attr (type=2304, max=9) [ 833.986808][T22973] usb 5-1: Using ep0 maxpacket: 8 [ 834.003939][T22973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 834.021788][T22973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 834.032522][T22973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 834.077766][T22973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.119395][T22973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 834.148940][T22973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.405333][T22973] usb 5-1: GET_CAPABILITIES returned 0 [ 834.426758][T22973] usbtmc 5-1:16.0: can't read capabilities [ 834.452147][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8156'. [ 834.475640][T30633] input: syz1 as /devices/virtual/input/input136 [ 834.492205][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8156'. [ 834.609207][T30636] netlink: 'syz.1.8157': attribute type 1 has an invalid length. [ 834.644276][T30636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.664802][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 834.685992][ T57] usb 5-1: USB disconnect, device number 114 [ 834.697831][T30636] bond2: (slave gretap1): making interface the new active one [ 834.707982][T30636] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 835.033868][T30646] netlink: 'syz.0.8161': attribute type 1 has an invalid length. [ 835.052396][T30646] ip6gre1: entered promiscuous mode [ 835.613262][ T30] audit: type=1326 audit(1768436851.267:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30663 comm="syz.4.8168" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa6539 code=0x0 [ 836.252632][T30683] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8175'. [ 836.766781][T30702] netlink: 'syz.1.8183': attribute type 3 has an invalid length. [ 836.790406][T30702] netlink: 'syz.1.8183': attribute type 3 has an invalid length. [ 837.393044][T30713] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 837.490499][T30713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.556493][T30715] bond2: (slave gretap1): making interface the new active one [ 837.598996][T30715] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 838.028686][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8190'. [ 838.046845][T30720] netlink: 'syz.1.8190': attribute type 11 has an invalid length. [ 838.054903][T30720] netlink: 'syz.1.8190': attribute type 14 has an invalid length. [ 838.096562][T30720] vxlan1: entered promiscuous mode [ 838.121096][ T3426] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.146948][ T3426] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.165735][ T3426] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.183276][ T3426] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.216725][ T5920] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 839.391540][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.416713][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.435260][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 839.460896][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 839.481644][ T5920] usb 5-1: SerialNumber: syz [ 839.764686][ T5920] usb 5-1: 0:2 : does not exist [ 839.815574][ T5920] usb 5-1: USB disconnect, device number 115 [ 839.892562][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.531325][T30779] mac80211_hwsim hwsim9 pim6reg1: entered promiscuous mode [ 840.542585][T30779] mac80211_hwsim hwsim9 pim6reg1: entered allmulticast mode [ 841.524184][T30813] input: syz1 as /devices/virtual/input/input137 [ 841.648097][T26574] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 841.667162][ T5920] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 841.801263][ T30] audit: type=1804 audit(1768436857.457:1883): pid=30816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.8227" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=126411 res=1 errno=0 [ 841.878387][T26574] usb 7-1: Using ep0 maxpacket: 8 [ 841.887286][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 841.898813][ T5920] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 841.916876][T26574] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.946679][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.967754][T26574] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 842.007337][T26574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.035493][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 842.049173][T26574] usb 7-1: config 0 descriptor?? [ 842.065341][T26574] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 842.350584][T30824] netlink: 'syz.7.8231': attribute type 12 has an invalid length. [ 842.509105][ T5898] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 842.686726][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 842.695828][ T5898] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 842.725321][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.744298][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.756519][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.767342][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.781497][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.792772][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.039259][ T5898] usb 2-1: usb_control_msg returned -32 [ 843.052584][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 843.235475][ T5920] gspca_nw80x: reg_w err -71 [ 843.246164][ T5920] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 843.262782][ T5920] usb 5-1: USB disconnect, device number 116 [ 843.277169][T26574] gspca_vc032x: reg_w err -71 [ 843.289706][T26574] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 843.316361][T26574] usb 7-1: USB disconnect, device number 46 [ 843.819291][T30844] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 843.966964][T30488] usb 2-1: USB disconnect, device number 122 [ 844.355422][T30868] input: syz1 as /devices/virtual/input/input138 [ 844.396855][T26574] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 844.556722][T26574] usb 7-1: Using ep0 maxpacket: 32 [ 844.565859][T26574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.577168][T26574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.587602][T26574] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 844.597873][T26574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.612594][T26574] usb 7-1: config 0 descriptor?? [ 845.041538][T26574] ft260 0003:0403:6030.0078: unknown main item tag 0x7 [ 845.230206][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 845.242729][T26574] ft260 0003:0403:6030.0078: chip code: 6424 8183 [ 845.249418][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 845.261834][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 845.445317][T26574] ft260 0003:0403:6030.0078: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 845.860643][T26574] ft260 0003:0403:6030.0078: failed to retrieve status: -71 [ 845.887183][T26574] ft260 0003:0403:6030.0078: failed to reset I2C controller: -71 [ 845.927503][T26574] usb 7-1: USB disconnect, device number 47 [ 846.215244][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8262'. [ 846.786885][T30927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8269'. [ 846.804926][T30927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8269'. [ 847.135517][T30934] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8272'. [ 847.499693][T30943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 847.617141][T30946] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8277'. [ 847.638569][T26574] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 847.811423][T26574] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 847.834229][T26574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.844812][T26574] usb 2-1: Product: syz [ 847.869651][T26574] usb 2-1: Manufacturer: syz [ 847.886338][T26574] usb 2-1: SerialNumber: syz [ 847.930170][T26574] usb 2-1: config 0 descriptor?? [ 847.954440][T26574] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 847.973261][T30957] netlink: 'syz.6.8282': attribute type 9 has an invalid length. [ 847.998417][T30957] netlink: 'syz.6.8282': attribute type 11 has an invalid length. [ 848.006476][T30957] netlink: 'syz.6.8282': attribute type 12 has an invalid length. [ 848.016123][T30957] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.8282'. [ 848.028447][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8282'. [ 848.153239][T30961] veth3: entered allmulticast mode [ 848.372590][T30968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 849.173336][T26574] gspca_sunplus: reg_r err -71 [ 849.184841][T26574] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 849.216293][T26574] usb 2-1: USB disconnect, device number 123 [ 849.634099][T30999] tipc: New replicast peer: 255.255.255.255 [ 849.647212][T30999] tipc: Enabled bearer , priority 10 [ 849.814347][T31006] netlink: Conntrack attr has 3 unknown bytes [ 850.086150][T31012] binder: 31011:31012 ioctl c0306201 80000b40 returned -14 [ 850.631548][T31023] vivid-000: disconnect [ 850.642001][T31022] vivid-000: reconnect [ 851.315409][T31037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 851.960280][T31056] __nla_validate_parse: 3 callbacks suppressed [ 851.960303][T31056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8325'. [ 851.977420][T31056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8325'. [ 851.986758][T31056] macvlan0: entered allmulticast mode [ 851.992369][T31056] veth1_vlan: entered allmulticast mode [ 852.681245][T31075] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 853.279349][T31104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 853.286407][T31104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 853.303504][T31104] vhci_hcd vhci_hcd.0: Device attached [ 853.313447][T31105] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 853.341503][ T36] vhci_hcd vhci_hcd.1: stop threads [ 853.348216][ T36] vhci_hcd vhci_hcd.1: release socket [ 853.354918][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 853.806916][T30488] psmouse serio14: Failed to reset mouse on : -5 [ 854.986743][T26574] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 855.146742][T26574] usb 2-1: Using ep0 maxpacket: 32 [ 855.154172][T26574] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 855.163212][T26574] usb 2-1: config 0 has no interface number 0 [ 855.169870][T26574] usb 2-1: config 0 interface 184 has no altsetting 0 [ 855.181387][T26574] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 855.191864][T26574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.203447][T26574] usb 2-1: Product: syz [ 855.207956][T26574] usb 2-1: Manufacturer: syz [ 855.212752][T26574] usb 2-1: SerialNumber: syz [ 855.220738][T26574] usb 2-1: config 0 descriptor?? [ 855.239844][T26574] smsc75xx v1.0.0 [ 856.256082][T26574] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 856.453686][T26574] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 856.468242][T26574] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 856.478811][T26574] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 856.491467][T26574] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 856.502401][T26574] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 856.523155][T26574] usb 2-1: USB disconnect, device number 124 [ 856.876934][T22973] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 857.060488][T22973] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 857.086898][T22973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.105203][T22973] usb 7-1: Product: syz [ 857.115585][T22973] usb 7-1: Manufacturer: syz [ 857.125471][T22973] usb 7-1: SerialNumber: syz [ 857.139475][T22973] usb 7-1: config 0 descriptor?? [ 857.155316][T22973] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 857.187217][T22973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 857.227940][T22973] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 857.241359][T22973] usb 7-1: media controller created [ 857.289628][T22973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.499611][T22973] DVB: Unable to find symbol mt352_attach() [ 857.499607][T31204] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 857.525891][T31204] bond1: (slave lo): Enslaving as an active interface with an up link [ 857.574517][T31204] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 857.597186][T30488] misc userio: Buffer overflowed, userio client isn't keeping up [ 857.641453][T22973] DVB: Unable to find symbol nxt6000_attach() [ 857.664146][T22973] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 857.693777][T22973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input140 [ 857.750912][T22973] dvb-usb: schedule remote query interval to 1000 msecs. [ 857.783029][T22973] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 857.809135][T22973] dvb-usb: bulk message failed: -22 (7/0) [ 857.814953][T22973] dvb-usb: bulk message failed: -22 (7/0) [ 857.832659][T22973] usb 7-1: USB disconnect, device number 48 [ 857.891159][T31213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.907547][T22973] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 858.032033][T31213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.350600][T31230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8399'. [ 858.371235][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8399'. [ 858.615694][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8403'. [ 858.638060][T31240] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 858.691797][T30488] input: PS/2 Generic Mouse as /devices/serio14/input/input139 [ 858.700305][T31242] tls_set_device_offload: netdev not found [ 858.956827][T30488] psmouse serio14: Failed to