last executing test programs: 2.491119475s ago: executing program 0 (id=7486): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1}, 0x94) 2.413637935s ago: executing program 0 (id=7489): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) lseek(r3, 0x2, 0x0) read(r3, &(0x7f0000000300), 0x1) 2.411957621s ago: executing program 0 (id=7491): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0xac141401, 0x50, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'syz_tun\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) sendto$inet(r1, &(0x7f0000000200)="0000002c0101000000110024000008000000000000501f90000000000000006401020304ac141401ac141401", 0x2c, 0x0, &(0x7f0000000300)={0x2, 0x2290, @rand_addr=0xe0000051}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2fefd800}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x1234, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0xac141401}, {0x0, 0x50, 0xc, 0x0, @opaque="aabbccdd"}}}}}, &(0x7f0000000600)={0x1, 0x1, [0x14]}) 1.558830503s ago: executing program 0 (id=7501): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) r2 = accept4$llc(r0, 0x0, 0x0, 0x800) getpeername$llc(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10) getpeername$llc(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10) 1.228555243s ago: executing program 3 (id=7513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001400010604000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020020010db8000000000000000000000001"], 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000c00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.158258729s ago: executing program 3 (id=7515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x0, 0x0}, {0x0, 0x0}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0x0, 0x0}, {0x0, 0x0, [@TCA_MATCHALL_ACT={0x0, 0x0, [@m_skbedit={0x0, 0x0, 0x0, 0x0, {{0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x0, 0x1234}]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='syzkaller0\x00', 0xb) sendto$inet(r1, &(0x7f0000000400)="00112233445566778899aabbccdd", 0xe, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) 1.156874552s ago: executing program 3 (id=7517): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) 1.099113578s ago: executing program 3 (id=7519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0x401, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) 1.098994946s ago: executing program 3 (id=7520): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x28, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 1.029946082s ago: executing program 3 (id=7521): r0 = syz_usb_connect(0x1, 0x53, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401011109000010102000109024100030100e0010904000001ff000000070581034000010904010002ff00000007058202000200070502020002000904020001ff00000007058801000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket(0x8, 0x2, 0x0) connect(r1, &(0x7f0000000400)=@generic={0x8, '\x00\x00\x00\x00\x00d\x00'}, 0x10) ioctl(r1, 0x400261f3, &(0x7f0000000500)="02000000000000006e61733000000000dc050000") ioctl(r1, 0x400261f2, &(0x7f0000000600)="02000000020000006e617330000000000000000000000000000000000100"/48) syz_usb_ep_write(r0, 0x82, 0x35, &(0x7f0000000700)="0000064200544553540000000000000000000000000000000000000000000000000000000000000000000004c704dd7b") 679.678706ms ago: executing program 1 (id=7525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001400010604000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020020010db8000000000000000000000001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001800010605000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r4, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000d00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 679.529691ms ago: executing program 0 (id=7526): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x1, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@un=@file={0x1, 'test_unix_sock1\x00'}, 0x12) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000100000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000200000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000300000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000400000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000500000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000600000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000700000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000800000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000900000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000a00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000b00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000c00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) 618.404053ms ago: executing program 1 (id=7527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 618.126527ms ago: executing program 0 (id=7528): unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x0, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x0, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x8, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x2c}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000340)='2\x00', 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000600)='hello\x00', 0x5) read(r5, &(0x7f0000000640), 0x5) 617.884367ms ago: executing program 1 (id=7529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}}}, 0x0) 570.283942ms ago: executing program 1 (id=7530): syz_emit_ethernet(0x18, &(0x7f0000000080)={@local, @remote, @void, {@generic={0x800, '\x00'/10}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000)="00112233", 0x4, 0x0, 0x0, 0x0) 570.055675ms ago: executing program 1 (id=7531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000014000500000000000000000023000000010000000500020004000000"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}}, 0x20}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000600)={0x23, 0x0, 0x1}, 0x10) listen(r2, 0x5) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000700)=0x1, 0x4) connect$phonet_pipe(r3, &(0x7f0000000800)={0x23, 0x0, 0x1}, 0x10) sendto$phonet(r3, &(0x7f0000000900)='\x00', 0x1, 0x80, 0x0, 0x0) 439.71324ms ago: executing program 1 (id=7532): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0x0}, 0x10) listen(r0, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0x7f000001}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) close(r2) close(r0) close(r1) 206.915894ms ago: executing program 2 (id=7536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x1f4}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0, 0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x550) syz_emit_ethernet(0x3e2, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d4, 0x5678, 0x6000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x3c0, 0x0, @opaque='\x00'/952}}}}}, 0x0) syz_emit_ethernet(0x432, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x424, 0x5678, 0x4078, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, '\x00'/1040}}}}, 0x0) 130.191968ms ago: executing program 2 (id=7537): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1388, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x1388, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x10, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0x8) sendto(r1, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x30, 0x0, 0x0, 0x0) 129.926035ms ago: executing program 2 (id=7538): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1ff, 0x4, 0xffffffff, 0x0, 0xfffffffc, 0x2, 0x3, 0xffffffff, 0x31ce, 0x4, 0x1c, 0x1b, 0x12, 0x2, 0x7, 0x9}}]}}]}, 0x6c}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 50.122496ms ago: executing program 2 (id=7539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000286dd6000000000202c40fe800000000000000000000000000001fe80000000000000000000000000000206000001123456780102030405060708090a0b0c0d0e0f101112131415161718"], 0x0) 49.923951ms ago: executing program 2 (id=7540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 0s ago: executing program 2 (id=7541): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000090)='./nfsd/portlist\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): nt from the descriptor's value: 142 [ 1682.758681][T16181] usb 5-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1682.763736][T16181] usb 5-1: config 109 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1682.768388][T16181] usb 5-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1682.775556][T16181] usb 5-1: config 109 interface 0 has no altsetting 0 [ 1682.778306][T16181] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1682.782846][T16181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.201804][ T34] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1683.360936][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1683.364307][ T34] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1683.367078][ T34] usb 6-1: config 0 has no interface number 0 [ 1683.369084][ T34] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1683.372578][ T34] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1683.375703][ T34] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1683.379461][ T34] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 1683.383062][ T34] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 1683.386606][ T34] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1683.393837][ T34] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1683.396813][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.399348][ T34] usb 6-1: Product: syz [ 1683.400728][ T34] usb 6-1: Manufacturer: syz [ 1683.402912][ T34] usb 6-1: SerialNumber: syz [ 1683.407204][ T34] usb 6-1: config 0 descriptor?? [ 1683.412129][T31182] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1683.618029][T31182] read descriptors [ 1683.619501][T31182] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 1683.632117][ T34] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1683.648395][ T34] usb 6-1: USB disconnect, device number 126 [ 1684.084793][T31202] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1684.108396][T31202] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1684.111926][T31202] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1684.114776][T31202] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1684.121004][T31202] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1684.145367][T31202] pci 0000:00:01.0: Adding to iommu group 1 [ 1684.169151][T31202] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1684.171695][T31202] pci 0000:00:01.0: vgaarb: bridge control possible [ 1684.173796][T31202] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1684.188649][T31202] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1684.192553][T31202] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1684.198621][T31202] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1684.230339][T31202] [drm] Found bochs VGA, ID 0xb0c5. [ 1684.232223][T31202] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1684.243983][T23666] ffs_data_put(): freeing [ 1684.252558][T31202] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1684.923008][T31202] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1685.204498][T16181] usb 5-1: string descriptor 0 read error: -71 [ 1685.212543][T16181] usbhid 5-1:109.0: can't add hid device: -71 [ 1685.214970][T16181] usbhid 5-1:109.0: probe with driver usbhid failed with error -71 [ 1685.225626][T16181] usb 5-1: USB disconnect, device number 3 [ 1685.452687][T31230] netlink: 'syz.1.6652': attribute type 10 has an invalid length. [ 1685.479070][T31230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.551048][T31230] bond10: left promiscuous mode [ 1685.555370][T31230] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1685.569109][T31230] bond11: left promiscuous mode [ 1685.582091][T31230] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1685.602947][T31230] bond12: left promiscuous mode [ 1685.607291][T31230] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1685.618512][T31230] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1685.627922][T31230] bond14: left promiscuous mode [ 1685.632495][T31230] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1685.646914][T31230] bond15: left promiscuous mode [ 1685.655344][T31230] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1685.666100][T31230] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1685.676777][T31230] bond17: left promiscuous mode [ 1685.679735][T31230] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1685.699001][T31230] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1685.715793][T31230] bond19: left promiscuous mode [ 1685.719964][T31230] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1687.514246][T31256] tmpfs: Unknown parameter 'nr_ino' [ 1687.612563][T31253] 9p: Could not find request transport: fdÿÿ [ 1688.229681][T31253] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1688.350506][T31253] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1688.431005][T27744] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1688.466224][T31270] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1688.470444][T31270] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1688.559048][T31270] bond25: entered promiscuous mode [ 1688.654391][T31253] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1688.728768][T27744] usb 6-1: config index 0 descriptor too short (expected 10276, got 36) [ 1688.735674][T27744] usb 6-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 1688.742034][T27744] usb 6-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 1688.745271][T27744] usb 6-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1688.749011][T27744] usb 6-1: config 109 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1688.757478][T27744] usb 6-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1688.763594][T27744] usb 6-1: config 109 interface 0 has no altsetting 0 [ 1688.766613][T27744] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1688.770785][T27744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.052194][T31253] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1689.060351][T31253] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1689.099044][T31253] pci 0000:00:01.0: Adding to iommu group 1 [ 1689.122393][T31253] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1689.125015][T31253] pci 0000:00:01.0: vgaarb: bridge control possible [ 1689.127106][T31253] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1689.192495][T31253] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1689.195892][T31253] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1689.200271][T31253] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1689.213609][T31253] [drm] Found bochs VGA, ID 0xb0c5. [ 1689.215835][T31253] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1689.229159][T31253] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1689.312570][T31253] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1689.450050][T31280] netlink: 'syz.2.6663': attribute type 10 has an invalid length. [ 1689.517226][T31280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.536515][T31279] netlink: 'syz.0.6662': attribute type 2 has an invalid length. [ 1689.545951][T31279] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 1689.628071][T31280] bond18: left promiscuous mode [ 1689.635083][T31280] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1689.655236][T31280] bond19: left promiscuous mode [ 1689.663796][T31280] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1689.672410][T31286] loop8: detected capacity change from 0 to 7 [ 1689.679175][T31280] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1689.691636][T31286] Dev loop8: unable to read RDB block 7 [ 1689.693467][T31286] loop8: unable to read partition table [ 1689.696435][T31280] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1689.699428][T31286] loop8: partition table beyond EOD, truncated [ 1689.705173][T31286] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1689.706486][T31280] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1689.717379][T31280] bond23: left promiscuous mode [ 1689.725440][T31280] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1689.786993][T31280] bond24: left promiscuous mode [ 1689.798450][T31280] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1689.812997][T31280] bond25: left promiscuous mode [ 