last executing test programs: 4m15.846437662s ago: executing program 1 (id=8170): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x4844) 4m15.842896985s ago: executing program 1 (id=8173): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x8201) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0xfffffffd, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x8, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xd, 0x1d, "cd218b3132a4d4ae906ce16bdba23ec34356ef960143942fd48b868aeed5780feb4c5d8df7a0480155f5e5ec4600b09743f77e7db3e15d38762baf2969c0eed8", "27202f4e8495c391f89003f6da5cdf09b24610d2caeb4751575376a1fe4db4ea01027560bd30d0b7b5bb16610056bdeb5f91064b0b8f5e58ad60e5f4920f770c", "e5c5ff20ea69cb79a04070464e59ee98d887b65307afe1d944bbf3f713dbf5dc", [0x100000001, 0x56dcb862]}}) 4m15.762891897s ago: executing program 1 (id=8174): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="b702000024000080bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadcb74220e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807909727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d658eec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3d1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cb471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7ff40007ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e64dcb0d0d57d5aeae626d2700608bb283800000000008a4c26b16213f0d9d7c3c57413b1e5895c9c12259519274ca8fd3bce804c8176a297f28add10956f3aaa3db687abcc17d326fd3674b7680206e875332b82c1de5ff793f6971d98c787c6daef28f66b542f08eeb6c82fbe03a3dc625bddf98d2a200c94065db5d5414361a785ff39392d9b1c870d8a2287af0ee98231100efa30652f2dd84da00970b5d209c623b26770258fcf63690f17cce7a78aeba7f6cbc4c143f48b1d0a10afdc93eaaff72e6622fd4da72ca7b30cd30b568599a6b44a2dee51985d802ed8088391a6717c4d97"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b907ef19ed087d08a6d30704be0f", 0x0, 0x6003, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m15.693074223s ago: executing program 1 (id=8178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 4m15.69258318s ago: executing program 1 (id=8180): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0xfffffffd, "340b788cced600000000000000800000002300", 0xffffffffffffffff}) ppoll(&(0x7f0000000340)=[{r0, 0x5}, {r1, 0x208}], 0x2, 0x0, 0x0, 0x0) 4m15.383179758s ago: executing program 1 (id=8192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 4m15.331278418s ago: executing program 32 (id=8192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1m44.081505168s ago: executing program 4 (id=13870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, r1, 0xc730c779156eaf0f, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4004010) 1m44.080938584s ago: executing program 4 (id=13872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 1m44.000608231s ago: executing program 4 (id=13874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000000100000000000000014100000018001700000000001e5073060bac4f44c5364380746e6c"], 0x34}}, 0x0) 1m43.995172576s ago: executing program 4 (id=13882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 1m43.359921647s ago: executing program 4 (id=13877): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 1m43.285597764s ago: executing program 4 (id=13879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1m28.222667779s ago: executing program 33 (id=13879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1m8.226013677s ago: executing program 5 (id=14710): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000002240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) 1m8.148654508s ago: executing program 5 (id=14711): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m8.146137285s ago: executing program 5 (id=14714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 1m7.240828713s ago: executing program 5 (id=14735): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m7.212372378s ago: executing program 5 (id=14736): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 1m6.949882141s ago: executing program 5 (id=14740): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x20000004) 1m6.898142224s ago: executing program 34 (id=14740): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x20000004) 33.287941406s ago: executing program 6 (id=15819): r0 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6853, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 33.287693761s ago: executing program 6 (id=15821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x20, r1, 0x901, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 33.246269928s ago: executing program 6 (id=15823): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee00) keyctl$chown(0x4, r0, 0x0, 0x0) 33.18922311s ago: executing program 6 (id=15825): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x6) 33.187455912s ago: executing program 6 (id=15828): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 33.14946191s ago: executing program 6 (id=15830): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @address_request={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 17.651072378s ago: executing program 35 (id=15830): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @address_request={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.557029409s ago: executing program 2 (id=16187): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2.490324356s ago: executing program 2 (id=16189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0xe0000}, {0x80000001, 0x2, 0x0, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 1.730621609s ago: executing program 2 (id=16195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.644245637s ago: executing program 2 (id=16197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x0, 0x10000}]}) 1.531758864s ago: executing program 2 (id=16201): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.469395089s ago: executing program 3 (id=16203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x1c, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.469106904s ago: executing program 3 (id=16204): r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) 1.299106492s ago: executing program 3 (id=16207): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c2, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.224616725s ago: executing program 2 (id=16210): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1.013884962s ago: executing program 7 (id=16213): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 950.469494ms ago: executing program 7 (id=16215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000100)) 814.962589ms ago: executing program 0 (id=16217): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, 0x0) 812.765582ms ago: executing program 7 (id=16218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 812.190551ms ago: executing program 0 (id=16219): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x2, 0x2, 0x2, 0x6, 0x4ce, 0xff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 738.907751ms ago: executing program 7 (id=16220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 738.715986ms ago: executing program 0 (id=16221): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000340)=[{r0, 0x2429}], 0x1, 0x400) shutdown(r0, 0x0) 649.52287ms ago: executing program 0 (id=16222): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) 649.345931ms ago: executing program 0 (id=16223): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a", 0xf, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100000014000300"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 430.224331ms ago: executing program 3 (id=16224): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x2014, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x0, 0x0) 429.92939ms ago: executing program 3 (id=16225): syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004084) 330.21966ms ago: executing program 3 (id=16226): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f0000000380)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@align=0x8, {0xfffd, 0xd5e, 0x6, 0xd20}}, 0x3, 0x0, 0x0}, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 97.890726ms ago: executing program 0 (id=16227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000013c0)) 97.631865ms ago: executing program 7 (id=16228): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="1c003080180001800800010000000080060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 7 (id=16229): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x10005c9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 0s ago: executing program 0 (id=16231): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): 40 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.086703][ T40] audit: type=1326 audit(2000000117.119:28862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 315.093380][ T40] audit: type=1326 audit(2000000117.119:28863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.100299][ T40] audit: type=1326 audit(2000000117.119:28864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.110920][ T40] audit: type=1326 audit(2000000117.119:28865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.124182][ T40] audit: type=1326 audit(2000000117.119:28866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.130829][ T40] audit: type=1326 audit(2000000117.119:28867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4041 comm="syz.4.13100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 315.265208][ T4065] __nla_validate_parse: 1 callbacks suppressed [ 315.265225][ T4065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13109'. [ 315.610103][ T4127] netlink: 'syz.2.13122': attribute type 3 has an invalid length. [ 315.613788][ T4127] netlink: 'syz.2.13122': attribute type 1 has an invalid length. [ 315.616826][ T4127] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13122'. [ 315.771777][ T4137] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 315.805098][ T5750] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 316.180509][ T4153] netlink: 'syz.4.13132': attribute type 7 has an invalid length. [ 316.183379][ T4153] netlink: 'syz.4.13132': attribute type 8 has an invalid length. [ 316.623630][ T1338] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 316.783820][ T1338] usb 7-1: Using ep0 maxpacket: 32 [ 316.787928][ T1338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 316.795386][ T1338] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 316.801427][ T1338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 110, changing to 10 [ 316.805556][ T1338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 58582, setting to 1024 [ 316.811479][ T1338] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 316.820254][ T1338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.822948][ T1338] usb 7-1: Product: syz [ 316.822959][ T1338] usb 7-1: Manufacturer: syz [ 316.822967][ T1338] usb 7-1: SerialNumber: syz [ 316.826065][ T1338] usb 7-1: config 0 descriptor?? [ 316.835709][ T4168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.838657][ T1338] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input52 [ 317.053577][ T39] usb 7-1: USB disconnect, device number 23 [ 317.053711][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 317.171489][ T4217] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.263031][ T4217] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.346051][ T4217] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.450108][ T4217] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.593390][ T1156] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.603247][ T1156] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.613640][ T1156] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.621569][ T1156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.781426][ T4271] netlink: 116 bytes leftover after parsing attributes in process `syz.2.13166'. [ 317.820265][ T4279] random: crng reseeded on system resumption [ 318.118955][ T4325] netlink: 47 bytes leftover after parsing attributes in process `syz.2.13187'. [ 318.121712][ T4325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13187'. [ 318.153849][ T842] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 318.228172][ T4340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13192'. [ 318.270346][ T4344] atomic_op ffff8880505bb998 conn xmit_atomic 0000000000000000 [ 318.304084][ T842] usb 8-1: Using ep0 maxpacket: 8 [ 318.310849][ T842] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 318.316124][ T842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.320530][ T842] usb 8-1: Product: syz [ 318.321915][ T842] usb 8-1: Manufacturer: syz [ 318.323373][ T842] usb 8-1: SerialNumber: syz [ 318.329453][ T842] usb 8-1: config 0 descriptor?? [ 318.333994][ T842] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 318.336641][ T842] dvb-usb: bulk message failed: -22 (2/0) [ 318.345770][ T842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.349694][ T842] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 318.352531][ T842] usb 8-1: media controller created [ 318.372451][ T842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.485508][ T4370] autofs: Bad value for 'fd' [ 318.537164][ T4379] 9p: p9: multiple sources not supported [ 318.559714][ T4292] dvb-usb: bulk message failed: -22 (4/0) [ 318.566967][ T842] cxusb: set interface failed [ 318.569017][ T842] dvb-usb: bulk message failed: -22 (1/0) [ 318.619090][ T842] DVB: Unable to find symbol mt352_attach() [ 318.620981][ T842] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 318.703566][ T842] rc_core: IR keymap rc-dvico-portable not found [ 318.705850][ T842] Registered IR keymap rc-empty [ 318.708743][ T842] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 318.716022][ T842] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input53 [ 318.720936][ T842] dvb-usb: schedule remote query interval to 100 msecs. [ 318.723288][ T842] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 318.730296][ T842] usb 8-1: USB disconnect, device number 21 [ 318.778304][ T842] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 318.779226][ T4398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.798489][ T4426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13217'. [ 