last executing test programs: 1m3.702071312s ago: executing program 2 (id=10997): io_setup(0xffb, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_destroy(r0) 1m3.569045948s ago: executing program 2 (id=11002): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 1m3.211898442s ago: executing program 2 (id=11017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x20048880) 1m3.156130404s ago: executing program 2 (id=11019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m3.150854311s ago: executing program 2 (id=11022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m2.911459205s ago: executing program 2 (id=11030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) 1m2.847385602s ago: executing program 32 (id=11030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) 56.383696576s ago: executing program 4 (id=11238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf96}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) 56.181512973s ago: executing program 4 (id=11240): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 56.137066797s ago: executing program 4 (id=11242): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000009, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x9}) 56.067856097s ago: executing program 4 (id=11246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005008000020000000800020003"], 0x48}}, 0x0) 56.016027704s ago: executing program 4 (id=11249): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000000)='./cgroup\x00') 55.969632696s ago: executing program 4 (id=11251): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 53.902003414s ago: executing program 0 (id=11327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 53.833102543s ago: executing program 0 (id=11328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="14000200000000000000dd"], 0x2c}}, 0x0) r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 53.83284543s ago: executing program 0 (id=11329): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r0) 53.763619715s ago: executing program 0 (id=11330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 53.763423995s ago: executing program 0 (id=11331): capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000080)={0x6, 0x1000000e, 0x4d, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 53.502918048s ago: executing program 0 (id=11333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 53.443724821s ago: executing program 33 (id=11333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 40.962879641s ago: executing program 34 (id=11251): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 34.999997281s ago: executing program 3 (id=11849): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 34.818395308s ago: executing program 3 (id=11846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 34.732104453s ago: executing program 3 (id=11848): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 34.411276818s ago: executing program 3 (id=11859): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) 34.33838218s ago: executing program 3 (id=11861): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 34.334494053s ago: executing program 3 (id=11864): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 19.280825941s ago: executing program 35 (id=11864): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 2.424996571s ago: executing program 6 (id=12748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.293564076s ago: executing program 5 (id=12754): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x40800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000003440)=""/4096) 2.262014166s ago: executing program 6 (id=12756): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000280)='syz0\x00') 2.182087307s ago: executing program 6 (id=12759): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='\x00', 0x1}], 0x2, 0x2, 0x0) 2.181573474s ago: executing program 6 (id=12762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r1, 0x203, 0x70bd22, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x34}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7f, 0x0, 0xa0, 0x1}}, @peer_mgmt={0x75, 0x1, {0x0, 0x8, @val=0x7eb, @void, @void}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x25, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x1, 0x3, 0x0, {0x1ff, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x406, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xd2}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.118454484s ago: executing program 6 (id=12765): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 2.00189631s ago: executing program 6 (id=12768): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x6, &(0x7f00000001c0)={0x17, "c955feb77e1d79a896356be7d707c8e7c7b00310dd308e527ef49847e457ebe789"}}) 1.121618981s ago: executing program 5 (id=12774): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.071968782s ago: executing program 5 (id=12777): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40605414, &(0x7f0000000880)={0x2, 0x0, 0x40, 0x0, 0xa}) 1.022455945s ago: executing program 5 (id=12780): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1) 280.842128ms ago: executing program 7 (id=12795): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_GET_TSC(0x43, &(0x7f00000003c0)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 