enable mouse on [ 859.065191][T31251] dvmrp5: entered allmulticast mode [ 859.125060][T31251] syz_tun: entered allmulticast mode [ 859.133530][T31255] kvm: user requested TSC rate below hardware speed [ 859.168428][T31251] dvmrp5: left allmulticast mode [ 859.322745][T31258] bridge1: entered promiscuous mode [ 859.350418][T31258] bridge1: entered allmulticast mode [ 859.376905][T31258] team0: Port device bridge1 added [ 859.391918][T31261] bridge0: port 3(team0) entered blocking state [ 859.426307][T31261] bridge0: port 3(team0) entered disabled state [ 859.472640][T31250] syz_tun: left allmulticast mode [ 859.916900][ T30] audit: type=1326 audit(1768436875.567:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31281 comm="syz.0.8421" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23539 code=0x0 [ 860.880257][T31324] input: syz0 as /devices/virtual/input/input141 [ 861.779959][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8451'. [ 861.814281][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8451'. [ 861.873978][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8451'. [ 862.549071][T31397] mac80211_hwsim hwsim9 pim6reg1: left promiscuous mode [ 862.574215][T31397] mac80211_hwsim hwsim9 pim6reg1: left allmulticast mode [ 862.669402][T31404] tipc: Started in network mode [ 862.688656][T31404] tipc: Node identity ac14142f, cluster identity 4711 [ 862.704271][T31404] tipc: New replicast peer: 0.0.0.0 [ 862.713173][T31404] tipc: Enabled bearer , priority 10 [ 862.741209][T31404] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 862.835458][T31412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8474'. [ 863.074429][T31422] Invalid argument reading file caps for ./file0 [ 863.595662][T31441] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8488'. [ 863.828785][T26574] tipc: Node number set to 2886997039 [ 864.967038][T26574] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 865.140886][T26574] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.163043][T26574] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 865.174299][T26574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.195487][T26574] usb 7-1: config 0 descriptor?? [ 865.654478][T26574] waltop 0003:172F:0037.0079: collection stack underflow [ 865.677777][T26574] waltop 0003:172F:0037.0079: item 0 1 0 12 parsing failed [ 865.696224][T26574] waltop 0003:172F:0037.0079: probe with driver waltop failed with error -22 [ 865.880730][T26574] usb 7-1: USB disconnect, device number 49 [ 866.179278][T31520] netlink: 'syz.1.8519': attribute type 2 has an invalid length. [ 866.187373][T31520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8519'. [ 866.410092][T31530] kvm: user requested TSC rate below hardware speed [ 867.397454][T31568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8536'. [ 867.420163][T31568] netlink: 'syz.0.8536': attribute type 14 has an invalid length. [ 867.448099][T31568] vxlan0: entered promiscuous mode [ 867.455493][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.465439][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.475385][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.490029][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.168146][T22973] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 868.372530][T22973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.400176][T22973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.414322][T22973] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.428002][T22973] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.437449][T22973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.454111][T22973] usb 7-1: config 0 descriptor?? [ 868.947817][T22973] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 871.006683][T26574] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 871.078132][T30488] usb 7-1: USB disconnect, device number 50 [ 871.171523][T26574] usb 5-1: Using ep0 maxpacket: 8 [ 871.193098][T26574] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 871.248330][T26574] usb 5-1: config 0 has no interface number 0 [ 871.280596][T26574] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 871.319618][T26574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.346651][T26574] usb 5-1: Product: syz [ 871.361068][T26574] usb 5-1: Manufacturer: syz [ 871.365738][T26574] usb 5-1: SerialNumber: syz [ 871.398705][T26574] usb 5-1: config 0 descriptor?? [ 871.668468][T26574] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 871.716821][T26574] uvcvideo 5-1:0.31: No valid video chain found. [ 871.726316][T26574] usb 5-1: USB disconnect, device number 117 [ 872.280441][T31656] input: syz0 as /devices/virtual/input/input142 [ 872.854789][T31666] netlink: 'syz.6.8576': attribute type 11 has an invalid length. [ 872.940791][T31666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8576'. [ 873.587684][T26574] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 873.789993][T26574] usb 7-1: config 0 interface 0 has no altsetting 0 [ 873.800451][T26574] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 873.821490][T26574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.848813][T26574] usb 7-1: config 0 descriptor?? [ 873.973879][T22973] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 874.145084][T22973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.166396][T22973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.206780][T22973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.249505][T22973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.299775][T22973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.335406][T22973] usb 5-1: config 0 descriptor?? [ 874.457642][ T5898] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 874.499774][ T5898] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 874.833977][T22973] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 874.899144][T26574] video4linux radio48: keene_cmd_set failed (-71) [ 874.906364][T26574] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 874.938015][T26574] usb 7-1: USB disconnect, device number 51 [ 875.193044][T31710] input: syz0 as /devices/virtual/input/input143 [ 875.321161][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.327708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.741099][ T30] audit: type=1326 audit(1768436891.397:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.7.8602" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53539 code=0x0 [ 876.019187][ T30] audit: type=1326 audit(1768436891.677:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31735 comm="syz.6.8604" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 876.159867][ C0] plantronics 0003:047F:FFFF.007C: usb_submit_urb(ctrl) failed: -1 [ 876.706925][ T5912] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 876.766185][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8609'. [ 876.890136][ T5912] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 876.920769][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.940517][ T5912] usb 2-1: Product: syz [ 876.954997][ T5912] usb 2-1: Manufacturer: syz [ 876.962285][ T5912] usb 2-1: SerialNumber: syz [ 876.969255][T26574] usb 5-1: USB disconnect, device number 118 [ 876.989659][ T5912] usb 2-1: config 0 descriptor?? [ 877.023997][ T5912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 877.090488][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 877.121862][ T5912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 877.145547][ T5912] usb 2-1: media controller created [ 877.165375][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.245774][ T5912] DVB: Unable to find symbol mt352_attach() [ 877.336191][ T5912] DVB: Unable to find symbol nxt6000_attach() [ 877.355526][ T5912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 877.384886][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input144 [ 877.406877][T26574] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 877.427071][ T5912] dvb-usb: schedule remote query interval to 1000 msecs. [ 877.436039][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 877.452601][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 877.460865][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 877.478259][ T5912] usb 2-1: USB disconnect, device number 125 [ 877.587896][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 877.588258][T26574] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 877.646400][T26574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.675300][T26574] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 877.691862][T26574] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 877.700165][T26574] usb 5-1: Manufacturer: syz [ 877.709479][T26574] usb 5-1: config 0 descriptor?? [ 877.837250][T26574] rc_core: IR keymap rc-hauppauge not found [ 877.848420][T26574] Registered IR keymap rc-empty [ 877.856443][T26574] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 877.897302][T26574] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input145 [ 878.034102][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 878.051936][T26574] usb 5-1: USB disconnect, device number 119 [ 878.812733][ T30] audit: type=1326 audit(1768436894.467:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.4.8629" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa6539 code=0x0 [ 878.959257][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8631'. [ 878.980232][T31813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8633'. [ 879.252393][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.283046][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.306320][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.327091][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.344600][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.369111][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.387933][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.403196][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.426219][ T5920] hid-generic 0002:0004:0009.007D: unknown main item tag 0x0 [ 879.490231][ T5920] hid-generic 0002:0004:0009.007D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 879.658596][T31830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8641'. [ 879.714043][T31826] fido_id[31826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 879.961201][T31844] binder: 31842:31844 ioctl c0306201 800001c0 returned -22 [ 880.336830][ T5920] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 880.509101][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.536863][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.557850][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.586693][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.605569][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.617933][ T5920] usb 2-1: config 0 descriptor?? [ 880.637275][T30488] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 880.796789][T30488] usb 7-1: Using ep0 maxpacket: 8 [ 880.806811][T30488] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 880.816191][T30488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.824559][T30488] usb 7-1: Product: syz [ 880.836709][T30488] usb 7-1: Manufacturer: syz [ 880.843671][T30488] usb 7-1: SerialNumber: syz [ 880.857843][T30488] usb 7-1: config 0 descriptor?? [ 881.053230][ T5920] plantronics 0003:047F:FFFF.007E: ignoring exceeding usage max [ 881.087764][T30488] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 881.111436][ T5920] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 881.371024][T31884] netlink: 'syz.4.8664': attribute type 33 has an invalid length. [ 881.380079][T31884] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8664'. [ 881.394062][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8664'. [ 881.893518][T30488] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 881.932825][T30488] usb 7-1: USB disconnect, device number 52 [ 882.216704][ T5912] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 882.376667][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 882.385086][ T5912] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.396031][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.406319][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.418496][ T5912] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.446683][ T5912] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.455799][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.676168][ T5912] usb 5-1: GET_CAPABILITIES returned 0 [ 882.682079][ T5912] usbtmc 5-1:16.0: can't read capabilities [ 882.756804][T30488] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 882.906858][T30488] usb 7-1: Using ep0 maxpacket: 16 [ 882.914739][T30488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.939927][ T5898] usb 5-1: USB disconnect, device number 120 [ 882.944018][T30488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.963642][T30488] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 882.983196][T30488] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 883.005526][T30488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.020320][T30488] usb 7-1: config 0 descriptor?? [ 883.174503][T26574] usb 2-1: USB disconnect, device number 126 [ 883.466161][T30488] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.007F/input/input147 [ 883.506084][T30488] microsoft 0003:045E:07DA.007F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 883.682145][ T5898] usb 7-1: USB disconnect, device number 53 [ 883.690103][T26574] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 883.795725][T31926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8681'. [ 