318.895284][ T4439] bond0: Device is already in use. [ 318.926249][ T4398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.028062][ T4398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.158666][ T4398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.200116][ T4461] blktrace: Concurrent blktraces are not allowed on sg0 [ 319.276915][ T1199] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.282912][ T1199] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.291394][ T1199] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.296763][ T1199] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.305002][ T4471] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 319.437820][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13236'. [ 319.505511][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13240'. [ 319.617722][ T4505] binder_alloc: binder_alloc_mmap_handler: 4503 80ffd000-81000000 already mapped failed -16 [ 319.804357][ T4527] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 319.806888][ T4527] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.833681][ T5750] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 319.841409][ T5750] Bluetooth: hci0: Injecting HCI hardware error event [ 319.847391][ T5750] Bluetooth: hci0: hardware error 0x00 [ 319.941532][ T4550] syz.0.13257: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.948383][ T4550] CPU: 0 UID: 0 PID: 4550 Comm: syz.0.13257 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.948412][ T4550] Tainted: [L]=SOFTLOCKUP [ 319.948418][ T4550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.948427][ T4550] Call Trace: [ 319.948458][ T4550] [ 319.948465][ T4550] dump_stack_lvl+0x100/0x190 [ 319.948493][ T4550] warn_alloc.cold+0x95/0x1c1 [ 319.948515][ T4550] ? __pfx_warn_alloc+0x10/0x10 [ 319.948545][ T4550] ? __pfx___might_resched+0x10/0x10 [ 319.948573][ T4550] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 319.948603][ T4550] ? __lock_acquire+0x4a5/0x2630 [ 319.948621][ T4550] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 319.948642][ T4550] ? find_held_lock+0x2b/0x80 [ 319.948668][ T4550] ? find_held_lock+0x2b/0x80 [ 319.948685][ T4550] ? aa_file_perm+0x7e4/0x14d0 [ 319.948709][ T4550] ? aa_file_perm+0x7e4/0x14d0 [ 319.948731][ T4550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.948756][ T4550] ? policy_nodemask+0xed/0x4f0 [ 319.948776][ T4550] alloc_pages_mpol+0x1fb/0x540 [ 319.948794][ T4550] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 319.948817][ T4550] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 319.948837][ T4550] ___kmalloc_large_node+0xe5/0x120 [ 319.948858][ T4550] __kmalloc_large_node_noprof+0x1c/0x70 [ 319.948879][ T4550] __kmalloc_noprof+0x5be/0x850 [ 319.948897][ T4550] qrtr_tun_write_iter+0xc1/0x1b0 [ 319.948917][ T4550] aio_write+0x3ba/0x920 [ 319.948944][ T4550] ? __pfx_aio_write+0x10/0x10 [ 319.948962][ T4550] ? __lock_acquire+0x4a5/0x2630 [ 319.948989][ T4550] ? __might_fault+0xc5/0x140 [ 319.949017][ T4550] ? io_submit_one+0x1142/0x1fb0 [ 319.949036][ T4550] io_submit_one+0x1142/0x1fb0 [ 319.949059][ T4550] ? __lock_acquire+0x4a5/0x2630 [ 319.949078][ T4550] ? __pfx_io_submit_one+0x10/0x10 [ 319.949146][ T4550] ? __might_fault+0xc5/0x140 [ 319.949173][ T4550] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 319.949198][ T4550] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 319.949224][ T4550] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 319.949246][ T4550] ? xfd_validate_state+0x129/0x190 [ 319.949270][ T4550] ? rcu_is_watching+0x12/0xc0 [ 319.949294][ T4550] __do_fast_syscall_32+0xe7/0x950 [ 319.949315][ T4550] do_fast_syscall_32+0x32/0x70 [ 319.949332][ T4550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.949355][ T4550] RIP: 0023:0xf702ef7c [ 319.949367][ T4550] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 319.949383][ T4550] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 319.949425][ T4550] RAX: ffffffffffffffda RBX: 00000000f7f5d000 RCX: 0000000000000001 [ 319.949437][ T4550] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.949446][ T4550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.949454][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.949463][ T4550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.949482][ T4550] [ 319.949488][ T4550] Mem-Info: [ 320.050508][ T4550] active_anon:659 inactive_anon:624 isolated_anon:0 [ 320.050508][ T4550] active_file:3068 inactive_file:7548 isolated_file:0 [ 320.050508][ T4550] unevictable:1768 dirty:448 writeback:0 [ 320.050508][ T4550] slab_reclaimable:6949 slab_unreclaimable:72111 [ 320.050508][ T4550] mapped:21914 shmem:1774 pagetables:1820 [ 320.050508][ T4550] sec_pagetables:327 bounce:0 [ 320.050508][ T4550] kernel_misc_reclaimable:0 [ 320.050508][ T4550] free:66391 free_pcp:591 free_cma:0 [ 320.064043][ T4550] Node 0 active_anon:664kB inactive_anon:0kB active_file:1816kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:24kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8940kB pagetables:1284kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.074254][ T4550] Node 1 active_anon:1972kB inactive_anon:2496kB active_file:10456kB inactive_file:30176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87528kB dirty:1768kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6720kB pagetables:6096kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.085203][ T4550] Node 0 DMA free:3172kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.094959][ T4550] lowmem_reserve[]: 0 285 285 285 285 [ 320.096667][ T4550] Node 0 DMA32 free:28636kB boost:12288kB min:25376kB low:28648kB high:31920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:664kB inactive_anon:0kB active_file:1816kB inactive_file:16kB unevictable:3536kB writepending:24kB zspages:1088kB present:1032196kB managed:292484kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:60kB free_cma:0kB [ 320.106623][ T4550] lowmem_reserve[]: 0 0 0 0 0 [ 320.108135][ T4550] Node 1 DMA32 free:229556kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1972kB inactive_anon:2496kB active_file:12956kB inactive_file:30176kB unevictable:3536kB writepending:1768kB zspages:5900kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:3588kB local_pcp:0kB free_cma:0kB [ 320.118165][ T4550] lowmem_reserve[]: 0 0 0 0 0 [ 320.119751][ T4550] Node 0 DMA: 101*4kB (UE) 34*8kB (UE) 20*16kB (UE) 14*32kB (UE) 3*64kB (UE) 2*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3172kB [ 320.126613][ T4550] Node 0 DMA32: 926*4kB (UME) 499*8kB (UME) 120*16kB (UME) 160*32kB (UME) 71*64kB (UME) 28*128kB (UME) 8*256kB (ME) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 28496kB [ 320.132723][ T4550] Node 1 DMA32: 5712*4kB (UME) 5799*8kB (UME) 4902*16kB (UME) 407*32kB (UME) 125*64kB (UME) 35*128kB (UM) 23*256kB (UM) 39*512kB (UM) 27*1024kB (UM) 0*2048kB 0*4096kB = 226680kB [ 320.140428][ T4550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.143879][ T4550] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 320.147198][ T4550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.150208][ T4550] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 320.153020][ T4550] 15446 total pagecache pages [ 320.154774][ T4550] 815 pages in swap cache [ 320.156110][ T4550] Free swap = 95672kB [ 320.157492][ T4550] Total swap = 124996kB [ 320.158801][ T4550] 524155 pages RAM [ 320.159960][ T4550] 0 pages HighMem/MovableOnly [ 320.161436][ T4550] 210141 pages reserved [ 320.162721][ T4550] 0 pages cma reserved [ 320.183552][ T842] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 320.210911][ T4567] netlink: 'syz.2.13265': attribute type 1 has an invalid length. [ 320.322279][ T4579] can0: slcan on ttyprintk. [ 320.335294][ T842] usb 8-1: Using ep0 maxpacket: 16 [ 320.342179][ T842] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 320.345811][ T842] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 320.350983][ T842] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 320.356600][ T842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.359702][ T842] usb 8-1: Product: syz [ 320.361375][ T842] usb 8-1: Manufacturer: syz [ 320.366775][ T842] usb 8-1: SerialNumber: syz [ 320.394639][ T4578] can0 (unregistered): slcan off ttyprintk. [ 320.578665][ T5526] usb 8-1: USB disconnect, device number 22 [ 320.612161][ T4632] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 320.739562][ T4645] CIFS mount error: No usable UNC path provided in device string! [ 320.739562][ T4645] [ 320.743122][ T4645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 320.773582][ T2314] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 320.924020][ T2314] usb 5-1: Using ep0 maxpacket: 32 [ 320.925894][ T2314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 320.925924][ T2314] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 320.925947][ T2314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 110, changing to 10 [ 320.925972][ T2314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 58582, setting to 1024 [ 320.927842][ T2314] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 320.927868][ T2314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.927888][ T2314] usb 5-1: Product: syz [ 320.927902][ T2314] usb 5-1: Manufacturer: syz [ 320.927914][ T2314] usb 5-1: SerialNumber: syz [ 320.930309][ T2314] usb 5-1: config 0 descriptor?? [ 320.964069][ T4616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.968301][ T2314] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input55 [ 321.010831][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.042837][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.047186][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.181056][ T5822] usb 5-1: USB disconnect, device number 28 [ 321.181115][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.196916][ T4683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.288302][ T4683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.367362][ T4683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.476623][ T4683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.555283][ T76] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.563274][ T76] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.572830][ T76] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.582099][ T76] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.844515][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.918541][ T5750] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 322.411686][ T4746] veth0_to_bond: entered allmulticast mode [ 322.658115][ T4767] tipc: Enabling of bearer rejected, failed to enable media [ 322.739556][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13335'. [ 322.858682][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13347'. [ 323.000183][ T4826] tipc: Enabling of bearer rejected, failed to enable media [ 323.016509][ T4831] batman_adv: batadv0: Adding interface: gretap1 [ 323.018601][ T4831] batman_adv: batadv0: Interface activated: gretap1 [ 323.103063][ T4849] CIFS: VFS: UNC: path must begin with // or \\ [ 323.105624][ T4849] CIFS: VFS: Malformed UNC in devname [ 323.262262][ T4883] program syz.4.13376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.592818][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13402'. [ 323.611304][ T4949] hpfs: Bad magic ... probably not HPFS [ 323.619220][ T4949] hpfs: hpfs_map_sector(): read error [ 323.720076][ T4968] tmpfs: Cannot disable swap on remount [ 323.761212][ T4975] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 324.017949][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13435'. [ 324.020986][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13435'. [ 324.026123][ T5023] netlink: 'syz.0.13435': attribute type 11 has an invalid length. [ 324.041747][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13421'. [ 324.277343][ T5067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13451'. [ 324.281209][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13451'. [ 325.124414][ T5119] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.150446][ T5124] IPVS: rr: FWM 3 0x00000003 - no destination available [ 325.689769][ T5206] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.704139][ T5204] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.767497][ T5216] netlink: 'syz.3.13503': attribute type 1 has an invalid length. [ 325.770068][ T5216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.829268][ T5225] netlink: 120 bytes leftover after parsing attributes in process `syz.2.13504'. [ 325.832527][ T5226] tmpfs: Too few inodes for current use [ 325.836040][ T5224] netlink: 276 bytes leftover after parsing attributes in process `syz.3.13506'. [ 325.869850][ T5232] ALSA: mixer_oss: invalid OSS volume '' [ 325.891369][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.899118][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.914352][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.928510][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 325.930979][ T39] rtc rtc0: __rtc_set_alarm: err=-22 [ 325.969666][ T5251] netlink: 'syz.2.13515': attribute type 2 has an invalid length. [ 326.094128][ T5886] kernel write not supported for file /input/mouse0 (pid: 5886 comm: kworker/1:4) [ 326.120600][ T5286] netlink: 'syz.2.13531': attribute type 13 has an invalid length. [ 326.123003][ T5286] netlink: 'syz.2.13531': attribute type 12 has an invalid length. [ 326.532665][ T5355] xt_socket: unknown flags 0xd0 [ 327.231602][ T5435] 9p: p9: multiple sources not supported [ 327.372624][ T5458] atomic_op ffff8880596cb198 conn xmit_atomic 0000000000000000 [ 327.669581][ T5494] IPVS: stopping backup sync thread 23134 ... [ 327.831488][ T5517] netlink: 'syz.4.13620': attribute type 1 has an invalid length. [ 327.868528][ T5522] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 327.882426][ T5524] tipc: Enabling not permitted [ 327.885278][ T5524] tipc: Enabling of bearer rejected, failed to enable media [ 327.904427][ T5527] can0: slcan on ttyprintk. [ 327.986045][ T5525] can0 (unregistered): slcan off ttyprintk. [ 328.017515][ T5752] IPVS: starting estimator thread 0... [ 328.113763][ T5547] IPVS: using max 44 ests per chain, 105600 per