272.044778ms ago: executing program 7 (id=12797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 209.589501ms ago: executing program 1 (id=12798): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000009"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 208.222193ms ago: executing program 7 (id=12799): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/185, 0xb9}], 0x1, 0x5fae, 0x5) 208.102084ms ago: executing program 1 (id=12800): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 149.599551ms ago: executing program 7 (id=12801): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x40000000, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1a}}], 0x38) 149.370724ms ago: executing program 5 (id=12802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) 144.094317ms ago: executing program 1 (id=12803): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)="dfb3", 0x2}], 0x1}, 0x4001) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0xffff0000}], 0x1, 0x1, 0x0) 81.969934ms ago: executing program 7 (id=12804): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300ce4d, 0x10) 81.633791ms ago: executing program 1 (id=12805): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 525.529µs ago: executing program 5 (id=12806): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x7fff]) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 413.912µs ago: executing program 7 (id=12807): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1, 0x1}, 0xc) 124.637µs ago: executing program 1 (id=12808): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=12809): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000300)={'trans=virtio,', {[{@noxattr}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 0s ago: executing program 5 (id=12810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): lid in PREROUTING and INPUT [ 208.428949][T24568] netlink: 'syz.3.9035': attribute type 10 has an invalid length. [ 208.431366][T24568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9035'. [ 208.438051][T24568] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 208.445446][T24568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.452292][ T1037] lo speed is unknown, defaulting to 1000 [ 208.454536][ T1037] syz0: Port: 1 Link ACTIVE [ 208.490043][T24576] lo speed is unknown, defaulting to 1000 [ 208.529671][T24582] netlink: 'syz.1.9042': attribute type 1 has an invalid length. [ 208.954618][ T40] audit: type=1400 audit(208.831:93): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24617 comm="syz.0.9059" [ 208.966249][T24620] netlink: 'syz.3.9061': attribute type 21 has an invalid length. [ 209.044839][T24632] autofs4:pid:24632:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 209.092311][T24639] bridge_slave_0: left allmulticast mode [ 209.095073][T24639] bridge_slave_0: left promiscuous mode [ 209.097611][T24639] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.106114][T24639] bridge_slave_1: left allmulticast mode [ 209.110933][T24639] bridge_slave_1: left promiscuous mode [ 209.113761][T24639] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.126293][T24639] team0: Port device team_slave_0 removed [ 209.131535][T24639] team0: Port device team_slave_1 removed [ 209.134424][T24639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.138086][T24639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.144084][T24639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.300343][T24671] netlink: 'syz.0.9085': attribute type 2 has an invalid length. [ 209.303183][T24671] netlink: 'syz.0.9085': attribute type 2 has an invalid length. [ 209.434908][T24700] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.516428][T24709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.677255][T24738] netlink: 'syz.2.9101': attribute type 10 has an invalid length. [ 209.688957][T24738] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.928870][T24784] netlink: 'syz.1.9141': attribute type 58 has an invalid length. [ 209.931529][T24784] __nla_validate_parse: 5 callbacks suppressed [ 209.931537][T24784] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9141'. [ 210.087167][T24811] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9155'. [ 210.095711][T24811] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9155'. [ 210.101283][T24811] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9155'. [ 210.124444][T24814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.170060][T24822] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 210.782940][T24926] bridge_slave_0: left allmulticast mode [ 210.784890][T24926] bridge_slave_0: left promiscuous mode [ 210.787134][T24926] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.799112][T24926] bridge_slave_1: left allmulticast mode [ 210.806027][T24926] bridge_slave_1: left promiscuous mode [ 210.808641][T24926] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.815441][T24926] bond0: (slave bond_slave_0): Releasing backup interface [ 210.820999][T24926] bond0: (slave bond_slave_1): Releasing backup interface [ 210.825783][T24926] team0: Port device team_slave_0 removed [ 210.832546][T24926] team0: Port device team_slave_1 removed [ 