last executing test programs: 58.298401635s ago: executing program 3 (id=585): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 58.083105114s ago: executing program 3 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4004) 57.626635166s ago: executing program 3 (id=595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 57.524726201s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 57.474724482s ago: executing program 3 (id=600): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 57.206259053s ago: executing program 3 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10) 57.136815577s ago: executing program 32 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10) 41.484603542s ago: executing program 1 (id=1160): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 41.447031811s ago: executing program 1 (id=1163): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='.\x00', 0x2882c2, 0x0) getdents(r0, 0x0, 0x0) 41.388890636s ago: executing program 1 (id=1166): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002880)=0x9) 41.318171151s ago: executing program 1 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 41.31535437s ago: executing program 1 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc93}, 0x94) 41.057484526s ago: executing program 1 (id=1188): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7e6c}, 0x18, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 40.984234632s ago: executing program 33 (id=1188): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7e6c}, 0x18, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 24.14272613s ago: executing program 2 (id=1720): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) cachestat(r0, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) 24.042962151s ago: executing program 2 (id=1735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9365fe5a", 0x33fe0}], 0x1}}], 0x80000af, 0x0) 23.601179569s ago: executing program 2 (id=1736): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b42415449400000095", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 23.566284429s ago: executing program 2 (id=1748): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 23.522720962s ago: executing program 2 (id=1739): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private2, @remote, @private1, 0x2, 0x0, 0x0, 0x0, 0x10000000007, 0xde0147, r1}) 23.252397949s ago: executing program 2 (id=1758): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 23.19018907s ago: executing program 34 (id=1758): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 14.554182282s ago: executing program 5 (id=2019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) 14.553651516s ago: executing program 5 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 14.487040811s ago: executing program 5 (id=2025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x2c}}, 0x10) 14.486645207s ago: executing program 5 (id=2029): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x8, 0x10, 0x16, 0x0, 0x5a, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "cb030890171319da1db2ec01d014fa61d80db9d1aae91311c2fa1fbaa1b121dbc9bcb117c6d06e02899d62bff57c457012e3ede4edd01614d35a2b4811b96355622adb97b2b5d959ad0701bd80bab191266fa9b9c7ca9fa090d8fa9aa9b6d66e507bf362e54e58a05278c77be644c2166e269cfaea59f28d065bd081bae32b1b5bf1275793ff29544807b351a156f03e898356441281edfe501d38fcbc8d970ecd330863d4a6f56f2c0bf2e469dfc9c17d200edc77b7f3318b487c855b4ef49c0dd30fdaea6ac1f97860e2bedd01502759b7df9bf98fd36cd8be5045fc3c5a0aea1c48f7858aaee1d51d4137da7af9c7c68900"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) 14.437318793s ago: executing program 5 (id=2034): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 14.337777025s ago: executing program 5 (id=2037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="010100a4bf98d27466d2deff2203", 0x0, 0x9, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.601564066s ago: executing program 0 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x28, r1, 0xc09, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40488c0) 1.874438125s ago: executing program 0 (id=2413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 1.806662365s ago: executing program 0 (id=2406): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) 1.473254848s ago: executing program 6 (id=2415): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='\x00', 0x1}], 0x2, 0x2, 0x0) 1.416196431s ago: executing program 6 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.415919733s ago: executing program 6 (id=2417): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1.405027596s ago: executing program 6 (id=2418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 1.336090577s ago: executing program 6 (id=2419): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x4000, 0x6, 0x8, 0x3, 0xc}, 0x18, 0x100) 597.509142ms ago: executing program 0 (id=2420): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r1}) 597.299051ms ago: executing program 0 (id=2421): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000340)=""/243, 0xf3, 0x180000) 595.28096ms ago: executing program 6 (id=2429): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) 337.600372ms ago: executing program 0 (id=2422): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 116.193202ms ago: executing program 4 (id=2425): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='\x00', 0x1}], 0x2, 0x2, 0x0) 115.938365ms ago: executing program 4 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 66.32834ms ago: executing program 4 (id=2427): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d", 0xa}, {&(0x7f0000000500)='9&', 0x2}], 0x2}, 0x20040000) 66.06775ms ago: executing program 4 (id=2428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x4000, 0x6, 0x8, 0x3, 0xc}, 0x18, 0x100) 6.729023ms ago: executing program 4 (id=2430): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r1}) 0s ago: executing program 4 (id=2431): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/snmp6\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62703' (ED25519) to the list of known hosts. [ 40.914808][ T5649] cgroup: Unknown subsys name 'net' [ 41.080263][ T5649] cgroup: Unknown subsys name 'cpuset' [ 41.084427][ T5649] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.064445][ T5649] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.441033][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.444482][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.447289][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.451333][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.455020][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.459238][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.461735][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.463933][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.464313][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.464719][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.465673][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.466227][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.466796][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.467373][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.467742][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.469085][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.469747][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.470554][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.472022][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.472863][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.996499][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.000323][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.002710][ T5744] bridge_slave_0: entered allmulticast mode [ 46.005500][ T5744] bridge_slave_0: entered promiscuous mode [ 46.015785][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.018359][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.020817][ T5745] bridge_slave_0: entered allmulticast mode [ 46.023527][ T5745] bridge_slave_0: entered promiscuous mode [ 46.045008][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.047460][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.049973][ T5744] bridge_slave_1: entered allmulticast mode [ 46.052739][ T5744] bridge_slave_1: entered promiscuous mode [ 46.060730][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.063242][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.065626][ T5745] bridge_slave_1: entered allmulticast mode [ 46.068550][ T5745] bridge_slave_1: entered promiscuous mode [ 46.104771][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.114094][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.116688][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.120366][ T5739] bridge_slave_0: entered allmulticast mode [ 46.123055][ T5739] bridge_slave_0: entered promiscuous mode [ 46.126455][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.128947][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.131334][ T5739] bridge_slave_1: entered allmulticast mode [ 46.134006][ T5739] bridge_slave_1: entered promiscuous mode [ 46.138361][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.142648][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.157324][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.177721][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.180307][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.182798][ T5735] bridge_slave_0: entered allmulticast mode [ 46.185524][ T5735] bridge_slave_0: entered promiscuous mode [ 46.189022][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.191482][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.193849][ T5735] bridge_slave_1: entered allmulticast mode [ 46.197090][ T5735] bridge_slave_1: entered promiscuous mode [ 46.227538][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.237549][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.241842][ T5744] team0: Port device team_slave_0 added [ 46.244990][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.249570][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.253674][ T5745] team0: Port device team_slave_0 added [ 46.257079][ T5745] team0: Port device team_slave_1 added [ 46.265766][ T5744] team0: Port device team_slave_1 added [ 46.335644][ T5735] team0: Port device team_slave_0 added [ 46.338372][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.341567][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.351407][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.357103][ T5739] team0: Port device team_slave_0 added [ 46.360007][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.362381][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.370747][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.375361][ T5735] team0: Port device team_slave_1 added [ 46.377553][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.379930][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.389993][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.396758][ T5739] team0: Port device team_slave_1 added [ 46.405329][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.407874][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.416302][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.454308][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.457398][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.468442][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.499074][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.501641][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.510338][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.515614][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.518643][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.529637][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.540665][ T5744] hsr_slave_0: entered promiscuous mode [ 46.543437][ T5744] hsr_slave_1: entered promiscuous mode [ 46.557325][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.559901][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.570561][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.586974][ T5745] hsr_slave_0: entered promiscuous mode [ 46.590401][ T5745] hsr_slave_1: entered promiscuous mode [ 46.593426][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 46.596019][ T5745] Cannot create hsr debugfs directory [ 46.643810][ T5739] hsr_slave_0: entered promiscuous mode [ 46.646704][ T5739] hsr_slave_1: entered promiscuous mode [ 46.649039][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 46.651154][ T5739] Cannot create hsr debugfs directory [ 46.677512][ T5735] hsr_slave_0: entered promiscuous mode [ 46.679948][ T5735] hsr_slave_1: entered promiscuous mode [ 46.682148][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 46.684568][ T5735] Cannot create hsr debugfs directory [ 46.957995][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.968359][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.972931][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.979837][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.992786][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.999177][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.003018][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.009510][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.052563][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.057262][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.066277][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.072506][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.075453][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.079408][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.082345][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.086294][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.130259][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.134985][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.138051][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.141992][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.160774][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.165201][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.168258][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.173758][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.223205][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.228662][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.232547][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.238610][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.247063][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.250942][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.261201][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.265892][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.283400][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.302791][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.313246][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.315912][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.330288][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.332706][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.341638][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.370636][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.377412][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.382308][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.384996][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.404494][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.406800][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.413683][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.429417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.432792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.441607][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.452342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.454872][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.467911][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.489394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.492113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.505791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.508609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.520445][ T5743] Bluetooth: hci1: command tx timeout [ 47.520449][ T5748] Bluetooth: hci3: command tx timeout [ 47.520658][ T5748] Bluetooth: hci2: command tx timeout [ 47.522980][ T62] Bluetooth: hci0: command tx timeout [ 47.728592][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.755998][ T5745] veth0_vlan: entered promiscuous mode [ 47.762428][ T5745] veth1_vlan: entered promiscuous mode [ 47.783761][ T5745] veth0_macvtap: entered promiscuous mode [ 47.789300][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.793055][ T5745] veth1_macvtap: entered promiscuous mode [ 47.801797][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.816343][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.829946][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.842549][ T1163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.845813][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.854722][ T1163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.858163][ T1163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.868089][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.885088][ T5744] veth0_vlan: entered promiscuous mode [ 47.909401][ T5739] veth0_vlan: entered promiscuous mode [ 47.915578][ T5744] veth1_vlan: entered promiscuous mode [ 47.936703][ T5739] veth1_vlan: entered promiscuous mode [ 47.951262][ T5735] veth0_vlan: entered promiscuous mode [ 47.959676][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.963576][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.970008][ T5735] veth1_vlan: entered promiscuous mode [ 47.984363][ T5744] veth0_macvtap: entered promiscuous mode [ 47.996626][ T5739] veth0_macvtap: entered promiscuous mode [ 48.004120][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.006954][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.007107][ T5744] veth1_macvtap: entered promiscuous mode [ 48.012970][ T5739] veth1_macvtap: entered promiscuous mode [ 48.032003][ T5735] veth0_macvtap: entered promiscuous mode [ 48.036595][ T5735] veth1_macvtap: entered promiscuous mode [ 48.042055][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.048417][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.053924][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.055727][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.065892][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.070045][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.073545][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.079728][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.084016][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088938][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.102631][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.105823][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.112224][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.121944][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.128314][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.143328][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158896][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.162133][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.175102][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.199334][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.202000][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.210742][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.213400][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.234771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.239713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.259761][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.267083][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.275689][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.281560][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.290906][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.296543][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.528150][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 48.530458][ T5901] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 48.742654][ T5937] capability: warning: `syz.2.23' uses 32-bit capabilities (legacy support in use) [ 48.760809][ T40] audit: type=1800 audit(1778015665.465:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 48.941420][ T5958] netlink: 26 bytes leftover after parsing attributes in process `syz.3.34'. [ 49.598360][ T62] Bluetooth: hci3: command tx timeout [ 49.598766][ T5748] Bluetooth: hci2: command tx timeout [ 49.608000][ T5748] Bluetooth: hci0: command tx timeout [ 49.608009][ T62] Bluetooth: hci1: command tx timeout [ 49.739742][ T5987] Bluetooth: MGMT ver 1.23 [ 49.783985][ T5994] comedi comedi3: rti800: I/O base address or length out of range [ 49.823540][ T6002] sch_fq: defrate 4294967295 ignored. [ 49.865791][ T6008] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 49.869089][ T6008] netlink: 216 bytes leftover after parsing attributes in process `syz.1.57'. [ 49.944988][ T6018] dvmrp1: entered allmulticast mode [ 49.953452][ T6017] dvmrp1: left allmulticast mode [ 50.086502][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 50.123098][ T6041] comedi comedi1: dt2817: I/O base address or length out of range [ 50.204489][ T6051] warning: `syz.0.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.370711][ T6063] process 'syz.0.82' launched './file2' with NULL argv: empty string added [ 50.511277][ T6071] tipc: Enabling of bearer rejected, failed to enable media [ 51.121641][ T6105] ======================================================= [ 51.121641][ T6105] WARNING: The mand mount option has been deprecated and [ 51.121641][ T6105] and is ignored by this kernel. Remove the mand [ 51.121641][ T6105] option from the mount to silence this warning. [ 51.121641][ T6105] ======================================================= [ 51.203654][ T6118] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 51.207194][ T6118] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 51.210685][ T6118] ALSA: mixer_oss: invalid OSS volume 'lg' [ 51.213852][ T6118] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 51.224928][ T6118] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 51.228547][ T6118] ALSA: mixer_oss: invalid OSS volume '' [ 51.230776][ T6118] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 51.234158][ T6118] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 51.239360][ T6118] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 51.243000][ T6118] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 51.246516][ T6118] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 51.311427][ T6132] veth1_to_bridge: entered allmulticast mode [ 51.313813][ T6132] bridge0: port 3(veth1_to_bridge) entered blocking state [ 51.316255][ T6132] bridge0: port 3(veth1_to_bridge) entered disabled state [ 51.322777][ T6132] veth1_to_bridge: entered promiscuous mode [ 51.324861][ T6132] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.330423][ T6132] bridge0: port 3(veth1_to_bridge) entered blocking state [ 51.333156][ T6132] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 51.338871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.343063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.347084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.351156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.355129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.359213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.363251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.367295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.371679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.376005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.678442][ T5748] Bluetooth: hci2: command tx timeout [ 51.680361][ T62] Bluetooth: hci0: command tx timeout [ 51.688568][ T62] Bluetooth: hci1: command tx timeout [ 51.690376][ T5743] Bluetooth: hci3: command tx timeout [ 52.700971][ T6168] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 52.704156][ T6168] netlink: 96 bytes leftover after parsing attributes in process `syz.1.133'. [ 52.706844][ T6168] netlink: 1 bytes leftover after parsing attributes in process `syz.1.133'. [ 52.709896][ T6168] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 52.716946][ T6168] netlink: 634 bytes leftover after parsing attributes in process `syz.1.133'. [ 52.798613][ T34] IPVS: starting estimator thread 0... [ 52.850476][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 52.897831][ T6177] IPVS: using max 45 ests per chain, 108000 per kthread [ 52.901218][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.912851][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.921026][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.943058][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.954309][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.961730][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.968981][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.981692][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.988456][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 52.995724][ T50] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 53.003544][ T6192] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 53.017470][ T50] hid-generic 0006:0008:0001.