kthread [ 328.519595][ T5612] atomic_op ffff88806d5d5198 conn xmit_atomic 0000000000000000 [ 328.918305][ T5688] __nla_validate_parse: 11 callbacks suppressed [ 328.918323][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13678'. [ 329.001709][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.010345][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.014733][ T5703] batman_adv: batadv0: Interface deactivated: gretap1 [ 329.017747][ T5703] batman_adv: batadv0: Removing interface: gretap1 [ 329.733816][ T5886] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 329.823933][ T5752] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 329.883586][ T5886] usb 8-1: Using ep0 maxpacket: 32 [ 329.890265][ T5886] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 329.895279][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.899060][ T5886] usb 8-1: Product: syz [ 329.900961][ T5886] usb 8-1: Manufacturer: syz [ 329.902915][ T5886] usb 8-1: SerialNumber: syz [ 329.914360][ T5886] usb 8-1: config 0 descriptor?? [ 329.931096][ T5886] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 329.939120][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 329.948580][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 329.955756][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 329.960387][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 329.971064][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 329.977005][ T5886] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 329.980351][ T5886] usb 8-1: media controller created [ 329.991813][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.006951][ T5886] usb 8-1: selecting invalid altsetting 3 [ 330.008807][ T5886] ttusb2: set interface to alts=3 failed [ 330.032669][ T5886] DVB: Unable to find symbol tda10086_attach() [ 330.035146][ T5886] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 330.038765][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 330.040902][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 330.045584][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 330.047711][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 330.051484][ T5886] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 330.133246][ T5769] ttusb2: i2c wr len=133 too high [ 330.141086][ T5886] usb 8-1: USB disconnect, device number 23 [ 330.165682][ T5886] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 330.176131][ T5752] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 330.373618][ T5752] usb 9-1: Using ep0 maxpacket: 32 [ 330.377016][ T5752] usb 9-1: unable to get BOS descriptor or descriptor too short [ 330.380277][ T5752] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 330.382780][ T5752] usb 9-1: config 8 has no interface number 0 [ 330.384993][ T5752] usb 9-1: config 8 interface 188 has no altsetting 0 [ 330.389435][ T5752] usb 9-1: string descriptor 0 read error: -22 [ 330.391406][ T5752] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 330.394682][ T5752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.411327][ T5752] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 330.417382][ T5752] dw2102: su3000_power_ctrl: 1, initialized 0 [ 330.421710][ T5752] dvb-usb: bulk message failed: -22 (2/0) [ 330.427984][ T5752] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.434541][ T5752] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 330.437250][ T5752] usb 9-1: media controller created [ 330.438931][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.440749][ T5752] dw2102: i2c transfer failed. [ 330.442401][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.444605][ T5752] dw2102: i2c transfer failed. [ 330.446207][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.448046][ T5752] dw2102: i2c transfer failed. [ 330.449617][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.451589][ T5752] dw2102: i2c transfer failed. [ 330.453280][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.455568][ T5752] dw2102: i2c transfer failed. [ 330.457152][ T5752] dvb-usb: bulk message failed: -22 (6/0) [ 330.458920][ T5752] dw2102: i2c transfer failed. [ 330.460453][ T5752] dvb-usb: MAC address: 02:02:02:02:02:02 [ 330.467548][ T5752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.480426][ T5752] dvb-usb: bulk message failed: -22 (3/0) [ 330.482334][ T5752] dw2102: command 0x0e transfer failed. [ 330.484920][ T5752] dvb-usb: bulk message failed: -22 (3/0) [ 330.486792][ T5752] dw2102: command 0x0e transfer failed. [ 330.793551][ T5752] dvb-usb: bulk message failed: -22 (3/0) [ 330.795462][ T5752] dw2102: command 0x0e transfer failed. [ 330.797230][ T5752] dvb-usb: bulk message failed: -22 (3/0) [ 330.801931][ T5752] dw2102: command 0x0e transfer failed. [ 330.803870][ T5752] dvb-usb: bulk message failed: -22 (1/0) [ 330.805697][ T5752] dw2102: command 0x51 transfer failed. [ 330.840302][ T5832] dw2102: i2c wr: len=66 is too big! [ 330.840302][ T5832] [ 330.881713][ T5752] DVB: Unable to find symbol ds3000_attach() [ 330.884006][ T5752] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 330.933760][ T5752] rc_core: IR keymap rc-su3000 not found [ 330.935838][ T5752] Registered IR keymap rc-empty [ 330.939943][ T5752] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 330.945599][ T5752] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input57 [ 330.954843][ T5752] dvb-usb: schedule remote query interval to 150 msecs. [ 330.957118][ T5752] dw2102: su3000_power_ctrl: 0, initialized 1 [ 330.958780][ T5752] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 330.967044][ T5752] usb 9-1: USB disconnect, device number 10 [ 330.967817][ T5786] Set syz1 is full, maxelem 65536 reached [ 331.005835][ T5752] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 331.516493][ T5940] netlink: 'syz.4.13724': attribute type 7 has an invalid length. [ 331.519861][ T5940] netlink: 'syz.4.13724': attribute type 8 has an invalid length. [ 331.522439][ T5943] netlink: 'syz.2.13733': attribute type 58 has an invalid length. [ 331.526519][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13733'. [ 331.758146][ T5978] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 331.911544][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.912327][ T6004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13743'. [ 331.920293][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.951030][ T6012] pim6reg99999999: entered allmulticast mode [ 331.974636][ T5993] lo speed is unknown, defaulting to 1000 [ 332.013902][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13751'. [ 332.064267][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 332.163778][ T6053] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.167153][ T6053] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.288523][ T6053] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.297588][ T6053] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.413119][ T6053] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.417334][ T6053] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.515865][ T6053] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.519131][ T6053] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.647803][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13775'. [ 332.719700][ T76] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.726601][ T76] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.757897][ T76] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.775963][ T76] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.867299][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.872282][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.877423][ T1199] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.893550][ T1199] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.898162][ T6094] lo speed is unknown, defaulting to 1000 [ 332.994164][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 333.191243][ T6175] program syz.3.13794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.213784][ T5886] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 333.282696][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13796'. [ 333.376501][ T5886] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 333.379030][ T5886] usb 5-1: config 0 has no interface number 0 [ 333.382512][ T5886] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 333.389037][ T5886] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.394354][ T5886] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 333.398507][ T5886] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 333.401369][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 333.403946][ T5886] usb 5-1: Product: syz [ 333.405494][ T5886] usb 5-1: SerialNumber: syz [ 333.408409][ T5886] usb 5-1: config 0 descriptor?? [ 333.411798][ T5886] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 333.415680][ T5886] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input58 [ 333.482487][ T6181] lo speed is unknown, defaulting to 1000 [ 333.516961][ T6214] vivid-000: ================= START STATUS ================= [ 333.519933][ T6214] vivid-000: Test Pattern: 75% Colorbar [ 333.522057][ T6214] vivid-000: Fill Percentage of Frame: 5 [ 333.524168][ T6214] vivid-000: Horizontal Movement: No Movement [ 333.526307][ T6214] vivid-000: Vertical Movement: No Movement [ 333.528450][ T6214] vivid-000: OSD Text Mode: Counters Only [ 333.530911][ T6214] vivid-000: Show Border: true [ 333.532451][ T6214] vivid-000: Show Square: false [ 333.535943][ T6214] vivid-000: Sensor Flipped Horizontally: false [ 333.538811][ T6214] vivid-000: Sensor Flipped Vertically: false [ 333.540952][ T6214] vivid-000: Insert SAV Code in Image: true [ 333.543034][ T6214] vivid-000: Insert EAV Code in Image: true [ 333.547931][ T6214] vivid-000: Insert Video Guard Band: true [ 333.549659][ T6214] vivid-000: Reduced Framerate: false [ 333.562486][ T6214] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 333.565336][ T6214] vivid-000: S-Video 000-0 Is Connected To: None [ 333.567439][ T6214] vivid-000: Enable Capture Cropping: true grabbed [ 333.569386][ T6214] vivid-000: Enable Capture Composing: false grabbed [ 333.571426][ T6214] vivid-000: Enable Capture Scaler: false grabbed [ 333.573523][ T6214] vivid-000: Timestamp Source: Start of Exposure [ 333.575491][ T6214] vivid-000: Colorspace: Rec. 709 [ 333.577629][ T6214] vivid-000: Transfer Function: opRGB [ 333.579578][ T6214] vivid-000: Y'CbCr Encoding: xvYCC 709 [ 333.581312][ T6214] vivid-000: HSV Encoding: Hue 0-256 [ 333.582995][ T6214] vivid-000: Quantization: Limited Range [ 333.587996][ T6214] vivid-000: Apply Alpha To Red Only: true [ 333.589889][ T6214] vivid-000: Standard Aspect Ratio: 4x3 [ 333.593886][ T6214] vivid-000: DV Timings Signal Mode: Current DV Timings [ 333.596020][ T6214] vivid-000: DV Timings: 640x480p59 inactive [ 333.603738][ T6214] vivid-000: DV Timings Aspect Ratio: 4x3 [ 333.605544][ T6214] vivid-000: Maximum EDID Blocks: 2 [ 333.609230][ T6214] vivid-000: Limited RGB Range (16-235): true [ 333.611171][ T6214] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 333.613593][ T6214] vivid-000: Power Present: 0x00000001 [ 333.615288][ T6214] tpg source WxH: 1280x720 (Y'CbCr) [ 333.616914][ T6214] tpg field: 1 [ 333.617990][ T6214] tpg crop: (0,0)/1280x720 [ 333.619435][ T6214] tpg compose: (0,0)/1280x720 [ 333.620914][ T6214] tpg colorspace: 3 [ 333.622204][ T6214] tpg transfer function: 3/3 [ 333.625020][ T6214] tpg Y'CbCr encoding: 2/2 [ 333.628433][ T6214] tpg quantization: 1/1 [ 333.629880][ T6214] tpg RGB range: 2/1 [ 333.631172][ T6214] vivid-000: ================== END STATUS ================== [ 333.631748][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.638779][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.639902][ T6181] wlan0 speed is unknown, defaulting to 1000 [ 333.641242][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.649643][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.652608][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.655562][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.658497][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.661442][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.664714][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.667603][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.670251][ T5886] usb 5-1: USB disconnect, device number 29 [ 333.672161][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 333.686797][ T5886] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 333.859522][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13816'. [ 333.884686][ T6264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13816'. [ 334.636549][ T6330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13839'. [ 334.726706][ T6334] netlink: 'syz.4.13845': attribute type 5 has an invalid length. [ 334.755880][ T6318] lo speed is unknown, defaulting to 1000 [ 334.765480][ T6336] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 334.869300][ T6318] wlan0 speed is unknown, defaulting to 1000 [ 335.306555][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13862'. [ 335.370073][ T6406] tipc: Started in network mode [ 335.371728][ T6406] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 335.380463][ T6406] tipc: Enabled bearer , priority 5 [ 335.440514][ T40] audit: type=1326 audit(2000000137.479:28868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.448080][ T40] audit: type=1326 audit(2000000137.479:28869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.468914][ T40] audit: type=1326 audit(2000000137.479:28870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.493711][ T40] audit: type=1326 audit(2000000137.479:28871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.502341][ T40] audit: type=1326 audit(2000000137.479:28872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.513778][ T40] audit: type=1326 audit(2000000137.479:28873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.522155][ T40] audit: type=1326 audit(2000000137.489:28874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.529348][ T6390] lo speed is unknown, defaulting to 1000 [ 335.535308][ T40] audit: type=1326 