210.835201][T24926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.846023][T24926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.859617][T24926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.866872][ T50] lo speed is unknown, defaulting to 1000 [ 210.873201][ T50] syz0: Port: 1 Link DOWN [ 211.015641][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9230'. [ 211.019523][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9230'. [ 211.095840][T24987] netlink: 288 bytes leftover after parsing attributes in process `syz.1.9241'. [ 211.121389][T24994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9244'. [ 211.183544][T25009] netlink: 'syz.3.9252': attribute type 10 has an invalid length. [ 211.191614][T25009] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.282416][T25029] program syz.1.9259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.348032][T25041] netlink: 'syz.0.9267': attribute type 10 has an invalid length. [ 211.390066][T25050] binder: 25048:25050 ioctl c0046209 0 returned -22 [ 211.567124][T25069] team0: Port device bond0 removed [ 211.571525][T25069] bridge_slave_0: left allmulticast mode [ 211.574006][T25069] bridge_slave_0: left promiscuous mode [ 211.576706][T25069] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.585860][T25069] bridge_slave_1: left allmulticast mode [ 211.588461][T25069] bridge_slave_1: left promiscuous mode [ 211.591127][T25069] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.601257][T25069] bond0: (slave bond_slave_0): Releasing backup interface [ 211.606472][T25069] team0: Port device team_slave_0 removed [ 211.611074][T25069] team0: Port device team_slave_1 removed [ 211.613839][T25069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.677375][T25078] netlink: 'syz.1.9281': attribute type 10 has an invalid length. [ 211.685039][T25078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.780940][T25096] erspan0: left allmulticast mode [ 211.783159][T25096] erspan0: left promiscuous mode [ 211.785537][T25096] bridge0: port 4(erspan0) entered disabled state [ 211.801656][T25096] bond0: (slave bridge0): Releasing backup interface [ 211.805987][T25096] team0: left allmulticast mode [ 211.807782][T25096] team_slave_0: left allmulticast mode [ 211.810025][T25096] team_slave_1: left allmulticast mode [ 211.812168][T25096] bridge0: port 3(team0) entered disabled state [ 211.818403][T25096] bridge_slave_0: left allmulticast mode [ 211.820851][T25096] bridge_slave_0: left promiscuous mode [ 211.822828][T25096] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.828468][T25100] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9294'. [ 211.829173][T25096] .: left allmulticast mode [ 211.833912][T25096] .: left promiscuous mode [ 211.836259][T25096] bridge0: port 2(.) entered disabled state [ 211.844933][T25096] bond0: (slave bond_slave_0): Releasing backup interface [ 211.848785][T25096] team_slave_0: left promiscuous mode [ 211.852097][T25096] team0: Port device team_slave_0 removed [ 211.854676][T25096] team_slave_1: left promiscuous mode [ 211.858817][T25096] team0: Port device team_slave_1 removed [ 211.861935][T25096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.865190][T25096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.872877][T25096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.090451][T25124] bond0: (slave bridge0): Releasing backup interface [ 212.095475][T25124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.105514][T25128] openvswitch: netlink: Multiple metadata blocks provided [ 212.154845][T25134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.299484][T25158] ipt_REJECT: TCP_RESET invalid for non-tcp [ 212.902628][T25270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.915276][T25273] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.918151][T25273] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 212.922218][T25273] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.925532][T25273] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 213.137147][T25311] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.141955][T25311] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 213.147467][T25311] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.153419][T25311] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 213.300749][T25338] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9410'. [ 213.582287][T25385] fuse: Bad value for 'fd' [ 213.602330][T25387] Zero length message leads to an empty skb [ 214.055680][T25446] random: crng reseeded on system resumption [ 214.159940][T25458] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 214.184684][T25460] net_ratelimit: 1 callbacks suppressed [ 214.184700][T25460] openvswitch: netlink: EtherType 50a is less than min 600 [ 214.236403][T25466] validate_nla: 5 callbacks suppressed [ 214.236422][T25466] netlink: 'syz.1.9469': attribute type 1 has an invalid length. [ 214.251424][T25466] netlink: 'syz.1.9469': attribute type 2 has an invalid length. [ 214.541239][T25500] ipt_REJECT: ECHOREPLY no longer supported. [ 214.954815][T20702] udevd[20702]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 214.981290][T25537] __nla_validate_parse: 1 callbacks suppressed [ 214.981306][T25537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9503'. [ 