1689.818205][T31280] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1689.934999][T31292] tmpfs: Unknown parameter 'nr_ino' [ 1690.235367][T31301] tmpfs: Unknown parameter 'nr_ino' [ 1691.115415][T27744] usb 6-1: string descriptor 0 read error: -71 [ 1691.137502][T31305] syzkaller0: entered promiscuous mode [ 1691.139326][T31305] syzkaller0: entered allmulticast mode [ 1691.345744][T27744] usbhid 6-1:109.0: can't add hid device: -71 [ 1691.348477][T27744] usbhid 6-1:109.0: probe with driver usbhid failed with error -71 [ 1691.354919][T27744] usb 6-1: USB disconnect, device number 127 [ 1691.436449][T31316] tmpfs: Unknown parameter 'nr_ino' [ 1692.523481][ T5899] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1692.672900][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 1692.677922][ T5899] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1692.683100][ T5899] usb 6-1: config 0 has no interface number 0 [ 1692.685064][ T5899] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.691398][ T5899] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1692.728125][ T5899] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1692.734045][ T5899] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 1692.752358][ T5899] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 1692.756436][ T5899] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.816092][ T5899] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1692.820626][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.824520][ T5899] usb 6-1: Product: syz [ 1692.845356][ T5899] usb 6-1: Manufacturer: syz [ 1692.848899][ T5899] usb 6-1: SerialNumber: syz [ 1692.915905][ T5899] usb 6-1: config 0 descriptor?? [ 1692.927251][T31321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1693.138610][T31321] read descriptors [ 1693.139978][T31321] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 1693.150045][ T5899] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1693.163203][ T5899] usb 6-1: USB disconnect, device number 2 [ 1693.661429][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1693.669890][T23666] ffs_data_put(): freeing [ 1693.812573][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.816472][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1693.819887][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1693.827709][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1693.830756][T25462] Bluetooth: hci4: unexpected event for opcode 0x6940 [ 1693.833604][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.836961][ T24] usb 5-1: Product: syz [ 1693.838733][ T24] usb 5-1: Manufacturer: syz [ 1693.840711][ T24] usb 5-1: SerialNumber: syz [ 1693.851910][ T24] usb 5-1: config 0 descriptor?? [ 1693.866874][ T24] adutux 5-1:0.0: interrupt endpoints not found [ 1694.203302][T31361] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1694.212989][T31361] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1694.257723][T23701] Process accounting resumed [ 1694.344386][T31361] bond26: entered promiscuous mode [ 1694.968756][T31369] syzkaller0: entered promiscuous mode [ 1694.972702][T31369] syzkaller0: entered allmulticast mode [ 1695.183657][T31374] loop8: detected capacity change from 0 to 7 [ 1695.186830][T31374] Dev loop8: unable to read RDB block 7 [ 1695.188628][T31374] loop8: unable to read partition table [ 1695.190589][T31374] loop8: partition table beyond EOD, truncated [ 1695.193823][T31374] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1696.424843][ T24] usb 5-1: USB disconnect, device number 4 [ 1696.604324][T31397] syzkaller0: entered promiscuous mode [ 1696.606586][T31397] syzkaller0: entered allmulticast mode [ 1696.942818][T31405] autofs: Bad value for 'fd' [ 1697.029735][T31407] syzkaller0: entered promiscuous mode [ 1697.032706][T31407] syzkaller0: entered allmulticast mode [ 1697.195321][T31409] loop8: detected capacity change from 0 to 7 [ 1697.198362][T31409] Dev loop8: unable to read RDB block 7 [ 1697.200246][T31409] loop8: unable to read partition table [ 1697.202579][T31409] loop8: partition table beyond EOD, truncated [ 1697.204916][T31409] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1697.357587][T31417] 9p: Bad value for 'rfdno' [ 1697.453496][T31418] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1697.483885][T31418] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1697.487092][T31418] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1697.490661][T31418] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1697.496307][T31418] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1697.518836][T31418] pci 0000:00:01.0: Adding to iommu group 1 [ 1697.528402][T24246] ffs_data_put(): freeing [ 1697.568229][T31418] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1697.570966][T31418] pci 0000:00:01.0: vgaarb: bridge control possible [ 1697.573519][T31418] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1697.594167][T31418] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1697.598052][T31418] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1697.605713][T31418] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1697.659636][T31418] [drm] Found bochs VGA, ID 0xb0c5. [ 1697.662168][T31418] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1697.693154][T31418] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1697.925729][T31418] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1698.254483][T31428] loop8: detected capacity change from 0 to 7 [ 1698.305648][T31428] Dev loop8: unable to read RDB block 7 [ 1698.314070][T31428] loop8: unable to read partition table [ 1698.323996][T31428] loop8: partition table beyond EOD, truncated [ 1698.345739][T31428] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1698.645115][T31437] netlink: 'syz.2.6715': attribute type 10 has an invalid length. [ 1698.703797][T31437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.952610][T31437] bond26: left promiscuous mode [ 1698.957424][T31437] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1700.553022][T31469] siw: device registration error -23 [ 1700.587926][T31466] tmpfs: Unknown parameter 'nr_ino' [ 1701.434547][T31477] loop8: detected capacity change from 0 to 7 [ 1701.437848][T31477] Dev loop8: unable to read RDB block 7 [ 1701.440138][T31477] loop8: unable to read partition table [ 1701.443142][T31477] loop8: partition table beyond EOD, truncated [ 1701.448235][T31477] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1701.710033][T31485] netlink: 'syz.3.6728': attribute type 10 has an invalid length. [ 1701.743880][T31485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.863979][T31485] bond22: left promiscuous mode [ 1701.868745][T31485] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1701.922818][T31485] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1704.215845][T31520] siw: device registration error -23 [ 1705.598169][T31530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1705.691709][T31533] siw: device registration error -23 [ 1705.763469][T31536] tmpfs: Unknown parameter 'nr_ino' [ 1707.007960][T31547] tmpfs: Unknown parameter 'nr_ino' [ 1707.055464][T31550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1707.894730][ T6450] Process accounting resumed [ 1707.946619][T31560] loop8: detected capacity change from 0 to 7 [ 1707.964792][T31560] Dev loop8: unable to read RDB block 7 [ 1707.967047][T31560] loop8: unable to read partition table [ 1707.969292][T31560] loop8: partition table beyond EOD, truncated [ 1707.973495][T31560] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1709.093721][T31577] tmpfs: Unknown parameter 'nr_ino' [ 1709.274964][T31582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1709.542374][T31586] netlink: 'syz.3.6755': attribute type 10 has an invalid length. [ 1709.589175][T31586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.697662][T31601] loop8: detected capacity change from 0 to 7 [ 1710.712799][T31601] Dev loop8: unable to read RDB block 7 [ 1710.715421][T31601] loop8: unable to read partition table [ 1710.718119][T31601] loop8: partition table beyond EOD, truncated [ 1710.725496][T31601] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1711.563763][T31614] bond24: entered promiscuous mode [ 1712.064932][T31618] bond28: entered promiscuous mode [ 1712.379965][ T6457] Process accounting resumed [ 1712.759570][T31633] netlink: 'syz.3.6767': attribute type 10 has an invalid length. [ 1712.787197][T31634] 9p: Bad value for 'rfdno' [ 1712.866202][T31633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.078784][T31633] bond24: left promiscuous mode [ 1713.098978][T31633] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1713.628403][T31646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1714.420144][T31658] tmpfs: Unknown parameter 'nr_ino' [ 1715.009829][T31667] tmpfs: Unknown parameter 'nr_ino' [ 1715.130735][T31670] No control pipe specified [ 1715.510745][T31673] 9p: Bad value for 'rfdno' [ 1715.524404][T31673] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1715.548642][T31673] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1715.551929][T31673] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1715.557242][T31673] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1715.567540][T31673] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1715.631001][T31673] pci 0000:00:01.0: Adding to iommu group 1 [ 1715.773745][T31673] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1715.776320][T31673] pci 0000:00:01.0: vgaarb: bridge control possible [ 1715.778749][T31673] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1716.438162][T31673] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1716.441611][T31673] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1716.446632][T31673] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1716.461537][T31673] [drm] Found bochs VGA, ID 0xb0c5. [ 1716.464101][T31673] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1716.469073][T31673] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1716.579826][T31686] netlink: 'syz.2.6782': attribute type 10 has an invalid length. [ 1716.856873][T31686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.908155][T23046] Process accounting resumed [ 1716.918623][T31689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1716.932434][T31689] netlink: 'syz.1.6784': attribute type 2 has an invalid length. [ 1716.942917][T31689] netlink: 'syz.1.6784': attribute type 1 has an invalid length. [ 1717.899257][T31708] binder: 31706:31708 ioctl c0306201 0 returned -14 [ 1718.591343][ T6457] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1718.750944][ T6457] usb 5-1: Using ep0 maxpacket: 8 [ 1718.766433][ T6457] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1718.778787][ T6457] usb 5-1: config 0 has no interface number 0 [ 1718.783562][ T6457] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1718.788395][ T6457] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1718.793773][ T6457] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1718.799243][ T6457] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 1718.803915][ T6457] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 1718.808705][ T6457] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1718.818806][ T6457] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1718.824220][ T6457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.828138][ T6457] usb 5-1: Product: syz [ 1718.829992][ T6457] usb 5-1: Manufacturer: syz [ 1718.832049][ T6457] usb 5-1: SerialNumber: syz [ 1718.844787][ T6457] usb 5-1: config 0 descriptor?? [ 1718.848194][T31714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1718.990473][T31729] bond20: entered promiscuous mode [ 1719.561216][T31714] read descriptors [ 1719.564998][T31714] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 1719.594031][ T6457] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1719.634160][ T6457] usb 5-1: USB disconnect, device number 5 [ 1720.528234][T23796] ffs_data_put(): freeing [ 1720.880100][T31754] netlink: 'syz.0.6796': attribute type 10 has an invalid length. [ 1720.913906][T31754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.003460][T31754] bond28: left promiscuous mode [ 1721.009977][T31754] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1721.036762][T31754] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1721.596692][T31767] siw: device registration error -23 [ 1721.885075][T31774] tmpfs: Unknown parameter 'nr_ino' [ 1724.432992][T24298] Process accounting resumed [ 1724.437086][T31793] netlink: 'syz.0.6806': attribute type 2 has an invalid length. [ 1724.439613][T31793] netlink: 'syz.0.6806': attribute type 1 has an invalid length. [ 1724.770924][T23046] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1724.790715][T27744] Process accounting resumed [ 1724.794355][T31809] netlink: 'syz.0.6810': attribute type 2 has an invalid length. [ 1724.797534][T31809] netlink: 'syz.0.6810': attribute type 1 has an invalid length. [ 1724.921821][T23046] usb 6-1: not running at top speed; connect to a high speed hub [ 1724.929683][T23046] usb 6-1: config 0 has no interfaces? [ 1724.935559][T23046] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1724.948097][T23046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1724.958600][T23046] usb 6-1: Product: syz [ 1724.960318][T23046] usb 6-1: Manufacturer: syz [ 1725.003683][T23046] usb 6-1: config 0 descriptor?? [ 1725.190927][T31822] siw: device registration error -23 [ 1725.591199][T31824] siw: device registration error -23 [ 1726.150223][ T6457] usb 6-1: USB disconnect, device number 3 [ 1727.242594][T31835] tmpfs: Unknown parameter 'nr_ino' [ 1727.639037][T31848] tmpfs: Unknown parameter 'nr_ino' [ 1727.796687][T31850] syz.0.6822: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1727.803008][T31850] CPU: 2 UID: 0 PID: 31850 Comm: syz.0.6822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1727.803027][T31850] Tainted: [L]=SOFTLOCKUP [ 1727.803031][T31850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1727.803050][T31850] Call Trace: [ 1727.803061][T31850] [ 1727.803065][T31850] dump_stack_lvl+0x100/0x190 [ 1727.803164][T31850] warn_alloc.cold+0x94/0xa8 [ 1727.803180][T31850] ? __pfx_warn_alloc+0x10/0x10 [ 1727.803208][T31850] ? policy_nodemask+0xed/0x4f0 [ 1727.803226][T31850] ? alloc_pages_mpol+0x25a/0x540 [ 1727.803243][T31850] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1727.803259][T31850] ? __kmalloc_node_noprof+0x357/0x830 [ 1727.803273][T31850] ? __get_vm_area_node+0x180/0x330 [ 1727.803289][T31850] ? __get_vm_area_node+0x208/0x330 [ 1727.803308][T31850] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 1727.803331][T31850] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1727.803383][T31850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1727.803403][T31850] ? kasan_quarantine_put+0x104/0x240 [ 1727.803417][T31850] ? lockdep_hardirqs_on+0x78/0x100 [ 1727.803452][T31850] __kvmalloc_node_noprof+0x3d3/0x970 [ 1727.803466][T31850] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1727.803483][T31850] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1727.803501][T31850] ? __pfx_br_dev_setup+0x10/0x10 [ 1727.803520][T31850] alloc_netdev_mqs+0xd7/0x15c0 [ 1727.803540][T31850] rtnl_create_link+0xc13/0xf80 [ 1727.803559][T31850] rtnl_newlink+0x13bd/0x2380 [ 1727.803581][T31850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1727.803598][T31850] ? rcu_is_watching+0x12/0xc0 [ 1727.803618][T31850] ? kasan_quarantine_put+0x104/0x240 [ 1727.803634][T31850] ? kfree_skbmem+0x19a/0x210 [ 1727.803645][T31850] ? kmem_cache_free+0x127/0x6b0 [ 1727.803663][T31850] ? find_held_lock+0x2b/0x80 [ 1727.803682][T31850] ? find_held_lock+0x2b/0x80 [ 1727.803695][T31850] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1727.803714][T31850] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1727.803733][T31850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1727.803750][T31850] rtnetlink_rcv_msg+0x95e/0xe90 [ 1727.803769][T31850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1727.803790][T31850] ? ref_tracker_free+0x37e/0x6c0 [ 1727.803830][T31850] netlink_rcv_skb+0x159/0x420 [ 1727.803844][T31850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1727.803863][T31850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1727.803881][T31850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1727.803896][T31850] netlink_unicast+0x585/0x850 [ 