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 53.021038][ T6192] nbd: error processing sock list [ 53.121260][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.540323][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.163'. [ 53.555139][ T6234] netlink: 'syz.2.163': attribute type 6 has an invalid length. [ 53.570799][ T6234] netlink: 'syz.2.163': attribute type 5 has an invalid length. [ 53.578659][ T6234] netlink: 'syz.2.163': attribute type 4 has an invalid length. [ 53.759485][ T62] Bluetooth: hci1: command tx timeout [ 53.761368][ T62] Bluetooth: hci0: command tx timeout [ 53.763283][ T62] Bluetooth: hci2: command tx timeout [ 53.765050][ T62] Bluetooth: hci3: command tx timeout [ 54.215098][ T6266] Bluetooth: MGMT ver 1.23 [ 54.917413][ T841] libceph: connect (1)[c::]:6789 error -101 [ 54.921205][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 55.188640][ T841] libceph: connect (1)[c::]:6789 error -101 [ 55.190970][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 55.338808][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 55.370663][ T841] IPVS: starting estimator thread 0... [ 55.467722][ T6305] IPVS: using max 45 ests per chain, 108000 per kthread [ 55.673481][ T6286] ceph: No mds server is up or the cluster is laggy [ 55.708240][ T841] libceph: connect (1)[c::]:6789 error -101 [ 55.718139][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 56.061076][ T6321] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 56.064019][ T6321] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 56.347764][ C0] net_ratelimit: 64151 callbacks suppressed [ 56.347776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 56.347792][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 56.347997][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.348513][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.349007][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.349493][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.349867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 56.349965][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.350461][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.350935][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 56.752475][ T6354] veth1_macvtap: left promiscuous mode [ 57.124211][ T6370] 9pnet_fd: p9_fd_create_tcp (6370): problem binding to privport [ 57.668184][ T6385] sch_tbf: peakrate 1 is lower than or equals to rate 13370017219913373684 ! [ 58.105646][ T5448] veth1_macvtap: entered promiscuous mode [ 58.615814][ T6416] ptrace attach of "/syz-executor exec"[5745] was attempted by ""[6416] [ 59.086179][ T6446] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 59.379257][ T6454] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 59.475506][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 60.575852][ T6513] xt_l2tp: invalid flags combination: 8 [ 61.056397][ T6536] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 61.357716][ C2] net_ratelimit: 79703 callbacks suppressed [ 61.357728][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.357782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 61.358068][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.358541][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.359006][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.359476][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.359647][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.359941][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.360466][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 61.360938][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 62.593580][ T6586] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 62.596135][ T6586] netlink: 96 bytes leftover after parsing attributes in process `syz.1.317'. [ 62.599376][ T6586] netlink: 1 bytes leftover after parsing attributes in process `syz.1.317'. [ 62.603238][ T6586] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 62.605744][ T6586] netlink: 'syz.1.317': attribute type 8 has an invalid length. [ 62.608442][ T6586] netlink: 606 bytes leftover after parsing attributes in process `syz.1.317'. [ 63.847246][ T6614] xt_l2tp: unknown flags: 51 [ 63.914430][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 63.926772][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 64.345069][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 64.348726][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 64.362422][ T6637] netlink: 'syz.0.338': attribute type 11 has an invalid length. [ 64.369856][ T6637] netlink: 'syz.0.338': attribute type 12 has an invalid length. [ 64.609008][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'. [ 64.626185][ T5834] Process accounting resumed [ 64.658279][ T6650] Process accounting resumed [ 65.176986][ T6669] atomic_op ffff888000654998 conn xmit_atomic 0000000000000000 [ 65.692497][ T6678] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 66.367694][ C2] net_ratelimit: 78932 callbacks suppressed [ 66.367707][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.367766][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.368209][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 66.368604][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 66.369266][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 66.369568][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 66.369671][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.369813][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.369952][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.370088][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.631834][ T6705] vivid-004: disconnect [ 66.638233][ T6704] vivid-004: reconnect [ 66.840571][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.885927][ T1163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.907693][ T1163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.919938][ T1163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.939899][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.165722][ T6763] netlink: 88 bytes leftover after parsing attributes in process `syz.1.392'. [ 68.170930][ T6763] Zero length message leads to an empty skb [ 70.438303][ T6823] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 71.377723][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.377727][ C0] net_ratelimit: 81973 callbacks suppressed [ 71.377762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.377809][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.378152][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.378853][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.379189][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.379931][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.380467][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.381367][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.381498][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 71.480048][ T6874] netlink: 'syz.0.440': attribute type 7 has an invalid length. [ 71.483192][ T6874] netlink: 'syz.0.440': attribute type 8 has an invalid length. [ 71.959567][ T6892] mmap: syz.1.446 (6892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.669140][ T6921] binder: 6920:6921 ioctl 400c620e 80000100 returned -22 [ 72.937502][ T6943] tmpfs: Cannot change global quota limit on remount [ 75.287790][ T7035] Bluetooth: MGMT ver 1.23 [ 75.691070][ T7053] hugetlbfs: Bad value '' for mount option 'size' [ 75.691070][ T7053] [ 75.913654][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 76.002518][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.387700][ C2] net_ratelimit: 82107 callbacks suppressed [ 76.387712][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.387742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 76.388290][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.388613][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.389263][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.389589][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.389835][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.393751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 76.394172][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.394497][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 76.932625][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.543'. [ 77.863430][ T7151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.565'. [ 77.866553][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 78.131097][ T7160] trusted_key: encrypted_key: key user:syz not found [ 78.622701][ T7178] program syz.3.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.476638][ T7223] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.642985][ T6256] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.932485][ T6256] usb 7-1: Using ep0 maxpacket: 32 [ 80.118089][ T6256] usb 7-1: unable to get BOS descriptor or descriptor too short [ 80.153312][ T6256] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 80.156030][ T6256] usb 7-1: config 8 has no interface number 0 [ 80.158929][ T5748] Bluetooth: hci3: command tx timeout [ 80.165592][ T6256] usb 7-1: config 8 interface 188 has no altsetting 0 [ 80.322276][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.373796][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.392256][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.447825][ T6256] usb 7-1: string descriptor 0 read error: -22 [ 80.449863][ T6256] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 80.452715][ T6256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.509397][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.513019][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.555951][ T6256] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 80.567988][ T6256] dw2102: su3000_power_ctrl: 1, initialized 0 [ 80.570203][ T6256] dvb-usb: bulk message failed: -22 (2/0) [ 80.613538][ T6256] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.639302][ T6256] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 80.654532][ T6256] usb 7-1: media controller created [ 80.680421][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 80.682420][ T6256] dw2102: i2c transfer failed. [ 80.684088][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 80.811098][ T6256] dw2102: i2c transfer failed. [ 80.916474][ T7216] dvb-usb: bulk message failed: -22 (4/0) [ 80.929403][ T7216] dw2102: i2c transfer failed. [ 80.957009][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 80.989507][ T6256] dw2102: i2c transfer failed. [ 80.991145][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 80.993123][ T6256] dw2102: i2c transfer failed. [ 81.001702][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 81.003592][ T6256] dw2102: i2c transfer failed. [ 81.005196][ T6256] dvb-usb: bulk message failed: -22 (6/0) [ 81.082081][ T6256] dw2102: i2c transfer failed. [ 81.083695][ T6256] dvb-usb: MAC address: 02:02:02:02:02:02 [ 81.218403][ T6256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.334301][ T6256] dvb-usb: bulk message failed: -22 (3/0) [ 81.336218][ T6256] dw2102: command 0x0e transfer failed. [ 81.373117][ T5834] IPVS: starting estimator thread 0... [ 81.397704][ C0] net_ratelimit: 79421 callbacks suppressed [ 81.397716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 81.397732][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.398370][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.398668][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.398935][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.399673][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.399868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 81.400005][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.400268][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.401006][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4a:4b:da:ac:95, vlan:0) [ 81.487950][ T7277] IPVS: using max 45 ests per chain, 108000 per kthread [ 81.598294][ T6256] dvb-usb: bulk message failed: -22 (3/0) [ 81.600610][ T6256] dw2102: command 0x0e transfer failed. [ 81.659974][ T1180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.933967][ T6256] dvb-usb: bulk message failed: -22 (3/0) [ 81.935901][ T6256] dw2102: command 0x0e transfer failed. [ 81.950629][ T6256] dvb-usb: bulk message failed: -22 (3/0) [ 81.952533][ T6256] dw2102: command 0x0e transfer failed. [ 81.954356][ T6256] dvb-usb: bulk message failed: -22 (1/0) [ 81.956235][ T6256] dw2102: command 0x51 transfer failed. [ 81.958887][ T7294] netlink: 67 bytes leftover after parsing attributes in process `syz.0.626'. [ 82.156344][ T1180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.203916][ T6256] DVB: Unable to find