215.581902][T25634] autofs4:pid:25634:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 215.602202][ T40] audit: type=1400 audit(215.481:94): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25637 comm="syz.1.9553" [ 215.624502][T25642] netlink: 'syz.2.9555': attribute type 1 has an invalid length. [ 215.744495][T25662] xt_TCPMSS: Only works on TCP SYN packets [ 215.755127][ T40] audit: type=1107 audit(215.631:95): pid=25663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.807161][T25674] netlink: 264 bytes leftover after parsing attributes in process `syz.2.9571'. [ 215.846493][ C2] hpet: Lost 1 RTC interrupts [ 215.955938][T25697] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 215.959119][T25698] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 1 [ 215.961059][T25699] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 2 [ 215.966027][T25700] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 3 [ 216.162410][T25718] xt_CT: No such helper "pptp" [ 216.707847][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9633'. [ 216.732049][T25803] bond10: entered promiscuous mode [ 216.734781][T25803] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.817440][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9639'. [ 217.454732][T25918] netlink: 'syz.3.9687': attribute type 11 has an invalid length. [ 217.970477][T25981] ip6erspan1: entered allmulticast mode [ 218.285028][T25917] 9pnet_fd: p9_fd_create_tcp (25917): problem connecting socket to 127.0.0.1 [ 218.518996][ T1037] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.682030][ T1037] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.685590][ T1037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.688308][ T1037] usb 6-1: Product: syz [ 218.689719][ T1037] usb 6-1: Manufacturer: syz [ 218.691240][ T1037] usb 6-1: SerialNumber: syz [ 218.705758][ T1037] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.749542][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.998567][T26088] siw: device registration error -23 [ 219.159649][ T1037] usb 6-1: USB disconnect, device number 6 [ 219.308463][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 219.480393][ T39] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 219.483341][ T39] usb 7-1: config 1 has no interface number 0 [ 219.486204][ T39] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 219.492433][ T39] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 219.496562][ T39] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.503063][ T39] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 219.506114][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.509620][ T39] usb 7-1: Product: syz [ 219.511058][ T39] usb 7-1: Manufacturer: syz [ 219.512634][ T39] usb 7-1: SerialNumber: syz [ 219.517402][T26096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.690871][T26110] netlink: 67 bytes leftover after parsing attributes in process `syz.0.9786'. [ 219.726368][T26096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.781351][T26119] program syz.0.9779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.948478][ T39] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 219.951301][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9793'. [ 220.028325][ T10] usb 6-1: Service connection timeout for: 256 [ 220.030466][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 220.033643][ T10] ath9k_htc: Failed to initialize the device [ 220.039063][ T1037] usb 6-1: ath9k_htc: USB layer deinitialized [ 220.139348][ T39] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 220.147736][ T39] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 220.151584][ T39] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 220.155833][ T39] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 220.164304][ T39] usb 7-1: USB disconnect, device number 7 [ 220.174308][ T39] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 220.279355][ T39] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 220.317174][T26170] Invalid logical block size (53355) [ 220.735001][T26221] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.769231][T26224] xt_l2tp: invalid flags combination: 8 [ 220.820856][T26231] siw: device registration error -23 [ 220.866683][T26237] program syz.2.9837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.905969][ T50] kernel write not supported for file /sg0 (pid: 50 comm: kworker/3:1) [ 221.273864][T26290] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9860'. [ 221.448546][T26319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9874'. [ 221.462106][T26319] vlan0: entered promiscuous mode [ 221.464151][T26319] bridge0: entered promiscuous mode [ 221.514349][T26327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9878'. [ 221.519447][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9878'. [ 221.523878][T26327] netlink: 'syz.3.9878': attribute type 11 has an invalid length. [ 221.558045][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9881'. [ 221.563296][T26333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9881'. [ 221.567613][T26333] netlink: 'syz.0.9881': attribute type 12 has an invalid length. [ 222.161370][T26414] program