1727.803911][T31850] ? __pfx_netlink_unicast+0x10/0x10 [ 1727.803928][T31850] netlink_sendmsg+0x8b0/0xda0 [ 1727.803943][T31850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.803958][T31850] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1727.803979][T31850] ____sys_sendmsg+0xa4d/0xbe0 [ 1727.804013][T31850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.804027][T31850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1727.804045][T31850] ___sys_sendmsg+0x190/0x1e0 [ 1727.804059][T31850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1727.804072][T31850] ? futex_wait+0x11e/0x370 [ 1727.804093][T31850] ? find_held_lock+0x2b/0x80 [ 1727.804115][T31850] __sys_sendmsg+0x160/0x210 [ 1727.804132][T31850] ? __pfx___sys_sendmsg+0x10/0x10 [ 1727.804156][T31850] __do_fast_syscall_32+0xe7/0x970 [ 1727.804173][T31850] ? lockdep_hardirqs_on+0x78/0x100 [ 1727.804189][T31850] do_fast_syscall_32+0x32/0x70 [ 1727.804209][T31850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1727.804225][T31850] RIP: 0023:0xf70aefec [ 1727.804240][T31850] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1727.804245][T31850] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1727.804257][T31850] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000280 [ 1727.804264][T31850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1727.804271][T31850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1727.804278][T31850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1727.804284][T31850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.804298][T31850] [ 1727.804311][T31850] Mem-Info: [ 1727.948895][T31850] active_anon:1987 inactive_anon:721 isolated_anon:0 [ 1727.948895][T31850] active_file:6099 inactive_file:14899 isolated_file:0 [ 1727.948895][T31850] unevictable:768 dirty:220 writeback:0 [ 1727.948895][T31850] slab_reclaimable:6678 slab_unreclaimable:66991 [ 1727.948895][T31850] mapped:23076 shmem:824 pagetables:1063 [ 1727.948895][T31850] sec_pagetables:333 bounce:0 [ 1727.948895][T31850] kernel_misc_reclaimable:0 [ 1727.948895][T31850] free:50119 free_pcp:15673 free_cma:0 [ 1727.978442][T31850] Node 0 active_anon:244kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1272kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1727.990189][T31850] Node 1 active_anon:7652kB inactive_anon:2744kB active_file:24396kB inactive_file:59596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92248kB dirty:900kB writeback:0kB shmem:1760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:3052kB sec_pagetables:208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1728.000970][T31850] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:144kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:168kB free_cma:0kB [ 1728.013522][T31850] lowmem_reserve[]: 0 280 280 280 280 [ 1728.015647][T31850] Node 0 DMA32 free:15904kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:420kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:13592kB local_pcp:2952kB free_cma:0kB [ 1728.027681][T31850] lowmem_reserve[]: 0 0 0 0 0 [ 1728.029724][T31850] Node 1 DMA32 free:182512kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7652kB inactive_anon:2744kB active_file:24396kB inactive_file:59596kB unevictable:1536kB writepending:900kB zspages:4808kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:48604kB local_pcp:15608kB free_cma:0kB [ 1728.042975][T31850] lowmem_reserve[]: 0 0 0 0 0 [ 1728.044576][T31850] Node 0 DMA: 35*4kB (UM) 8*8kB (UM) 6*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2060kB [ 1728.049511][T31850] Node 0 DMA32: 108*4kB (UME) 108*8kB (UE) 75*16kB (UME) 139*32kB (UE) 44*64kB (UME) 16*128kB (UM) 2*256kB (UE) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 15904kB [ 1728.058517][T31850] Node 1 DMA32: 2089*4kB (UME) 1013*8kB (UME) 667*16kB (UM) 256*32kB (UME) 249*64kB (UME) 159*128kB (UME) 79*256kB (UME) 47*512kB (UME) 15*1024kB (UM) 3*2048kB (M) 11*4096kB (UM) = 182460kB [ 1728.065735][T31850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1728.069676][T31850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1728.074687][T31850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1728.078540][T31850] Node 1 hugepages_total=10 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1728.082084][T31850] 22294 total pagecache pages [ 1728.084084][T31850] 474 pages in swap cache [ 1728.085889][T31850] Free swap = 100340kB [ 1728.087593][T31850] Total swap = 124996kB [ 1728.088997][T31850] 524155 pages RAM [ 1728.090412][T31850] 0 pages HighMem/MovableOnly [ 1728.094694][T31850] 211532 pages reserved [ 1728.096474][T31850] 0 pages cma reserved [ 1729.285807][T27744] Process accounting resumed [ 1729.289134][T31862] netlink: 'syz.2.6827': attribute type 2 has an invalid length. [ 1729.293107][T31862] netlink: 'syz.2.6827': attribute type 1 has an invalid length. [ 1729.455679][T31877] autofs: Unknown parameter '0x0000000000000004' [ 1729.617667][T27744] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1729.633802][T31882] i2c i2c-0: new_device: Missing parameters [ 1729.638540][T31882] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1729.676754][T31883] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1729.736424][T31882] bond27: entered promiscuous mode [ 1729.761026][T27744] usb 5-1: device descriptor read/64, error -71 [ 1729.850705][T31883] bond21: entered promiscuous mode [ 1729.957130][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.001080][T27744] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1730.130976][T27744] usb 5-1: device descriptor read/64, error -71 [ 1730.245623][T27744] usb usb5-port1: attempt power cycle [ 1730.518572][T31892] 9p: Bad value for 'rfdno' [ 1730.592671][T27744] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1730.610642][T31892] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1730.615761][T27744] usb 5-1: device descriptor read/8, error -71 [ 1730.635030][T31892] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1730.637617][T31892] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1730.640503][T31892] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1730.665171][T31892] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1730.668321][T31892] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 22790 usecs [ 1730.696522][T31892] pci 0000:00:01.0: Adding to iommu group 1 [ 1730.709892][T31892] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1730.712068][T31892] pci 0000:00:01.0: vgaarb: bridge control possible [ 1730.714164][T31892] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1730.727875][T31892] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1730.730737][T31892] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1730.736490][T31892] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1730.749655][T31892] [drm] Found bochs VGA, ID 0xb0c5. [ 1730.751617][T31892] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1730.764717][T31892] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1730.834586][T31892] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1730.871055][T27744] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1730.891714][T27744] usb 5-1: device descriptor read/8, error -71 [ 1731.001556][T27744] usb usb5-port1: unable to enumerate USB device [ 1731.265347][T31905] siw: device registration error -23 [ 1732.614748][T31917] 9p: Bad value for 'rfdno' [ 1733.748526][T31925] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1733.786333][T31925] bond25: entered promiscuous mode [ 1734.628814][T31935] i2c i2c-0: new_device: Extra parameters [ 1734.633080][T31935] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1734.719751][T31940] 9p: Bad value for 'rfdno' [ 1735.262192][T31943] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1735.293502][T31943] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1735.296491][T31943] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1735.299269][T31943] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1735.306411][T31943] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1735.317295][T31943] pci 0000:00:01.0: Adding to iommu group 1 [ 1735.325406][T31943] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1735.327885][T31943] pci 0000:00:01.0: vgaarb: bridge control possible [ 1735.330260][T31943] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1735.343173][T31943] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1735.345952][T31943] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1735.349721][T31943] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1735.361027][T31943] [drm] Found bochs VGA, ID 0xb0c5. [ 1735.363294][T31943] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1735.385901][T31943] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1735.466374][T31943] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1735.571031][T31935] bond22: entered promiscuous mode [ 1735.781334][T31956] 9p: Bad value for 'rfdno' [ 1735.848065][T31957] siw: device registration error -23 [ 1737.330938][ T34] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1737.500947][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 1737.513431][ T34] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 1737.516532][ T34] usb 7-1: config 0 has no interface number 0 [ 1737.519033][ T34] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1737.524277][ T34] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1737.528264][ T34] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1737.533421][ T34] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 1737.538130][ T34] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 1737.543840][ T34] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1737.551640][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1737.555340][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.558760][ T34] usb 7-1: Product: syz [ 1737.560486][ T34] usb 7-1: Manufacturer: syz [ 1737.562873][ T34] usb 7-1: SerialNumber: syz [ 1737.571512][ T34] usb 7-1: config 0 descriptor?? [ 1737.582315][T31974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1737.583605][T31987] i2c i2c-0: new_device: Extra parameters [ 1737.603026][T31987] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1737.768483][T31987] bond26: entered promiscuous mode [ 1737.810474][T31974] read descriptors [ 1737.812939][T31974] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 1737.843429][ T34] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1737.884065][ T34] usb 7-1: USB disconnect, device number 105 [ 1737.921636][T31992] siw: device registration error -23 [ 1738.396093][T23486] ffs_data_put(): freeing [ 1739.041139][T31996] syz.3.6865: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1739.048900][T31996] CPU: 1 UID: 0 PID: 31996 Comm: syz.3.6865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1739.048932][T31996] Tainted: [L]=SOFTLOCKUP [ 1739.048939][T31996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1739.048963][T31996] Call Trace: [ 1739.048978][T31996] [ 1739.048986][T31996] dump_stack_lvl+0x100/0x190 [ 1739.049119][T31996] warn_alloc.cold+0x94/0xa8 [ 1739.049141][T31996] ? __pfx_warn_alloc+0x10/0x10 [ 1739.049169][T31996] ? policy_nodemask+0xed/0x4f0 [ 1739.049205][T31996] ? alloc_pages_mpol+0x25a/0x540 [ 1739.049233][T31996] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1739.049260][T31996] ? __kmalloc_node_noprof+0x357/0x830 [ 1739.049283][T31996] ? __get_vm_area_node+0x180/0x330 [ 1739.049308][T31996] ? __get_vm_area_node+0x208/0x330 [ 1739.049341][T31996] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 1739.049378][T31996] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1739.049453][T31996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1739.049485][T31996] ? kasan_quarantine_put+0x104/0x240 [ 1739.049508][T31996] ? lockdep_hardirqs_on+0x78/0x100 [ 1739.049565][T31996] __kvmalloc_node_noprof+0x3d3/0x970 [ 1739.049589][T31996] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1739.049617][T31996] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1739.049648][T31996] ? __pfx_br_dev_setup+0x10/0x10 [ 1739.049677][T31996] alloc_netdev_mqs+0xd7/0x15c0 [ 1739.049711][T31996] rtnl_create_link+0xc13/0xf80 [ 1739.049744][T31996] rtnl_newlink+0x13bd/0x2380 [ 1739.049781][T31996] ? __pfx_rtnl_newlink+0x10/0x10 [ 1739.049809][T31996] ? rcu_is_watching+0x12/0xc0 [ 1739.049841][T31996] ? kasan_quarantine_put+0x104/0x240 [ 1739.049868][T31996] ? kfree_skbmem+0x19a/0x210 [ 1739.049887][T31996] ? kmem_cache_free+0x127/0x6b0 [ 1739.049919][T31996] ? find_held_lock+0x2b/0x80 [ 1739.049952][T31996] ? find_held_lock+0x2b/0x80 [ 1739.049974][T31996] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1739.050001][T31996] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1739.050032][T31996] ? __pfx_rtnl_newlink+0x10/0x10 [ 1739.050061][T31996] rtnetlink_rcv_msg+0x95e/0xe90 [ 1739.050091][T31996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1739.050127][T31996] ? ref_tracker_free+0x37e/0x6c0 [ 1739.050182][T31996] netlink_rcv_skb+0x159/0x420 [ 1739.050210][T31996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1739.050239][T31996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1739.050271][T31996] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1739.050297][T31996] netlink_unicast+0x585/0x850 [ 1739.050323][T31996] ? __pfx_netlink_unicast+0x10/0x10 [ 1739.050353][T31996] netlink_sendmsg+0x8b0/0xda0 [ 1739.050379][T31996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.050405][T31996] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1739.050442][T31996] ____sys_sendmsg+0xa4d/0xbe0 [ 1739.050461][T31996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.050485][T31996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1739.050518][T31996] ___sys_sendmsg+0x190/0x1e0 [ 1739.050542][T31996] ? __pfx____sys_sendmsg+0x10/0x10 [ 1739.050564][T31996] ? futex_wait+0x11e/0x370 [ 1739.050598][T31996] ? find_held_lock+0x2b/0x80 [ 1739.050635][T31996] __sys_sendmsg+0x160/0x210 [ 1739.050665][T31996] ? __pfx___sys_sendmsg+0x10/0x10 [ 1739.050706][T31996] __do_fast_syscall_32+0xe7/0x970 [ 1739.050737][T31996] do_fast_syscall_32+0x32/0x70 [ 1739.050763][T31996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1739.050787][T31996] RIP: 0023:0xf7f45fec [ 1739.050834][T31996] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 1739.050842][T31996] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1739.050862][T31996] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 1739.050874][T31996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1739.050886][T31996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1739.050897][T31996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1739.050909][T31996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.050934][T31996] [ 1739.218372][T31996] Mem-Info: [ 1739.219926][T31996] active_anon:5390 inactive_anon:721 isolated_anon:0 [ 1739.219926][T31996] active_file:6099 inactive_file:14903 isolated_file:0 [ 1739.219926][T31996] unevictable:1768 dirty:367 writeback:0 [ 1739.219926][T31996] slab_reclaimable:6672 slab_unreclaimable:67117 [ 1739.219926][T31996] mapped:25946 shmem:4695 pagetables:1069 [ 1739.219926][T31996] sec_pagetables:333 bounce:0 [ 1739.219926][T31996] kernel_misc_reclaimable:0 [ 1739.219926][T31996] free:43078 free_pcp:18223 free_cma:0 [ 1739.241189][T31996] Node 0 active_anon:108kB inactive_anon:140kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1168kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1739.256256][T31996] Node 1 active_anon:21952kB inactive_anon:2744kB active_file:24396kB inactive_file:59612kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:103756kB dirty:1468kB writeback:0kB shmem:17244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8364kB pagetables:3108kB sec_pagetables:208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1739.270246][T31996] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:168kB free_cma:0kB [ 1739.281953][T31996] lowmem_reserve[]: 0 280 280 280 280 [ 1739.284295][T31996] Node 0 DMA32 free:15904kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:420kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:13612kB local_pcp:3724kB free_cma:0kB [ 1739.297498][T31996] lowmem_reserve[]: 0 0 0 0 0 [ 1739.299554][T31996] Node 1 DMA32 free:153040kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22452kB inactive_anon:2744kB active_file:24396kB inactive_file:59612kB unevictable:5536kB