883.862248][T26574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.889525][T26574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.912278][T26574] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 883.925450][T26574] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 883.934851][T26574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.953980][T26574] usb 2-1: config 0 descriptor?? [ 884.197025][T30488] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 884.349863][T30488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.360376][T30488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 884.380890][T30488] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 884.390937][T30488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.402616][T30488] usb 5-1: Product: syz [ 884.412231][T30488] usb 5-1: Manufacturer: syz [ 884.417222][T30488] usb 5-1: SerialNumber: syz [ 884.428647][T26574] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 884.442385][T30488] usb 5-1: config 0 descriptor?? [ 884.477381][T30488] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 884.490241][T30488] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.503199][T30488] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 884.512904][T30488] usb 5-1: media controller created [ 884.550319][T30488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.676366][T30488] DVB: Unable to find symbol tda10046_attach() [ 884.686534][T30488] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 884.697346][T30488] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 885.295290][T31966] netem: change failed [ 885.740214][T30488] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 885.769434][T30488] usb 5-1: USB disconnect, device number 121 [ 886.518453][T31985] veth1_to_bridge: entered allmulticast mode [ 886.530085][ T5898] usb 2-1: USB disconnect, device number 127 [ 886.537647][T31985] veth1_to_bridge: left allmulticast mode [ 886.645896][T31990] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8709'. [ 886.656486][T31990] netlink: Unknown conntrack attr (0) [ 887.165573][T32014] vivid-004: disconnect [ 887.295182][T32013] vivid-004: reconnect [ 887.519844][T32029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8726'. [ 887.529061][T32029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8726'. [ 887.671995][T32033] syzkaller1: entered promiscuous mode [ 887.678016][T32033] syzkaller1: entered allmulticast mode [ 888.237276][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 888.408028][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 888.435694][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.466932][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.482610][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 888.492213][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.507228][ T5920] usb 2-1: config 0 descriptor?? [ 888.537157][ T5920] hub 2-1:0.0: USB hub found [ 888.749514][ T5920] hub 2-1:0.0: 1 port detected [ 889.383827][ T5920] hub 2-1:0.0: activate --> -90 [ 889.412629][T32098] loop4: detected capacity change from 0 to 7 [ 889.426720][ T5929] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 889.433650][ T5929] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 889.458165][ T5929] loop4: p2 start 4294901760 is beyond EOD, truncated [ 889.474673][ T5929] loop4: p3 start 4294836224 is beyond EOD, truncated [ 889.489083][ T5929] loop4: p4 size 327680 extends beyond EOD, truncated [ 889.502016][ T5929] loop4: p5 size 8323072 extends beyond EOD, truncated [ 889.515423][ T5929] loop4: p6 start 8192 is beyond EOD, truncated [ 889.539463][T32098] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 889.546259][T32098] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 889.564176][T32098] loop4: p2 start 4294901760 is beyond EOD, truncated [ 889.582127][T32098] loop4: p3 start 4294836224 is beyond EOD, truncated [ 889.603101][T32098] loop4: p4 size 327680 extends beyond EOD, truncated [ 889.624382][T32098] loop4: p5 size 8323072 extends beyond EOD, truncated [ 889.638701][T32098] loop4: p6 start 8192 is beyond EOD, truncated [ 889.659323][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8760'. [ 889.678908][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8760'. [ 889.785694][ T5920] usb 2-1-port1: config error [ 889.790698][ T5912] usb 2-1: USB disconnect, device number 2 [ 889.821822][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 889.833133][T19269] udevd[19269]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 889.853032][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 889.929647][ T5974] udevd[5974]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 889.944770][ T5968] udevd[5968]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 889.960661][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 890.090609][T30053] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 890.220606][ T30] audit: type=1326 audit(1768436905.877:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.300441][T30053] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 890.317029][ T30] audit: type=1326 audit(1768436905.877:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.326725][T30053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.395190][ T30] audit: type=1326 audit(1768436905.877:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.468701][T30053] usb 7-1: config 0 descriptor?? [ 890.490209][ T30] audit: type=1326 audit(1768436905.877:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 890.562556][ T30] audit: type=1326 audit(1768436905.877:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 890.632041][ T30] audit: type=1326 audit(1768436905.877:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 890.704256][ T30] audit: type=1326 audit(1768436905.877:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.765868][ T30] audit: type=1326 audit(1768436905.907:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.834009][ T30] audit: type=1326 audit(1768436905.907:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 890.893934][ T30] audit: type=1326 audit(1768436905.907:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32117 comm="syz.0.8765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 891.547712][T32147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8777'. [ 891.744814][T30053] pegasus 7-1:0.0: can't reset MAC [ 891.758549][T30053] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 891.787542][T30053] usb 7-1: USB disconnect, device number 54 [ 891.952889][T32166] netlink: 'syz.1.8785': attribute type 9 has an invalid length. [ 891.962167][T32166] netlink: 'syz.1.8785': attribute type 11 has an invalid length. [ 891.971494][T32166] netlink: 'syz.1.8785': attribute type 12 has an invalid length. [ 891.979849][T32166] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.8785'. [ 891.989405][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8785'. [ 894.038835][ T5920] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 894.205099][ T5920] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 894.224990][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.289134][T32247] netlink: 'syz.0.8819': attribute type 12 has an invalid length. [ 894.298177][ T5920] usb 7-1: config 0 descriptor?? [ 894.318626][T32247] netlink: 'syz.0.8819': attribute type 29 has an invalid length. [ 894.339515][T32247] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8819'. [ 894.356453][ T5920] cp210x 7-1:0.0: cp210x converter detected [ 894.737857][ T5920] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 894.751231][ T5920] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 894.778849][ T5920] usb 7-1: cp210x converter now attached to ttyUSB0 [ 894.956217][ T5920] usb 7-1: USB disconnect, device number 55 [ 894.974648][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 895.004610][ T5920] cp210x 7-1:0.0: device disconnected [ 895.825952][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 895.825974][ T30] audit: type=1326 audit(1768436911.477:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32262 comm="syz.4.8827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 896.288722][ T30] audit: type=1326 audit(1768436911.947:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32293 comm="syz.4.8840" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa6539 code=0x0 [ 896.416646][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 896.590154][ T5912] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 896.617077][ T5912] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 896.638275][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.657515][ T5912] usb 2-1: Product: syz [ 896.661776][ T5912] usb 2-1: Manufacturer: syz [ 896.676982][ T5912] usb 2-1: SerialNumber: syz [ 896.701099][ T5912] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 897.141073][ T5912] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 897.193433][ T5912] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 897.216081][ T5912] usb 2-1: media controller created [ 897.250999][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.524584][ T5912] usb 2-1: USB disconnect, device number 3 [ 897.676937][T27713] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 897.831016][T27713] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 897.854158][T27713] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.872136][T27713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.896762][T27713] usb 5-1: Product: syz [ 897.906639][T27713] usb 5-1: Manufacturer: syz [ 897.914720][T27713] usb 5-1: SerialNumber: syz [ 897.942230][T27713] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 897.975447][ T5920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 898.235763][T32309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.259222][T32309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.278883][T32309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.307061][T32309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.326152][T32309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.339200][T32309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.359843][T27713] usb 5-1: USB disconnect, device number 122 [ 898.369290][ T5912] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 898.538740][ T5912] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 898.556626][ T5912] usb 7-1: config 4 has no interface number 0 [ 898.568950][ T5912] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 898.597507][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.605545][ T5912] usb 7-1: Product: syz [ 898.611637][ T5912] usb 7-1: Manufacturer: syz [ 898.616295][ T5912] usb 7-1: SerialNumber: syz [ 898.646349][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input148 [ 898.855118][ T5184] bcm5974 7-1:4.28: could not read from device [ 898.870068][ T5912] bcm5974 7-1:4.28: could not read from device [ 898.880439][ T5184] bcm5974 7-1:4.28: could not read from device [ 898.889493][ T5912] input: failed to attach handler mousedev to device input148, error: -5 [ 898.908572][ T5184] bcm5974 7-1:4.28: could not read from device [ 898.915828][ T5912] usb 7-1: USB disconnect, device number 56 [ 898.923923][ T5184] bcm5974 7-1:4.28: could not read from device [ 899.077210][ T5920] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 899.084423][ T5920] ath9k_htc: Failed to initialize the device [ 899.091916][T27713] usb 5-1: ath9k_htc: USB layer deinitialized [ 899.386731][T27713] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 899.536727][T27713] usb 5-1: Using ep0 maxpacket: 32 [ 899.544245][T27713] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 899.552878][T27713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 899.566622][T27713] usb 5-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 899.581830][T27713] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 899.596703][T27713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.608403][T27713] usb 5-1: config 0 descriptor?? [ 899.621205][T27713] mos7840 5-1:0.0: missing endpoints [ 899.902076][ T5912] usb 5-1: USB disconnect, device number 123 [ 900.243943][T32350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8861'. [ 901.389008][T32377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8871'. [ 901.716960][T32388] vivid-002: disconnect [ 901.911933][T32384] vivid-002: reconnect [ 903.049809][T32413] syzkaller1: entered promiscuous mode [ 903.058243][T32413] syzkaller1: entered allmulticast mode [ 904.006668][T30053] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 904.026710][ T5912] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 904.176878][T30053] usb 2-1: Using ep0 maxpacket: 8 [ 904.187669][T30053] usb 2-1: unable to get BOS descriptor or descriptor too short [ 904.198864][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.209867][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.224023][T30053] usb 2-1: config 4 interface 0 has no altsetting 0 [ 904.231341][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 904.242162][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.253802][T30053] usb 2-1: string descriptor 0 read error: -22 [ 904.268238][T30053] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 904.288361][T30053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.322274][T30053] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 904.349807][T30053] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 904.372263][T30053] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 904.380796][T30053] usb 2-1: media controller created [ 904.396875][T27713] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 