syz.0.9918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.875780][T26499] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 223.109273][T26507] tmpfs: Cannot change global quota limit on remount [ 223.211797][T26517] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 223.292315][T26523] tmpfs: Cannot enable quota on remount [ 223.399812][T26535] nbd: must specify a device to reconfigure [ 223.542275][T26553] netlink: 'syz.0.9985': attribute type 2 has an invalid length. [ 223.775166][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10000'. [ 223.848331][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.881130][ T1037] kernel write not supported for file /uinput (pid: 1037 comm: kworker/0:2) [ 223.923690][ T40] audit: type=1326 audit(223.801:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 223.932544][ T40] audit: type=1326 audit(223.801:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="syz.3.10006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 223.944409][ T40] audit: type=1326 audit(223.801:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="syz.3.10006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 223.954590][ T40] audit: type=1326 audit(223.801:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="syz.3.10006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 223.961530][ T40] audit: type=1326 audit(223.801:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 223.967839][ T40] audit: type=1326 audit(223.801:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 223.974515][ T40] audit: type=1326 audit(223.801:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 223.981343][ T40] audit: type=1326 audit(223.801:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 223.988079][ T40] audit: type=1326 audit(223.801:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 223.995504][ T40] audit: type=1326 audit(223.801:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26596 comm="syz.3.10006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 224.008482][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 224.016914][ T10] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 224.019974][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.022299][ T10] usb 5-1: Product: syz [ 224.023472][ T10] usb 5-1: Manufacturer: syz [ 224.025199][ T10] usb 5-1: SerialNumber: syz [ 224.040388][ T10] usb 5-1: config 0 descriptor?? [ 224.043960][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 224.046959][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 224.064187][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.068435][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 224.073850][ T10] usb 5-1: media controller created [ 224.085305][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.224708][T26627] overlayfs: conflicting lowerdir path [ 224.245334][T26561] dvb-usb: bulk message failed: -22 (24/0) [ 224.255397][ T10] cxusb: set interface failed [ 224.257845][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 224.270740][T26629] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 224.286367][ T10] DVB: Unable to find symbol mt352_attach() [ 224.289706][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 224.336071][T26639] nbd: must specify a device to reconfigure [ 224.358816][ T10] rc_core: IR keymap rc-dvico-portable not found [ 224.361834][ T10] Registered IR keymap rc-empty [ 224.365167][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 224.370961][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input57 [ 224.379577][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 224.383208][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 224.390015][ T10] usb 5-1: USB disconnect, device number 9 [ 224.461534][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 224.479481][T26651] pimreg3: entered allmulticast mode [ 225.094249][T26708] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 225.549100][T26734] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 225.662116][T26742] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.10076'. [ 226.054811][T26762] pim6reg: entered allmulticast mode [ 226.063237][T26762] pim6reg: left allmulticast mode [ 226.122748][T26766] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 226.125597][T26766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.130320][T26766] vhci_hcd vhci_hcd.0: Device attached [ 226.138045][T26767] vhci_hcd: connection closed [ 226.146576][ T13] vhci_hcd vhci_hcd.0: stop threads [ 226.152044][ T13] vhci_hcd vhci_hcd.0: release socket [ 226.154355][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 226.197412][T26771] netlink: 810 bytes leftover after parsing attributes in process `syz.1.10088'. [ 226.328694][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10093'. [ 226.475054][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10100'. [ 226.479751][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10100'. [ 226.576743][T26802] CUSE: unknown device info "" [ 226.579067][T26802] CUSE: unknown device info "" [ 226.581333][T26802] CUSE: unknown device info "" [ 226.583522][T26802] CUSE: unknown device info "" [ 226.586043][T26802] CUSE: unknown device info "" [ 226.589863][T26802] CUSE: unknown device info "" [ 226.592575][T26802] CUSE: unknown device info "" [ 226.595242][T26802] CUSE: unknown device info "" [ 226.597313][T26802] CUSE: unknown device info "" [ 226.600149][T26802] CUSE: unknown device info "" [ 226.602223][T26802] CUSE: unknown device info "" [ 226.603806][T26802] CUSE: unknown device info "r" [ 226.605529][T26802] CUSE: unknown device info "#" [ 226.607542][T26802] CUSE: unknown device info "" [ 226.610368][T26802] CUSE: unknown device info "" [ 226.612356][T26802] CUSE: unknown device info "" [ 226.614302][T26802] CUSE: DEVNAME unspecified [ 226.857096][T26824] vivid-000: disconnect [ 226.860631][T26823] vivid-000: reconnect [ 228.204947][T26904] tipc: Enabling of bearer rejected, failed to enable media [ 228.736665][T26943] Bluetooth: MGMT ver 1.23 [ 228.834504][T26951] pim6reg: entered allmulticast mode [ 228.844177][T26951] pim6reg: left allmulticast mode [ 229.004167][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10177'. [ 229.007071][T26962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10177'. [ 229.010169][T26962] netlink: 'syz.1.10177': attribute type 13 has an invalid length. [ 229.048599][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.199702][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.208291][ T39] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.211964][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.214813][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.222999][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.241304][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.245297][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.253723][ T39] usb 5-1: Product: syz [ 229.255037][ T39] usb 5-1: Manufacturer: syz [ 229.262263][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 229.263980][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 229.282714][ T39] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 229.287124][ T39] cdc_wdm 5-1:1.0: Unknown control protocol [ 229.535564][ T10] usb 5-1: USB disconnect, device number 10 [ 229.568420][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.732356][ T50] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 229.736292][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.740295][ T50] usb 6-1: Product: syz [ 229.742182][ T50] usb 6-1: Manufacturer: syz [ 229.744145][ T50] usb 6-1: SerialNumber: syz [ 229.753962][ T50] usb 6-1: config 0 descriptor?? [ 229.967721][ T39] usb 6-1: USB disconnect, device number 7 [ 230.212305][T27009] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 230.216626][T27009] CUSE: unknown device info "ٮ,<_eF" [ 230.220458][T27009] CUSE: unknown device info "3ܟ,̘" [ 230.222807][T27009] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 230.226023][T27009] CUSE: unknown device info " [ 230.226023][T27009] fzXS! [ 230.226023][T27009] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 230.228068][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10202'. [ 230.233690][T27009] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 230.242125][T27009] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 230.244696][T27009] CUSE: zero length info key specified [ 230.315823][T27017] tipc: Failed to obtain node identity [ 230.318374][T27017] tipc: Enabling of bearer rejected, failed to enable media [ 230.470160][T27039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10217'. [ 230.930727][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 230.930744][ T40] audit: type=1326 audit(230.801:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27099 comm="syz.3.10245" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 231.090874][T27119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10252'. [ 231.100974][T27118] lo speed is unknown, defaulting to 1000 [ 231.104306][T27118] lo speed is unknown, defaulting to 1000 [ 231.549098][ T5858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.702323][ T5858] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 231.705548][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.708973][ T5858] usb 6-1: Product: syz [ 231.710824][ T5858] usb 6-1: Manufacturer: syz [ 231.712772][ T5858] usb 6-1: SerialNumber: syz [ 231.716658][ T5858] usb 6-1: config 0 descriptor?? [ 231.852198][T27138] loop4: detected capacity change from 0 to 7 [ 231.876388][T27138] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 231.881226][T27138] loop4: partition table partially beyond EOD, truncated [ 231.890413][T27138] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 231.910559][T20702] udevd[20702]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.932454][ T10] usb 6-1: USB disconnect, device number 8 [ 231.962897][T27145] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.10263'. [ 232.116280][T27163] tipc: Enabling of bearer rejected, failed to enable media [ 232.131843][T27165] 9pnet_fd: p9_fd_create_tcp (27165): problem binding to privport [ 232.424889][T27197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 232.427099][T27197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.432736][T27197] vhci_hcd vhci_hcd.0: Device attached [ 232.580684][T27218] loop6: detected capacity change from 0 to 524287999 [ 232.594930][T20702] Buffer I/O error on dev loop6, logical block 65535996, async page read [ 