writepending:1468kB zspages:4808kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:58744kB local_pcp:22560kB free_cma:0kB [ 1739.313497][T31996] lowmem_reserve[]: 0 0 0 0 0 [ 1739.315591][T31996] Node 0 DMA: 34*4kB (UM) 16*8kB (UM) 8*16kB (UM) 4*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 1739.321910][T31996] Node 0 DMA32: 108*4kB (UME) 108*8kB (UE) 75*16kB (UME) 139*32kB (UE) 44*64kB (UME) 16*128kB (UM) 2*256kB (UE) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 15904kB [ 1739.328948][T31996] Node 1 DMA32: 4*4kB (UE) 26*8kB (UME) 11*16kB (ME) 68*32kB (ME) 253*64kB (UME) 158*128kB (UME) 77*256kB (UME) 44*512kB (UME) 12*1024kB (UM) 4*2048kB (M) 12*4096kB (UM) = 150864kB [ 1739.336590][T31996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.340702][T31996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1739.344831][T31996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.348790][T31996] Node 1 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 1739.353148][T31996] 26169 total pagecache pages [ 1739.354728][T31996] 474 pages in swap cache [ 1739.356219][T31996] Free swap = 100340kB [ 1739.357593][T31996] Total swap = 124996kB [ 1739.358991][T31996] 524155 pages RAM [ 1739.360301][T31996] 0 pages HighMem/MovableOnly [ 1739.362572][T31996] 211532 pages reserved [ 1739.364612][T31996] 0 pages cma reserved [ 1739.594757][T32003] i2c i2c-0: new_device: Extra parameters [ 1739.597532][T32003] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1739.907354][T32003] bond29: entered promiscuous mode [ 1740.722265][T32018] binder: 32017:32018 ioctl c0306201 0 returned -14 [ 1740.828695][T32020] siw: device registration error -23 [ 1741.719415][T32024] tmpfs: Unknown parameter 'nr_ino' [ 1743.864032][T32046] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1743.869403][T32046] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1744.005651][T32046] bond27: entered promiscuous mode [ 1744.116752][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1744.333435][ T34] usb 5-1: config index 0 descriptor too short (expected 10276, got 36) [ 1744.337997][ T34] usb 5-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 1744.347379][ T34] usb 5-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 1744.363468][ T34] usb 5-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1744.368248][ T34] usb 5-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1744.385497][ T34] usb 5-1: config 109 interface 0 has no altsetting 0 [ 1744.390692][ T34] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1744.412993][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.520707][T32056] siw: device registration error -23 [ 1746.082032][T32068] 9p: Bad value for 'rfdno' [ 1746.455082][T32074] 9p: Bad value for 'rfdno' [ 1746.807611][ T34] usb 5-1: string descriptor 0 read error: -71 [ 1746.813664][T32075] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1746.814102][ T34] usbhid 5-1:109.0: can't add hid device: -71 [ 1746.834079][T32075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1746.837184][T32075] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1746.838679][ T34] usbhid 5-1:109.0: probe with driver usbhid failed with error -71 [ 1746.840997][T32075] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1746.846571][ T34] usb 5-1: USB disconnect, device number 10 [ 1746.848251][T32075] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1746.980319][T32075] pci 0000:00:01.0: Adding to iommu group 1 [ 1747.042006][T32075] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1747.044749][T32075] pci 0000:00:01.0: vgaarb: bridge control possible [ 1747.047346][T32075] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1747.069536][T32075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1747.079883][T32083] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1747.082644][T32075] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1747.102207][T32075] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1747.159196][T32075] [drm] Found bochs VGA, ID 0xb0c5. [ 1747.161700][T32075] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1747.194078][T32075] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1747.315285][T32075] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1747.405485][T32083] bond30: entered promiscuous mode [ 1748.180877][T32096] loop8: detected capacity change from 0 to 7 [ 1748.222961][T32097] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1748.266201][T32097] bond30: entered promiscuous mode [ 1748.329279][T32096] Dev loop8: unable to read RDB block 7 [ 1748.331498][T32096] loop8: unable to read partition table [ 1748.334210][T32096] loop8: partition table beyond EOD, truncated [ 1748.340611][T32096] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1748.628862][T32102] lo speed is unknown, defaulting to 1000 [ 1748.759025][T32106] tmpfs: Unknown parameter 'nr_ino' [ 1749.197057][T32115] 9p: Bad value for 'rfdno' [ 1750.364227][T32127] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1750.372291][T32127] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1750.554259][T32127] bond31: entered promiscuous mode [ 1751.455501][T32141] Failed to initialize the IGMP6 autojoin socket (err -105) [ 1752.309695][T32152] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1752.317085][T32152] i2c i2c-0: new_device: Missing parameters [ 1752.415039][T32152] bond32: entered promiscuous mode [ 1752.458171][T32155] syz.0.6910: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1752.465903][T32155] CPU: 2 UID: 0 PID: 32155 Comm: syz.0.6910 Tainted: G L syzkaller #0 PREEMPT(full) [ 1752.465931][T32155] Tainted: [L]=SOFTLOCKUP [ 1752.465937][T32155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1752.465961][T32155] Call Trace: [ 1752.465976][T32155] [ 1752.465983][T32155] dump_stack_lvl+0x100/0x190 [ 1752.466111][T32155] warn_alloc.cold+0x94/0xa8 [ 1752.466132][T32155] ? __pfx_warn_alloc+0x10/0x10 [ 1752.466157][T32155] ? policy_nodemask+0xed/0x4f0 [ 1752.466184][T32155] ? alloc_pages_mpol+0x25a/0x540 [ 1752.466210][T32155] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1752.466235][T32155] ? __kmalloc_node_noprof+0x357/0x830 [ 1752.466257][T32155] ? __get_vm_area_node+0x180/0x330 [ 1752.466284][T32155] ? __get_vm_area_node+0x208/0x330 [ 1752.466316][T32155] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 1752.466351][T32155] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1752.466423][T32155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1752.466453][T32155] ? kasan_quarantine_put+0x104/0x240 [ 1752.466474][T32155] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.466525][T32155] __kvmalloc_node_noprof+0x3d3/0x970 [ 1752.466547][T32155] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1752.466574][T32155] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1752.466602][T32155] ? __pfx_br_dev_setup+0x10/0x10 [ 1752.466630][T32155] alloc_netdev_mqs+0xd7/0x15c0 [ 1752.466661][T32155] rtnl_create_link+0xc13/0xf80 [ 1752.466692][T32155] rtnl_newlink+0x13bd/0x2380 [ 1752.466732][T32155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1752.466758][T32155] ? rcu_is_watching+0x12/0xc0 [ 1752.466785][T32155] ? kasan_quarantine_put+0x104/0x240 [ 1752.466810][T32155] ? kfree_skbmem+0x19a/0x210 [ 1752.466828][T32155] ? kmem_cache_free+0x127/0x6b0 [ 1752.466856][T32155] ? find_held_lock+0x2b/0x80 [ 1752.466886][T32155] ? find_held_lock+0x2b/0x80 [ 1752.466907][T32155] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1752.466932][T32155] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1752.466961][T32155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1752.466987][T32155] rtnetlink_rcv_msg+0x95e/0xe90 [ 1752.467016][T32155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.467050][T32155] ? ref_tracker_free+0x37e/0x6c0 [ 1752.467112][T32155] netlink_rcv_skb+0x159/0x420 [ 1752.467136][T32155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.467165][T32155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1752.467194][T32155] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1752.467217][T32155] netlink_unicast+0x585/0x850 [ 1752.467241][T32155] ? __pfx_netlink_unicast+0x10/0x10 [ 1752.467268][T32155] netlink_sendmsg+0x8b0/0xda0 [ 1752.467292][T32155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.467315][T32155] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1752.467347][T32155] ____sys_sendmsg+0xa4d/0xbe0 [ 1752.467365][T32155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.467387][T32155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.467417][T32155] ___sys_sendmsg+0x190/0x1e0 [ 1752.467438][T32155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.467459][T32155] ? futex_wait+0x11e/0x370 [ 1752.467491][T32155] ? find_held_lock+0x2b/0x80 [ 1752.467528][T32155] __sys_sendmsg+0x160/0x210 [ 1752.467554][T32155] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.467593][T32155] __do_fast_syscall_32+0xe7/0x970 [ 1752.467617][T32155] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.467642][T32155] do_fast_syscall_32+0x32/0x70 [ 1752.467667][T32155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1752.467690][T32155] RIP: 0023:0xf70aefec [ 1752.467716][T32155] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1752.467724][T32155] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1752.467744][T32155] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000280 [ 1752.467757][T32155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.467768][T32155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.467779][T32155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1752.467790][T32155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.467813][T32155] [ 1752.467830][T32155] Mem-Info: [ 1752.630345][T32155] active_anon:1929 inactive_anon:712 isolated_anon:0 [ 1752.630345][T32155] active_file:6099 inactive_file:14909 isolated_file:0 [ 1752.630345][T32155] unevictable:1768 dirty:469 writeback:0 [ 1752.630345][T32155] slab_reclaimable:6670 slab_unreclaimable:66858 [ 1752.630345][T32155] mapped:22996 shmem:1825 pagetables:1074 [ 1752.630345][T32155] sec_pagetables:333 bounce:0 [ 1752.630345][T32155] kernel_misc_reclaimable:0 [ 1752.630345][T32155] free:42783 free_pcp:21376 free_cma:0 [ 1752.652568][T32155] Node 0 active_anon:144kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1168kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1752.652624][T32155] Node 1 active_anon:7572kB inactive_anon:2744kB active_file:24396kB inactive_file:59636kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:91956kB dirty:1876kB writeback:0kB shmem:5764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8668kB pagetables:3128kB sec_pagetables:208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1752.652674][T32155] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:180kB free_cma:0kB [ 1752.652736][T32155] lowmem_reserve[]: 0 280 280 280 280 [ 1752.652776][T32155] Node 0 DMA32 free:15904kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:420kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:13672kB local_pcp:2980kB free_cma:0kB [ 1752.652834][T32155] lowmem_reserve[]: 0 0 0 0 0 [ 1752.652874][T32155] Node 1 DMA32 free:153172kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7572kB inactive_anon:2744kB active_file:24396kB inactive_file:59636kB unevictable:5536kB writepending:1876kB zspages:4808kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:70872kB local_pcp:11600kB free_cma:0kB [ 1752.652931][T32155] lowmem_reserve[]: 0 0 0 0 0 [ 1752.652970][T32155] Node 0 DMA: 34*4kB (UM) 16*8kB (UM) 8*16kB (UM) 4*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 1752.653120][T32155] Node 0 DMA32: 108*4kB (UME) 108*8kB (UE) 75*16kB (UME) 139*32kB (UE) 44*64kB (UME) 16*128kB (UM) 2*256kB (UE) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 15904kB [ 1752.653286][T32155] Node 1 DMA32: 1247*4kB (UME) 745*8kB (UME) 109*16kB (UME) 114*32kB (UME) 202*64kB (UME) 152*128kB (UME) 80*256kB (UME) 46*512kB (UME) 13*1024kB (UM) 5*2048kB (M) 9*4096kB (UM) = 153172kB [ 1752.653468][T32155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1752.653484][T32155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1752.759767][T32155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1752.764181][T32155] Node 1 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 1752.768184][T32155] 23305 total pagecache pages [ 1752.770245][T32155] 474 pages in swap cache [ 1752.772764][T32155] Free swap = 100336kB [ 1752.774650][T32155] Total swap = 124996kB [ 1752.776468][T32155] 524155 pages RAM [ 1752.778086][T32155] 0 pages HighMem/MovableOnly [ 1752.780117][T32155] 211532 pages reserved [ 1752.781987][T32155] 0 pages cma reserved [ 1752.896257][T32163] tmpfs: Unknown parameter 'nr_ino' [ 1753.504515][T32170] 9p: Bad value for 'rfdno' [ 1753.715635][T32174] loop8: detected capacity change from 0 to 7 [ 1753.732611][T32174] Dev loop8: unable to read RDB block 7 [ 1753.735004][T32174] loop8: unable to read partition table [ 1753.737906][T32174] loop8: partition table beyond EOD, truncated [ 1753.740504][T32174] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1754.098818][T32182] siw: device registration error -23 [ 1754.938691][T32170] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1754.955510][T32170] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1754.958049][T32170] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1754.960430][T32170] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1754.963377][T32170] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1755.756190][T32190] siw: device registration error -23 [ 1755.895170][T32170] pci 0000:00:01.0: Adding to iommu group 1 [ 1755.900169][T32170] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1755.902317][T32170] pci 0000:00:01.0: vgaarb: bridge control possible [ 1755.904401][T32170] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1755.915149][T32170] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1755.917785][T32170] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1755.922646][T32170] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1755.934866][T32170] [drm] Found bochs VGA, ID 0xb0c5. [ 1755.936823][T32170] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1755.946923][T32170] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1755.991553][T32170] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1757.567590][T32210] siw: device registration error -23 [ 1757.829323][T32212] netlink: 'syz.3.6925': attribute type 10 has an invalid length. [ 1760.082908][T32216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.340142][T32216] bond25: left promiscuous mode [ 1760.343687][T32216] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1760.351089][T32216] bond26: left promiscuous mode [ 1760.353002][T32216] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1760.438698][T32216] bond27: left promiscuous mode [ 1760.446953][T32216] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1760.577363][T32225] 9p: Bad value for 'rfdno' [ 1760.791597][T32224] Failed to initialize the IGMP6 control socket (err -105) [ 1761.169446][T32237] syzkaller0: entered promiscuous mode [ 1761.180918][T32237] syzkaller0: entered allmulticast mode [ 1761.185813][T32230] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1761.214154][T32230] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1761.216696][T32230] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1761.219221][T32230] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1761.222709][T32230] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1761.271746][T32230] pci 0000:00:01.0: Adding to iommu group 1 [ 1761.293948][T32230] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1761.296858][T32230] pci 0000:00:01.0: vgaarb: bridge control possible [ 1761.299589][T32230] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1761.395730][T32230] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1761.398571][T32230] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1761.405716][T32230] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1761.438361][T32230] [drm] Found bochs VGA, ID 0xb0c5. [ 1761.440072][T32230] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1761.447499][T32230] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1761.807708][T32262] siw: device registration error -23 [ 1763.263908][T32290] 9p: Bad value for 'rfdno' [ 