audit(2000000137.489:28875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.3.13871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 335.680121][ T6390] wlan0 speed is unknown, defaulting to 1000 [ 336.385081][ T2314] tipc: Node number set to 1 [ 336.485521][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 336.983392][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13905'. [ 337.222771][ T40] audit: type=1326 audit(2000000139.259:28876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.13909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 337.230982][ T40] audit: type=1326 audit(2000000139.269:28877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.13909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 337.327347][ T6541] team0: Device is already in use. [ 337.440720][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13920'. [ 337.444710][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13920'. [ 337.448502][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13920'. [ 337.491971][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13921'. [ 337.495826][ T6553] netlink: 'syz.2.13921': attribute type 5 has an invalid length. [ 337.503073][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13921'. [ 337.575634][ T6559] IPVS: persistence engine module ip_vs_pe_sir not found [ 337.830350][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13927'. [ 337.833272][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13927'. [ 338.406119][ T6589] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 338.511219][ T6596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 338.514175][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.521268][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 338.563811][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 338.567113][ T6598] vhci_hcd: connection closed [ 338.568965][ T1156] vhci_hcd vhci_hcd.2: stop threads [ 338.569773][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 338.570991][ T1156] vhci_hcd vhci_hcd.2: release socket [ 338.578672][ T1156] vhci_hcd vhci_hcd.2: disconnect device [ 339.138607][ T6643] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 339.222280][ T54] hid (null): global environment stack underflow [ 339.237149][ T54] hid-generic 0002:0000:0000.0006: global environment stack underflow [ 339.240408][ T54] hid-generic 0002:0000:0000.0006: item 0 2 1 11 parsing failed [ 339.243096][ T54] hid-generic 0002:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 339.398243][ T6680] usb 1-1: USB disconnect, device number 2 [ 339.635187][ T6714] Cannot find set identified by id 0 to match [ 339.668918][ T6711] IPVS: persistence engine module ip_vs_pe_sir not found [ 340.873626][ T6751] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 340.873626][ T6751] program syz.0.13986 not setting count and/or reply_len properly [ 340.919217][ T6757] __nla_validate_parse: 2 callbacks suppressed [ 340.919230][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13989'. [ 340.988471][ T6763] netlink: 'syz.3.13993': attribute type 9 has an invalid length. [ 340.990980][ T6763] netlink: 'syz.3.13993': attribute type 7 has an invalid length. [ 340.994026][ T6763] netlink: 'syz.3.13993': attribute type 8 has an invalid length. [ 341.483259][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.486068][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.489769][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.492033][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.528408][ T6800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.552005][ T6800] veth0_to_batadv: entered promiscuous mode [ 341.555371][ T6800] veth0_to_batadv: entered allmulticast mode [ 341.559971][ T6800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.567156][ T6800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.577373][ T6800] 8021q: adding VLAN 0 to HW filter on device eth0 [ 341.581428][ T6800] 8021q: adding VLAN 0 to HW filter on device eth1 [ 341.588121][ T6800] 8021q: adding VLAN 0 to HW filter on device eth2 [ 341.592028][ T6800] 8021q: adding VLAN 0 to HW filter on device eth3 [ 341.602086][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.606611][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.610425][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.621660][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.989622][ T6845] IPVS: ip_vs_add_dest(): server weight less than zero [ 351.428590][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.436370][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.442478][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.447727][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.451344][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.624083][ T6892] tipc: Enabling of bearer rejected, failed to enable media [ 351.759011][ T76] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.877212][ T76] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.942675][ T6870] lo speed is unknown, defaulting to 1000 [ 351.972876][ T76] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.046880][ T76] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.064014][ T6870] wlan0 speed is unknown, defaulting to 1000 [ 352.242723][ T76] bridge_slave_1: left allmulticast mode [ 352.245194][ T76] bridge_slave_1: left promiscuous mode [ 352.251734][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.258715][ T76] bridge_slave_0: left allmulticast mode [ 352.261076][ T76] bridge_slave_0: left promiscuous mode [ 352.264083][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.528003][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.537393][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.542786][ T76] bond0 (unregistering): Released all slaves [ 352.627849][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.637039][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.640104][ T6870] bridge_slave_0: entered allmulticast mode [ 352.644235][ T6870] bridge_slave_0: entered promiscuous mode [ 352.648346][ T76] : left promiscuous mode [ 352.671615][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.674370][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.676960][ T6870] bridge_slave_1: entered allmulticast mode [ 352.682906][ T6870] bridge_slave_1: entered promiscuous mode [ 352.698732][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.703074][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.718992][ T6870] team0: Port device team_slave_0 added [ 352.722112][ T6870] team0: Port device team_slave_1 added [ 352.736482][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.738701][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.752008][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.756735][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.759218][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.767185][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.770884][ T76] : left promiscuous mode [ 352.824116][ T6870] hsr_slave_0: entered promiscuous mode [ 352.829010][ T6870] hsr_slave_1: entered promiscuous mode [ 352.833859][ T6870] debugfs: 'hsr0' already exists in 'hsr' [ 352.837847][ T6870] Cannot create hsr debugfs directory [ 352.877406][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 352.889540][ T76] tipc: Disabling bearer [ 352.894788][ T76] tipc: Left network mode [ 353.152747][ T1338] hid (null): global environment stack underflow [ 353.173952][ T1338] hid-generic 616F:20C2607D:F72986D9.0007: global environment stack underflow [ 353.177478][ T1338] hid-generic 616F:20C2607D:F72986D9.0007: item 0 1 1 11 parsing failed [ 353.182677][ T1338] hid-generic 616F:20C2607D:F72986D9.0007: probe with driver hid-generic failed with error -22 [ 353.243988][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 353.246366][ T6870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.252107][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.258658][ T6870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.264785][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.272310][ T6870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.279932][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.283713][ T6870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.289499][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.323032][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.326168][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.329412][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.332417][ T6870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.464072][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.476438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.480353][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.520295][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.522482][ T5750] Bluetooth: hci4: command tx timeout [ 353.531429][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 353.542035][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.545029][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.585531][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.588687][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.632618][ T7280] netlink: 'syz.3.14079': attribute type 2 has an invalid length. [ 353.846495][ T7303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.960901][ T76] hsr_slave_0: left promiscuous mode [ 353.966256][ T76] hsr_slave_1: left promiscuous mode [ 353.969540][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.972708][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.980544][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.983077][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.008923][ T76] veth1_macvtap: left promiscuous mode [ 354.013771][ T76] veth0_macvtap: left promiscuous mode [ 354.017619][ T76] veth1_vlan: left promiscuous mode [ 354.019839][ T76] veth0_vlan: left promiscuous mode [ 354.126477][ T76] pim6reg99999999 (unregistering): left allmulticast mode [ 354.232265][ T76] team0 (unregistering): Port device team_slave_1 removed [ 354.243795][ T76] team0 (unregistering): Port device team_slave_0 removed [ 354.319536][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 354.573668][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.602267][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14107'. [ 354.725508][ T7376] netlink: 'syz.0.14113': attribute type 3 has an invalid length. [ 354.737915][ T76] IPVS: stop unused estimator thread 0... [ 354.789534][ T6870] veth0_vlan: entered promiscuous mode [ 354.807731][ T6870] veth1_vlan: entered promiscuous mode [ 354.837697][ T6870] veth0_macvtap: entered promiscuous mode [ 354.852468][ T6870] veth1_macvtap: entered promiscuous mode [ 354.868467][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14118'. [ 354.874093][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.884878][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.900852][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.910552][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.920141][ T76] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.924597][ T76] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.079708][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.088407][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.121691][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.126006][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.594012][ T5750] Bluetooth: hci4: command tx timeout [ 355.941720][ T7496] loop0: detected capacity change from 0 to 7 [ 355.956573][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.958104][ T5526] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5526 comm: kworker/1:2) [ 355.959441][ C3] buffer_io_error: 22 callbacks suppressed [ 355.959450][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 355.968971][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.971841][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 355.977735][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.981130][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 355.989426][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.992459][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 355.995644][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.999347][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.002762][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.006558][ C3] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.010156][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.013895][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.017055][ T7496] ldm_validate_partition_table(): Disk read failed. [ 356.021844][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.025619][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.028446][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.031505][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.035766][ C2] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.038862][ C2] Buffer I/O error on dev loop0, logical block 0, async page read [ 356.050376][ T7496] Dev loop0: unable to read RDB block 0 [ 356.052964][ T7496] loop0: unable to read partition table [ 356.055529][ T7496] loop0: partition table beyond EOD, truncated [ 356.057711][ T7496] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 356.104649][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14163'. [ 356.505257][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14182'. [ 356.561813][ T7571] random: crng reseeded on system resumption [ 356.676967][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.832362][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14200'. [ 357.674877][ T5750] Bluetooth: hci4: command tx timeout [ 357.685249][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14210'. [ 357.746097][ T7643] gfs2: error -5 reading superblock [ 358.712435][ T7716] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.14237'. [ 358.775278][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14239'. [ 359.020428][ T7727] tmpfs: Cannot change global quota limit on remount [ 359.076215][ T7733] netlink: 'syz.5.14243': attribute type 4 has an invalid length. [ 359.079540][ T7733] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14243'. [ 