symbol ds3000_attach() [ 82.212321][ T6256] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 82.248235][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.250765][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.253203][ T7241] bridge_slave_0: entered allmulticast mode [ 82.255902][ T7241] bridge_slave_0: entered promiscuous mode [ 82.259956][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.262482][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.264928][ T7241] bridge_slave_1: entered allmulticast mode [ 82.267718][ T7241] bridge_slave_1: entered promiscuous mode [ 82.283242][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.287907][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.304973][ T7241] team0: Port device team_slave_0 added [ 82.311724][ T7241] team0: Port device team_slave_1 added [ 82.337522][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.357685][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.381161][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.396188][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.408694][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.435189][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.473586][ T6256] rc_core: IR keymap rc-su3000 not found [ 82.482192][ T6256] Registered IR keymap rc-empty [ 82.528838][ T1180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.555735][ T6256] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 82.562516][ T7241] hsr_slave_0: entered promiscuous mode [ 82.563609][ T7241] hsr_slave_1: entered promiscuous mode [ 82.563953][ T7241] debugfs: 'hsr0' already exists in 'hsr' [ 82.563964][ T7241] Cannot create hsr debugfs directory [ 82.603012][ T6256] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 82.641515][ T6256] dvb-usb: schedule remote query interval to 150 msecs. [ 82.643788][ T6256] dw2102: su3000_power_ctrl: 0, initialized 1 [ 82.677223][ T6256] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 82.702438][ T1180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.725774][ T6256] usb 7-1: USB disconnect, device number 2 [ 82.808818][ T62] Bluetooth: hci0: command tx timeout [ 82.937242][ T7241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.106103][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.115789][ T40] audit: type=1326 audit(1778015699.795:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.641" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa8fcc code=0x0 [ 83.118934][ T7241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.121731][ T6256] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 83.147548][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.172176][ T7241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.208326][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.212973][ T7241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.224462][ T7241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.228373][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 83.242611][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 83.278134][ T7339] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 83.580353][ T1180] veth1_to_bridge: left promiscuous mode [ 83.583771][ T1180] bridge0: port 3(veth1_to_bridge) entered disabled state [ 83.588571][ T1180] bridge_slave_1: left allmulticast mode [ 83.590505][ T1180] bridge_slave_1: left promiscuous mode [ 83.592407][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.597759][ T1180] bridge_slave_0: left allmulticast mode [ 83.600148][ T1180] bridge_slave_0: left promiscuous mode [ 83.602201][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.727843][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.736500][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.741077][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.745106][ T1180] bond0 (unregistering): Released all slaves [ 83.772349][ T7241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.781900][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.786880][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.789350][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.795863][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.798336][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.875243][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.879392][ T5834] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 83.882349][ T5834] usb 6-1: config 1 has no interface number 0 [ 83.884299][ T5834] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 83.889383][ T5834] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 83.892545][ T5834] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.898837][ T5834] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 83.901922][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.904462][ T5834] usb 6-1: Product: syz [ 83.905829][ T5834] usb 6-1: Manufacturer: syz [ 83.907279][ T5834] usb 6-1: SerialNumber: syz [ 83.917824][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.031317][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 84.042968][ T1180] hsr_slave_0: left promiscuous mode [ 84.047133][ T1180] hsr_slave_1: left promiscuous mode [ 84.049328][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.051699][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.055814][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.059068][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.072961][ T1180] veth1_macvtap: left promiscuous mode [ 84.075863][ T1180] veth0_macvtap: left promiscuous mode [ 84.078089][ T1180] veth1_vlan: left promiscuous mode [ 84.079971][ T1180] veth0_vlan: left promiscuous mode [ 84.161840][ T7383] Bluetooth: MGMT ver 1.23 [ 84.286496][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 84.307476][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 84.408461][ T7241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.483436][ T7415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.561555][ T7241] veth0_vlan: entered promiscuous mode [ 84.567447][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 84.570836][ T7241] veth1_vlan: entered promiscuous mode [ 84.571739][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 84.588390][ T7241] veth0_macvtap: entered promiscuous mode [ 84.594908][ T7241] veth1_macvtap: entered promiscuous mode [ 84.620493][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.626359][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.632815][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.640056][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643019][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.651661][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.714104][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.719742][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.737553][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 84.740850][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.744792][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.803273][ T1180] IPVS: stop unused estimator thread 0... [ 84.824176][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 84.887915][ T62] Bluetooth: hci0: command tx timeout [ 85.125400][ T7477] : entered promiscuous mode [ 86.088372][ T841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.153379][ T7542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.716'. [ 86.156549][ T7542] netlink: 43 bytes leftover after parsing attributes in process `syz.4.716'. [ 86.159914][ T7542] netlink: 'syz.4.716': attribute type 5 has an invalid length. [ 86.162580][ T7542] netlink: 43 bytes leftover after parsing attributes in process `syz.4.716'. [ 86.249204][ T841] usb 7-1: Using ep0 maxpacket: 32 [ 86.252568][ T841] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.255220][ T841] usb 7-1: config 0 has no interface number 0 [ 86.259686][ T3255] cfg80211: failed to load regulatory.db [ 86.261219][ T841] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.266450][ T841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.270108][ T841] usb 7-1: Product: syz [ 86.271626][ T841] usb 7-1: Manufacturer: syz [ 86.273409][ T841] usb 7-1: SerialNumber: syz [ 86.280262][ T841] usb 7-1: config 0 descriptor?? [ 86.284289][ T841] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.287335][ T841] usb 7-1: selecting invalid altsetting 1 [ 86.290271][ T841] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 86.298243][ T841] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.302039][ T841] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.305180][ T841] usb 7-1: media controller created [ 86.314041][ T841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.510180][ T5834] usb 6-1: Incompatible driver and firmware versions [ 86.534029][ T5834] usb 6-1: USB disconnect, device number 2 [ 86.967724][ T62] Bluetooth: hci0: command tx timeout [ 87.369050][ T841] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 87.372362][ T7523] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 87.375008][ T841] zl10353_read_register: readreg error (reg=127, ret==-110) [ 87.414900][ T841] usb 7-1: USB disconnect, device number 3 [ 87.451294][ T7596] netlink: 'syz.1.738': attribute type 5 has an invalid length. [ 87.610939][ T7622] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 87.677247][ T7631] comedi comedi3: unsupported base address 0x4f23 [ 87.953020][ T7669] usb usb9: usbfs: process 7669 (syz.2.774) did not claim interface 0 before use [ 87.999500][ T7675] ucma_write: process 349 (syz.2.777) changed security contexts after opening file descriptor, this is not allowed. [ 88.060525][ T7683] netlink: 156 bytes leftover after parsing attributes in process `syz.4.781'. [ 88.064488][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 88.336143][ T7734] netlink: 810 bytes leftover after parsing attributes in process `syz.0.806'. [ 88.441326][ T7751] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 88.513394][ C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 88.516878][ C3] sr 2:0:0:0: [sr0] tag#13 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 88.680880][ T9] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 0/1 [ 88.683875][ T9] hid-generic FFFF:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 88.721300][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 88.725770][ T7788] veth0_macvtap: left promiscuous mode [ 88.728327][ T7790] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 88.730562][ T7790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.734828][ T7790] vhci_hcd vhci_hcd.0: Device attached [ 88.976202][ T7814] batman_adv: batadv0: Adding interface: gretap1 [ 88.978391][ T7814] batman_adv: batadv0: Interface activated: gretap1 [ 88.987747][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.988198][ T39] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 89.038017][ T62] Bluetooth: hci0: command tx timeout [ 89.071588][ T7822] can0: slcan on ttyprintk. [ 89.120165][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.850'. [ 89.147954][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 89.151137][ T7821] can0 (unregistered): slcan off ttyprintk. [ 89.152185][ T50] usb 5-1: config 0 has no interfaces? [ 89.158857][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.161905][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.168258][ T50] usb 5-1: config 0 descriptor?? [ 89.373857][ T7861] netlink: 'syz.1.862': attribute type 2 has an invalid length. [ 89.386041][ T841] usb 5-1: USB disconnect, device number 2 [ 89.389566][ T7791] vhci_hcd: connection closed [ 89.392083][ T69] vhci_hcd vhci_hcd.0: stop threads [ 89.401972][ T69] vhci_hcd vhci_hcd.0: release socket [ 89.406873][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 89.445108][ T7867] overlayfs: regular lower layers cannot follow data lower layers [ 89.449176][ T39] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 89.880893][ T7930] sctp: [Deprecated]: syz.1.889 (pid 7930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.880893][ T7930] Use struct sctp_sack_info instead [ 90.214524][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 90.465171][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 90.655843][ T8094] netlink: 'syz.1.942': attribute type 2 has an invalid length. [ 91.165244][ T8236] netlink: 'syz.4.988': attribute type 9 has an invalid length. [ 91.168363][ T8236] netlink: 'syz.4.988': attribute type 7 has an invalid length. [ 91.171605][ T8236] netlink: 'syz.4.988': attribute type 8 has an invalid length. [ 91.432079][ T8311] team0: Device gtp0 is up. Set it down before adding it as a team port [ 91.459279][ T39] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.511762][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 91.628575][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 