1763.357216][T32295] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1763.363939][T32295] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1763.366467][T32297] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1763.390521][T32297] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1763.393407][T32297] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1763.396338][T32297] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1763.407240][T32297] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1763.460980][T32288] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.466639][T32297] pci 0000:00:01.0: Adding to iommu group 1 [ 1763.524749][T32297] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1763.526969][T32297] pci 0000:00:01.0: vgaarb: bridge control possible [ 1763.529065][T32297] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1763.543754][T32297] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1763.547161][T32297] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1763.553784][T32297] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1763.632878][T32297] [drm] Found bochs VGA, ID 0xb0c5. [ 1763.634779][T32297] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1763.715697][T32297] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1763.755301][T23701] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1763.828243][T32297] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1763.931788][T23701] usb 5-1: Using ep0 maxpacket: 8 [ 1763.965585][T23701] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1763.969441][T23701] usb 5-1: config 0 has no interface number 0 [ 1763.980211][T23701] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1763.984885][T23701] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1763.988121][T23701] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1763.997344][T23701] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 1764.003235][T23701] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 1764.007742][T23701] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.027238][T23701] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1764.031768][T23701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.045741][T23701] usb 5-1: Product: syz [ 1764.050326][T23701] usb 5-1: Manufacturer: syz [ 1764.053523][T32295] bond23: entered promiscuous mode [ 1764.062425][T23701] usb 5-1: SerialNumber: syz [ 1764.134558][T23701] usb 5-1: config 0 descriptor?? [ 1764.178446][T32298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1764.208528][T32306] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1764.214987][T32306] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1764.287464][T32306] bond28: entered promiscuous mode [ 1764.596074][T32293] read descriptors [ 1764.597713][T32293] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 1764.646709][T23701] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1764.665235][T23701] usb 5-1: USB disconnect, device number 11 [ 1764.948453][T32311] No control pipe specified [ 1765.067119][T32314] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1765.070194][T32314] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1765.159456][T32314] bond33: entered promiscuous mode [ 1765.267643][T32323] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6959'. [ 1765.301811][T32288] Bluetooth: hci2: command 0x0406 tx timeout [ 1765.448271][T23796] ffs_data_put(): freeing [ 1765.551669][T32326] Bluetooth: hci3: command 0x0406 tx timeout [ 1766.012415][T32335] No control pipe specified [ 1767.392809][T32326] Bluetooth: hci4: command 0x0406 tx timeout [ 1767.395772][T32288] Bluetooth: hci2: command 0x0406 tx timeout [ 1767.507091][T32367] tmpfs: Unknown parameter 'nr_ino' [ 1768.589649][T32375] No control pipe specified [ 1768.889667][T32378] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1768.896897][T32378] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1768.963702][T32378] bond29: entered promiscuous mode [ 1769.461181][T25462] Bluetooth: hci4: command 0x0406 tx timeout [ 1770.344833][T32404] siw: device registration error -23 [ 1771.568681][T32415] 9p: Bad value for 'rfdno' [ 1771.965526][T32418] binder: 32417:32418 ioctl c0306201 0 returned -14 [ 1772.045160][T32416] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1772.090536][T32416] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1772.095252][T32416] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1772.100234][T32416] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1772.109785][T32416] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1772.150492][T32416] pci 0000:00:01.0: Adding to iommu group 1 [ 1772.187415][T32416] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1772.190309][T32416] pci 0000:00:01.0: vgaarb: bridge control possible [ 1772.192641][T32416] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1772.213121][T32416] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1772.217413][T32416] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1772.237166][T32416] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1772.263411][T32424] binder: 32422:32424 ioctl c0306201 0 returned -14 [ 1772.294613][T32416] [drm] Found bochs VGA, ID 0xb0c5. [ 1772.297058][T32416] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1772.414132][T32416] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1772.739148][T32416] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1773.655486][T32454] siw: device registration error -23 [ 1773.667875][T32454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1773.947853][T32453] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1773.957299][T32453] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1774.566048][T32463] syzkaller0: entered promiscuous mode [ 1774.567852][T32463] syzkaller0: entered allmulticast mode [ 1774.777919][T32471] binder: 32470:32471 ioctl c0306201 0 returned -14 [ 1775.061179][T25462] Bluetooth: hci4: command 0x0406 tx timeout [ 1775.190913][T16181] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1775.343444][T16181] usb 5-1: Using ep0 maxpacket: 8 [ 1775.369382][T16181] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1775.375261][T16181] usb 5-1: config 0 has no interface number 0 [ 1775.377890][T16181] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1775.387928][T16181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.407544][T16181] usb 5-1: config 0 descriptor?? [ 1775.533709][T16181] viperboard 5-1:0.143: version 0.00 found at bus 005 address 012 [ 1775.566328][T32486] siw: device registration error -23 [ 1775.849817][T32491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7005'. [ 1775.869883][T32478] WARNING! power/level is deprecated; use power/control instead [ 1777.140947][T32326] Bluetooth: hci4: command 0x0406 tx timeout [ 1777.368199][T16181] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1777.372852][T16181] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 1777.389873][T16181] usb 5-1: USB disconnect, device number 12 [ 1777.659933][T32499] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 1777.663357][T32499] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 1779.224906][T32516] 9p: Bad value for 'rfdno' [ 1779.752211][T32517] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1779.855792][T32517] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1779.865716][T32517] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 1779.878002][T32517] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1779.885631][T32517] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1779.914358][T32517] pci 0000:00:01.0: Adding to iommu group 1 [ 1779.927791][T32517] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1779.929852][T32517] pci 0000:00:01.0: vgaarb: bridge control possible [ 1779.931904][T32517] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1779.969489][T32517] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1779.976314][T32517] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 1779.987288][T32517] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1780.015839][T32517] [drm] Found bochs VGA, ID 0xb0c5. [ 1780.026055][T32517] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 1780.036803][T32517] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1780.433130][T32326] Bluetooth: hci2: command 0x0406 tx timeout [ 1782.501107][T32326] Bluetooth: hci2: command 0x0406 tx timeout [ 1782.617336][T32542] binder: 32541:32542 ioctl c0306201 80000080 returned -14 [ 1782.843041][T32546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1783.127236][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1783.278023][T32570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7032'. [ 1783.373209][T32580] netlink: 'syz.2.7037': attribute type 10 has an invalid length. [ 1783.385961][T32580] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1783.442298][T32584] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7041'. [ 1783.652505][T32602] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1783.667496][T32604] netlink: 'syz.3.7049': attribute type 29 has an invalid length. [ 1783.702676][T32604] netlink: 'syz.3.7049': attribute type 29 has an invalid length. [ 1784.045337][T32636] netlink: 392 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1784.053883][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7067'. [ 1784.065337][T32638] netlink: 'syz.2.7068': attribute type 46 has an invalid length. [ 1784.067901][T32638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7068'. [ 1784.188963][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1784.198660][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1784.628424][T32680] netlink: 'syz.0.7088': attribute type 46 has an invalid length. [ 1784.631259][T32680] netlink: 'syz.0.7088': attribute type 28 has an invalid length. [ 1784.634518][T32681] netlink: 'syz.3.7087': attribute type 11 has an invalid length. [ 1784.674656][T32683] syzkaller0: entered promiscuous mode [ 1784.678888][T32683] syzkaller0: entered allmulticast mode [ 1784.836494][T32701] netlink: 'syz.0.7097': attribute type 16 has an invalid length. [ 1785.255940][T32750] tap0: tun_chr_ioctl cmd 1074025677 [ 1785.257915][T32750] tap0: linktype set to 778 [ 1785.434285][T32326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1785.473130][T32326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1785.498504][T32326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1785.524768][T23486] syz_tun (unregistering): left allmulticast mode [ 1785.526212][T32326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1785.533438][T32326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1785.732210][T27186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.797678][ T337] netlink: 'syz.0.7146': attribute type 2 has an invalid length. [ 1785.800966][ T337] netlink: 'syz.0.7146': attribute type 11 has an invalid length. [ 1785.859960][T27186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.988683][T27186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.067579][T32766] lo speed is unknown, defaulting to 1000 [ 1786.164299][T27186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.562705][T32766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.571174][T32766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.577176][T32766] bridge_slave_0: entered allmulticast mode [ 1786.588731][T32766] bridge_slave_0: entered promiscuous mode [ 1786.599422][T32766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.611334][T32766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.617038][T32766] bridge_slave_1: entered allmulticast mode [ 1786.627916][T32766] bridge_slave_1: entered promiscuous mode [ 1786.653311][T32766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.657847][T32766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.680459][T32766] team0: Port device team_slave_0 added [ 1786.686722][T32766] team0: Port device team_slave_1 added [ 1786.709330][T32766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.712075][T32766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.722018][T32766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.730451][T32766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.733734][T32766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.745048][T32766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.775201][T32766] hsr_slave_0: entered promiscuous mode [ 1786.777799][T32766] hsr_slave_1: entered promiscuous mode [ 1786.780379][T32766] debugfs: 'hsr0' already exists in 'hsr' [ 1786.782584][T32766] Cannot create hsr debugfs directory [ 1786.786027][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1787.234323][T27186] bridge_slave_1: left allmulticast mode [ 1787.236669][T27186] bridge_slave_1: left promiscuous mode [ 1787.242459][T27186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.256836][T27186] bridge_slave_0: left allmulticast mode [ 1787.259168][T27186] bridge_slave_0: left promiscuous mode [ 1787.264363][T27186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.497189][T27186] team0: Port device bond0 removed [ 1787.503523][T27186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.509661][T27186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.519130][T27186] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1787.524024][T27186] bond0 (unregistering): Released all slaves [ 1787.531610][T27186] bond1 (unregistering): Released all slaves [ 1787.545048][T27186] bond2 (unregistering): Released all slaves [ 1787.556488][T27186] bond3 (unregistering): Released all slaves [ 1787.568000][T27186] bond4 (unregistering): Released all slaves [ 1787.579269][T27186] bond5 (unregistering): Released all slaves [ 1787.594862][T27186] bond6 (unregistering): Released all slaves [ 1787.619490][T27186] bond7 (unregistering): Released all slaves [ 1787.631210][T32326] Bluetooth: hci1: command tx timeout [ 1787.634887][T27186] bond8 (unregistering): Released all slaves [ 1787.646782][T27186] bond9 (unregistering): Released all slaves [ 1787.658025][T27186] bond10 (unregistering): Released all slaves [ 1787.668448][T27186] bond11 (unregistering): Released all slaves [ 1787.680425][T27186] bond12 (unregistering): Released all slaves [ 1787.699274][T27186] bond13 (unregistering): Released all slaves [ 1787.713566][T27186] bond14 (unregistering): Released all slaves [ 1787.724238][T27186] bond15 (unregistering): Released all slaves [ 1787.734235][T27186] bond16 (unregistering): Released all slaves [ 1787.752797][T27186] bond17 (unregistering): Released all slaves [ 1787.765379][T27186] bond18 (unregistering): Released all slaves [ 1787.791780][T27186] bond19 (unregistering): Released all slaves [ 1787.799214][T27186] bond20 (unregistering): Released all slaves [ 1787.811462][T27186] bond21 (unregistering): Released all slaves [ 1787.818840][T27186] bond22 (unregistering): Released all slaves [ 1787.829107][T27186] bond23 (unregistering): Released all slaves [ 1787.839972][T27186] bond24 (unregistering): Released all slaves [ 1787.847855][T27186] bond25 (unregistering): Released all slaves [ 1787.855377][T27186] bond26 (unregistering): Released all slaves [ 1787.868480][T27186] bond27 (unregistering): Released all slaves [ 1787.875945][T27186] bond28 (unregistering): Released all slaves [ 1787.883268][T27186] bond29 (unregistering): Released all slaves [ 1787.890727][T27186] bond30 (unregistering): Released all slaves [ 1787.904746][T27186] bond31 (unregistering): Released all slaves [ 1787.912452][T27186] bond32 (unregistering): Released all slaves [ 1787.920377][T27186] bond33 (unregistering): Released all slaves [ 1787.948491][ T433] __nla_validate_parse: 14 callbacks suppressed [ 1787.948506][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7184'. [ 1788.376849][ T478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7203'. [ 1788.406627][T27186] tipc: Left network mode [ 1788.430995][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1788.529240][ T483] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1788.589864][ T486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1788.613875][ T486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1788.643785][ T486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1788.779751][ T498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1788.928361][ T504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1788.937506][ T504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1788.944717][ T504] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1788.986698][T27186] hsr_slave_0: left promiscuous mode [ 1789.010973][T27186] hsr_slave_1: left promiscuous mode [ 1789.027374][T27186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.029980][T27186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.046654][T27186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.049047][T27186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.088551][T27186] veth1_macvtap: left promiscuous mode [ 1789.090651][T27186] veth0_macvtap: left promiscuous mode [ 1789.093135][T27186] veth1_vlan: left promiscuous mode [ 1789.095129][T27186] veth0_vlan: left promiscuous mode [ 1789.362040][T27186] team0 (unregistering): Port device team_slave_1 removed [ 1789.369622][T27186] team0 (unregistering): Port device team_slave_0 removed [ 1789.593929][ T524] lo speed is unknown, defaulting to 1000 [ 1789.721115][T32326] Bluetooth: hci1: command tx timeout [ 1789.763031][ T545] lo speed is unknown, defaulting to 1000 [ 1789.850153][ T547] lo speed is unknown, defaulting to 1000 [ 1789.969758][ T549] lo speed is unknown, defaulting to 1000 [ 1789.970184][ T553] tipc: New replicast peer: 127.0.0.1 [ 1789.977604][ T553] tipc: Enabled bearer , priority 10 [ 1789.985624][ T545] lo speed is unknown, defaulting to 1000 [ 1790.027938][ T553] tipc: Disabling bearer [ 1790.066420][ T560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7227'. [ 1790.124604][T32766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1790.388863][T32766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1790.410713][T32766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1790.423421][T32766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1790.432765][T32766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1790.450597][T32766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1790.471678][T32766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1790.478818][T32766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1790.826862][T32766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.885426][T32766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.968770][T20338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.971225][T20338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.051772][T20338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.054157][T20338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.395519][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.628551][ T613] smc: net device lo applied user defined pnetid SYZ0 [ 1791.781182][T32326] Bluetooth: hci1: command tx timeout [ 1791.810238][ T626] ovs-system: entered promiscuous mode [ 1791.979007][ T645] lo speed is unknown, defaulting to 1000 [ 1792.174425][T32766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.273471][T32766] veth0_vlan: entered promiscuous mode [ 1792.324471][T32766] veth1_vlan: entered promiscuous mode [ 1792.392809][T32766] veth0_macvtap: entered promiscuous mode [ 1792.402670][T32766] veth1_macvtap: entered promiscuous mode [ 1792.427615][T32766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.472088][T32766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1792.527174][T16108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.535268][T16108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.542252][T16108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.549088][T16108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.604345][ T677] tipc: New replicast peer: 127.0.0.1 [ 1792.610637][ T677] tipc: Enabled bearer , priority 10 [ 1792.616398][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.619268][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.638871][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.643521][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.671427][ T680] tipc: Disabling bearer [ 1792.868453][T25462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1792.879411][T25462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1792.883508][T25462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1792.888961][T25462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1792.891939][T25462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1793.036582][T23666] syz_tun (unregistering): left allmulticast mode [ 1793.148908][ T689] lo speed is unknown, defaulting to 1000 [ 1793.189778][ T713] validate_nla: 4 callbacks suppressed [ 1793.189790][ T713] netlink: 'syz.2.7282': attribute type 2 has an invalid length. [ 1793.295491][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.297890][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.300204][ T689] bridge_slave_0: entered allmulticast mode [ 1793.303991][ T689] bridge_slave_0: entered promiscuous mode [ 1793.308324][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.310426][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.312848][ T689] bridge_slave_1: entered allmulticast mode [ 1793.315670][ T689] bridge_slave_1: entered promiscuous mode [ 1793.331474][ T689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.336082][ T689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.352193][ T689] team0: Port device team_slave_0 added [ 1793.355406][ T689] team0: Port device team_slave_1 added [ 1793.368811][ T689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.371267][ T689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.379113][ T689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.385624][ T689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.387781][ T689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.395958][ T689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.420402][ T689] hsr_slave_0: entered promiscuous mode [ 1793.422709][ T689] hsr_slave_1: entered promiscuous mode [ 1793.424873][ T689] debugfs: 'hsr0' already exists in 'hsr' [ 1793.426770][ T689] Cannot create hsr debugfs directory [ 1793.598793][ T689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.619355][ T731] __nla_validate_parse: 9 callbacks suppressed [ 1793.619368][ T731] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1793.725391][ T689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.746556][ T737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7289'. [ 1793.749723][ T737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7289'. [ 1793.845918][ T689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.861370][T32326] Bluetooth: hci1: command tx timeout [ 1793.946215][ T689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.140115][ T689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1794.159553][ T689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1794.162706][ T689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1794.167606][ T689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1794.172723][ T689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1794.179080][ T689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1794.188081][ T689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1794.196069][ T689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1794.279301][ T756] sctp: [Deprecated]: syz.2.7294 (pid 756) Use of int in maxseg socket option. [ 1794.279301][ T756] Use struct sctp_assoc_value instead [ 1794.303085][ T689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.323401][ T689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.329077][T31472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.332230][T31472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.349845][T31472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.352116][T31472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.377319][ T762] netlink: 'syz.0.7298': attribute type 2 has an invalid length. [ 1794.380642][ T762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1794.476302][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7303'. [ 1794.500784][ T775] ovs-system: entered promiscuous mode [ 1794.664327][T30061] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.818765][ T689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.864331][ T689] veth0_vlan: entered promiscuous mode [ 1794.880379][ T689] veth1_vlan: entered promiscuous mode [ 1794.937707][ T811] can0: slcan on ptm0. [ 1794.938954][ T689] veth0_macvtap: entered promiscuous mode [ 1794.948920][ T689] veth1_macvtap: entered promiscuous mode [ 1794.981387][T32326] Bluetooth: hci2: command tx timeout [ 1795.028969][ T689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.043268][ T689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.071456][ T810] can0 (unregistered): slcan off ptm0. [ 1795.084535][T27186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.132614][T20529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.136203][T20529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.181095][T20529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.274497][T20338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.277692][T20338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.435352][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.438633][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.440194][ T834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1795.474475][ T819] NFSD: Failed to start, no listeners configured. [ 1795.668923][ T850] lo speed is unknown, defaulting to 1000 [ 1795.687564][ T852] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.7325'. [ 1795.717158][T25462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1795.736980][T25462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1795.742744][T25462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1795.745944][T25462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1795.748645][T25462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1796.170457][T31959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.230750][ T853] lo speed is unknown, defaulting to 1000 [ 1796.245072][ T883] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7333'. [ 1796.332392][T31959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.430481][T31959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.508346][ T853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.513060][ T853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.528243][ T853] bridge_slave_0: entered allmulticast mode [ 1796.533087][ T853] bridge_slave_0: entered promiscuous mode [ 1796.538622][ T853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.541321][ T853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.544309][ T853] bridge_slave_1: entered allmulticast mode [ 1796.548282][ T853] bridge_slave_1: entered promiscuous mode [ 1796.552893][ T904] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1796.560409][ T910] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7344'. [ 1796.729861][T31959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.769492][ T853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.779227][ T853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.818960][ T853] team0: Port device team_slave_0 added [ 1796.823667][ T853] team0: Port device team_slave_1 added [ 1796.854069][ T853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.856965][ T853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.872554][ T853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.883440][ T853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.886820][ T853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.896872][ T853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.974373][ T853] hsr_slave_0: entered promiscuous mode [ 1796.977679][ T853] hsr_slave_1: entered promiscuous mode [ 1796.980584][ T853] debugfs: 'hsr0' already exists in 'hsr' [ 1796.983492][ T853] Cannot create hsr debugfs directory [ 1797.061153][T32326] Bluetooth: hci2: command tx timeout [ 1797.279891][T31959] bridge_slave_1: left allmulticast mode [ 1797.284437][T31959] bridge_slave_1: left promiscuous mode [ 1797.289260][T31959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.305815][T31959] bridge_slave_0: left allmulticast mode [ 1797.313061][T31959] bridge_slave_0: left promiscuous mode [ 1797.315868][T31959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.695959][T31959] team0: Port device bond0 removed [ 1797.705018][T31959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.722017][T31959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.728077][T31959] bond0 (unregistering): Released all slaves [ 1797.738926][T31959] bond1 (unregistering): Released all slaves [ 1797.762227][T31959] bond2 (unregistering): Released all slaves [ 1797.776790][T31959] bond3 (unregistering): Released all slaves [ 1797.785787][T31959] bond4 (unregistering): Released all slaves [ 1797.791600][T32326] Bluetooth: hci4: command tx timeout [ 1797.807654][T31959] bond5 (unregistering): Released all slaves [ 1797.818932][T31959] bond6 (unregistering): Released all slaves [ 1797.827153][T31959] bond7 (unregistering): Released all slaves [ 1797.839686][T31959] bond8 (unregistering): Released all slaves [ 1797.848807][T31959] bond9 (unregistering): Released all slaves [ 1797.857247][T31959] bond10 (unregistering): Released all slaves [ 1797.866769][T31959] bond11 (unregistering): Released all slaves [ 1797.883471][T31959] bond12 (unregistering): Released all slaves [ 1797.902245][T31959] bond13 (unregistering): Released all slaves [ 1797.935827][T31959] bond14 (unregistering): Released all slaves [ 1797.959113][T31959] bond15 (unregistering): Released all slaves [ 1797.984600][T31959] bond16 (unregistering): Released all slaves [ 1798.018480][T31959] bond17 (unregistering): Released all slaves [ 1798.047778][T31959] bond18 (unregistering): Released all slaves [ 1798.073295][T31959] bond19 (unregistering): Released all slaves [ 1798.097560][T31959] bond20 (unregistering): Released all slaves [ 1798.113751][T31959] bond21 (unregistering): Released all slaves [ 1798.128685][T31959] bond22 (unregistering): Released all slaves [ 1798.143775][T31959] bond23 (unregistering): Released all slaves [ 1798.158726][T31959] bond24 (unregistering): Released all slaves [ 1798.178519][T31959] bond25 (unregistering): Released all slaves [ 1798.188804][T31959] bond26 (unregistering): Released all slaves [ 1798.200396][T31959] bond27 (unregistering): Released all slaves [ 1798.230207][T31959] bond28 (unregistering): Released all slaves [ 1798.264788][T31959] bond29 (unregistering): Released all slaves [ 1798.299803][T31959] bond30 (unregistering): Released all slaves [ 1798.320234][T31959] bond31 (unregistering): Released all slaves [ 1798.387041][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1798.524387][T18108] IPVS: starting estimator thread 0... [ 1798.574937][ T979] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1798.651031][ T975] IPVS: using max 44 ests per chain, 105600 per kthread [ 1799.147371][T32326] Bluetooth: hci2: command tx timeout [ 1799.552314][T31959] tipc: Disabling bearer [ 1799.560316][T31959] tipc: Left network mode [ 1799.712543][ T1016] __nla_validate_parse: 4 callbacks suppressed [ 1799.712565][ T1016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1799.757286][ T1018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1799.764872][ T1019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1799.773484][ T1019] openvswitch: netlink: Flow actions attr not present in new flow. [ 1799.861579][T32326] Bluetooth: hci4: command tx timeout [ 1799.901390][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.905820][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.915717][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.922430][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.926684][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.931848][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1799.936632][ T1023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1801.230987][T32326] Bluetooth: hci2: command tx timeout [ 1801.951262][T32326] Bluetooth: hci4: command tx timeout [ 1804.030935][T32326] Bluetooth: hci4: command tx timeout [ 1804.274368][ T1016] openvswitch: ovs-system: Dropping previously announced user features [ 1804.452540][ T1043] NFSD: Failed to start, no listeners configured. [ 1804.492296][T15012] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 1804.548610][ T1061] ceph: No source [ 1804.669576][T31959] hsr_slave_0: left promiscuous mode [ 1804.672905][T31959] hsr_slave_1: left promiscuous mode [ 1804.675891][T31959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.678952][T31959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.683003][T31959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.686219][T31959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.698392][T31959] veth1_macvtap: left promiscuous mode [ 1804.700925][T31959] veth0_macvtap: left promiscuous mode [ 1804.703404][T31959] veth1_vlan: left promiscuous mode [ 1804.705903][T31959] veth0_vlan: left promiscuous mode [ 1804.768493][T15012] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 1804.922440][ T1064] __nla_validate_parse: 2 callbacks suppressed [ 1804.922460][ T1064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7383'. [ 1804.959121][T31959] team0 (unregistering): Port device 26±ÿ removed [ 1804.967721][T31959] team0 (unregistering): Port device team_slave_0 removed [ 1805.063761][ T1057] lo speed is unknown, defaulting to 1000 [ 1805.314276][ T5899] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 1805.317376][ T1050] ceph: No mds server is up or the cluster is laggy [ 1805.583443][ T853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1805.590552][ T853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1805.597248][ T853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1805.604814][ T853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1805.608202][ T853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1805.613337][ T853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1805.647389][ T853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1805.651697][ T853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1805.654305][ T1079] infiniband syz0: set active [ 1805.669058][ T1079] infiniband syz0: added veth0 [ 1805.712584][ T1079] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1805.718664][ T1079] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1805.726688][ T1079] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1805.750000][ T853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.754840][ T1079] RDS/IB: syz0: added [ 1805.763037][ T1079] smc: adding ib device syz0 with port count 1 [ 1805.766887][ T1079] smc: ib device syz0 port 1 has no pnetid [ 1805.799549][ T853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.807512][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.810618][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.933161][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.935587][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.957060][ T1114] sctp: [Deprecated]: syz.3.7390 (pid 1114) Use of int in maxseg socket option. [ 1805.957060][ T1114] Use struct sctp_assoc_value instead [ 1806.218609][ T1111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7391'. [ 1806.236172][ T1123] tipc: New replicast peer: 127.0.0.1 [ 1806.240525][ T1123] tipc: Enabled bearer , priority 10 [ 1806.511399][ T853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.537923][ T853] veth0_vlan: entered promiscuous mode [ 1806.546312][ T853] veth1_vlan: entered promiscuous mode [ 1806.573372][ T853] veth0_macvtap: entered promiscuous mode [ 1806.579872][ T853] veth1_macvtap: entered promiscuous mode [ 1806.593408][ T853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.604222][ T853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.648889][T20529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.656649][T20529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.673666][T20529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.677186][T20529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.713202][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.733863][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.746029][T31472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.749787][T31472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.045491][ T1165] lo speed is unknown, defaulting to 1000 [ 1807.113045][ T1173] sctp: [Deprecated]: syz.1.7404 (pid 1173) Use of int in maxseg socket option. [ 1807.113045][ T1173] Use struct sctp_assoc_value instead [ 1807.241214][ T1186] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7408'. [ 1807.267317][ T1188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7409'. [ 1807.360550][T24298] tipc: Node number set to 3545097174 [ 1807.362474][T25462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1807.369517][T25462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1807.376515][T25462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1807.434113][T25462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1807.443794][T25462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1807.641637][ T1207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7415'. [ 1807.660308][ T1200] NFSD: Failed to start, no listeners configured. [ 1807.758507][ T1194] lo speed is unknown, defaulting to 1000 [ 1808.007720][T30061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.109208][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.112046][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.114596][ T1194] bridge_slave_0: entered allmulticast mode [ 1808.117337][ T1194] bridge_slave_0: entered promiscuous mode [ 1808.121456][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.123984][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.126505][ T1194] bridge_slave_1: entered allmulticast mode [ 1808.129226][ T1194] bridge_slave_1: entered promiscuous mode [ 1808.152894][ T1194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.169927][ T1194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.257639][T30061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.306397][ T1194] team0: Port device team_slave_0 added [ 1808.311286][ T1194] team0: Port device team_slave_1 added [ 1808.354256][ T1194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.357599][ T1194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.366237][ T1194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.370783][ T1194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.377215][ T1194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.385591][ T1194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.393363][ T1240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1808.468229][T30061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.543670][ T1194] hsr_slave_0: entered promiscuous mode [ 1808.545780][ T1250] NFSD: Failed to start, no listeners configured. [ 1808.546876][ T1194] hsr_slave_1: entered promiscuous mode [ 1808.551907][ T1194] debugfs: 'hsr0' already exists in 'hsr' [ 1808.554289][ T1194] Cannot create hsr debugfs directory [ 1808.564468][ T1252] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1808.650112][T30061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.809052][T30061] bridge_slave_1: left allmulticast mode [ 1808.811077][T30061] bridge_slave_1: left promiscuous mode [ 1808.812918][T30061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.816740][T30061] bridge_slave_0: left allmulticast mode [ 1808.818560][T30061] bridge_slave_0: left promiscuous mode [ 1808.820379][T30061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.855284][ T1262] netlink: 'syz.1.7431': attribute type 2 has an invalid length. [ 1808.858492][ T1262] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1809.130697][T30061] team0: Port device bond0 removed [ 1809.136065][T30061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.145118][T30061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.149182][T30061] bond0 (unregistering): Released all slaves [ 1809.155182][T30061] bond1 (unregistering): Released all slaves [ 1809.164079][T30061] bond2 (unregistering): Released all slaves [ 1809.183395][T30061] bond3 (unregistering): Released all slaves [ 1809.195692][T30061] bond4 (unregistering): Released all slaves [ 1809.210672][T30061] bond5 (unregistering): Released all slaves [ 1809.211989][ T1277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1809.219599][T30061] bond6 (unregistering): Released all slaves [ 1809.227140][T30061] bond7 (unregistering): Released all slaves [ 1809.235753][T30061] bond8 (unregistering): Released all slaves [ 1809.243280][T30061] bond9 (unregistering): Released all slaves [ 1809.250403][T30061] bond10 (unregistering): Released all slaves [ 1809.260230][T30061] bond11 (unregistering): Released all slaves [ 1809.267891][T30061] bond12 (unregistering): Released all slaves [ 1809.276109][ T1282] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1809.277311][T30061] bond13 (unregistering): Released all slaves [ 1809.290360][T30061] bond14 (unregistering): Released all slaves [ 1809.301777][T30061] bond15 (unregistering): Released all slaves [ 1809.309255][T30061] bond16 (unregistering): Released all slaves [ 1809.324007][T30061] bond17 (unregistering): Released all slaves [ 1809.331392][T30061] bond18 (unregistering): Released all slaves [ 1809.338858][T30061] bond19 (unregistering): Released all slaves [ 1809.347706][T30061] bond20 (unregistering): Released all slaves [ 1809.355256][T30061] bond21 (unregistering): Released all slaves [ 1809.365600][T30061] bond22 (unregistering): Released all slaves [ 1809.372946][T30061] bond23 (unregistering): Released all slaves [ 1809.380049][T30061] bond24 (unregistering): Released all slaves [ 1809.391893][T30061] bond25 (unregistering): Released all slaves [ 1809.399110][T30061] bond26 (unregistering): Released all slaves [ 1809.410027][T30061] bond27 (unregistering): Released all slaves [ 1809.417054][T30061] bond28 (unregistering): Released all slaves [ 1809.424215][T30061] bond29 (unregistering): Released all slaves [ 1809.445912][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1809.463655][T25462] Bluetooth: hci0: command tx timeout [ 1809.852981][T30061] tipc: Disabling bearer [ 1809.867893][T30061] tipc: Left network mode [ 1810.237821][ T1324] __nla_validate_parse: 1 callbacks suppressed [ 1810.237834][ T1324] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.7446'. [ 1810.274219][ T1326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7447'. [ 1810.478000][T30061] hsr_slave_0: left promiscuous mode [ 1810.482853][T30061] hsr_slave_1: left promiscuous mode [ 1810.484933][T30061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1810.487390][T30061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1810.490498][T30061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.493161][T30061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.508685][ T1339] netlink: 'syz.1.7450': attribute type 2 has an invalid length. [ 1810.511926][T30061] veth1_macvtap: left promiscuous mode [ 1810.512379][ T1339] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1810.513710][T30061] veth0_macvtap: left promiscuous mode [ 1810.520133][T30061] veth1_vlan: left promiscuous mode [ 1810.522271][T30061] veth0_vlan: left promiscuous mode [ 1810.722307][T30061] team0 (unregistering): Port device 26±ÿ removed [ 1810.730417][T30061] team0 (unregistering): Port device team_slave_0 removed [ 1810.838928][T15012] lo speed is unknown, defaulting to 1000 [ 1810.841351][T15012] syz2: Port: 1 Link DOWN [ 1810.846833][T13362] smbdirect: ib_dev[syz2] removed [ 1810.906186][ T1194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1810.935542][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1810.942649][ T1194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1810.945919][ T1355] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.7454'. [ 1810.947018][ T1353] NFSD: Failed to start, no listeners configured. [ 1810.953961][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1810.957220][ T1194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1810.980584][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1811.003825][ T1194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1811.018695][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1811.028133][ T6450] IPVS: starting estimator thread 0... [ 1811.078272][ T1194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.087353][ T1194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.092934][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.095218][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.102836][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.105141][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.161613][ T1386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7459'. [ 1811.181734][ T1370] IPVS: using max 44 ests per chain, 105600 per kthread [ 1811.199038][ T1390] netlink: 'syz.0.7460': attribute type 3 has an invalid length. [ 1811.273243][ T1397] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1811.349474][ T1194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.378134][ T1194] veth0_vlan: entered promiscuous mode [ 1811.385880][ T1194] veth1_vlan: entered promiscuous mode [ 1811.404274][ T1194] veth0_macvtap: entered promiscuous mode [ 1811.408336][ T1194] veth1_macvtap: entered promiscuous mode [ 1811.416948][ T1194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.425983][ T1194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.475905][T20366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.479387][T20366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.521138][T31959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.530932][T31959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.551283][T25462] Bluetooth: hci0: command tx timeout [ 1811.554049][T13362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.562225][T13362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.582645][ T1357] svc: failed to register lockdv1 RPC service (errno 111). [ 1811.588404][ T1357] lockd_up: makesock failed, error=-111 [ 1811.602518][T31472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.604754][ T1412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1811.605124][T31472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.697600][ T1420] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.7471'. [ 1812.009916][ T1357] svc: failed to register nfsdv3 RPC service (errno 512). [ 1812.015575][ T1357] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1812.019199][ T1357] failed to unregister tcp with rpcbind [ 1812.022737][ T1357] svc: failed to register nfsdv3 RPC service (errno 97). [ 1812.025818][ T1357] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1812.028854][ T1357] failed to unregister tcp with rpcbind [ 1812.060580][ T1430] NFSD: Failed to start, no listeners configured. [ 1812.395069][ T1439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7475'. [ 1812.438442][ T1443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7477'. [ 1812.591059][ T1460] netlink: 'syz.3.7485': attribute type 2 has an invalid length. [ 1812.691356][ T1474] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1813.499197][ T1496] netlink: 'syz.3.7500': attribute type 2 has an invalid length. [ 1813.621100][T25462] Bluetooth: hci0: command tx timeout [ 1813.798457][ T1518] netlink: 'syz.3.7510': attribute type 2 has an invalid length. [ 1813.968462][ T1535] NFSD: Failed to start, no listeners configured. [ 1815.038074][ T1586] tipc: Started in network mode [ 1815.039662][ T1586] tipc: Node identity 1, cluster identity 4711 [ 1815.041965][ T1586] tipc: Node number set to 1 [ 1815.045692][ T1586] tipc: New replicast peer: 127.0.0.1 [ 1815.047885][ T1586] tipc: Enabled bearer , priority 10 [ 1815.052317][ T1586] tipc: Disabling bearer [ 1815.121513][ T1588] NFSD: Failed to start, no listeners configured. [ 1815.325570][ T1590] FAULT_INJECTION: forcing a failure. [ 1815.325570][ T1590] name failslab, interval 1, probability 100, space 0, times 10 [ 1815.332125][ T1590] CPU: 3 UID: 0 PID: 1590 Comm: syz.0.7542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.332160][ T1590] Tainted: [L]=SOFTLOCKUP [ 1815.332169][ T1590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.332189][ T1590] Call Trace: [ 1815.332204][ T1590] [ 1815.332211][ T1590] dump_stack_lvl+0x100/0x190 [ 1815.332338][ T1590] should_fail_ex.cold+0x5/0xa [ 1815.332362][ T1590] should_failslab+0xc2/0x120 [ 1815.332399][ T1590] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1815.332421][ T1590] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1815.332453][ T1590] ? find_held_lock+0x2b/0x80 [ 1815.332477][ T1590] ? sock_alloc_inode+0x26/0x2c0 [ 1815.332536][ T1590] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.332558][ T1590] sock_alloc_inode+0x26/0x2c0 [ 1815.332576][ T1590] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.332595][ T1590] alloc_inode+0x68/0x250 [ 1815.332622][ T1590] sock_alloc+0x44/0x280 [ 1815.332651][ T1590] ? security_socket_create+0x7f/0x250 [ 1815.332706][ T1590] __sock_create+0xc2/0x860 [ 1815.332732][ T1590] __sys_socket+0x14d/0x260 [ 1815.332754][ T1590] ? fput+0x79/0x100 [ 1815.332776][ T1590] ? __pfx___sys_socket+0x10/0x10 [ 1815.332797][ T1590] ? ksys_write+0x1ac/0x250 [ 1815.332816][ T1590] ? __pfx_ksys_write+0x10/0x10 [ 1815.332840][ T1590] __ia32_sys_socket+0x72/0xb0 [ 1815.332862][ T1590] ? lockdep_hardirqs_on+0x78/0x100 [ 1815.332904][ T1590] __do_fast_syscall_32+0xe7/0x970 [ 1815.332932][ T1590] do_fast_syscall_32+0x32/0x70 [ 1815.332963][ T1590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1815.332985][ T1590] RIP: 0023:0xf7f33fec [ 1815.333005][ T1590] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 1815.333014][ T1590] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 1815.333036][ T1590] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 1815.333050][ T1590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1815.333062][ T1590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1815.333072][ T1590] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1815.333083][ T1590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1815.333106][ T1590] [ 1815.333117][ T1590] socket: no more sockets [ 1815.341560][ T5858] FAULT_INJECTION: forcing a failure. [ 1815.341560][ T5858] name failslab, interval 1, probability 100, space 0, times 9 [ 1815.345583][ T1590] FAULT_INJECTION: forcing a failure. [ 1815.345583][ T1590] name failslab, interval 1, probability 100, space 0, times 9 [ 1815.346668][ T5147] FAULT_INJECTION: forcing a failure. [ 1815.346668][ T5147] name failslab, interval 1, probability 100, space 0, times 7 [ 1815.348460][ T1590] CPU: 3 UID: 0 PID: 1590 Comm: syz.0.7542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.348597][ T1590] Tainted: [L]=SOFTLOCKUP [ 1815.348605][ T1590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.348617][ T1590] Call Trace: [ 1815.348626][ T1590] [ 1815.348633][ T1590] dump_stack_lvl+0x100/0x190 [ 1815.348661][ T1590] should_fail_ex.cold+0x5/0xa [ 1815.348684][ T1590] should_failslab+0xc2/0x120 [ 1815.348714][ T1590] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1815.348737][ T1590] ? __lock_acquire+0x49f/0x1a40 [ 1815.348768][ T1590] ? sock_alloc_inode+0x26/0x2c0 [ 1815.348788][ T1590] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.348806][ T1590] sock_alloc_inode+0x26/0x2c0 [ 1815.348824][ T1590] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.348840][ T1590] alloc_inode+0x68/0x250 [ 1815.348864][ T1590] sock_alloc+0x44/0x280 [ 1815.348888][ T1590] ? security_socket_create+0x7f/0x250 [ 1815.348910][ T1590] __sock_create+0xc2/0x860 [ 1815.348934][ T1590] __sys_socket+0x14d/0x260 [ 1815.348960][ T1590] ? __pfx___sys_socket+0x10/0x10 [ 1815.348987][ T1590] __ia32_sys_socket+0x72/0xb0 [ 1815.349006][ T1590] ? lockdep_hardirqs_on+0x78/0x100 [ 1815.349031][ T1590] __do_fast_syscall_32+0xe7/0x970 [ 1815.349063][ T1590] do_fast_syscall_32+0x32/0x70 [ 1815.349088][ T1590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1815.349111][ T1590] RIP: 0023:0xf7f33fec [ 1815.349131][ T1590] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 1815.349139][ T1590] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 1815.349157][ T1590] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 1815.349168][ T1590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1815.349180][ T1590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1815.349190][ T1590] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1815.349201][ T1590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1815.349225][ T1590] [ 1815.349236][ T1590] socket: no more sockets [ 1815.350071][ T5858] CPU: 2 UID: 0 PID: 5858 Comm: kworker/2:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.350089][ T5858] Tainted: [L]=SOFTLOCKUP [ 1815.350093][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.350115][ T5858] Workqueue: events vidtv_mux_tick [ 1815.350143][ T5858] Call Trace: [ 1815.350148][ T5858] [ 1815.350153][ T5858] dump_stack_lvl+0x100/0x190 [ 1815.350167][ T5858] should_fail_ex.cold+0x5/0xa [ 1815.350180][ T5858] should_failslab+0xc2/0x120 [ 1815.350197][ T5858] __kmalloc_cache_noprof+0x91/0x6c0 [ 1815.350210][ T5858] ? vidtv_s302m_encode+0x1c3/0x1860 [ 1815.350230][ T5858] vidtv_s302m_encode+0x1c3/0x1860 [ 1815.350247][ T5858] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1815.350263][ T5858] ? vidtv_memset+0x50/0x90 [ 1815.350277][ T5858] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1815.350292][ T5858] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1815.350311][ T5858] ? __asan_memset+0x23/0x50 [ 1815.350325][ T5858] vidtv_mux_tick+0x4e4/0x1460 [ 1815.350354][ T5858] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1815.350372][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 1815.350393][ T5858] ? debug_object_deactivate+0x2e4/0x3b0 [ 1815.350423][ T5858] ? rcu_is_watching+0x12/0xc0 [ 1815.350439][ T5858] process_one_work+0xa23/0x1940 [ 1815.350463][ T5858] ? __pfx_process_one_work+0x10/0x10 [ 1815.350483][ T5858] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1815.350502][ T5858] worker_thread+0x5ef/0xe50 [ 1815.350522][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 1815.350539][ T5858] ? kthread+0x13a/0x450 [ 1815.350553][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 1815.350568][ T5858] kthread+0x370/0x450 [ 1815.350583][ T5858] ? __pfx_kthread+0x10/0x10 [ 1815.350599][ T5858] ret_from_fork+0x72b/0xd50 [ 1815.350615][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 1815.350630][ T5858] ? __switch_to+0x800/0x10f0 [ 1815.350648][ T5858] ? __pfx_kthread+0x10/0x10 [ 1815.350664][ T5858] ret_from_fork_asm+0x1a/0x30 [ 1815.350686][ T5858] [ 1815.350715][ T5858] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1815.350862][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.350881][ T5147] Tainted: [L]=SOFTLOCKUP [ 1815.350885][ T5147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.350891][ T5147] Call Trace: [ 1815.350900][ T5147] [ 1815.350905][ T5147] dump_stack_lvl+0x100/0x190 [ 1815.350919][ T5147] should_fail_ex.cold+0x5/0xa [ 1815.350930][ T5147] should_failslab+0xc2/0x120 [ 1815.350945][ T5147] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1815.350959][ T5147] ? find_held_lock+0x2b/0x80 [ 1815.350987][ T5147] ? sock_alloc_inode+0x26/0x2c0 [ 1815.350998][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351009][ T5147] sock_alloc_inode+0x26/0x2c0 [ 1815.351019][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351029][ T5147] alloc_inode+0x68/0x250 [ 1815.351043][ T5147] sock_alloc+0x44/0x280 [ 1815.351059][ T5147] ? security_socket_create+0x7f/0x250 [ 1815.351072][ T5147] __sock_create+0xc2/0x860 [ 1815.351085][ T5147] __sys_socket+0x14d/0x260 [ 1815.351097][ T5147] ? __pfx___sys_socket+0x10/0x10 [ 1815.351111][ T5147] __x64_sys_socket+0x72/0xb0 [ 1815.351123][ T5147] ? lockdep_hardirqs_on+0x78/0x100 [ 1815.351137][ T5147] do_syscall_64+0x115/0x840 [ 1815.351152][ T5147] ? clear_bhb_loop+0x40/0x90 [ 1815.351164][ T5147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.351175][ T5147] RIP: 0033:0x7efcfb6d9707 [ 1815.351185][ T5147] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1815.351196][ T5147] RSP: 002b:00007ffe637df098 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1815.351207][ T5147] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007efcfb6d9707 [ 1815.351215][ T5147] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1815.351222][ T5147] RBP: 00007efcfb765560 R08: 0000000000000000 R09: 0000000000000000 [ 1815.351228][ T5147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1815.351235][ T5147] R13: 00007ffe637df1c0 R14: 000000000000003a R15: 00007ffe637df1c0 [ 1815.351245][ T5147] [ 1815.351278][ T5147] socket: no more sockets [ 1815.351297][ T5147] FAULT_INJECTION: forcing a failure. [ 1815.351297][ T5147] name failslab, interval 1, probability 100, space 0, times 4 [ 1815.351311][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.351326][ T5147] Tainted: [L]=SOFTLOCKUP [ 1815.351330][ T5147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.351336][ T5147] Call Trace: [ 1815.351340][ T5147] [ 1815.351344][ T5147] dump_stack_lvl+0x100/0x190 [ 1815.351356][ T5147] should_fail_ex.cold+0x5/0xa [ 1815.351365][ T5147] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 1815.351379][ T5147] should_failslab+0xc2/0x120 [ 1815.351394][ T5147] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1815.351408][ T5147] ? _printk+0xcf/0x110 [ 1815.351418][ T5147] ? sock_alloc_inode+0x26/0x2c0 [ 1815.351439][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351453][ T5147] sock_alloc_inode+0x26/0x2c0 [ 1815.351463][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351473][ T5147] alloc_inode+0x68/0x250 [ 1815.351487][ T5147] sock_alloc+0x44/0x280 [ 1815.351502][ T5147] ? security_socket_create+0x7f/0x250 [ 1815.351515][ T5147] __sock_create+0xc2/0x860 [ 1815.351527][ T5147] __sys_socket+0x14d/0x260 [ 1815.351539][ T5147] ? __pfx___sys_socket+0x10/0x10 [ 1815.351553][ T5147] __x64_sys_socket+0x72/0xb0 [ 1815.351565][ T5147] do_syscall_64+0x115/0x840 [ 1815.351579][ T5147] ? clear_bhb_loop+0x40/0x90 [ 1815.351611][ T5147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.351623][ T5147] RIP: 0033:0x7efcfb6d9707 [ 1815.351631][ T5147] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1815.351642][ T5147] RSP: 002b:00007ffe637df098 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1815.351652][ T5147] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efcfb6d9707 [ 1815.351659][ T5147] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1815.351666][ T5147] RBP: 00007efcfb765560 R08: 0000000000000073 R09: 0000000000000001 [ 1815.351673][ T5147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1815.351679][ T5147] R13: 00007ffe637df1c0 R14: 0000000000000054 R15: 00007ffe637df1c0 [ 1815.351689][ T5147] [ 1815.351752][ T5147] socket: no more sockets [ 1815.351762][ T5147] FAULT_INJECTION: forcing a failure. [ 1815.351762][ T5147] name failslab, interval 1, probability 100, space 0, times 3 [ 1815.351776][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.351790][ T5147] Tainted: [L]=SOFTLOCKUP [ 1815.351794][ T5147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.351800][ T5147] Call Trace: [ 1815.351804][ T5147] [ 1815.351808][ T5147] dump_stack_lvl+0x100/0x190 [ 1815.351819][ T5147] should_fail_ex.cold+0x5/0xa [ 1815.351829][ T5147] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 1815.351844][ T5147] should_failslab+0xc2/0x120 [ 1815.351859][ T5147] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1815.351872][ T5147] ? _printk+0xcf/0x110 [ 1815.351882][ T5147] ? sock_alloc_inode+0x26/0x2c0 [ 1815.351892][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351907][ T5147] sock_alloc_inode+0x26/0x2c0 [ 1815.351917][ T5147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1815.351927][ T5147] alloc_inode+0x68/0x250 [ 1815.351941][ T5147] sock_alloc+0x44/0x280 [ 1815.351957][ T5147] ? security_socket_create+0x7f/0x250 [ 1815.351969][ T5147] __sock_create+0xc2/0x860 [ 1815.351981][ T5147] __sys_socket+0x14d/0x260 [ 1815.351993][ T5147] ? __pfx___sys_socket+0x10/0x10 [ 1815.352008][ T5147] __x64_sys_socket+0x72/0xb0 [ 1815.352020][ T5147] do_syscall_64+0x115/0x840 [ 1815.352034][ T5147] ? clear_bhb_loop+0x40/0x90 [ 1815.352046][ T5147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.352057][ T5147] RIP: 0033:0x7efcfb6d9707 [ 1815.352065][ T5147] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1815.352075][ T5147] RSP: 002b:00007ffe637df098 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1815.352086][ T5147] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007efcfb6d9707 [ 1815.352092][ T5147] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1815.352099][ T5147] RBP: 00007efcfb765560 R08: 0000000000000073 R09: 0000000000000001 [ 1815.352106][ T5147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1815.352113][ T5147] R13: 00007ffe637df1c0 R14: 0000000000000079 R15: 00007ffe637df1c0 [ 1815.352123][ T5147] [ 1815.352127][ T5147] socket: no more sockets [ 1815.353814][ T5858] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1815.353827][ T5858] CPU: 2 UID: 0 PID: 5858 Comm: kworker/2:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.711180][T25462] Bluetooth: hci0: command tx timeout [ 1815.712006][ T5858] Tainted: [L]=SOFTLOCKUP [ 1815.712014][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1815.712023][ T5858] Workqueue: events vidtv_mux_tick [ 1815.803267][ T5858] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1815.805153][ T5858] Code: 74 ac f9 31 ff 89 de e8 95 6e ac f9 84 db 0f 85 37 0d 00 00 e8 78 74 ac f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1815.811130][ T5858] RSP: 0000:ffffc900062c7830 EFLAGS: 00010246 [ 1815.813043][ T5858] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1815.815521][ T5858] RDX: 0000000000000000 RSI: ffffffff885d39c8 RDI: ffff88801bc428c0 [ 1815.818029][ T5858] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1815.820505][ T5858] R10: ffffffff8eded533 R11: 0000000000000000 R12: 0000000000000000 [ 1815.822971][ T5858] R13: dffffc0000000000 R14: ffff888026c3fe00 R15: ffff888000cef000 [ 1815.825449][ T5858] FS: 0000000000000000(0000) GS:ffff888096ddf000(0000) knlGS:0000000000000000 [ 1815.828261][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1815.830336][ T5858] CR2: 00007efcfb6c8380 CR3: 000000006be80000 CR4: 0000000000352ef0 [ 1815.832830][ T5858] Call Trace: [ 1815.833907][ T5858] [ 1815.834857][ T5858] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1815.836507][ T5858] ? vidtv_memset+0x50/0x90 [ 1815.837950][ T5858] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1815.839749][ T5858] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1815.841498][ T5858] ? __asan_memset+0x23/0x50 [ 1815.842965][ T5858] vidtv_mux_tick+0x4e4/0x1460 [ 1815.844504][ T5858] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1815.846153][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 1815.847736][ T5858] ? debug_object_deactivate+0x2e4/0x3b0 [ 1815.849529][ T5858] ? rcu_is_watching+0x12/0xc0 [ 1815.851048][ T5858] process_one_work+0xa23/0x1940 [ 1815.852633][ T5858] ? __pfx_process_one_work+0x10/0x10 [ 1815.854338][ T5858] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1815.855988][ T5858] worker_thread+0x5ef/0xe50 [ 1815.857465][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 1815.859111][ T5858] ? kthread+0x13a/0x450 [ 1815.860477][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 1815.862097][ T5858] kthread+0x370/0x450 [ 1815.863396][ T5858] ? __pfx_kthread+0x10/0x10 [ 1815.864871][ T5858] ret_from_fork+0x72b/0xd50 [ 1815.866341][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 1815.867982][ T5858] ? __switch_to+0x800/0x10f0 [ 1815.869483][ T5858] ? __pfx_kthread+0x10/0x10 [ 1815.870946][ T5858] ret_from_fork_asm+0x1a/0x30 [ 1815.872479][ T5858] [ 1815.873482][ T5858] Modules linked in: [ 1815.875724][ T5858] ---[ end trace 0000000000000000 ]--- [ 1815.878911][ T5858] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1815.881000][ T5858] Code: 74 ac f9 31 ff 89 de e8 95 6e ac f9 84 db 0f 85 37 0d 00 00 e8 78 74 ac f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1815.887048][ T5858] RSP: 0000:ffffc900062c7830 EFLAGS: 00010246 [ 1815.889426][ T5858] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1815.910773][ T5858] RDX: 0000000000000000 RSI: ffffffff885d39c8 RDI: ffff88801bc428c0 [ 1815.915730][ T5858] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1815.918941][ T5858] R10: ffffffff8eded533 R11: 0000000000000000 R12: 0000000000000000 [ 1815.921886][ T5858] R13: dffffc0000000000 R14: ffff888026c3fe00 R15: ffff888000cef000 [ 1815.924410][ T5858] FS: 0000000000000000(0000) GS:ffff888096ddf000(0000) knlGS:0000000000000000 [ 1815.927353][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1815.929494][ T5858] CR2: 00000000f7f26ec0 CR3: 000000002974f000 CR4: 0000000000352ef0 [ 1815.932279][ T5858] Kernel panic - not syncing: Fatal exception [ 1815.934802][ T5858] Kernel Offset: disabled [ 1815.936175][ T5858] Rebooting in 86400 seconds..