904.407362][T30053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.485746][ T5912] usb 7-1: usb_control_msg returned -32 [ 904.497926][ T5912] usbtmc 7-1:16.0: can't read capabilities [ 904.568616][T27713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.597273][T27713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.625261][T27713] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 904.644874][T27713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.659971][T27713] usb 5-1: config 0 descriptor?? [ 904.815526][T30053] usb 2-1: USB disconnect, device number 4 [ 905.098324][T27713] hid_parser_main: 8 callbacks suppressed [ 905.098424][T27713] thrustmaster 0003:044F:B320.0081: unknown main item tag 0x0 [ 905.130628][T27713] thrustmaster 0003:044F:B320.0081: unknown main item tag 0x0 [ 905.140996][T27713] thrustmaster 0003:044F:B320.0081: unknown main item tag 0x0 [ 905.149451][T27713] thrustmaster 0003:044F:B320.0081: unbalanced collection at end of report description [ 905.161315][T27713] thrustmaster 0003:044F:B320.0081: parse failed [ 905.173323][T27713] thrustmaster 0003:044F:B320.0081: probe with driver thrustmaster failed with error -22 [ 905.309997][T30053] usb 5-1: USB disconnect, device number 124 [ 905.666805][T30053] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 905.820338][T30053] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.855555][T30053] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.866142][ T30] audit: type=1326 audit(1768436921.527:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32463 comm="syz.0.8905" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23539 code=0x0 [ 905.904838][T30053] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.922336][T30053] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 905.954886][T30053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.984882][T30053] usb 2-1: config 0 descriptor?? [ 906.398173][ T5912] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 906.420278][T30053] hid-steam 0003:28DE:1102.0082: unknown main item tag 0x0 [ 906.430123][T30053] hid-steam 0003:28DE:1102.0082: unknown main item tag 0x0 [ 906.439415][T30053] hid-steam 0003:28DE:1102.0082: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 906.510204][T30053] hid-steam 0003:28DE:1102.0082: Steam Controller 'XXXXXXXXXX' connected [ 906.531417][T30053] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0082/input/input149 [ 906.576864][ T5912] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 906.610980][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.622397][T30053] hid-steam 0003:28DE:1102.0083: unknown main item tag 0x0 [ 906.639217][ T5912] usb 5-1: Product: syz [ 906.645796][T30053] hid-steam 0003:28DE:1102.0083: unknown main item tag 0x0 [ 906.655898][ T5912] usb 5-1: Manufacturer: syz [ 906.665252][ T5912] usb 5-1: SerialNumber: syz [ 906.692490][ T5912] usb 5-1: config 0 descriptor?? [ 906.705262][T30053] hid-steam 0003:28DE:1102.0083: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 906.866938][T30053] usb 7-1: USB disconnect, device number 57 [ 907.189397][ T5912] usb 5-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 907.397871][ T5912] usb 5-1: no permanent extended address found, random address set [ 907.435734][ T5912] usb 5-1: atusb_probe: initialization failed, error = -524 [ 907.476980][ T5912] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 907.667477][ T5912] usb 5-1: USB disconnect, device number 125 [ 908.288477][T30488] usb 2-1: USB disconnect, device number 5 [ 908.454968][T30488] hid-steam 0003:28DE:1102.0082: Steam Controller 'XXXXXXXXXX' disconnected [ 909.376688][ T57] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 909.560347][ T57] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 909.623415][ T57] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 909.634637][ T57] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 909.646809][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.660043][T32522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 909.729375][T32522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 909.756132][ T57] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.032737][T30053] usb 2-1: USB disconnect, device number 6 [ 910.548073][T32540] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8935'. [ 910.781320][T32546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8938'. [ 911.041318][T32554] input: syz0 as /devices/virtual/input/input150 [ 911.166728][T30488] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 911.168846][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8943'. [ 911.197397][T32556] vlan3: left promiscuous mode [ 911.204413][T32556] bridge0: port 3(vlan3) entered disabled state [ 911.235445][T32556] bridge_slave_1: left allmulticast mode [ 911.254525][T32556] bridge_slave_1: left promiscuous mode [ 911.270931][T32556] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.324620][T32556] bridge_slave_0: left promiscuous mode [ 911.362657][T32556] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.377693][T30488] usb 7-1: Using ep0 maxpacket: 32 [ 911.389943][T30488] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 911.426852][T30488] usb 7-1: config 0 has no interface number 0 [ 911.433046][T30488] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 911.482239][T30488] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 911.521970][T30488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.533254][T30488] usb 7-1: Product: syz [ 911.537979][T30488] usb 7-1: Manufacturer: syz [ 911.542917][T30488] usb 7-1: SerialNumber: syz [ 911.554125][T30488] usb 7-1: config 0 descriptor?? [ 911.567871][T32552] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 911.817400][T32552] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 912.537593][ T5920] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 912.698797][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 912.720295][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 912.749038][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 912.758683][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.780399][T32579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.806883][T32579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.843794][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.858953][T30488] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 912.900136][T30488] asix 7-1:0.188: probe with driver asix failed with error -71 [ 912.929588][T30488] usb 7-1: USB disconnect, device number 58 [ 913.097706][ T5920] usb 5-1: USB disconnect, device number 126 [ 913.234147][ T30] audit: type=1326 audit(1768436928.887:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32604 comm="syz.0.8965" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23539 code=0x0 [ 913.876984][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 913.884047][T30053] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 913.903958][T30053] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 914.786822][T30488] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 914.920454][T32664] vlan0: entered allmulticast mode [ 914.928993][T32664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8991'. [ 914.956866][T30488] usb 5-1: Using ep0 maxpacket: 32 [ 914.965603][T30488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.976914][T30488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.989394][T30488] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 914.999328][T30488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.018745][T30488] usb 5-1: config 0 descriptor?? [ 915.037864][T30488] hub 5-1:0.0: USB hub found [ 915.244048][T30488] hub 5-1:0.0: 1 port detected [ 915.326216][T32664] bond0 (unregistering): left promiscuous mode [ 915.334191][T32664] bond_slave_0: left promiscuous mode [ 915.340674][T32664] bond_slave_1: left promiscuous mode [ 915.352950][T32664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.364771][T32664] bond_slave_0: left allmulticast mode [ 915.374391][T32664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.395308][T32664] bond_slave_1: left allmulticast mode [ 915.403072][T32664] bond0 (unregistering): Released all slaves [ 915.854265][T30488] hub 5-1:0.0: activate --> -90 [ 916.006796][ T5920] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 916.117280][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 916.123679][T30053] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 916.140373][T30053] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 916.176650][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 916.194741][ T5920] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 916.216972][ T5920] usb 7-1: config 1 interface 0 has no altsetting 0 [ 916.236420][ T5920] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 916.263950][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.283055][T27113] usb 5-1: USB disconnect, device number 127 [ 916.306730][ T5920] usb 7-1: Product: syz [ 916.310993][ T5920] usb 7-1: Manufacturer: syz [ 916.315636][ T5920] usb 7-1: SerialNumber: syz [ 916.652239][T32681] netlink: 'syz.6.8998': attribute type 2 has an invalid length. [ 916.660978][T32681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 916.693521][ T5920] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input151 [ 916.762812][ T5920] usb 7-1: USB disconnect, device number 59 [ 916.769101][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 916.889005][ T5920] appletouch 7-1:1.0: input: appletouch disconnected [ 917.048905][T32708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9006'. [ 917.058947][T32708] netlink: 'syz.4.9006': attribute type 18 has an invalid length. [ 917.571326][T32726] input: syz0 as /devices/virtual/input/input152 [ 917.590659][T32726] input: failed to attach handler leds to device input152, error: -6 [ 917.723997][T32733] netlink: 'syz.7.9015': attribute type 4 has an invalid length. [ 917.761244][T32733] netlink: 'syz.7.9015': attribute type 4 has an invalid length. [ 918.007015][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 918.178168][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.214663][ T5920] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 918.236304][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.270720][ T5920] usb 2-1: config 0 descriptor?? [ 918.738185][ T5920] holtek 0003:1241:5015.0084: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 918.757105][T27113] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 918.771632][ T5920] holtek 0003:1241:5015.0084: no inputs found [ 918.939371][T27113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.969277][ T5920] usb 2-1: USB disconnect, device number 7 [ 918.985648][T27113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.035044][T27113] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 919.061338][T27113] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 919.098901][T27113] usb 7-1: Manufacturer: syz [ 919.119182][T27113] usb 7-1: config 0 descriptor?? [ 919.547773][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.566731][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.596238][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.617626][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.624552][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.642003][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.657840][T27113] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 919.697458][T27113] pyra 0003:1E7D:2CF6.0085: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 919.824201][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9041'. [ 919.869100][ T331] vxlan2: entered promiscuous mode [ 920.352744][T27113] pyra 0003:1E7D:2CF6.0085: couldn't init struct pyra_device [ 920.379613][T27113] pyra 0003:1E7D:2CF6.0085: couldn't install mouse [ 920.391658][T27113] pyra 0003:1E7D:2CF6.0085: probe with driver pyra failed with error -71 [ 920.420238][T27113] usb 7-1: USB disconnect, device number 60 [ 920.508837][ T343] loop2: detected capacity change from 0 to 1024 [ 920.524200][ T343] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 920.533109][ T343] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 920.542128][ T343] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 920.551387][ T343] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 920.560303][ T343] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 920.569329][ T343] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 920.579960][ T343] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 920.607421][ T343] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 920.626203][ T343] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 920.639381][ T343] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 921.058028][T30488] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 921.226986][T30488] usb 2-1: Using ep0 maxpacket: 32 [ 921.236943][T30488] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 921.262746][T30488] usb 2-1: config 1 interface 0 has no altsetting 0 [ 921.279439][T30488] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 921.296410][T30488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.313442][T30488] usb 2-1: Product: syz [ 921.326621][T30488] usb 2-1: Manufacturer: syz [ 921.338458][T30488] usb 2-1: SerialNumber: syz [ 921.679190][ T349] netlink: 'syz.1.9049': attribute type 2 has an invalid length. [ 921.699215][ T349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.754003][T30488] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input153 [ 921.818576][T30488] usb 2-1: USB disconnect, device number 8 [ 921.852151][T30488] appletouch 2-1:1.0: input: appletouch disconnected [ 922.124378][ T30] audit: type=1326 audit(1768436937.777:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=381 comm="syz.6.9063" exe="/root/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x0 [ 923.095791][ T419] team_slave_0: entered promiscuous mode [ 923.139558][ T419] team_slave_0: left promiscuous mode [ 924.222347][ T463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9096'. [ 925.418960][ T496] input: syz0 as /devices/virtual/input/input154 [ 925.809493][ T510] input: syz1 as /devices/virtual/input/input155 [ 926.145436][ T529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9124'. [ 927.057156][T30053] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 927.237882][T30053] usb 5-1: Using ep0 maxpacket: 8 [ 927.261753][T30053] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.287122][T30053] usb 5-1: config 0 has no interface number 0 [ 927.303550][T30053] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.323703][T30053] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 927.333969][T30053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.345719][T30053] usb 5-1: config 0 descriptor?? [ 927.366663][T30053] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 927.614443][T30053] usb 5-1: USB disconnect, device number 2 [ 929.396818][T27113] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 929.586935][T27113] usb 2-1: Using ep0 maxpacket: 16 [ 929.594526][T27113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.608714][T27113] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 929.621115][T27113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.640644][T27113] usb 2-1: config 0 descriptor?? [ 929.947087][T30488] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 930.091895][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9177'. [ 930.103854][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9177'. [ 930.115066][ T652] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9177'. [ 930.117820][T30488] usb 7-1: Using ep0 maxpacket: 32 [ 930.125533][ T652] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9177'. [ 930.155006][T30488] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 930.176176][T30488] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 930.194879][T30488] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.209539][T30488] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 930.235538][T30488] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 930.255648][T30488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.272177][T30488] usb 7-1: Product: syz [ 930.278055][T30488] usb 7-1: Manufacturer: syz [ 930.282773][T30488] usb 7-1: SerialNumber: syz [ 930.301312][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 930.320649][ T656] binder: 655:656 ioctl c0306201 800002c0 returned -14 [ 930.340064][T30488] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input156 [ 930.372703][T27113] usbhid 2-1:0.0: can't add hid device: -71 [ 930.407890][T27113] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 930.433384][T27113] usb 2-1: USB disconnect, device number 9 [ 930.526953][T30488] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 930.545597][T30488] (id 0x00) [ 930.600805][ T672] binder: 670:672 unknown command 0 [ 930.606283][ T672] binder: 670:672 ioctl c0306201 80000080 returned -22 [ 930.629694][T30488] rc_core: IR keymap rc-imon-pad not found [ 930.635685][T30488] Registered IR keymap rc-empty [ 930.649939][T30488] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 930.660939][T30488] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 930.727876][T30488] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 930.768108][T30488] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input157 [ 930.796046][T30488] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:61> initialized [ 930.846668][T27113] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 930.928946][ T635] imon:vfd_write: invalid payload size [ 930.949843][T22973] usb 7-1: USB disconnect, device number 61 [ 931.001811][ T680] netlink: 'syz.0.9190': attribute type 12 has an invalid length. [ 931.012369][ T680] netlink: 'syz.0.9190': attribute type 29 has an invalid length. [ 931.021274][ T680] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9190'. [ 931.032897][ T680] netlink: 'syz.0.9190': attribute type 2 has an invalid length. [ 931.041190][ T680] netlink: 23 bytes leftover after parsing attributes in process `syz.0.9190'. [ 931.066594][T27113] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.075767][T27113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.107163][T27113] usb 2-1: Product: syz [ 931.114014][T27113] usb 2-1: Manufacturer: syz [ 931.126755][T27113] usb 2-1: SerialNumber: syz [ 931.460559][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.472433][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.481601][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.491568][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 931.502441][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.519460][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.529168][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.539154][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.549679][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 931.559651][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.872155][ T685] chnl_net:caif_netlink_parms(): no params data found [ 932.099219][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.117820][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.153246][ T685] bridge_slave_0: entered allmulticast mode [ 932.171862][T27113] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 932.186103][T27113] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 932.198272][ T685] bridge_slave_0: entered promiscuous mode [ 932.211981][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.238862][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.246213][ T685] bridge_slave_1: entered allmulticast mode [ 932.264018][ T685] bridge_slave_1: entered promiscuous mode [ 932.369398][ T685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.380282][T27113] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 932.405924][ T685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.443595][T27113] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 932.504666][T27113] usb 2-1: USB disconnect, device number 10 [ 932.521599][T27113] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 932.587915][ T685] team0: Port device team_slave_0 added [ 932.621082][ T685] team0: Port device team_slave_1 added [ 932.724409][ T685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.731688][ T685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.761199][ T685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.778131][ T685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.785221][ T685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.815598][ T685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.894162][ T685] hsr_slave_0: entered promiscuous mode [ 932.902148][ T685] hsr_slave_1: entered promiscuous mode [ 932.911355][ T685] debugfs: 'hsr0' already exists in 'hsr' [ 932.928172][ T685] Cannot create hsr debugfs directory [ 933.267009][ T5898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 933.426752][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 933.452701][ T5898] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 933.482287][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.500894][ T5898] usb 2-1: Product: syz [ 933.512291][ T5898] usb 2-1: Manufacturer: syz [ 933.529222][ T685] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 933.540068][ T5898] usb 2-1: SerialNumber: syz [ 933.557245][ T5898] usb 2-1: config 0 descriptor?? [ 933.604073][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 933.621691][ T685] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 933.638761][ T5832] Bluetooth: hci3: command tx timeout [ 933.699404][ T685] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 933.774780][ T685] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 934.005965][ T737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9209'. [ 934.030411][ T737] netlink: 'syz.0.9209': attribute type 6 has an invalid length. [ 934.081747][ T737] netlink: 'syz.0.9209': attribute type 5 has an invalid length. [ 934.125598][ T737] netlink: 'syz.0.9209': attribute type 4 has an invalid length. [ 934.437255][ T685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.514594][ T685] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.635999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.643275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.717334][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.724596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.833157][ T5898] gspca_sonixj: reg_w1 err -71 [ 934.877303][ T5898] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 934.907637][ T685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.922346][ T5898] usb 2-1: USB disconnect, device number 11 [ 935.010244][ T685] veth0_vlan: entered promiscuous mode [ 935.050015][ T685] veth1_vlan: entered promiscuous mode [ 935.112444][ T685] veth0_macvtap: entered promiscuous mode [ 935.125135][ T685] veth1_macvtap: entered promiscuous mode [ 935.156358][ T685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.178717][ T685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.195887][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.214329][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.239474][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.251995][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.337035][ T5898] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 935.370024][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.394236][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.491763][T26726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.508496][ T5898] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 935.527210][T26726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.549956][ T5898] usb 7-1: config 0 has no interface number 0 [ 935.570437][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.606821][ T5898] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 935.650419][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 935.693522][ T5898] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 935.717668][ T5832] Bluetooth: hci3: command tx timeout [ 935.773158][ T5898] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 935.833595][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 935.899850][ T5898] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 935.922256][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.948577][ T5898] usb 7-1: config 0 descriptor?? [ 935.969499][ T752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 935.997002][ T752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 936.042957][ T5898] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 936.079623][T30053] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 936.249575][T30053] usb 9-1: Using ep0 maxpacket: 8 [ 936.268527][T30053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.307391][T30053] usb 9-1: config 0 has no interfaces? [ 936.313873][T30053] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.330135][T30053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.339775][T30488] usb 7-1: USB disconnect, device number 62 [ 936.355660][T30488] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 936.395187][T30053] usb 9-1: config 0 descriptor?? [ 936.630747][T30488] usb 9-1: USB disconnect, device number 2 [ 936.761712][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.771208][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.156177][ T788] loop6: detected capacity change from 0 to 2640 [ 937.207290][ T788] buffer_io_error: 119 callbacks suppressed [ 937.207312][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.302628][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.342557][ T791] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.358944][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.374502][ T791] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.389637][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.407630][ T791] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.426175][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.434230][ T791] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.447979][ T788] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.480400][ T788] ldm_validate_partition_table(): Disk read failed. [ 937.509178][ T788] Dev loop6: unable to read RDB block 0 [ 937.515057][ T788] loop6: unable to read partition table [ 937.543583][ T788] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 937.637837][ T799] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9235'. [ 937.800225][ T5832] Bluetooth: hci3: command tx timeout [ 937.916486][ T5199] ldm_validate_partition_table(): Disk read failed. [ 937.944710][ T5199] Dev loop6: unable to read RDB block 0 [ 937.952553][ T5199] loop6: unable to read partition table [ 938.486883][T30053] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 938.690253][T30053] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 938.743924][T30053] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 938.790077][T30053] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 938.827387][T30053] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.866932][T30053] usb 9-1: Product: syz [ 938.889877][T30053] usb 9-1: Manufacturer: syz [ 938.903760][T30053] usb 