91.631536][ T39] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 91.634528][ T39] usb 9-1: config 0 has no interface number 0 [ 91.636699][ T39] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.640502][ T39] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 91.644118][ T39] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 91.648002][ T39] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.651530][ T39] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.654711][ T39] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.661590][ T39] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 91.664648][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.667282][ T39] usb 9-1: Product: syz [ 91.668732][ T39] usb 9-1: Manufacturer: syz [ 91.670260][ T39] usb 9-1: SerialNumber: syz [ 91.675077][ T39] usb 9-1: config 0 descriptor?? [ 91.887711][ T39] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 92.077728][ T5748] Bluetooth: hci0: command 0x0405 tx timeout [ 92.085427][ T8246] iowarrior 9-1:0.186: Error -90 while submitting URB [ 92.091111][ T841] usb 9-1: USB disconnect, device number 2 [ 92.131637][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 92.165300][ T8369] CUSE: unknown device info "" [ 92.167687][ T8369] CUSE: unknown device info "" [ 92.169355][ T8369] CUSE: unknown device info "" [ 92.170978][ T8369] CUSE: unknown device info "" [ 92.172606][ T8369] CUSE: unknown device info "" [ 92.174215][ T8369] CUSE: unknown device info "" [ 92.175841][ T8369] CUSE: unknown device info "" [ 92.178115][ T8369] CUSE: unknown device info "" [ 92.179781][ T8369] CUSE: unknown device info "" [ 92.181564][ T8369] CUSE: unknown device info "" [ 92.183219][ T8369] CUSE: unknown device info "" [ 92.184848][ T8369] CUSE: unknown device info "r" [ 92.186469][ T8369] CUSE: unknown device info "#" [ 92.188468][ T8369] CUSE: unknown device info "" [ 92.190275][ T8369] CUSE: unknown device info "" [ 92.191895][ T8369] CUSE: unknown device info "" [ 92.193524][ T8369] CUSE: DEVNAME unspecified [ 92.477703][ T1338] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.651358][ T1338] usb 7-1: Using ep0 maxpacket: 32 [ 92.655192][ T1338] usb 7-1: unable to get BOS descriptor or descriptor too short [ 92.659668][ T1338] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 92.663061][ T1338] usb 7-1: config 8 has no interface number 0 [ 92.665882][ T1338] usb 7-1: config 8 interface 188 has no altsetting 0 [ 92.671671][ T1338] usb 7-1: string descriptor 0 read error: -22 [ 92.677042][ T1338] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 92.682690][ T1338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.695836][ T1338] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 92.701553][ T1338] dw2102: su3000_power_ctrl: 1, initialized 0 [ 92.704134][ T1338] dvb-usb: bulk message failed: -22 (2/0) [ 92.715990][ T1338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.721169][ T1338] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 92.725765][ T1338] usb 7-1: media controller created [ 92.728748][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.731784][ T1338] dw2102: i2c transfer failed. [ 92.733791][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.736895][ T1338] dw2102: i2c transfer failed. [ 92.740438][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.742895][ T1338] dw2102: i2c transfer failed. [ 92.747739][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.752354][ T1338] dw2102: i2c transfer failed. [ 92.754420][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.756813][ T1338] dw2102: i2c transfer failed. [ 92.759949][ T1338] dvb-usb: bulk message failed: -22 (6/0) [ 92.762278][ T1338] dw2102: i2c transfer failed. [ 92.764257][ T1338] dvb-usb: MAC address: 02:02:02:02:02:02 [ 92.774160][ T1338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.794376][ T8447] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 92.795639][ T1338] dvb-usb: bulk message failed: -22 (3/0) [ 92.801410][ T1338] dw2102: command 0x0e transfer failed. [ 92.804356][ T1338] dvb-usb: bulk message failed: -22 (3/0) [ 92.806691][ T1338] dw2102: command 0x0e transfer failed. [ 92.821543][ T8451] net_ratelimit: 36731 callbacks suppressed [ 92.821553][ T8451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 92.887369][ T8463] Invalid source name [ 92.889225][ T8463] UBIFS error (pid: 8463): cannot open "./file0", error -22 [ 93.117913][ T1338] dvb-usb: bulk message failed: -22 (3/0) [ 93.130702][ T1338] dw2102: command 0x0e transfer failed. [ 93.133109][ T1338] dvb-usb: bulk message failed: -22 (3/0) [ 93.135474][ T1338] dw2102: command 0x0e transfer failed. [ 93.140796][ T1338] dvb-usb: bulk message failed: -22 (1/0) [ 93.143404][ T1338] dw2102: command 0x51 transfer failed. [ 93.147123][ T8375] dw2102: i2c rd: len=155 is too big! [ 93.147123][ T8375] [ 93.164571][ T1338] DVB: Unable to find symbol ds3000_attach() [ 93.167241][ T1338] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 93.229309][ T1338] rc_core: IR keymap rc-su3000 not found [ 93.231884][ T1338] Registered IR keymap rc-empty [ 93.244360][ T1338] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 93.255172][ T1338] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input10 [ 93.266009][ T1338] dvb-usb: schedule remote query interval to 150 msecs. [ 93.269524][ T1338] dw2102: su3000_power_ctrl: 0, initialized 1 [ 93.272376][ T1338] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 93.281405][ T1338] usb 7-1: USB disconnect, device number 4 [ 93.342024][ T1338] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 93.350818][ T8549] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 93.427188][ T8569] vlan2: entered promiscuous mode [ 93.430168][ T8569] bridge0: entered promiscuous mode [ 93.913546][ T8666] binder: 8665:8666 ioctl 400c620e 80000100 returned -22 [ 94.157898][ T5748] Bluetooth: hci0: command 0x0405 tx timeout [ 94.257820][ T6028] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.429468][ T6028] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.432557][ T6028] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.436036][ T6028] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.439174][ T6028] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.444146][ T6028] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.447265][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.450079][ T6028] usb 6-1: Product: syz [ 94.451526][ T6028] usb 6-1: Manufacturer: syz [ 94.458781][ T6028] cdc_wdm 6-1:1.0: skipping garbage [ 94.460812][ T6028] cdc_wdm 6-1:1.0: skipping garbage [ 94.464711][ T6028] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 94.467363][ T6028] cdc_wdm 6-1:1.0: Unknown control protocol [ 94.668498][ T50] usb 6-1: USB disconnect, device number 3 [ 94.736665][ T9] kernel read not supported for file /677/net/snmp6 (pid: 9 comm: kworker/0:0) [ 94.853588][ T8799] trusted_key: encrypted_key: key user:syz not found [ 94.898026][ T6028] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.057775][ T6028] usb 9-1: Using ep0 maxpacket: 8 [ 95.062296][ T6028] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 95.065301][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.067979][ T6028] usb 9-1: Product: syz [ 95.069396][ T6028] usb 9-1: Manufacturer: syz [ 95.070983][ T6028] usb 9-1: SerialNumber: syz [ 95.074777][ T6028] usb 9-1: config 0 descriptor?? [ 95.079932][ T6028] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 95.082591][ T6028] dvb-usb: bulk message failed: -22 (2/0) [ 95.085767][ T6028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.089175][ T6028] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 95.091968][ T6028] usb 9-1: media controller created [ 95.098622][ T6028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.285280][ T8755] dvb-usb: bulk message failed: -22 (11/0) [ 95.299562][ T6028] cxusb: set interface failed [ 95.301217][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 95.337121][ T6028] DVB: Unable to find symbol mt352_attach() [ 95.341795][ T6028] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 95.397832][ T6028] rc_core: IR keymap rc-dvico-portable not found [ 95.399903][ T6028] Registered IR keymap rc-empty [ 95.405025][ T6028] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 95.410057][ T6028] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input11 [ 95.419662][ T6028] dvb-usb: schedule remote query interval to 100 msecs. [ 95.421955][ T6028] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 95.432966][ T6028] usb 9-1: USB disconnect, device number 3 [ 95.454776][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 95.485799][ T6028] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 95.502871][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 95.507085][ T8903] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1146'. [ 95.750766][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 95.938886][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 95.941971][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 95.945040][ T9028] netlink: 'syz.2.1180': attribute type 19 has an invalid length. [ 95.948151][ T9028] netlink: 'syz.2.1180': attribute type 20 has an invalid length. [ 96.256033][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.259496][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.263624][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.267068][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.272296][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.409401][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.492905][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.551438][ T9179] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 96.588579][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.668149][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.686668][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.689610][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.692104][ T9090] bridge_slave_0: entered allmulticast mode [ 96.694875][ T9090] bridge_slave_0: entered promiscuous mode [ 96.700032][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.702405][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.704778][ T9090] bridge_slave_1: entered allmulticast mode [ 96.709667][ T9090] bridge_slave_1: entered promiscuous mode [ 96.727236][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.737417][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.764063][ T9090] team0: Port device team_slave_0 added [ 96.767139][ T9090] team0: Port device team_slave_1 added [ 96.799004][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.801256][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.812738][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.819533][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.821970][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.830366][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.900453][ T9090] hsr_slave_0: entered promiscuous mode [ 96.905243][ T9090] hsr_slave_1: entered promiscuous mode [ 96.907449][ T9090] debugfs: 'hsr0' already exists in 'hsr' [ 96.910797][ T9090] Cannot create hsr debugfs directory [ 96.925238][ T13] bridge_slave_1: left allmulticast mode [ 96.927093][ T13] bridge_slave_1: left promiscuous mode [ 96.929965][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.934363][ T13] bridge_slave_0: left allmulticast mode [ 96.936260][ T13] bridge_slave_0: left promiscuous mode [ 96.940148][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.083677][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.089111][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.093066][ T13] bond0 (unregistering): Released all slaves [ 97.113596][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'. [ 97.125076][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'. [ 97.203133][ T13] IPVS: stopping backup sync thread 6446 ... [ 97.212631][ T9448] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1217'. [ 97.246577][ T40] audit: type=1326 audit(1778015713.945:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.2.1220" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83fcc code=0x0 [ 97.266702][ T9461] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 97.295655][ T9090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.306139][ T9090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.312357][ T9090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.317173][ T9090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.320225][ T9090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.325662][ T9090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.329279][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.334581][ T9090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.351926][ T9090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.410364][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 97.422739][ T13] hsr_slave_0: left promiscuous mode [ 97.426015][ T13] hsr_slave_1: left promiscuous mode [ 97.428565][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.431106][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.434670][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.437100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.444442][ T13] veth1_macvtap: left promiscuous mode [ 97.446213][ T13] veth0_macvtap: left promiscuous mode [ 97.449836][ T13] veth1_vlan: left promiscuous mode [ 97.451672][ T13] veth0_vlan: left promiscuous mode [ 97.580116][ T13] team0 (unregistering): Port device team_slave_1 removed [ 97.591036][ T13] team0 (unregistering): Port device team_slave_0 removed [ 97.668225][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.689141][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.697281][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.699672][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.717230][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.719819][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.814191][ T9524] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 97.855951][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.962375][ T13] IPVS: stop unused estimator thread 0... [ 97.993696][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.123081][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.138252][ T9090] veth0_vlan: entered promiscuous mode [ 98.144548][ T9090] veth1_vlan: entered promiscuous mode [ 98.159158][ T9090] veth0_macvtap: entered promiscuous mode [ 98.163186][ T9090] veth1_macvtap: entered promiscuous mode [ 98.171389][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.177186][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.183216][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.186194][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190454][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.193594][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233800][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.236419][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.251115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.253748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.314870][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.317930][ T5748] Bluetooth: hci3: command tx timeout [ 98.483858][ T40] audit: type=1326 audit(1778015715.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.4.1247" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 98.557330][ T5827] IPVS: starting estimator thread 0... [ 98.658675][ T9642] IPVS: using max 44 ests per chain, 105600 per kthread [ 100.397930][ T5748] Bluetooth: hci3: command tx timeout [ 101.139835][ T39] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 101.299639][ T39] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 101.302222][ T39] usb 7-1: config 1 has no interface number 0 [ 101.303961][ T39] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 101.307283][ T39] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 101.311128][ T39] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.315733][ T39] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 101.318604][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.321428][ T39] usb 7-1: Product: syz [ 101.322701][ T39] usb 7-1: Manufacturer: syz [ 101.324069][ T39] usb 7-1: SerialNumber: syz [ 101.329376][ T9819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.893445][ T9943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.335579][ T9968] netlink: 'syz.0.1356': attribute type 5 has an invalid length. [ 102.477770][ T5748] Bluetooth: hci3: command tx timeout [ 102.737172][T10038] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 102.779319][T10044] __nla_validate_parse: 2 callbacks suppressed [ 102.779334][T10044] netlink: 810 bytes leftover after parsing attributes in process `syz.4.1374'. [ 103.908138][ T39] usb 7-1: Incompatible driver and firmware versions [ 103.917344][ T39] usb 7-1: USB disconnect, device number 5 [ 103.941089][T10125] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 104.055626][T10152] can0: slcan on ttyprintk. [ 104.061260][T10160] comedi comedi3: unsupported base address 0x4f23 [ 104.139077][T10148] can0 (unregistered): slcan off ttyprintk. [ 104.197600][T10186] batman_adv: batadv0: Adding interface: gretap1 [ 104.199845][T10186] batman_adv: batadv0: Interface activated: gretap1 [ 104.391968][T10235] batman_adv: batadv0: Adding interface: gretap1 [ 104.394798][T10235] batman_adv: batadv0: Interface activated: gretap1 [ 104.413757][T10243] netlink: 'syz.4.1429': attribute type 2 has an invalid length. [ 104.420336][T10238] can0: slcan on ttyprintk. [ 104.480706][T10262] netlink: 'syz.4.1432': attribute type 5 has an invalid length. [ 104.511744][T10236] can0 (unregistered): slcan off ttyprintk. [ 104.514633][T10268] overlayfs: regular lower layers cannot follow data lower layers [ 104.557780][ T5748] Bluetooth: hci3: command tx timeout [ 104.667813][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.817699][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 104.819242][ T50] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.819262][ T50] usb 5-1: config 0 has no interface number 0 [ 104.823548][ T50] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 104.823568][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.823578][ T50] usb 5-1: Product: syz [ 104.823587][ T50] usb 5-1: Manufacturer: syz [ 104.823595][ T50] usb 5-1: SerialNumber: syz [ 104.827268][ T50] usb 5-1: config 0 descriptor?? [ 104.852718][ T50] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.852741][ T50] usb 5-1: selecting invalid altsetting 1 [ 104.852755][ T50] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.855104][ T50] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.855721][ T50] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.855762][ T50] usb 5-1: media controller created [ 104.864176][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.918012][ T50] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 105.920404][ T50] zl10353_read_register: readreg error (reg=127, ret==-110) [ 105.921682][T10251] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 105.941326][ T50] usb 5-1: USB disconnect, device number 3 [ 106.643573][T10401] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 107.321766][T10409] comedi comedi3: unsupported base address 0x4f23 [ 107.380734][T10422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 107.382934][T10422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.385619][T10422] vhci_hcd vhci_hcd.0: Device attached [ 107.627904][ T6028] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 107.628629][ T39] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 107.667793][ T1477] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.797864][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 107.800824][ T39] usb 7-1: config 0 has no interfaces? [ 107.802657][ T39] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.805673][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.809738][ T39] usb 7-1: config 0 descriptor?? [ 107.837731][ T1477] usb 10-1: Using ep0 maxpacket: 32 [ 107.840894][ T1477] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.843574][ T1477] usb 10-1: config 0 has no interface number 0 [ 107.847359][ T1477] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 107.850489][ T1477] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.853100][ T1477] usb 10-1: Product: syz [ 107.854500][ T1477] usb 10-1: Manufacturer: syz [ 107.856137][ T1477] usb 10-1: SerialNumber: syz [ 107.859047][ T1477] usb 10-1: config 0 descriptor?? [ 107.862698][ T1477] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.865622][ T1477] usb 10-1: selecting invalid altsetting 1 [ 107.867711][ T1477] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.871300][ T1477] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.874832][ T1477] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.877536][ T1477] usb 10-1: media controller created [ 107.883889][ T1477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.019060][ T39] usb 7-1: USB disconnect, device number 6 [ 108.022588][T10423] vhci_hcd: connection closed [ 108.025449][ T1163] vhci_hcd vhci_hcd.2: stop threads [ 108.028969][ T1163] vhci_hcd vhci_hcd.2: release socket [ 108.030858][ T1163] vhci_hcd vhci_hcd.2: disconnect device [ 108.087818][ T6028] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 108.959130][ T1477] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 108.966019][ T1477] zl10353_read_register: readreg error (reg=127, ret==-110) [ 108.966274][T10435] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 108.996409][ T1477] usb 10-1: USB disconnect, device number 2 [ 109.451077][T10648] netlink: 'syz.2.1536': attribute type 9 has an invalid length. [ 109.453869][T10648] netlink: 'syz.2.1536': attribute type 7 has an invalid length. [ 109.459443][T10648] netlink: 'syz.2.1536': attribute type 8 has an invalid length. [ 109.758306][T10720] overlayfs: regular lower layers cannot follow data lower layers [ 109.799864][T10733] team0: Device gtp0 is up. Set it down before adding it as a team port [ 110.082440][T10812] sctp: [Deprecated]: syz.2.1582 (pid 10812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.082440][T10812] Use struct sctp_sack_info instead [ 110.361488][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 110.703384][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 111.050157][T11079] binder: 11078:11079 ioctl 400c620e 80000100 returned -22 [ 111.084716][T11091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.391641][T11137] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 111.991939][T11165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1680'. [ 111.994990][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'. [ 112.022150][T11175] trusted_key: encrypted_key: key user:syz not found [ 112.503444][T11275] program syz.0.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.673120][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 112.708617][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 112.712519][T11314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1715'. [ 113.568009][T11379] program syz.2.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.795536][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 113.840160][T11437] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.909718][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.974905][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.981603][T11451] program syz.4.1759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.028797][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.033398][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.036422][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.040581][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.043251][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.073169][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.154157][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.180316][T11481] team0: Device gtp0 is up. Set it down before adding it as a team port [ 114.327027][T11539] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.332709][ T69] bridge_slave_1: left allmulticast mode [ 114.334600][ T69] bridge_slave_1: left promiscuous mode [ 114.337673][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.341381][ T69] bridge_slave_0: left allmulticast mode [ 114.343264][ T69] bridge_slave_0: left promiscuous mode [ 114.345575][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.350853][ T69] batman_adv: batadv0: Interface deactivated: gretap1 [ 114.428519][ T69] batman_adv: batadv0: Removing interface: gretap1 [ 114.512424][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.517612][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.521378][ T69] bond0 (unregistering): Released all slaves [ 114.630429][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.632871][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.635244][T11456] bridge_slave_0: entered allmulticast mode [ 114.638599][T11456] bridge_slave_0: entered promiscuous mode [ 114.651354][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.654325][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.657275][T11456] bridge_slave_1: entered allmulticast mode [ 114.661377][T11456] bridge_slave_1: entered promiscuous mode [ 114.684678][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 