359.250888][ T7766] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 359.253411][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.351716][ T7779] fuse: blksize only supported for fuseblk [ 359.462268][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14264'. [ 359.465723][ T7802] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 359.618456][ T7834] trusted_key: encrypted_key: key user:syz not found [ 359.764953][ T5750] Bluetooth: hci4: command tx timeout [ 359.931701][ T7883] syz.3.14294 (7883): drop_caches: 4 [ 360.420102][ T39] libceph: connect (1)[c::]:6789 error -22 [ 360.428447][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 360.446564][ T39] libceph: connect (1)[c::]:6789 error -22 [ 360.448710][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 360.717238][ T39] libceph: connect (1)[c::]:6789 error -22 [ 360.719879][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 361.114002][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14320'. [ 361.116902][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14320'. [ 361.216556][ T7909] ceph: No mds server is up or the cluster is laggy [ 361.237281][ T39] libceph: connect (1)[c::]:6789 error -22 [ 361.239767][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 361.255685][ T7975] can0: slcan on ptm0. [ 361.354522][ T7974] can0 (unregistered): slcan off ptm0. [ 361.591835][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14344'. [ 361.933090][ T8109] netlink: 208 bytes leftover after parsing attributes in process `syz.5.14367'. [ 362.107642][ T8118] lo speed is unknown, defaulting to 1000 [ 362.141515][ T8128] sch_tbf: burst 274 is lower than device lo mtu (65511) ! [ 362.219156][ T8118] wlan0 speed is unknown, defaulting to 1000 [ 362.421841][ T8189] netlink: 'syz.3.14387': attribute type 4 has an invalid length. [ 362.427477][ T8189] netlink: 240 bytes leftover after parsing attributes in process `syz.3.14387'. [ 362.549301][ T8208] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 362.551769][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.050751][ T54] libceph: connect (1)[c::]:6789 error -22 [ 363.050920][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 363.314019][ T54] libceph: connect (1)[c::]:6789 error -22 [ 363.320729][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 363.351209][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14412'. [ 363.715457][ T8298] netlink: 'syz.2.14426': attribute type 1 has an invalid length. [ 363.807631][ T8311] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 363.827637][ T54] libceph: connect (1)[c::]:6789 error -22 [ 363.830272][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 363.841874][ T8236] ceph: No mds server is up or the cluster is laggy [ 363.937743][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14436'. [ 363.940599][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14436'. [ 363.943508][ T8326] netlink: 'syz.0.14436': attribute type 13 has an invalid length. [ 364.035615][ T8348] tc_dump_action: action bad kind [ 364.150983][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14452'. [ 364.168143][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 364.498695][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14475'. [ 364.511349][ T8426] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 364.515220][ T8426] team0: Device ipvlan3 is already an upper device of the team interface [ 365.196674][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 365.196685][ T40] audit: type=1326 audit(2000000167.239:28885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.0.14497" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 366.083261][ T8535] overlayfs: regular lower layers cannot follow data lower layers [ 366.236438][ T40] audit: type=1800 audit(2000000168.279:28886): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14519" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 366.466765][ T8572] lo speed is unknown, defaulting to 1000 [ 366.574626][ T8572] wlan0 speed is unknown, defaulting to 1000 [ 366.576979][ T8596] qrtr: Invalid version 255 [ 367.788433][ T8815] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 367.902085][ T8798] lo speed is unknown, defaulting to 1000 [ 368.008631][ T8798] wlan0 speed is unknown, defaulting to 1000 [ 368.657161][ T8862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.041328][ T8917] program syz.3.14611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.045011][ T8917] ata1.00: non-matching transfer count (8388608/133) [ 369.267009][ T8944] netlink: 'syz.0.14621': attribute type 1 has an invalid length. [ 369.269617][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14621'. [ 369.273063][ T8944] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14621'. [ 369.278261][ T8944] netlink: 'syz.0.14621': attribute type 1 has an invalid length. [ 369.280754][ T8944] netlink: 634 bytes leftover after parsing attributes in process `syz.0.14621'. [ 369.461406][ T8973] netlink: 292 bytes leftover after parsing attributes in process `syz.3.14633'. [ 369.560099][ T8986] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14638'. [ 369.578157][ T8986] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14638'. [ 370.218022][ T40] audit: type=1326 audit(2000000172.259:28887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.5.14669" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x0 [ 370.255749][ T9083] PKCS7: Unknown OID: [5] (bad) [ 370.257352][ T9083] PKCS7: Only support pkcs7_signedData type [ 370.538975][ T9127] netlink: 'syz.2.14686': attribute type 7 has an invalid length. [ 370.542275][ T9127] netlink: 'syz.2.14686': attribute type 5 has an invalid length. [ 370.546882][ T9127] netlink: 17 bytes leftover after parsing attributes in process `syz.2.14686'. [ 370.670536][ T9118] lo speed is unknown, defaulting to 1000 [ 370.776905][ T9118] wlan0 speed is unknown, defaulting to 1000 [ 371.195255][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14704'. [ 371.406170][ T40] audit: type=1326 audit(2000000173.449:28888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.5.14714" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x0 [ 371.446513][ T9228] [U] V3Fپ"S/4:XTZWTLW= [ 371.449110][ T9228] [U] J"E:" [ 371.492891][ T9199] lo speed is unknown, defaulting to 1000 [ 371.542529][ T9234] block device autoloading is deprecated and will be removed. [ 371.593971][ T9199] wlan0 speed is unknown, defaulting to 1000 [ 371.609706][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14721'. [ 371.641007][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14722'. [ 372.154322][ T5750] Bluetooth: hci4: command tx timeout [ 372.520803][ T9309] [U] k [ 372.736903][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.739983][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.744119][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.747990][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.752236][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.973076][ T1159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.058175][ T9348] hfs: can't find a HFS filesystem on dev nbd3 [ 373.274888][ T1159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.612627][ T1159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.673326][ T9326] lo speed is unknown, defaulting to 1000 [ 373.846294][ T9384] netlink: 'syz.2.14765': attribute type 21 has an invalid length. [ 373.849169][ T9384] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.852028][ T9384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.857274][ T9384] IPv6: NLM_F_CREATE should be set when creating new route [ 373.859568][ T9384] IPv6: NLM_F_CREATE should be set when creating new route [ 373.861808][ T9384] IPv6: NLM_F_CREATE should be set when creating new route [ 373.866595][ T9384] netlink: 'syz.2.14765': attribute type 21 has an invalid length. [ 373.869097][ T9384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.949703][ T1159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.006117][ T9326] wlan0 speed is unknown, defaulting to 1000 [ 374.257985][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.261784][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.265042][ T9326] bridge_slave_0: entered allmulticast mode [ 374.269245][ T9326] bridge_slave_0: entered promiscuous mode [ 374.313009][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.317498][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.320604][ T9326] bridge_slave_1: entered allmulticast mode [ 374.324622][ T9326] bridge_slave_1: entered promiscuous mode [ 374.359958][ T9513] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 374.433799][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.438385][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.454969][ T9326] team0: Port device team_slave_0 added [ 374.793630][ T5739] Bluetooth: hci0: command tx timeout [ 374.824672][ T1159] bridge_slave_1: left allmulticast mode [ 374.827072][ T1159] bridge_slave_1: left promiscuous mode [ 374.829448][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.917481][ T1159] bridge_slave_0: left allmulticast mode [ 374.919882][ T1159] bridge_slave_0: left promiscuous mode [ 374.922346][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.037021][ T9578] program syz.3.14782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.457496][ T9591] __nla_validate_parse: 1 callbacks suppressed [ 375.457514][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14788'. [ 375.734751][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.803936][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.865576][ T1159] bond0 (unregistering): Released all slaves [ 375.905884][ T9326] team0: Port device team_slave_1 added [ 376.059292][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 376.107305][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.110604][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.118853][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.124101][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.127497][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.138955][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.173020][ T9326] hsr_slave_0: entered promiscuous mode [ 376.175757][ T9326] hsr_slave_1: entered promiscuous mode [ 376.177959][ T9326] debugfs: 'hsr0' already exists in 'hsr' [ 376.179827][ T9326] Cannot create hsr debugfs directory [ 376.531261][ T9745] program syz.3.14804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.600129][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 376.649892][ T9326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.677879][ T9326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.718713][ T9326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.747577][ T9326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.878130][ T9785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14810'. [ 376.883754][ T5739] Bluetooth: hci0: command tx timeout [ 377.069001][ T9326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.100316][ T9326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.112058][ T9326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.156880][ T9326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.160894][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 377.350018][ T9827] comedi comedi2: dac02: I/O base address or length out of range [ 377.458936][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.485569][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.489972][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.490019][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.496671][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.504805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.729083][ T9871] [U]  [ 377.754231][ T1159] hsr_slave_0: left promiscuous mode [ 377.803741][ T1159] hsr_slave_1: left promiscuous mode [ 377.806947][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.810513][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.836393][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.839292][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.905307][ T1159] veth1_macvtap: left promiscuous mode [ 377.907640][ T1159] veth0_macvtap: left promiscuous mode [ 377.909812][ T1159] veth1_vlan: left promiscuous mode [ 377.911811][ T1159] veth0_vlan: left promiscuous mode [ 378.584417][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 378.624779][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 378.765527][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 378.807915][ T9914] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 378.813819][ T9914] tipc: Enabled bearer , priority 5 [ 378.930772][ T9931] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 378.964013][ T5739] Bluetooth: hci0: command tx timeout [ 379.018686][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.074167][ T9948] netlink: 766 bytes leftover after parsing attributes in process `syz.3.14858'. [ 379.250556][ T9326] veth0_vlan: entered promiscuous mode [ 379.258834][ T9326] veth1_vlan: entered promiscuous mode [ 379.288355][ T9326] veth0_macvtap: entered promiscuous mode [ 379.297331][ T9326] veth1_macvtap: entered promiscuous mode [ 379.314123][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.319995][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.337488][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.341035][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.349354][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.414695][ T1199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.580798][T23826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.584439][T23826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.622250][T23826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.625647][T23826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.770018][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14881'. [ 379.847678][ T5887] tipc: Node number set to 4278190081 [ 380.310071][ T9999] kernel write not supported for file /amidi2 (pid: 9999 comm: kworker/1:0) [ 380.360821][ T40] audit: type=1326 audit(2000000182.399:28889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.14906" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 