9-1: SerialNumber: syz [ 938.935627][T30053] usb 9-1: config 0 descriptor?? [ 938.969635][ T816] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 939.008938][ T816] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 939.292438][ T816] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 939.328774][ T816] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 939.549757][ T839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9250'. [ 939.562156][ T839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9250'. [ 939.574392][ T839] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9250'. [ 939.585133][ T839] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9250'. [ 939.876722][ T5832] Bluetooth: hci3: command tx timeout [ 940.407667][T30053] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 940.473217][T30053] dm9601 9-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 940.516886][T30053] usb 9-1: USB disconnect, device number 3 [ 940.547918][T30053] dm9601 9-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 942.090890][ T953] vivid-004: disconnect [ 942.096352][ T953] vivid-004: reconnect [ 945.184457][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9322'. [ 945.275403][ T1040] syzkaller1: entered promiscuous mode [ 945.298296][ T1040] syzkaller1: entered allmulticast mode [ 945.677979][T30053] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 945.880888][T30053] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 945.906859][T30053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.936253][T30053] usb 5-1: config 0 descriptor?? [ 945.975342][T30053] cp210x 5-1:0.0: cp210x converter detected [ 946.243888][T22973] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 946.312926][T22973] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 946.407977][T30053] usb 5-1: cp210x converter now attached to ttyUSB0 [ 946.456825][T26574] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 946.583652][ T30] audit: type=1326 audit(1768436962.237:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.1.9342" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5539 code=0x0 [ 946.626672][T26574] usb 9-1: Using ep0 maxpacket: 32 [ 946.644026][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.658754][T30053] usb 5-1: USB disconnect, device number 3 [ 946.668748][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.679600][T26574] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 946.692583][T26574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.696399][T30053] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 946.723110][T26574] usb 9-1: config 0 descriptor?? [ 946.750349][T26574] hub 9-1:0.0: USB hub found [ 946.752201][T30053] cp210x 5-1:0.0: device disconnected [ 946.952873][T26574] hub 9-1:0.0: 1 port detected [ 947.577937][ T5898] hub 9-1:0.0: activate --> -90 [ 947.780491][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 947.798242][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 947.816986][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 947.825104][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 947.832385][ T5898] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 948.087316][ T5920] usb 9-1: USB disconnect, device number 4 [ 948.716788][ T30] audit: type=1804 audit(1768436964.367:2057): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9354" name="/newroot/1992/file1" dev="tmpfs" ino=10158 res=1 errno=0 [ 949.251562][ T1140] netlink: 'syz.1.9362': attribute type 1 has an invalid length. [ 949.290141][ T1140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.382333][ T1140] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 949.394212][T26780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.398706][T26574] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 949.444859][T26780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.470028][T26780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.498563][T26780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.560168][T26574] usb 9-1: Using ep0 maxpacket: 16 [ 949.581857][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.602724][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.614336][T26574] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 949.627928][T26574] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 949.637406][T26574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.667748][T26574] usb 9-1: config 0 descriptor?? [ 949.704891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031990c00: rx timeout, send abort [ 949.713517][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c14800: rx timeout, send abort [ 949.722269][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031990c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 949.736801][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056c14800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 949.849840][ T1155] loop7: detected capacity change from 0 to 7 [ 949.870308][ C1] blk_print_req_error: 5 callbacks suppressed [ 949.870327][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.886184][ C1] buffer_io_error: 6555 callbacks suppressed [ 949.886202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 949.901296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.910963][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 949.920666][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.930351][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 949.939968][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.949690][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 949.957927][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.967636][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 949.975963][ T1155] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 949.978429][ T1161] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 949.986293][ T1155] Buffer I/O error on dev loop7, logical block 0, async page read [ 950.027026][ T1161] bond3: (slave lo): Enslaving as a backup interface with an up link [ 950.036035][ T1161] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 950.042084][ T1155] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.065720][ T1155] Buffer I/O error on dev loop7, logical block 0, async page read [ 950.074059][ T1155] ldm_validate_partition_table(): Disk read failed. [ 950.081713][ T1155] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.091955][ T1155] Buffer I/O error on dev loop7, logical block 0, async page read [ 950.103019][ T1155] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.144376][ T1155] Buffer I/O error on dev loop7, logical block 0, async page read [ 950.161335][ T1155] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.189351][ T1155] Buffer I/O error on dev loop7, logical block 0, async page read [ 950.210448][ T1155] Dev loop7: unable to read RDB block 0 [ 950.225929][ T1155] loop7: unable to read partition table [ 950.231873][T26574] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 950.246875][ T1155] loop7: partition table beyond EOD, truncated [ 950.262898][ T1155] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 950.271441][T26574] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 950.300659][T26574] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 950.321665][T26574] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 950.351547][T26574] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 950.376859][T26574] input: HID 0955:7214 Haptics as /devices/virtual/input/input158 [ 950.418168][ T1132] random: crng reseeded on system resumption [ 950.533857][T26574] shield 0003:0955:7214.0087: Registered Thunderstrike controller [ 950.577106][T26574] shield 0003:0955:7214.0087: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 950.620492][ T30] audit: type=1326 audit(1768436966.277:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.1.9375" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x0 [ 950.702352][T27713] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 950.720710][T26574] usb 9-1: USB disconnect, device number 5 [ 950.756847][T27713] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 950.808654][T27713] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 950.852197][T27713] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 950.867391][ T5912] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 951.057806][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 951.070504][ T5912] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 951.079055][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 951.091599][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 951.101945][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 951.113515][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 951.125453][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.138880][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.148086][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.369608][ T5912] usb 7-1: usb_control_msg returned -32 [ 951.376049][ T5912] usbtmc 7-1:16.0: can't read capabilities [ 951.760885][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 951.773009][ T1200] usbtmc 7-1:16.0: Unable to send data, error -71 [ 951.780452][ T1200] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 951.792646][ T5912] usb 7-1: USB disconnect, device number 63 [ 952.208656][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 952.392854][ T5912] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 952.414017][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.422277][ T5912] usb 5-1: Product: syz [ 952.426899][ T5912] usb 5-1: Manufacturer: syz [ 952.432389][ T5912] usb 5-1: SerialNumber: syz [ 952.450531][ T5912] usb 5-1: config 0 descriptor?? [ 952.481414][ T5912] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 953.349572][ T5912] usb 5-1: USB disconnect, device number 4 [ 954.560382][ T1284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9415'. [ 954.593849][ T1284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9415'. [ 956.426667][T27713] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 956.608852][T27713] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.626067][T27713] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.643823][T27713] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 956.693244][T27713] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 956.747649][T27713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 956.755810][T27713] usb 7-1: Product: syz [ 956.776652][T27713] usb 7-1: Manufacturer: syz [ 956.781338][T27713] usb 7-1: SerialNumber: syz [ 957.041783][T27713] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 957.224810][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9455'. [ 957.243109][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9455'. [ 957.254179][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9455'. [ 957.304301][T27713] usb 7-1: USB disconnect, device number 64 [ 957.333123][T27713] usblp0: removed [ 957.737106][ T1397] loop7: detected capacity change from 0 to 7 [ 957.748690][ C1] blk_print_req_error: 5 callbacks suppressed [ 957.748713][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.764535][ C1] buffer_io_error: 5 callbacks suppressed [ 957.764563][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.778964][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.788650][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.801355][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.811090][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.832901][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.842650][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.851564][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.861349][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.869975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.879659][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.888080][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.897748][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.905744][ T5929] ldm_validate_partition_table(): Disk read failed. [ 957.913569][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.923423][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.931748][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.941419][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.949808][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 957.959459][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 957.969315][ T5929] Dev loop7: unable to read RDB block 0 [ 957.988975][ T5929] loop7: unable to read partition table [ 957.994984][ T5929] loop7: partition table beyond EOD, truncated [ 958.031792][ T1397] ldm_validate_partition_table(): Disk read failed. [ 958.050419][ T1397] Dev loop7: unable to read RDB block 0 [ 958.072338][ T1397] loop7: unable to read partition table [ 958.102106][ T1397] loop7: partition table beyond EOD, truncated [ 958.121459][ T1397] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 958.160573][ T5199] ldm_validate_partition_table(): Disk read failed. [ 958.187344][ T5199] Dev loop7: unable to read RDB block 0 [ 958.198834][ T5199] loop7: unable to read partition table [ 958.215074][ T5199] loop7: partition table beyond EOD, truncated [ 958.308699][ T1408] netlink: 'syz.6.9465': attribute type 4 has an invalid length. [ 958.927962][T27113] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 959.107810][T27113] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.140207][T27113] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 959.180166][T27113] usb 2-1: config 1 interface 2 has no altsetting 0 [ 959.191020][T27113] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 959.209791][T27113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.218831][T27113] usb 2-1: Product: syz [ 959.223053][T27113] usb 2-1: Manufacturer: syz [ 959.228170][T27113] usb 2-1: SerialNumber: syz [ 959.472066][T27113] usb 2-1: selecting invalid altsetting 0 [ 959.550681][T27113] usb 2-1: USB disconnect, device number 12 [ 960.050010][ T3544] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.212233][ T3544] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.342395][ T1465] binder: 1460:1465 ioctl c0306201 800003c0 returned -14 [ 960.401213][ T3544] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.498963][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.519411][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.531964][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.542847][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.567495][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 960.732292][ T3544] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.929344][ T1481] [ 960.931906][ T1481] ===================================================== [ 960.938891][ T1481] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 960.946409][ T1481] syzkaller #0 Tainted: G L [ 960.952435][ T1481] ----------------------------------------------------- [ 960.959488][ T1481] syz.0.9497/1481 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 960.967165][ T1481] ffff88803367ac90 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 960.975943][ T1481] [ 960.975943][ T1481] and this task is already holding: [ 960.983344][ T1481] ffff8880299a1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 960.993161][ T1481] which would create a new lock dependency: [ 960.999182][ T1481] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 961.007357][ T1481] [ 961.007357][ T1481] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 961.016841][ T1481] (&client->buffer_lock){..