114.688521][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.693678][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.711571][T11456] team0: Port device team_slave_0 added [ 114.715078][T11456] team0: Port device team_slave_1 added [ 114.757199][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.760008][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.769610][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.774088][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.776397][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.785747][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.808694][T11456] hsr_slave_0: entered promiscuous mode [ 114.811507][T11456] hsr_slave_1: entered promiscuous mode [ 114.814090][T11456] debugfs: 'hsr0' already exists in 'hsr' [ 114.816419][T11456] Cannot create hsr debugfs directory [ 114.837044][ T69] hsr_slave_0: left promiscuous mode [ 114.841228][ T69] hsr_slave_1: left promiscuous mode [ 114.843341][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.845798][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.849134][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.851606][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.857087][ T69] veth1_vlan: left promiscuous mode [ 114.859269][ T69] veth0_vlan: left promiscuous mode [ 114.962630][ T69] team0 (unregistering): Port device team_slave_1 removed [ 114.971670][ T69] team0 (unregistering): Port device team_slave_0 removed [ 115.029861][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 115.121952][T11456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.126491][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.130068][T11456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 115.134377][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.138672][T11456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.143096][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.146410][T11456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.151023][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.178267][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 115.203326][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.212020][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.218613][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.221073][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.227039][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.229235][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.315743][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 115.426341][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.545720][T11456] veth0_vlan: entered promiscuous mode [ 115.552952][T11456] veth1_vlan: entered promiscuous mode [ 115.566446][T11456] veth0_macvtap: entered promiscuous mode [ 115.575404][T11456] veth1_macvtap: entered promiscuous mode [ 115.584544][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.590940][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.602827][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.605708][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.608986][ T1255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.612279][ T1255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.660743][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.664295][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.680306][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.682974][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.036205][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 116.044301][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 116.047477][T11926] netlink: 'syz.0.1791': attribute type 19 has an invalid length. [ 116.053066][T11926] netlink: 'syz.0.1791': attribute type 20 has an invalid length. [ 116.087783][ T5748] Bluetooth: hci1: command tx timeout [ 116.365629][T12002] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.385747][T12005] Invalid source name [ 116.387159][T12005] UBIFS error (pid: 12005): cannot open "./file0", error -22 [ 116.755784][T12079] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.805491][T12087] vlan2: entered promiscuous mode [ 116.807213][T12087] bridge0: entered promiscuous mode [ 116.969671][T12112] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.084434][T12125] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 117.410459][T12186] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 117.586769][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1855'. [ 117.683415][ T5748] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 118.157782][ T5748] Bluetooth: hci1: command tx timeout [ 118.261814][T12246] CUSE: unknown device info "" [ 118.263463][T12246] CUSE: unknown device info "" [ 118.265077][T12246] CUSE: unknown device info "" [ 118.266703][T12246] CUSE: unknown device info "" [ 118.268872][T12246] CUSE: unknown device info "" [ 118.270487][T12246] CUSE: unknown device info "" [ 118.272152][T12246] CUSE: unknown device info "" [ 118.272508][T12248] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 118.273835][T12246] CUSE: unknown device info "" [ 118.273842][T12246] CUSE: unknown device info "" [ 118.279988][T12246] CUSE: unknown device info "" [ 118.281714][T12246] CUSE: unknown device info "" [ 118.283616][T12246] CUSE: unknown device info "r" [ 118.285309][T12246] CUSE: unknown device info "#" [ 118.287220][T12246] CUSE: unknown device info "" [ 118.289266][T12246] CUSE: unknown device info "" [ 118.290945][T12246] CUSE: unknown device info "" [ 118.292629][T12246] CUSE: DEVNAME unspecified [ 118.373451][T12258] CUSE: unknown device info "" [ 118.375630][T12258] CUSE: unknown device info "" [ 118.377321][T12258] CUSE: unknown device info "" [ 118.379177][T12258] CUSE: unknown device info "" [ 118.380809][T12261] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 118.380931][T12258] CUSE: unknown device info "" [ 118.385167][T12258] CUSE: unknown device info "" [ 118.386874][T12258] CUSE: unknown device info "" [ 118.388766][T12258] CUSE: unknown device info "" [ 118.390480][T12258] CUSE: unknown device info "" [ 118.392186][T12258] CUSE: unknown device info "" [ 118.393852][T12258] CUSE: unknown device info "" [ 118.395509][T12258] CUSE: unknown device info "r" [ 118.397195][T12258] CUSE: unknown device info "#" [ 118.400089][T12258] CUSE: unknown device info "" [ 118.401894][T12258] CUSE: unknown device info "" [ 118.403592][T12258] CUSE: unknown device info "" [ 118.405269][T12258] CUSE: DEVNAME unspecified [ 118.473422][T12276] CUSE: unknown device info "" [ 118.475302][T12276] CUSE: unknown device info "" [ 118.477931][T12276] CUSE: unknown device info "" [ 118.479678][T12276] CUSE: unknown device info "" [ 118.481418][T12276] CUSE: unknown device info "" [ 118.483035][T12276] CUSE: unknown device info "" [ 118.484959][T12276] CUSE: unknown device info "" [ 118.486686][T12276] CUSE: unknown device info "" [ 118.489829][T12276] CUSE: unknown device info "" [ 118.491573][T12276] CUSE: unknown device info "" [ 118.493251][T12276] CUSE: unknown device info "" [ 118.494923][T12276] CUSE: unknown device info "r" [ 118.496600][T12276] CUSE: unknown device info "#" [ 118.498643][T12276] CUSE: unknown device info "" [ 118.500406][T12276] CUSE: unknown device info "" [ 118.502112][T12276] CUSE: unknown device info "" [ 118.503754][T12276] CUSE: DEVNAME unspecified [ 118.575669][T12296] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 118.645526][T12310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.369523][T12483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 119.932133][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1929'. [ 119.936389][T12533] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1929'. [ 120.247732][ T5748] Bluetooth: hci1: command tx timeout [ 120.518468][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1938'. [ 120.693852][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 120.696835][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1948'. [ 120.705294][T12604] netlink: 'syz.5.1948': attribute type 19 has an invalid length. [ 120.709089][T12604] netlink: 'syz.5.1948': attribute type 20 has an invalid length. [ 121.731786][T12718] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 122.243757][T12733] Bluetooth: MGMT ver 1.23 [ 122.318120][ T5748] Bluetooth: hci1: command tx timeout [ 122.444405][T12785] fuse: Invalid rootmode [ 122.481570][ T5748] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 123.164490][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 123.269178][T12952] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 123.920523][ T40] audit: type=1326 audit(1778015740.625:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.0.2096" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa8fcc code=0x0 [ 124.293477][T13109] program syz.6.2110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.296673][T13109] ata1.00: non-matching transfer count (8388608/133) [ 124.809463][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2126'. [ 124.818324][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2126'. [ 124.867793][T13178] program syz.6.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.870675][T13178] ata1.00: invalid service action 3 [ 125.278096][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.431836][T13257] program syz.4.2155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.441144][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.446478][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.452771][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.466921][ T50] usb 5-1: config 0 descriptor?? [ 125.535208][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 125.676659][ T50] usb 5-1: USB disconnect, device number 4 [ 125.681331][T13294] vivid-007: disconnect [ 125.683166][T13293] vivid-007: reconnect [ 126.470077][T13351] overlayfs: conflicting lowerdir path [ 126.757747][T13382] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 127.397930][T13474] program syz.4.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.731880][T13504] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 128.392265][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2239'. [ 128.572181][T13577] comedi comedi3: das16m1: I/O base address or length out of range [ 128.694843][ T40] audit: type=1326 audit(1778015745.395:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.0.2250" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fcc code=0x0 [ 128.729948][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2251'. [ 128.732989][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2251'. [ 129.661858][T13685] [U] V3Fپ"S/4:XTZWTLW= [ 129.664584][T13685] [U] J"E:" [ 129.839626][ T5748] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 129.843894][ T5748] Bluetooth: hci1: Injecting HCI hardware error event [ 129.847104][ T5748] Bluetooth: hci1: hardware error 0x00 [ 130.057742][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.210956][ T39] usb 5-1: config 0 has no interfaces? [ 130.215954][ T39] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 130.223003][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.227870][ T39] usb 5-1: Product: syz [ 130.229511][ T39] usb 5-1: Manufacturer: syz [ 130.231295][ T39] usb 5-1: SerialNumber: syz [ 130.234395][ T39] usb 5-1: config 0 descriptor?? [ 130.952724][ T39] usb 5-1: USB disconnect, device number 5 [ 131.086858][T13803] comedi comedi3: pcl730: I/O base address or length out of range [ 131.917734][ T5748] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 132.017369][ T5748] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 132.020137][ T5748] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 132.799852][T13912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.802954][T13912] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.812245][T13912] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.818534][T13912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.821064][T13912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.825830][T13912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.834022][T13912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.836113][T13912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.840743][T13912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.543791][T14037] binder: 14035:14037 ioctl c0306201 80000680 returned -14 [ 133.587914][ T1338] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.750452][ T1338] usb 5-1: config 255 has an invalid interface number: 133 but max is 0 [ 133.753561][ T1338] usb 5-1: config 255 has no interface number 0 [ 133.755688][ T1338] usb 5-1: config 255 interface 133 has no altsetting 0 [ 133.760235][ T1338] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 133.764679][ T1338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.774130][ T1338] usb 5-1: Product: syz [ 133.775596][ T1338] usb 5-1: Manufacturer: syz [ 133.780192][ T1338] usb 5-1: SerialNumber: syz [ 133.993723][ T1338] s2255 5-1:255.133: Could not find bulk-in endpoint [ 133.996017][ T1338] Sensoray 2255 driver load failed: 0xfffffff4 [ 133.999815][ T1338] s2255 5-1:255.133: probe with driver s2255 failed with error -12 [ 134.002842][ T1338] usbhid 5-1:255.133: couldn't find an input interrupt endpoint [ 134.012731][ T1338] usb 5-1: USB disconnect, device number 6 [ 134.077759][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.157831][ T59] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 134.307832][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 134.310587][ T59] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 134.313071][ T59] usb 11-1: config 0 has no interface number 0 [ 134.314960][ T59] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.318400][ T59] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 134.321740][ T59] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 134.325192][ T59] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 134.328592][ T59] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 134.331622][ T59] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.336933][ T59] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 134.339855][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.342265][ T59] usb 11-1: Product: syz [ 134.343541][ T59] usb 11-1: Manufacturer: syz [ 134.344946][ T59] usb 11-1: SerialNumber: syz [ 134.347699][ T59] usb 11-1: config 0 descriptor?? [ 134.563540][ T59] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 134.762483][T14113] iowarrior 11-1:0.186: Error -90 while submitting URB [ 134.767455][ T39] usb 11-1: USB disconnect, device number 2 [ 134.877710][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.878556][ T5743] Bluetooth: hci0: command 0x0405 tx timeout [ 135.306237][ T5813] kernel read not supported for file /495/net/snmp6 (pid: 5813 comm: kworker/1:3) [ 135.587690][ T5813] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.743245][ T5813] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.749869][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.756199][ T5813] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.764156][ T5813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.769044][ T5813] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.772078][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.774847][ T5813] usb 5-1: Product: syz [ 135.776269][ T5813] usb 5-1: Manufacturer: syz [ 135.793396][ T5813] cdc_wdm 5-1:1.0: skipping garbage [ 135.795210][ T5813] cdc_wdm 5-1:1.0: skipping garbage [ 135.800302][ T5813] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 135.802270][ T5813] cdc_wdm 5-1:1.0: Unknown control protocol [ 135.997517][ T59] usb 5-1: USB disconnect, device number 7 [ 136.167774][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.807773][ T59] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 136.957795][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.957862][ T5748] Bluetooth: hci0: command 0x0405 tx timeout [ 136.959869][ T59] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.965354][ T59] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.969705][ T59] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.973553][ T59] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.979801][ T59] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.982720][ T59] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.985236][ T59] usb 11-1: Product: syz [ 136.986674][ T59] usb 11-1: Manufacturer: syz [ 137.017600][ T59] cdc_wdm 11-1:1.0: skipping garbage [ 137.020851][ T59] cdc_wdm 11-1:1.0: skipping garbage [ 137.028972][ T59] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 137.030978][ T59] cdc_wdm 11-1:1.0: Unknown control protocol [ 137.047718][ T1338] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.166235][ T5827] kernel read not supported for file /909/net/snmp6 (pid: 5827 comm: kworker/0:3) [ 137.216613][ T3255] usb 11-1: USB disconnect, device number 3 [ 137.227822][ T1338] usb 5-1: Using ep0 maxpacket: 8 [ 137.231190][ T1338] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 137.233831][ T1338] usb 5-1: config 0 has no interface number 0 [ 137.235847][ T1338] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.240586][ T1338] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 137.244212][ T1338] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 137.248446][ T1338] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.252012][ T1338] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 137.255172][ T1338] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.260911][ T1338] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 137.263858][ T1338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.266442][ T1338] usb 5-1: Product: syz [ 137.268022][ T1338] usb 5-1: Manufacturer: syz [ 137.269519][ T1338] usb 5-1: SerialNumber: syz [ 137.273216][ T1338] usb 5-1: config 0 descriptor?? [ 137.440478][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.444326][ T1430] ------------[ cut here ]------------ [ 137.447750][ T1430] !skb_transport_header_was_set(skb) [ 137.447761][ T1430] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xe84/0x1150, CPU#2: aoe_tx0/1430 [ 137.453982][ T1430] Modules linked in: [ 137.456137][ T1430] CPU: 2 UID: 0 PID: 1430 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.460738][ T1430] Tainted: [L]=SOFTLOCKUP [ 137.462605][ T1430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.466995][ T1430] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 137.469361][ T1430] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 c7 9f 17 fe e9 7c fc ff ff e8 dd 07 c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 cf 07 c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 137.477614][ T1430] RSP: 0000:ffffc9000775f8a0 EFLAGS: 00010293 [ 137.481558][ T1430] RAX: 0000000000000000 RBX: ffffc9000775f930 RCX: ffffffff8b40d6a6 [ 137.483344][ T1338] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 137.484653][ T1430] RDX: ffff888025030000 RSI: ffffffff8b40e003 RDI: ffff888025030000 [ 137.491800][ T1430] RBP: ffffc9000775fa40 R08: 0000000000000003 R09: 000000000000ffff [ 137.495259][ T1430] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888013b63c36 [ 137.498812][ T1430] R13: ffffc9000775f940 R14: ffff88802937ce50 R15: ffff888013b63b80 [ 137.502264][ T1430] FS: 0000000000000000(0000) GS:ffff88809737d000(0000) knlGS:0000000000000000 [ 137.506183][ T1430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.509195][ T1430] CR2: 00000000f0ea0df8 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 137.512702][ T1430] Call Trace: [ 137.514215][ T1430] [ 137.515566][ T1430] ? __pfx_lowpan_xmit+0x10/0x10 [ 137.517892][ T1430] ? skb_network_protocol+0x2ce/0x3d0 [ 137.520110][ T1430] ? lockdep_unlock+0x5a/0xc0 [ 137.521704][ T1430] ? dev_hard_start_xmit+0x128/0x7a0 [ 137.523479][ T1430] dev_hard_start_xmit+0x128/0x7a0 [ 137.525200][ T1430] __dev_queue_xmit+0x1baa/0x4950 [ 137.526897][ T1430] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 137.528893][ T1430] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.530638][ T1430] ? __lock_acquire+0x4a5/0x2630 [ 137.532259][ T1430] ? ref_tracker_free+0x37e/0x6c0 [ 137.533902][ T1430] ? do_raw_spin_lock+0x128/0x260 [ 137.535557][ T1430] ? find_held_lock+0x2b/0x80 [ 137.537166][ T1430] ? skb_dequeue+0x126/0x180 [ 137.538744][ T1430] ? skb_dequeue+0x126/0x180 [ 137.540270][ T1430] ? find_held_lock+0x2b/0x80 [ 137.541838][ T1430] ? tx+0xa4/0x130 [ 137.543099][ T1430] ? rcu_is_watching+0x12/0xc0 [ 137.544634][ T1430] ? __pfx_tx+0x10/0x10 [ 137.546047][ T1430] tx+0xc4/0x130 [ 137.547273][ T1430] kthread+0x1d8/0x3c0 [ 137.548738][ T1430] ? __kthread_parkme+0xbb/0x230 [ 137.550395][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.551893][ T1430] ? rcu_is_watching+0x12/0xc0 [ 137.553478][ T1430] ? __pfx_default_wake_function+0x10/0x10 [ 137.555423][ T1430] ? __kthread_parkme+0x18c/0x230 [ 137.557125][ T1430] ? kthread+0x13a/0x450 [ 137.558559][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.560068][ T1430] kthread+0x370/0x450 [ 137.561378][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.562863][ T1430] ret_from_fork+0x72b/0xd50 [ 137.564417][ T1430] ? __pfx_ret_from_fork+0x10/0x10 [ 137.566125][ T1430] ? __switch_to+0x800/0x1100 [ 137.567701][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.569196][ T1430] ret_from_fork_asm+0x1a/0x30 [ 137.570745][ T1430] [ 137.571765][ T1430] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.574113][ T1430] CPU: 2 UID: 0 PID: 1430 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.577516][ T1430] Tainted: [L]=SOFTLOCKUP [ 137.578973][ T1430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.582157][ T1430] Call Trace: [ 137.583283][ T1430] [ 137.584279][ T1430] dump_stack_lvl+0x100/0x190 [ 137.585879][ T1430] vpanic+0x552/0x970 [ 137.587223][ T1430] ? __pfx_vpanic+0x10/0x10 [ 137.588731][ T1430] panic+0xd1/0xe0 [ 137.589987][ T1430] ? __pfx_panic+0x10/0x10 [ 137.591482][ T1430] ? check_panic_on_warn+0x1f/0x90 [ 137.593174][ T1430] check_panic_on_warn.cold+0x19/0x34 [ 137.594944][ T1430] ? lowpan_xmit+0xe84/0x1150 [ 137.596558][ T1430] __warn.cold+0x191/0x328 [ 137.598042][ T1430] __report_bug+0x296/0x3d0 [ 137.599563][ T1430] ? lowpan_xmit+0xe84/0x1150 [ 137.601126][ T1430] ? __pfx___report_bug+0x10/0x10 [ 137.602790][ T1430] ? stack_depot_save_flags+0x27/0x9d0 [ 137.604605][ T1430] ? __lock_acquire+0x4a5/0x2630 [ 137.606257][ T1430] ? kfree_skbmem+0x19a/0x210 [ 137.607863][ T1430] ? __kasan_slab_free+0x5f/0x80 [ 137.609522][ T1430] ? kmem_cache_free+0x127/0x6c0 [ 137.611203][ T1430] ? lowpan_xmit+0xe84/0x1150 [ 137.612737][ T1430] report_bug+0xb2/0x220 [ 137.614128][ T1430] ? lowpan_xmit+0xe84/0x1150 [ 137.615652][ T1430] handle_bug+0x16a/0x2a0 [ 137.617066][ T1430] exc_invalid_op+0x17/0x50 [ 137.618575][ T1430] asm_exc_invalid_op+0x1a/0x20 [ 137.620156][ T1430] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 137.621877][ T1430] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 c7 9f 17 fe e9 7c fc ff ff e8 dd 07 c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 cf 07 c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 137.627964][ T1430] RSP: 0000:ffffc9000775f8a0 EFLAGS: 00010293 [ 137.629897][ T1430] RAX: 0000000000000000 RBX: ffffc9000775f930 RCX: ffffffff8b40d6a6 [ 137.632408][ T1430] RDX: ffff888025030000 RSI: ffffffff8b40e003 RDI: ffff888025030000 [ 137.634899][ T1430] RBP: ffffc9000775fa40 R08: 0000000000000003 R09: 000000000000ffff [ 137.637424][ T1430] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888013b63c36 [ 137.639942][ T1430] R13: ffffc9000775f940 R14: ffff88802937ce50 R15: ffff888013b63b80 [ 137.642476][ T1430] ? lowpan_xmit+0x526/0x1150 [ 137.644035][ T1430] ? lowpan_xmit+0xe83/0x1150 [ 137.645546][ T1430] ? __pfx_lowpan_xmit+0x10/0x10 [ 137.647162][ T1430] ? skb_network_protocol+0x2ce/0x3d0 [ 137.648877][ T1430] ? lockdep_unlock+0x5a/0xc0 [ 137.650404][ T1430] ? dev_hard_start_xmit+0x128/0x7a0 [ 137.652093][ T1430] dev_hard_start_xmit+0x128/0x7a0 [ 137.653700][ T1430] __dev_queue_xmit+0x1baa/0x4950 [ 137.655340][ T1430] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 137.657263][ T1430] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.659016][ T1430] ? __lock_acquire+0x4a5/0x2630 [ 137.660627][ T1430] ? ref_tracker_free+0x37e/0x6c0 [ 137.662189][ T1430] ? do_raw_spin_lock+0x128/0x260 [ 137.663806][ T1430] ? find_held_lock+0x2b/0x80 [ 137.665363][ T1430] ? skb_dequeue+0x126/0x180 [ 137.666858][ T1430] ? skb_dequeue+0x126/0x180 [ 137.668414][ T1430] ? find_held_lock+0x2b/0x80 [ 137.669923][ T1430] ? tx+0xa4/0x130 [ 137.671123][ T1430] ? rcu_is_watching+0x12/0xc0 [ 137.672635][ T1430] ? __pfx_tx+0x10/0x10 [ 137.673989][ T1430] tx+0xc4/0x130 [ 137.675161][ T1430] kthread+0x1d8/0x3c0 [ 137.676479][ T1430] ? __kthread_parkme+0xbb/0x230 [ 137.678046][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.679553][ T1430] ? rcu_is_watching+0x12/0xc0 [ 137.681073][ T1430] ? __pfx_default_wake_function+0x10/0x10 [ 137.682915][ T1430] ? __kthread_parkme+0x18c/0x230 [ 137.684696][ T1430] ? kthread+0x13a/0x450 [ 137.686101][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.687574][ T1430] kthread+0x370/0x450 [ 137.688886][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.690344][ T1430] ret_from_fork+0x72b/0xd50 [ 137.691826][ T1430] ? __pfx_ret_from_fork+0x10/0x10 [ 137.693497][ T1430] ? __switch_to+0x800/0x1100 [ 137.695084][ T1430] ? __pfx_kthread+0x10/0x10 [ 137.696587][ T1430] ret_from_fork_asm+0x1a/0x30 [ 137.698105][ T1430] [ 137.699717][ T1430] Kernel Offset: disabled [ 137.701121][ T1430] Rebooting in 86400 seconds..