380.390977][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14908'. [ 380.562431][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14914'. [ 380.650220][T10137] comedi comedi3: unsupported base address 0x4f23 [ 381.034959][ T5739] Bluetooth: hci0: command tx timeout [ 381.104719][T10177] CUSE: unknown device info "" [ 381.106764][T10177] CUSE: unknown device info "" [ 381.108766][T10177] CUSE: unknown device info "" [ 381.110781][T10177] CUSE: unknown device info "" [ 381.112800][T10177] CUSE: unknown device info "" [ 381.115843][T10177] CUSE: unknown device info "" [ 381.118112][T10177] CUSE: unknown device info "" [ 381.120277][T10177] CUSE: unknown device info "" [ 381.122608][T10177] CUSE: unknown device info "" [ 381.126132][T10177] CUSE: unknown device info "" [ 381.128330][T10177] CUSE: unknown device info "" [ 381.130373][T10177] CUSE: unknown device info "r" [ 381.132431][T10177] CUSE: unknown device info "#" [ 381.135201][T10177] CUSE: unknown device info "" [ 381.137457][T10177] CUSE: unknown device info "" [ 381.139190][T10177] CUSE: unknown device info "" [ 381.141187][T10177] CUSE: DEVNAME unspecified [ 381.191119][T10183] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 382.013099][T10269] netlink: 'syz.2.14963': attribute type 1 has an invalid length. [ 382.016955][T10269] netlink: 'syz.2.14963': attribute type 2 has an invalid length. [ 382.020737][T10269] netlink: 'syz.2.14963': attribute type 2 has an invalid length. [ 382.450521][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14984'. [ 382.672401][T10356] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14996'. [ 382.675811][T10356] netlink: 43 bytes leftover after parsing attributes in process `syz.6.14996'. [ 382.678778][T10356] netlink: 'syz.6.14996': attribute type 5 has an invalid length. [ 382.681336][T10356] netlink: 43 bytes leftover after parsing attributes in process `syz.6.14996'. [ 383.058893][ T40] audit: type=1326 audit(2000000185.099:28890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.073651][ T40] audit: type=1326 audit(2000000185.099:28891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.082707][ T40] audit: type=1326 audit(2000000185.109:28892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.091360][ T40] audit: type=1326 audit(2000000185.109:28893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.099427][ T40] audit: type=1326 audit(2000000185.109:28894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.106586][ T40] audit: type=1326 audit(2000000185.109:28895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.2.15017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 383.216311][T10420] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15021'. [ 383.285746][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.446373][T10446] nbd: must specify a device to reconfigure [ 383.586065][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15037'. [ 384.214725][T10523] [U]  [ 384.216202][T10523] [U] K{ [ 384.217608][T10523] [U] T 1ŠFFˊ`GJǘGO/MC [ 384.220947][T10523] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 384.227129][T10523] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 384.234760][T10523] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 384.249715][T10523] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 384.258114][T10523] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 384.262923][T10523] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 384.270135][T10523] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 384.300954][T10523] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 384.304399][T10523] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 384.308780][T10523] [U] 22Ʃ۩X?0;3U [ 384.310978][T10523] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 384.320767][T10523] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 384.324199][T10523] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 384.327019][T10523] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 384.329127][T10523] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 384.333091][T10523] [U] EC [ 384.334637][T10523] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 384.360389][T10521] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 385.081251][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15098'. [ 385.091379][T10622] tipc: Invalid UDP bearer configuration [ 385.091424][T10622] tipc: Enabling of bearer rejected, failed to enable media [ 385.206498][T10645] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 385.209529][T10645] ALSA: mixer_oss: invalid index 137438 [ 385.364030][T10665] netlink: 'syz.0.15111': attribute type 1 has an invalid length. [ 385.366531][T10665] nbd: error processing sock list [ 385.429356][ T40] audit: type=1326 audit(2000000187.469:28896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.454755][ T40] audit: type=1326 audit(2000000187.469:28897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.464410][ T40] audit: type=1326 audit(2000000187.469:28898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.479626][ T40] audit: type=1326 audit(2000000187.469:28899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.488258][ T40] audit: type=1326 audit(2000000187.469:28900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.497328][ T40] audit: type=1326 audit(2000000187.469:28901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.504190][ T40] audit: type=1326 audit(2000000187.469:28902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.510994][ T40] audit: type=1326 audit(2000000187.469:28903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.520649][ T40] audit: type=1326 audit(2000000187.469:28904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.527775][ T40] audit: type=1326 audit(2000000187.469:28905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.3.15115" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 385.876731][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15130'. [ 386.229275][T10761] openvswitch: netlink: IP tunnel dst address not specified [ 386.231695][T10761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.472054][T10776] lo speed is unknown, defaulting to 1000 [ 386.550187][T10776] wlan0 speed is unknown, defaulting to 1000 [ 386.716181][T10819] Bluetooth: MGMT ver 1.23 [ 386.770857][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15163'. [ 386.776262][T10824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15163'. [ 387.031775][T10860] xt_l2tp: v2 sid > 0xffff: 1114112 [ 387.443043][T10894] can0: slcan on ptm0. [ 387.469247][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15188'. [ 387.605914][T10892] can0 (unregistered): slcan off ptm0. [ 387.913805][ T5750] Bluetooth: hci0: command 0x0405 tx timeout [ 387.927945][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15208'. [ 388.092174][T10983] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15214'. [ 388.289122][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.367102][T11030] kAFS: unable to lookup cell 'syz1' [ 388.369584][T11030] kAFS: unable to lookup cell 'syz1' [ 388.405711][T11035] netlink: 'syz.2.15229': attribute type 4 has an invalid length. [ 388.408212][T11035] netlink: 17 bytes leftover after parsing attributes in process `syz.2.15229'. [ 389.420850][T11083] xt_l2tp: invalid flags combination: 0 [ 389.518045][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15255'. [ 389.695565][T11113] macvtap1: entered allmulticast mode [ 389.697572][T11113] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 389.700166][T11113] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 389.700509][T11115] usb usb3: usbfs: process 11115 (syz.2.15260) did not claim interface 0 before use [ 389.705924][T11113] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 389.784548][T11113] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 389.964487][ T54] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 390.805327][ T5909] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 390.860843][T11244] Invalid ELF header len 9 [ 390.973672][ T5909] usb 11-1: Using ep0 maxpacket: 16 [ 390.987632][ T5909] usb 11-1: unable to get BOS descriptor or descriptor too short [ 390.994233][ T5909] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 390.997479][ T5909] usb 11-1: can't read configurations, error -71 [ 392.660578][ T9592] IPVS: starting estimator thread 0... [ 392.714129][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 392.714142][ T40] audit: type=1326 audit(2000000194.759:28918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.3.15334" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3f7c code=0x0 [ 392.744261][T11369] IPVS: using max 44 ests per chain, 105600 per kthread [ 392.755275][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15335'. [ 394.508367][T11498] netlink: 'syz.2.15366': attribute type 1 has an invalid length. [ 394.511808][T11498] netlink: 'syz.2.15366': attribute type 2 has an invalid length. [ 394.516412][T11498] netlink: 'syz.2.15366': attribute type 1 has an invalid length. [ 394.519195][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15366'. [ 394.676166][T11507] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 0, 0, 4) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 394.876272][T11541] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 395.238930][T11565] netlink: 212372 bytes leftover after parsing attributes in process `syz.2.15394'. [ 395.242082][T11565] openvswitch: netlink: Message has 6 unknown bytes. [ 395.666810][T11627] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15417'. [ 395.673038][T11629] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 395.914553][ T5750] Bluetooth: hci0: command 0x0405 tx timeout [ 396.003861][ T9999] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 396.164491][ T9999] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 396.180621][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.190461][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.203508][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.208482][ T40] audit: type=1326 audit(2000000198.249:28919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.210767][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.225445][ T40] audit: type=1326 audit(2000000198.259:28920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.226456][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.235376][ T40] audit: type=1326 audit(2000000198.259:28921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.242739][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.245091][ T40] audit: type=1326 audit(2000000198.269:28922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.247918][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.253766][ T40] audit: type=1326 audit(2000000198.269:28923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.256774][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.263168][ T40] audit: type=1326 audit(2000000198.269:28924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.266986][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.273084][ T40] audit: type=1326 audit(2000000198.269:28925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.276664][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.283009][ T40] audit: type=1326 audit(2000000198.269:28926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.15439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 396.286119][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.298301][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.299087][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.304379][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.307812][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.311148][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.315145][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.318770][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.321629][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.325052][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.328574][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.332213][ T9999] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.336583][ T9999] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.341541][ T9999] usb 11-1: config 0 interface 0 has no altsetting 0 [ 396.347367][ T9999] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 396.351472][ T9999] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 396.355904][ T9999] usb 11-1: Product: syz [ 396.357412][ T9999] usb 11-1: Manufacturer: syz [ 396.358947][ T9999] usb 11-1: SerialNumber: syz [ 396.362222][ T9999] usb 11-1: config 0 descriptor?? [ 396.372160][ T9999] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 396.643283][T11740] devpts: Bad value for 'max' [ 396.702360][T11748] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.848857][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15460'. [ 396.924294][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15463'. [ 397.089086][T11791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.145636][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.428835][T11834] tipc: Disabling bearer [ 397.579655][T11850] tipc: Enabling of bearer rejected, failed to enable media [ 397.694204][T11863] dvmrp1: entered allmulticast mode [ 397.703022][T11862] dvmrp1: left allmulticast mode [ 398.124267][T11897] bridge0: Device is already in use. [ 398.634303][ C1] usb 11-1: yurex_control_callback - control failed: -2 [ 398.638190][ T5909] usb 11-1: USB disconnect, device number 4 [ 398.647364][ T5909] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 398.909289][T11974] syz.3.15535 (11974) used greatest stack depth: 18936 bytes left [ 399.059548][T12017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15552'. [ 399.089742][T12019] program syz.2.15553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.115214][T12022] bridge_slave_0: invalid flags given to default FDB implementation [ 399.229314][T12042] EXT4-fs: Conflicting test_dummy_encryption options [ 399.447495][ T40] audit: type=1326 audit(2000000201.489:28927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.456389][ T40] audit: type=1326 audit(2000000201.489:28928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.465382][ T40] audit: type=1326 audit(2000000201.489:28929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 399.483610][ T40] audit: type=1326 audit(2000000201.489:28930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.507651][ T40] audit: type=1326 audit(2000000201.489:28931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.516868][ T40] audit: type=1326 audit(2000000201.489:28932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.523888][ T40] audit: type=1326 audit(2000000201.489:28933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 399.530506][ T40] audit: type=1326 audit(2000000201.489:28934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.540626][ T40] audit: type=1326 audit(2000000201.489:28935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 399.549502][ T40] audit: type=1326 audit(2000000201.509:28936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.0.15569" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 400.035935][T12069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15573'. [ 401.093748][ T5909] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 401.259409][ T5909] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 401.268356][ T5909] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 401.273994][ T5909] usb 11-1: Product: syz [ 401.275807][ T5909] usb 11-1: Manufacturer: syz [ 401.280105][ T5909] usb 11-1: SerialNumber: syz [ 401.293218][ T5909] usb 11-1: config 0 descriptor?? [ 401.298670][ T5909] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 401.301807][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 401.307191][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.312060][ T54] hid_parser_main: 24 callbacks suppressed [ 401.312073][ T54] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 401.312874][ T5909] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 401.320619][ T5909] usb 11-1: media controller created [ 401.323269][ T54] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 401.343915][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.356582][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15622'. [ 401.359591][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15622'. [ 401.359677][T12222] fido_id[12222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 401.362471][T12226] netlink: 'syz.2.15622': attribute type 7 has an invalid length. [ 401.505424][T12187] cxusb: i2c rd: len=108 is too big! [ 401.505424][T12187] [ 401.508338][ T5909] cxusb: set interface failed [ 401.511700][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 401.536575][ T5909] DVB: Unable to find symbol mt352_attach() [ 401.538476][ T5909] dvb-usb: bulk message failed: -22 (5/0) [ 401.540735][ T5909] zl10353_read_register: readreg error (reg=127, ret==-121) [ 401.543058][ T5909] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 401.593578][ T5909] rc_core: IR keymap rc-dvico-mce not found [ 401.595494][ T5909] Registered IR keymap rc-empty [ 401.598612][ T5909] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 401.603047][ T5909] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input61 [ 401.608503][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 401.610716][ T5909] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 401.621515][ T5909] usb 11-1: USB disconnect, device number 5 [ 401.719903][ T5909] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 401.802263][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15631'. [ 401.877641][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15635'. [ 401.881039][T12283] netlink: 'syz.0.15635': attribute type 5 has an invalid length. [ 401.883856][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15635'. [ 401.890781][T12283] geneve3: entered promiscuous mode [ 401.892552][T12283] geneve3: entered allmulticast mode [ 401.895470][ T46] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 401.898206][ T46] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 401.900842][ T46] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 401.903360][ T46] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 402.243128][T12308] lo speed is unknown, defaulting to 1000 [ 402.385286][T12308] wlan0 speed is unknown, defaulting to 1000 [ 402.414704][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15654'. [ 402.506582][T12340] veth3: entered promiscuous mode [ 403.129925][T12475] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15675'. [ 403.133607][T12475] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15675'. [ 403.729589][T12553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.158427][T12613] __nla_validate_parse: 4 callbacks suppressed [ 404.158440][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15718'. [ 404.391750][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15728'. [ 404.397916][T12649] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15728'. [ 404.817414][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 404.817431][ T40] audit: type=1326 audit(2000000206.859:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.831922][ T40] audit: type=1326 audit(2000000206.859:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.838558][ T40] audit: type=1326 audit(2000000206.869:28949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.845933][ T40] audit: type=1326 audit(2000000206.869:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.855119][ T40] audit: type=1326 audit(2000000206.869:28951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.862195][ T40] audit: type=1326 audit(2000000206.869:28952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.871202][ T40] audit: type=1326 audit(2000000206.869:28953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.15752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f7c code=0x7ffc0000 [ 404.903530][T12721] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15756'. [ 404.963032][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15759'. [ 404.970102][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15759'. [ 405.087283][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15768'. [ 405.090502][T12753] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 405.128239][T12758] netlink: 'syz.6.15769': attribute type 83 has an invalid length. [ 405.316259][ T40] audit: type=1326 audit(2000000207.359:28954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.2.15778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 405.325957][ T40] audit: type=1326 audit(2000000207.359:28955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.2.15778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 405.335290][ T40] audit: type=1326 audit(2000000207.359:28956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12780 comm="syz.2.15778" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 405.465883][T12807] comedi comedi1: dt2817: I/O base address or length out of range [ 405.534986][T12776] lo speed is unknown, defaulting to 1000 [ 405.707148][T12776] wlan0 speed is unknown, defaulting to 1000 [ 406.032740][T12907] ptrace attach of "/syz-executor exec"[9326] was attempted by ""[12907] [ 406.163324][T12928] vivid-000: disconnect [ 406.165929][T12927] vivid-000: reconnect [ 406.269484][T12908] lo speed is unknown, defaulting to 1000 [ 406.439004][T12969] sg_read: process 7936 (syz.3.15832) changed security contexts after opening file descriptor, this is not allowed. [ 406.451857][T12908] wlan0 speed is unknown, defaulting to 1000 [ 406.657986][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15838'. [ 406.717817][T13003] Option ' ' to dns_resolver key: bad/missing value [ 406.981249][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15850'. [ 407.398695][T13065] tipc: New replicast peer: 0.0.0.0 [ 407.401931][T13065] tipc: Enabled bearer , priority 5 [ 407.526475][T13075] netlink: 'syz.3.15871': attribute type 1 has an invalid length. [ 407.529284][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15871'. [ 407.532092][T13075] netlink: 'syz.3.15871': attribute type 1 has an invalid length. [ 407.536593][T13075] netlink: 'syz.3.15871': attribute type 8 has an invalid length. [ 407.606435][T13079] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 407.748239][T13095] netlink: 'syz.0.15881': attribute type 1 has an invalid length. [ 407.751197][T13095] IPVS: stopping master sync thread 21269 ... [ 407.865211][T13109] netlink: 'syz.0.15887': attribute type 2 has an invalid length. [ 407.879064][T13109] #{6c: entered promiscuous mode [ 408.827912][ T9] hid-generic FFFF:0008:0003.0009: item fetching failed at offset 0/1 [ 408.828198][ T9] hid-generic FFFF:0008:0003.0009: probe with driver hid-generic failed with error -22 [ 409.072063][T13164] tmpfs: Cannot change global quota limit on remount [ 422.085526][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.096383][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.107552][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.112776][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.118451][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.380107][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 422.380123][ T40] audit: type=1326 audit(2000000224.419:28960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.393353][ T40] audit: type=1326 audit(2000000224.419:28961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.402865][ T40] audit: type=1326 audit(2000000224.419:28962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.413308][ T40] audit: type=1326 audit(2000000224.419:28963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.422792][ T40] audit: type=1326 audit(2000000224.419:28964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.431460][ T40] audit: type=1326 audit(2000000224.429:28965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.442329][ T40] audit: type=1326 audit(2000000224.429:28966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.451155][ T40] audit: type=1326 audit(2000000224.429:28967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.461503][ T40] audit: type=1326 audit(2000000224.429:28968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.0.15979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef7c code=0x7ffc0000 [ 422.651735][T13357] serio: Serial port ttynull [ 422.922317][T13378] overlayfs: conflicting lowerdir path [ 422.922447][ T174] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.983904][T13297] lo speed is unknown, defaulting to 1000 [ 422.999961][T13380] netlink: 'syz.0.15990': attribute type 9 has an invalid length. [ 423.002608][T13380] __nla_validate_parse: 4 callbacks suppressed [ 423.002618][T13380] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15990'. [ 423.093330][T13297] wlan0 speed is unknown, defaulting to 1000 [ 423.184858][T13403] kvm: apic: phys broadcast and lowest prio [ 423.297588][ T174] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.610172][ T174] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.718361][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.720928][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.723404][T13297] bridge_slave_0: entered allmulticast mode [ 423.726650][T13297] bridge_slave_0: entered promiscuous mode [ 423.730523][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.733032][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.735824][T13297] bridge_slave_1: entered allmulticast mode [ 423.739088][T13297] bridge_slave_1: entered promiscuous mode [ 423.934987][ T174] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.976031][T13297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.985883][T13297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.010700][T13297] team0: Port device team_slave_0 added [ 424.015939][T13297] team0: Port device team_slave_1 added [ 424.042002][T13297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.044825][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.054231][T13297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.059434][T13297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.061785][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.070042][T13297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.103001][T13297] hsr_slave_0: entered promiscuous mode [ 424.105890][T13297] hsr_slave_1: entered promiscuous mode [ 424.108046][T13297] debugfs: 'hsr0' already exists in 'hsr' [ 424.109813][T13297] Cannot create hsr debugfs directory [ 424.164919][ T5750] Bluetooth: hci4: command tx timeout [ 424.624295][ T174] bridge_slave_1: left allmulticast mode [ 424.626189][ T174] bridge_slave_1: left promiscuous mode [ 424.628136][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.705828][ T174] bridge_slave_0: left allmulticast mode [ 424.708092][ T174] bridge_slave_0: left promiscuous mode [ 424.710395][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.757510][T13688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16011'. [ 425.617916][ T2314] kernel write not supported for file bpf-map (pid: 2314 comm: kworker/3:2) [ 425.624252][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.694705][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.736834][ T174] bond0 (unregistering): Released all slaves [ 426.045951][T13739] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.16028'. [ 426.093886][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16026'. [ 426.097921][T23826] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 426.104472][T23826] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 426.166574][T23826] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 426.170493][T23826] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 426.237048][ T5750] Bluetooth: hci4: command tx timeout [ 426.238899][T13297] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.279865][T13297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.284172][T13297] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.317262][T13297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.595212][T13297] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 