-.}-{3:3} [ 961.016880][ T1481] [ 961.016880][ T1481] ... which became SOFTIRQ-irq-safe at: [ 961.030029][ T1481] lock_acquire+0x107/0x340 [ 961.034663][ T1481] _raw_spin_lock+0x2e/0x40 [ 961.039314][ T1481] evdev_pass_values+0xb9/0xbd0 [ 961.044290][ T1481] evdev_events+0x1e6/0x340 [ 961.048932][ T1481] input_pass_values+0x288/0x890 [ 961.054001][ T1481] input_event_dispose+0x3e5/0x6b0 [ 961.059243][ T1481] input_event+0x89/0xe0 [ 961.063615][ T1481] hidinput_hid_event+0x145e/0x1e50 [ 961.068944][ T1481] hid_process_event+0x4be/0x620 [ 961.074027][ T1481] hid_report_raw_event+0xe91/0x1720 [ 961.079440][ T1481] hid_input_report+0x44b/0x580 [ 961.084431][ T1481] hid_irq_in+0x47e/0x6d0 [ 961.088894][ T1481] __usb_hcd_giveback_urb+0x376/0x540 [ 961.094399][ T1481] dummy_timer+0x85f/0x45b0 [ 961.099044][ T1481] __hrtimer_run_queues+0x51c/0xc30 [ 961.104389][ T1481] hrtimer_run_softirq+0x187/0x2b0 [ 961.109747][ T1481] handle_softirqs+0x22b/0x7c0 [ 961.114645][ T1481] __irq_exit_rcu+0x60/0x150 [ 961.119384][ T1481] irq_exit_rcu+0x9/0x30 [ 961.123753][ T1481] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 961.129593][ T1481] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 961.135706][ T1481] unwind_next_frame+0x85c/0x23d0 [ 961.140955][ T1481] arch_stack_walk+0x11c/0x150 [ 961.145861][ T1481] stack_trace_save+0x9c/0xe0 [ 961.150686][ T1481] kasan_save_track+0x3e/0x80 [ 961.155490][ T1481] kasan_save_free_info+0x46/0x50 [ 961.160742][ T1481] __kasan_slab_free+0x5c/0x80 [ 961.165640][ T1481] kfree+0x1c0/0x660 [ 961.169673][ T1481] tomoyo_path_perm+0x3a2/0x4b0 [ 961.174653][ T1481] security_inode_getattr+0x12f/0x330 [ 961.180265][ T1481] vfs_statx+0x18e/0x550 [ 961.184643][ T1481] vfs_fstatat+0x118/0x170 [ 961.189294][ T1481] __x64_sys_newfstatat+0x116/0x190 [ 961.194631][ T1481] do_syscall_64+0xec/0xf80 [ 961.199268][ T1481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.205310][ T1481] [ 961.205310][ T1481] to a SOFTIRQ-irq-unsafe lock: [ 961.212367][ T1481] (tasklist_lock){.+.+}-{3:3} [ 961.212411][ T1481] [ 961.212411][ T1481] ... which became SOFTIRQ-irq-unsafe at: [ 961.225102][ T1481] ... [ 961.225118][ T1481] lock_acquire+0x107/0x340 [ 961.232615][ T1481] _raw_read_lock+0x36/0x50 [ 961.237338][ T1481] __do_wait+0xde/0x740 [ 961.241638][ T1481] do_wait+0x1e8/0x4f0 [ 961.245846][ T1481] kernel_wait+0xab/0x170 [ 961.250357][ T1481] call_usermodehelper_exec_work+0xbe/0x230 [ 961.256378][ T1481] process_scheduled_works+0xad1/0x1770 [ 961.262067][ T1481] worker_thread+0x8a0/0xda0 [ 961.266798][ T1481] kthread+0x711/0x8a0 [ 961.271004][ T1481] ret_from_fork+0x510/0xa50 [ 961.275745][ T1481] ret_from_fork_asm+0x1a/0x30 [ 961.280650][ T1481] [ 961.280650][ T1481] other info that might help us debug this: [ 961.280650][ T1481] [ 961.290929][ T1481] Chain exists of: [ 961.290929][ T1481] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 961.290929][ T1481] [ 961.304473][ T1481] Possible interrupt unsafe locking scenario: [ 961.304473][ T1481] [ 961.312834][ T1481] CPU0 CPU1 [ 961.318240][ T1481] ---- ---- [ 961.323639][ T1481] lock(tasklist_lock); [ 961.327929][ T1481] local_irq_disable(); [ 961.334724][ T1481] lock(&client->buffer_lock); [ 961.342405][ T1481] lock(&new->fa_lock); [ 961.349208][ T1481] [ 961.352687][ T1481] lock(&client->buffer_lock); [ 961.357749][ T1481] [ 961.357749][ T1481] *** DEADLOCK *** [ 961.357749][ T1481] [ 961.365932][ T1481] 7 locks held by syz.0.9497/1481: [ 961.371075][ T1481] #0: ffff888145fa2118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 961.380281][ T1481] #1: ffff888144ea4230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 961.390463][ T1481] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 961.400247][ T1481] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 961.409981][ T1481] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 961.419196][ T1481] #5: ffff8880299a1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 961.429534][ T1481] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 961.438673][ T1481] [ 961.438673][ T1481] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 961.449120][ T1481] -> (&client->buffer_lock){..-.}-{3:3} { [ 961.455154][ T1481] IN-SOFTIRQ-W at: [ 961.459194][ T1481] lock_acquire+0x107/0x340 [ 961.465406][ T1481] _raw_spin_lock+0x2e/0x40 [ 961.471619][ T1481] evdev_pass_values+0xb9/0xbd0 [ 961.478170][ T1481] evdev_events+0x1e6/0x340 [ 961.484377][ T1481] input_pass_values+0x288/0x890 [ 961.491029][ T1481] input_event_dispose+0x3e5/0x6b0 [ 961.497856][ T1481] input_event+0x89/0xe0 [ 961.503808][ T1481] hidinput_hid_event+0x145e/0x1e50 [ 961.510719][ T1481] hid_process_event+0x4be/0x620 [ 961.517360][ T1481] hid_report_raw_event+0xe91/0x1720 [ 961.524354][ T1481] hid_input_report+0x44b/0x580 [ 961.530919][ T1481] hid_irq_in+0x47e/0x6d0 [ 961.537123][ T1481] __usb_hcd_giveback_urb+0x376/0x540 [ 961.544222][ T1481] dummy_timer+0x85f/0x45b0 [ 961.550437][ T1481] __hrtimer_run_queues+0x51c/0xc30 [ 961.557421][ T1481] hrtimer_run_softirq+0x187/0x2b0 [ 961.564241][ T1481] handle_softirqs+0x22b/0x7c0 [ 961.570731][ T1481] __irq_exit_rcu+0x60/0x150 [ 961.577025][ T1481] irq_exit_rcu+0x9/0x30 [ 961.582965][ T1481] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 961.590286][ T1481] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 961.597966][ T1481] unwind_next_frame+0x85c/0x23d0 [ 961.604706][ T1481] arch_stack_walk+0x11c/0x150 [ 961.611164][ T1481] stack_trace_save+0x9c/0xe0 [ 961.617543][ T1481] kasan_save_track+0x3e/0x80 [ 961.623924][ T1481] kasan_save_free_info+0x46/0x50 [ 961.630642][ T1481] __kasan_slab_free+0x5c/0x80 [ 961.637212][ T1481] kfree+0x1c0/0x660 [ 961.642795][ T1481] tomoyo_path_perm+0x3a2/0x4b0 [ 961.649323][ T1481] security_inode_getattr+0x12f/0x330 [ 961.656383][ T1481] vfs_statx+0x18e/0x550 [ 961.662304][ T1481] vfs_fstatat+0x118/0x170 [ 961.668405][ T1481] __x64_sys_newfstatat+0x116/0x190 [ 961.675281][ T1481] do_syscall_64+0xec/0xf80 [ 961.681469][ T1481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.689034][ T1481] INITIAL USE at: [ 961.692948][ T1481] lock_acquire+0x107/0x340 [ 961.699207][ T1481] _raw_spin_lock_irqsave+0x40/0x60 [ 961.705999][ T1481] evdev_ioctl_handler+0x1969/0x1f10 [ 961.713218][ T1481] __ia32_compat_sys_ioctl+0x543/0x840 [ 961.720348][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 961.727137][ T1481] do_fast_syscall_32+0x34/0x80 [ 961.733658][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.741580][ T1481] } [ 961.744099][ T1481] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 961.752288][ T1481] [ 961.752288][ T1481] the dependencies between the lock to be acquired [ 961.752301][ T1481] and SOFTIRQ-irq-unsafe lock: [ 961.765860][ T1481] -> (tasklist_lock){.+.+}-{3:3} { [ 961.771190][ T1481] HARDIRQ-ON-R at: [ 961.775392][ T1481] lock_acquire+0x107/0x340 [ 961.781921][ T1481] _raw_read_lock+0x36/0x50 [ 961.788452][ T1481] __do_wait+0xde/0x740 [ 961.794640][ T1481] do_wait+0x1e8/0x4f0 [ 961.800760][ T1481] kernel_wait+0xab/0x170 [ 961.807117][ T1481] call_usermodehelper_exec_work+0xbe/0x230 [ 961.815033][ T1481] process_scheduled_works+0xad1/0x1770 [ 961.822599][ T1481] worker_thread+0x8a0/0xda0 [ 961.829211][ T1481] kthread+0x711/0x8a0 [ 961.835318][ T1481] ret_from_fork+0x510/0xa50 [ 961.841922][ T1481] ret_from_fork_asm+0x1a/0x30 [ 961.848713][ T1481] SOFTIRQ-ON-R at: [ 961.852910][ T1481] lock_acquire+0x107/0x340 [ 961.859616][ T1481] _raw_read_lock+0x36/0x50 [ 961.866145][ T1481] __do_wait+0xde/0x740 [ 961.872346][ T1481] do_wait+0x1e8/0x4f0 [ 961.878439][ T1481] kernel_wait+0xab/0x170 [ 961.884799][ T1481] call_usermodehelper_exec_work+0xbe/0x230 [ 961.892734][ T1481] process_scheduled_works+0xad1/0x1770 [ 961.900330][ T1481] worker_thread+0x8a0/0xda0 [ 961.906955][ T1481] kthread+0x711/0x8a0 [ 961.913117][ T1481] ret_from_fork+0x510/0xa50 [ 961.919729][ T1481] ret_from_fork_asm+0x1a/0x30 [ 961.926531][ T1481] INITIAL USE at: [ 961.930625][ T1481] lock_acquire+0x107/0x340 [ 961.937068][ T1481] _raw_write_lock_irq+0x3d/0x50 [ 961.943944][ T1481] copy_process+0x2185/0x3950 [ 961.950641][ T1481] kernel_clone+0x21e/0x820 [ 961.957081][ T1481] user_mode_thread+0xdd/0x140 [ 961.963936][ T1481] rest_init+0x23/0x300 [ 961.970034][ T1481] start_kernel+0x381/0x3d0 [ 961.976487][ T1481] x86_64_start_reservations+0x24/0x30 [ 961.983898][ T1481] x86_64_start_kernel+0x143/0x1c0 [ 961.990961][ T1481] common_startup_64+0x13e/0x147 [ 961.997843][ T1481] INITIAL READ USE at: [ 962.002364][ T1481] lock_acquire+0x107/0x340 [ 962.009232][ T1481] _raw_read_lock+0x36/0x50 [ 962.016106][ T1481] __do_wait+0xde/0x740 [ 962.022636][ T1481] do_wait+0x1e8/0x4f0 [ 962.029073][ T1481] kernel_wait+0xab/0x170 [ 962.035775][ T1481] call_usermodehelper_exec_work+0xbe/0x230 [ 962.044033][ T1481] process_scheduled_works+0xad1/0x1770 [ 962.051944][ T1481] worker_thread+0x8a0/0xda0 [ 962.058908][ T1481] kthread+0x711/0x8a0 [ 962.065341][ T1481] ret_from_fork+0x510/0xa50 [ 962.072415][ T1481] ret_from_fork_asm+0x1a/0x30 [ 962.079565][ T1481] } [ 962.082298][ T1481] ... key at: [] tasklist_lock+0x18/0x40 [ 962.090219][ T1481] ... acquired at: [ 962.094225][ T1481] _raw_read_lock+0x36/0x50 [ 962.098924][ T1481] send_sigio+0x101/0x370 [ 962.103457][ T1481] dnotify_handle_event+0x169/0x440 [ 962.108855][ T1481] fsnotify+0x180b/0x1ab0 [ 962.113760][ T1481] path_openat+0x1aa1/0x3dd0 [ 962.118554][ T1481] do_filp_open+0x1fa/0x410 [ 962.123267][ T1481] do_sys_openat2+0x121/0x200 [ 962.128162][ T1481] __ia32_compat_sys_openat+0x131/0x160 [ 962.133934][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.139352][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.144411][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.150942][ T1481] [ 962.153288][ T1481] -> (&f_owner->lock){....}-{3:3} { [ 962.158614][ T1481] INITIAL USE at: [ 962.162619][ T1481] lock_acquire+0x107/0x340 [ 962.168967][ T1481] _raw_write_lock_irq+0x3d/0x50 [ 962.175703][ T1481] __f_setown+0x67/0x370 [ 962.181713][ T1481] fcntl_dirnotify+0x3fa/0x6a0 [ 962.188242][ T1481] do_fcntl+0x745/0x1a50 [ 962.194282][ T1481] do_compat_fcntl64+0x477/0x720 [ 962.201004][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.207970][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.214682][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.222865][ T1481] INITIAL READ USE at: [ 962.227306][ T1481] lock_acquire+0x107/0x340 [ 962.234012][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.241412][ T1481] send_sigio+0x38/0x370 [ 962.247871][ T1481] dnotify_handle_event+0x169/0x440 [ 962.255355][ T1481] fsnotify+0x180b/0x1ab0 [ 962.261892][ T1481] vfs_readv+0x703/0x850 [ 962.268337][ T1481] __ia32_compat_sys_preadv2+0x227/0x320 [ 962.276214][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.283640][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.290700][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.299251][ T1481] } [ 962.301861][ T1481] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 962.310922][ T1481] ... acquired at: [ 962.314925][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.320334][ T1481] send_sigio+0x38/0x370 [ 962.324781][ T1481] kill_fasync+0x24d/0x4d0 [ 962.329448][ T1481] sock_wake_async+0x137/0x160 [ 962.334408][ T1481] sk_wake_async+0x184/0x280 [ 962.339198][ T1481] unix_release_sock+0x747/0xc70 [ 962.344336][ T1481] unix_release+0x92/0xd0 [ 962.348862][ T1481] sock_close+0xc3/0x240 [ 962.353309][ T1481] __fput+0x44c/0xa70 [ 962.357494][ T1481] task_work_run+0x1d4/0x260 [ 962.362286][ T1481] exit_to_user_mode_loop+0xef/0x4e0 [ 962.367775][ T1481] __do_fast_syscall_32+0x398/0x570 [ 962.373219][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.378365][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.384897][ T1481] [ 962.387273][ T1481] -> (&new->fa_lock){...