426.642625][T13297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.645975][T13297] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.676078][T13297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.679686][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 426.902347][T13814] loop5: detected capacity change from 0 to 7 [ 427.072506][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16049'. [ 427.100891][T13814] Dev loop5: unable to read RDB block 7 [ 427.102454][T13819] Invalid logical block size (-1) [ 427.103372][T13814] loop5: unable to read partition table [ 427.104592][T13814] loop5: partition table beyond EOD, truncated [ 427.104623][T13814] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 427.106244][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 427.122216][T13297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.141947][T13297] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.144792][T13832] loop8: detected capacity change from 0 to 7 [ 427.150567][T23826] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.152929][T23826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.162452][ C3] blk_print_req_error: 10 callbacks suppressed [ 427.162468][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.167585][ C3] buffer_io_error: 10 callbacks suppressed [ 427.167594][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.179250][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.182129][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.185642][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.188634][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.191343][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.192737][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.194628][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.196828][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.202728][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.205727][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.209826][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.212751][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.217396][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.221050][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.225141][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.228634][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.234999][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.238848][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.244890][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.247714][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 427.255167][T13832] ldm_validate_partition_table(): Disk read failed. [ 427.257702][T13832] Dev loop8: unable to read RDB block 0 [ 427.259746][T13832] loop8: unable to read partition table [ 427.262608][T13832] loop8: partition table beyond EOD, truncated [ 427.265516][T13832] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 427.350320][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16053'. [ 427.357601][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 427.521663][ T39] kernel read not supported for file /dsp1 (pid: 39 comm: kworker/2:1) [ 427.622934][ T174] hsr_slave_0: left promiscuous mode [ 427.654063][ T174] hsr_slave_1: left promiscuous mode [ 427.656656][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.659288][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.695815][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.698199][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.774863][ T174] veth1_macvtap: left promiscuous mode [ 427.776831][ T174] veth0_macvtap: left promiscuous mode [ 427.778657][ T174] veth1_vlan: left promiscuous mode [ 427.780648][ T174] veth0_vlan: left promiscuous mode [ 427.812411][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16060'. [ 427.816065][T13878] netlink: 'syz.3.16060': attribute type 5 has an invalid length. [ 427.818516][T13878] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16060'. [ 428.323579][ T5750] Bluetooth: hci4: command tx timeout [ 428.425342][ T174] team0 (unregistering): Port device team_slave_1 removed [ 428.464621][ T174] team0 (unregistering): Port device team_slave_0 removed [ 428.559055][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 429.004058][T13874] bond0: left promiscuous mode [ 429.005682][T13874] : left promiscuous mode [ 429.007367][T13874] bond_slave_1: left promiscuous mode [ 429.140285][T13874] bridge1: left promiscuous mode [ 429.142470][T13874] bridge1: left allmulticast mode [ 429.151945][T13874] sit1: left allmulticast mode [ 429.334714][T13874] ip6erspan0: left promiscuous mode [ 429.367125][T13874] macsec2: left promiscuous mode [ 429.369437][T13874] macsec2: left allmulticast mode [ 429.467287][T13874] vlan4: left allmulticast mode [ 429.470312][T13874] bond0: left allmulticast mode [ 429.471968][T13874] : left allmulticast mode [ 429.473486][T13874] bond_slave_1: left allmulticast mode [ 429.476807][T13874] vlan5: left promiscuous mode [ 429.514933][T13878] geneve2: entered promiscuous mode [ 429.517226][T13878] geneve2: entered allmulticast mode [ 429.524213][ T2314] lo speed is unknown, defaulting to 1000 [ 429.526018][ T2314] sz1: Port: 1 Link DOWN [ 429.624698][ T1199] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.627673][ T1199] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 50641 - 0 [ 429.630227][ T1199] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.632739][ T1199] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 50641 - 0 [ 429.642375][ T2314] lo speed is unknown, defaulting to 1000 [ 429.644195][ T1199] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.648919][ T1199] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 50641 - 0 [ 429.651641][ T1199] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.654977][ T1199] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 50641 - 0 [ 429.794051][T13297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.036460][T13297] veth0_vlan: entered promiscuous mode [ 430.048014][T13297] veth1_vlan: entered promiscuous mode [ 430.090295][T13297] veth0_macvtap: entered promiscuous mode [ 430.098123][T13297] veth1_macvtap: entered promiscuous mode [ 430.118155][T13297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.143631][T13297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.156370][T23826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.160088][T23826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.168641][T23826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.218626][T23826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.366744][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.369907][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.395659][T23826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.398368][T23826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.403887][ T5750] Bluetooth: hci4: command tx timeout [ 430.422541][ T174] IPVS: stop unused estimator thread 0... [ 430.699024][T13997] lo speed is unknown, defaulting to 1000 [ 430.825874][T13997] wlan0 speed is unknown, defaulting to 1000 [ 432.804954][T14082] netem: change failed [ 433.592189][ T9511] IPVS: starting estimator thread 0... [ 433.693708][T14120] IPVS: using max 43 ests per chain, 103200 per kthread [ 435.618162][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.624851][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.628432][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.631557][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.635552][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.637903][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.640348][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.642670][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.646152][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.648468][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 435.656599][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 435.656599][ T9] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 435.745462][T14218] fido_id[14218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 436.312936][T14266] kvm: kvm [14264]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 437.843395][T14227] syz.7.16165 (14227) used greatest stack depth: 18872 bytes left [ 437.877659][T14311] veth1_macvtap: left promiscuous mode [ 437.881294][T14311] macsec0: entered allmulticast mode [ 437.979069][ T40] audit: type=1800 audit(2000000240.019:28969): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.16199" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 438.118315][T14320] lo speed is unknown, defaulting to 1000 [ 438.205177][T14320] wlan0 speed is unknown, defaulting to 1000 [ 438.260104][ T40] audit: type=1326 audit(2000000240.299:28970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.16207" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3f7c code=0x0 [ 438.326300][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16209'. [ 438.329255][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16209'. [ 438.334291][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16209'. [ 438.342493][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16209'. [ 438.513161][ T2314] kernel read not supported for file /rfkill (pid: 2314 comm: kworker/3:2) [ 439.123106][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16225'. [ 439.128235][T14403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16225'. [ 439.469353][T14412] netlink: 'syz.7.16228': attribute type 1 has an invalid length. [ 439.586350][T14418] Oops: general protection fault, probably for non-canonical address 0xeac826e83f43c1fe: 0000 [#1] SMP KASAN NOPTI [ 439.591294][T14418] KASAN: maybe wild-memory-access in range [0x56415741fa1e0ff0-0x56415741fa1e0ff7] [ 439.595518][T14418] CPU: 3 UID: 0 PID: 14418 Comm: syz.0.16231 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.599830][T14418] Tainted: [L]=SOFTLOCKUP [ 439.601401][T14418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.605253][T14418] RIP: 0010:try_module_get+0x23/0xd0 [ 439.607504][T14418] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 439.614761][T14418] RSP: 0000:ffffc9000d00f8b8 EFLAGS: 00010202 [ 439.617103][T14418] RAX: dffffc0000000000 RBX: 56415741fa1e0ff3 RCX: ffffc9000c661000 [ 439.620392][T14418] RDX: 0ac82ae83f43c1fe RSI: ffffffff87efe690 RDI: 56415741fa1e0ff3 [ 439.623469][T14418] RBP: ffff888026b25800 R08: 0000000000000001 R09: fffffbfff1fdcf75 [ 439.626750][T14418] R10: ffffffff8fee7baf R11: 0000000000000000 R12: ffff88802506ea80 [ 439.630019][T14418] R13: ffffffff8a184510 R14: ffff88802a429358 R15: ffff88802506eac8 [ 439.633250][T14418] FS: 0000000000000000(0000) GS:ffff888097471000(0063) knlGS:00000000f541db40 [ 439.636891][T14418] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.639606][T14418] CR2: 00000000f705c5d0 CR3: 000000005c74f000 CR4: 0000000000352ef0 [ 439.642750][T14418] Call Trace: [ 439.644154][T14418] [ 439.645378][T14418] dvb_device_open+0x124/0x3b0 [ 439.647439][T14418] ? __pfx_dvb_device_open+0x10/0x10 [ 439.649648][T14418] chrdev_open+0x234/0x6a0 [ 439.651269][T14418] ? __pfx_apparmor_file_open+0x10/0x10 [ 439.653106][T14418] ? __pfx_chrdev_open+0x10/0x10 [ 439.654659][T14418] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 439.656614][T14418] do_dentry_open+0x6d8/0x1660 [ 439.658048][T14418] ? __pfx_chrdev_open+0x10/0x10 [ 439.659573][T14418] vfs_open+0x82/0x3f0 [ 439.660864][T14418] path_openat+0x208c/0x31a0 [ 439.662620][T14418] ? asm_int80_emulation+0x1a/0x20 [ 439.664788][T14418] ? __pfx_path_openat+0x10/0x10 [ 439.666866][T14418] do_file_open+0x20e/0x430 [ 439.668802][T14418] ? __pfx_do_file_open+0x10/0x10 [ 439.670762][T14418] ? _raw_spin_unlock+0x28/0x50 [ 439.672835][T14418] ? alloc_fd+0x476/0x790 [ 439.674585][T14418] do_sys_openat2+0x10d/0x1e0 [ 439.676448][T14418] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.678298][T14418] ? do_raw_spin_lock+0x128/0x260 [ 439.680026][T14418] ? find_held_lock+0x2b/0x80 [ 439.681580][T14418] ? kcov_ioctl+0x16a/0x720 [ 439.683528][T14418] ? rcu_is_watching+0x12/0xc0 [ 439.685540][T14418] ? kcov_ioctl+0x16a/0x720 [ 439.687459][T14418] __ia32_compat_sys_openat+0x12d/0x210 [ 439.689433][T14418] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 439.691380][T14418] ? rcu_is_watching+0x12/0xc0 [ 439.692880][T14418] ? rcu_is_watching+0x12/0xc0 [ 439.694281][T14418] do_int80_emulation+0x141/0x700 [ 439.695865][T14418] asm_int80_emulation+0x1a/0x20 [ 439.697415][T14418] RIP: 0023:0xf71661ab [ 439.698693][T14418] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 439.705419][T14418] RSP: 002b:00000000f541d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 439.708030][T14418] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541d100 [ 439.710436][T14418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.713050][T14418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.715530][T14418] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.717955][T14418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.720445][T14418] [ 439.721421][T14418] Modules linked in: [ 439.724077][T14418] ---[ end trace 0000000000000000 ]--- [ 439.726299][T14419] 9p: Bad value for 'rfdno' [ 439.734845][T14418] RIP: 0010:try_module_get+0x23/0xd0 [ 439.736869][T14418] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 439.743358][T14418] RSP: 0000:ffffc9000d00f8b8 EFLAGS: 00010202 [ 439.746103][T14418] RAX: dffffc0000000000 RBX: 56415741fa1e0ff3 RCX: ffffc9000c661000 [ 439.748823][T14418] RDX: 0ac82ae83f43c1fe RSI: ffffffff87efe690 RDI: 56415741fa1e0ff3 [ 439.753366][T14418] RBP: ffff888026b25800 R08: 0000000000000001 R09: fffffbfff1fdcf75 [ 439.757294][T14418] R10: ffffffff8fee7baf R11: 0000000000000000 R12: ffff88802506ea80 [ 439.760004][T14418] R13: ffffffff8a184510 R14: ffff88802a429358 R15: ffff88802506eac8 [ 439.762477][T14418] FS: 0000000000000000(0000) GS:ffff888097271000(0063) knlGS:00000000f541db40 SYZFAIL: failed to recv rpc [ 439.766091][T14418] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.768584][T14418] CR2: 000055d766bb65d0 CR3: 000000005c74f000 CR4: 0000000000352ef0 [ 439.771756][T14418] Kernel panic - not syncing: Fatal exception [ 439.774300][T14418] Kernel Offset: disabled [ 439.775653][T14418] Rebooting in 86400 seconds..