-}-{3:3} { [ 962.392447][ T1481] IN-SOFTIRQ-R at: [ 962.396468][ T1481] lock_acquire+0x107/0x340 [ 962.402699][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.409584][ T1481] kill_fasync+0x199/0x4d0 [ 962.415689][ T1481] sock_wake_async+0x137/0x160 [ 962.422122][ T1481] sock_def_readable+0x3c1/0x530 [ 962.428919][ T1481] tcp_data_queue+0x1e14/0x5e30 [ 962.435457][ T1481] tcp_rcv_established+0xf57/0x2580 [ 962.442360][ T1481] tcp_v4_do_rcv+0xa90/0x1430 [ 962.448834][ T1481] tcp_v4_rcv+0x2675/0x2f20 [ 962.455036][ T1481] ip_protocol_deliver_rcu+0x221/0x440 [ 962.462197][ T1481] ip_local_deliver_finish+0x3bb/0x6f0 [ 962.469372][ T1481] NF_HOOK+0x30c/0x3a0 [ 962.475654][ T1481] NF_HOOK+0x30c/0x3a0 [ 962.481407][ T1481] __netif_receive_skb+0x143/0x380 [ 962.488195][ T1481] process_backlog+0x54f/0x1340 [ 962.494763][ T1481] __napi_poll+0xae/0x320 [ 962.500797][ T1481] net_rx_action+0x64a/0xe00 [ 962.507072][ T1481] handle_softirqs+0x22b/0x7c0 [ 962.513512][ T1481] do_softirq+0x76/0xd0 [ 962.519378][ T1481] __local_bh_enable_ip+0xf8/0x130 [ 962.526161][ T1481] sk_stream_wait_memory+0x71f/0xf70 [ 962.533129][ T1481] tcp_sendmsg_locked+0x1dfb/0x5520 [ 962.540011][ T1481] tcp_sendmsg+0x2f/0x50 [ 962.545931][ T1481] __sock_sendmsg+0x19c/0x270 [ 962.552299][ T1481] __sys_sendto+0x3bd/0x520 [ 962.558513][ T1481] __ia32_sys_sendto+0xdd/0x100 [ 962.565042][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.571922][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.578453][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.586544][ T1481] INITIAL USE at: [ 962.590466][ T1481] lock_acquire+0x107/0x340 [ 962.596562][ T1481] _raw_write_lock_irq+0x3d/0x50 [ 962.603112][ T1481] fasync_remove_entry+0xf1/0x1c0 [ 962.609821][ T1481] sock_fasync+0x85/0xf0 [ 962.615657][ T1481] __fput+0x8a2/0xa70 [ 962.621229][ T1481] task_work_run+0x1d4/0x260 [ 962.627412][ T1481] exit_to_user_mode_loop+0xef/0x4e0 [ 962.634284][ T1481] __do_fast_syscall_32+0x398/0x570 [ 962.641075][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.647517][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.655437][ T1481] INITIAL READ USE at: [ 962.659793][ T1481] lock_acquire+0x107/0x340 [ 962.666323][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.673633][ T1481] kill_fasync+0x199/0x4d0 [ 962.680114][ T1481] sock_wake_async+0x137/0x160 [ 962.686905][ T1481] sk_wake_async+0x184/0x280 [ 962.693526][ T1481] unix_release_sock+0x747/0xc70 [ 962.700488][ T1481] unix_release+0x92/0xd0 [ 962.707009][ T1481] sock_close+0xc3/0x240 [ 962.713281][ T1481] __fput+0x44c/0xa70 [ 962.719379][ T1481] task_work_run+0x1d4/0x260 [ 962.726100][ T1481] exit_to_user_mode_loop+0xef/0x4e0 [ 962.733439][ T1481] __do_fast_syscall_32+0x398/0x570 [ 962.740672][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.747639][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.756034][ T1481] } [ 962.758551][ T1481] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 962.767421][ T1481] ... acquired at: [ 962.771279][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.776681][ T1481] kill_fasync+0x199/0x4d0 [ 962.781300][ T1481] evdev_pass_values+0x627/0xbd0 [ 962.786432][ T1481] evdev_events+0x1e6/0x340 [ 962.791145][ T1481] input_pass_values+0x288/0x890 [ 962.796295][ T1481] input_event_dispose+0x330/0x6b0 [ 962.801608][ T1481] input_inject_event+0x1dd/0x340 [ 962.806839][ T1481] evdev_write+0x2fc/0x480 [ 962.811453][ T1481] vfs_write+0x27e/0xb30 [ 962.815889][ T1481] ksys_write+0x145/0x250 [ 962.820412][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.825817][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.830865][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.837404][ T1481] [ 962.839743][ T1481] [ 962.839743][ T1481] stack backtrace: [ 962.845653][ T1481] CPU: 1 UID: 0 PID: 1481 Comm: syz.0.9497 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.845680][ T1481] Tainted: [L]=SOFTLOCKUP [ 962.845688][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 962.845700][ T1481] Call Trace: [ 962.845708][ T1481] [ 962.845717][ T1481] dump_stack_lvl+0xe8/0x150 [ 962.845743][ T1481] __lock_acquire+0x2a95/0x2cf0 [ 962.845770][ T1481] ? kill_fasync+0x199/0x4d0 [ 962.845797][ T1481] lock_acquire+0x107/0x340 [ 962.845813][ T1481] ? kill_fasync+0x199/0x4d0 [ 962.845841][ T1481] ? do_raw_spin_lock+0x121/0x290 [ 962.845865][ T1481] ? evdev_pass_values+0xb9/0xbd0 [ 962.845887][ T1481] _raw_read_lock_irqsave+0x48/0x60 [ 962.845904][ T1481] ? kill_fasync+0x199/0x4d0 [ 962.845930][ T1481] kill_fasync+0x199/0x4d0 [ 962.845956][ T1481] ? kill_fasync+0x53/0x4d0 [ 962.845985][ T1481] evdev_pass_values+0x627/0xbd0 [ 962.846007][ T1481] ? evdev_pass_values+0x671/0xbd0 [ 962.846028][ T1481] evdev_events+0x1e6/0x340 [ 962.846045][ T1481] ? evdev_events+0x79/0x340 [ 962.846063][ T1481] ? input_pass_values+0x8d/0x890 [ 962.846079][ T1481] input_pass_values+0x288/0x890 [ 962.846099][ T1481] ? input_handle_event+0x70c/0xf30 [ 962.846125][ T1481] input_event_dispose+0x330/0x6b0 [ 962.846152][ T1481] input_inject_event+0x1dd/0x340 [ 962.846178][ T1481] ? input_inject_event+0xb6/0x340 [ 962.846204][ T1481] evdev_write+0x2fc/0x480 [ 962.846230][ T1481] ? __pfx_evdev_write+0x10/0x10 [ 962.846250][ T1481] ? bpf_lsm_file_permission+0x9/0x20 [ 962.846269][ T1481] ? security_file_permission+0x75/0x290 [ 962.846288][ T1481] ? rw_verify_area+0x255/0x4d0 [ 962.846316][ T1481] ? __pfx_evdev_write+0x10/0x10 [ 962.846335][ T1481] vfs_write+0x27e/0xb30 [ 962.846355][ T1481] ? __pfx_vfs_write+0x10/0x10 [ 962.846371][ T1481] ? __fget_files+0x2a/0x420 [ 962.846395][ T1481] ? __fget_files+0x2a/0x420 [ 962.846416][ T1481] ? __fget_files+0x3a0/0x420 [ 962.846438][ T1481] ? __fget_files+0x2a/0x420 [ 962.846463][ T1481] ksys_write+0x145/0x250 [ 962.846480][ T1481] ? __pfx_ksys_write+0x10/0x10 [ 962.846501][ T1481] __do_fast_syscall_32+0x1dc/0x570 [ 962.846523][ T1481] ? lockdep_hardirqs_on+0x7b/0x110 [ 962.846544][ T1481] ? do_fast_syscall_32+0x34/0x80 [ 962.846566][ T1481] ? irqentry_exit+0x10f/0x670 [ 962.846586][ T1481] do_fast_syscall_32+0x34/0x80 [ 962.846607][ T1481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.846630][ T1481] RIP: 0023:0xf7f23539 [ 962.846646][ T1481] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 962.846662][ T1481] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 962.846688][ T1481] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 962.846702][ T1481] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 962.846713][ T1481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.846724][ T1481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 962.846735][ T1481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.846753][ T1481] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 963.197380][ T52] Bluetooth: hci1: command tx timeout [ 963.304050][ T1472] chnl_net:caif_netlink_parms(): no params data found [ 963.707325][ T3544] bridge_slave_1: left allmulticast mode [ 963.713180][ T3544] bridge_slave_1: left promiscuous mode [ 963.737094][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.798490][ T3544] bridge_slave_0: left allmulticast mode [ 963.804231][ T3544] bridge_slave_0: left promiscuous mode [ 963.846792][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.534245][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.549892][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.560974][ T3544] bond0 (unregistering): Released all slaves [ 964.573281][ T3544] bond1 (unregistering): (slave lo): Releasing backup interface [ 964.581731][ T3544] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 964.595807][ T3544] bond1 (unregistering): Released all slaves [ 965.002670][ T3544] hsr_slave_0: left promiscuous mode [ 965.017295][ T3544] hsr_slave_1: left promiscuous mode [ 965.023219][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.047853][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.060003][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.070345][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.081905][ T3544] veth1_macvtap: left promiscuous mode [ 965.087577][ T3544] veth0_macvtap: left promiscuous mode [ 965.093200][ T3544] veth1_vlan: left promiscuous mode [ 965.098701][ T3544] veth0_vlan: left promiscuous mode [ 965.287774][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 965.324997][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 965.838894][ T3544] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.883867][ T3544] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.932960][ T3544] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.993534][ T3544] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.113324][ T3544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.124518][ T3544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.175382][ T3544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.187023][ T3544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.242579][ T3544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.253468][ T3544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.318123][ T3544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.330090][ T3544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.449917][ T3544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 33771 - 0 [ 966.497447][ T3544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 33771 - 0 [ 966.554474][ T3544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 33771 - 0 [ 966.611505][ T3544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 33771 - 0 [ 966.712746][ T3544] bridge_slave_1: left allmulticast mode [ 966.720494][ T3544] bridge_slave_1: left promiscuous mode [ 966.726253][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.736450][ T3544] bridge_slave_0: left allmulticast mode [ 966.743683][ T3544] bridge_slave_0: left promiscuous mode [ 966.750083][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.760421][ T3544] bridge_slave_1: left allmulticast mode [ 966.766132][ T3544] bridge_slave_1: left promiscuous mode [ 966.772152][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.783621][ T3544] bridge_slave_0: left allmulticast mode [ 966.789568][ T3544] bridge_slave_0: left promiscuous mode [ 966.795309][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.913945][ T3544] bond0 (unregistering): Released all slaves [ 966.975351][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.986102][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.996202][ T3544] bond0 (unregistering): Released all slaves [ 967.102666][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.112887][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.123230][ T3544] bond0 (unregistering): Released all slaves [ 967.133448][ T3544] bond1 (unregistering): (slave lo): Releasing backup interface [ 967.142796][ T3544] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 967.156950][ T3544] bond1 (unregistering): Released all slaves [ 967.290258][ T3544] bond2 (unregistering): (slave gretap1): Releasing active interface [ 967.564685][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.575485][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.585071][ T3544] bond0 (unregistering): Released all slaves [ 967.729282][ T3544] bond1 (unregistering): Released all slaves [ 967.742689][ T3544] bond2 (unregistering): Released all slaves [ 967.753845][ T3544] bond3 (unregistering): (slave lo): Releasing backup interface [ 967.762899][ T3544] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 967.775484][ T3544] bond3 (unregistering): Released all slaves [ 967.931588][ T3544] tipc: Disabling bearer [ 967.944127][ T3544] tipc: Left network mode [ 967.957776][ T3544] tipc: Disabling bearer [ 967.963316][ T3544] tipc: Disabling bearer [ 967.969229][ T3544] tipc: Left network mode [ 968.475349][ T3544] hsr_slave_0: left promiscuous mode [ 968.481591][ T3544] hsr_slave_1: left promiscuous mode [ 968.490715][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.498393][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.506269][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.514474][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.525318][ T3544] hsr_slave_0: left promiscuous mode [ 968.531539][ T3544] hsr_slave_1: left promiscuous mode [ 968.537645][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.545057][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.558325][ T3544] hsr_slave_0: left promiscuous mode [ 968.564830][ T3544] hsr_slave_1: left promiscuous mode [ 968.571325][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.580268][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.600846][ T3544] veth1_macvtap: left promiscuous mode [ 968.606923][ T3544] veth0_macvtap: left promiscuous mode [ 968.612536][ T3544] veth1_vlan: left promiscuous mode [ 968.618324][ T3544] veth0_vlan: left promiscuous mode [ 968.624677][ T3544] veth1_macvtap: left promiscuous mode [ 968.630356][ T3544] veth0_macvtap: left promiscuous mode [ 968.635958][ T3544] veth1_vlan: left allmulticast mode [ 968.645874][ T3544] veth1_vlan: left promiscuous mode [ 968.651478][ T3544] veth0_vlan: left promiscuous mode [ 968.930455][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 968.960289][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 969.230169][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 969.259481][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 969.617711][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 969.669864][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 970.813071][ T3544] IPVS: stop unused estimator thread 0...