232.596680][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.603433][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.606326][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.609770][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.612669][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.615398][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.618909][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.621767][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.624753][T27218] ldm_validate_partition_table(): Disk read failed. [ 232.627332][T27218] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.630359][T27218] Dev loop6: unable to read RDB block 0 [ 232.632625][T27218] loop6: unable to read partition table [ 232.634660][T27218] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 232.668327][ T5858] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 232.678336][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 232.828339][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 232.840701][T27198] vhci_hcd: connection closed [ 232.840932][ T13] vhci_hcd vhci_hcd.2: stop threads [ 232.841083][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.842541][ T13] vhci_hcd vhci_hcd.2: release socket [ 232.849245][ T29] usb 7-1: no configurations [ 232.850816][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 232.851255][ T29] usb 7-1: can't read configurations, error -22 [ 232.866555][T27245] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 232.908569][ T5858] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 232.997494][T27260] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 233.042670][T27265] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 233.042670][T27265] program syz.1.10317 not setting count and/or reply_len properly [ 233.116083][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10324'. [ 233.490141][T27317] lo speed is unknown, defaulting to 1000 [ 233.493039][T27317] lo speed is unknown, defaulting to 1000 [ 234.727963][T27366] lo speed is unknown, defaulting to 1000 [ 234.759752][T27366] lo speed is unknown, defaulting to 1000 [ 235.821083][T27405] vlan2: entered allmulticast mode [ 235.823337][T27405] team0: entered allmulticast mode [ 236.259049][T27449] lo speed is unknown, defaulting to 1000 [ 236.264775][T27449] lo speed is unknown, defaulting to 1000 [ 236.722039][T27506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.826514][T27516] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 237.110712][ T40] audit: type=1326 audit(236.991:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27559 comm="syz.2.10457" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3fcc code=0x0 [ 237.230548][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10464'. [ 237.269060][T27577] netlink: 'syz.0.10465': attribute type 5 has an invalid length. [ 237.298595][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.470891][ T39] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.477499][ T39] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.482825][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.486876][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 237.492404][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 237.502576][ T39] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.506723][ T39] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.512999][ T39] usb 6-1: Product: syz [ 237.514928][ T39] usb 6-1: Manufacturer: syz [ 237.524151][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 237.526427][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 237.534277][ T39] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 237.536800][ T39] cdc_wdm 6-1:1.0: Unknown control protocol [ 237.598154][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10477'. [ 237.602630][T27602] netlink: 'syz.0.10477': attribute type 5 has an invalid length. [ 237.605992][T27602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10477'. [ 237.754504][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10483'. [ 237.758668][T27614] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10483'. [ 237.761577][T27614] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10483'. [ 237.794300][ T10] usb 6-1: USB disconnect, device number 9 [ 238.176460][T27655] gfs2: error -5 reading superblock [ 238.197875][T27659] netlink: 'syz.3.10505': attribute type 11 has an invalid length. [ 238.516892][ T50] hid (null): invalid report_size 51505 [ 238.521574][ T50] hid (null): unknown global tag 0xc [ 238.524798][ T50] hid (null): unknown global tag 0xc [ 238.526717][ T50] hid (null): unknown global tag 0x9f [ 238.529305][ T50] hid (null): unknown global tag 0xc [ 238.531016][ T50] hid (null): unknown global tag 0x42 [ 238.532813][ T50] hid (null): unknown global tag 0xd [ 238.534505][ T50] hid (null): unknown global tag 0xc [ 238.536417][ T50] hid (null): unknown global tag 0xc [ 238.539900][ T50] hid (null): report_id 0 is invalid [ 238.541715][ T50] hid (null): unknown global tag 0xe [ 238.543557][ T50] hid (null): report_id 16697 is invalid [ 238.545563][ T50] hid (null): bogus close delimiter [ 238.547264][ T50] hid (null): unknown global tag 0xc [ 238.550603][ T50] hid (null): invalid report_size 1234625101 [ 238.552582][ T50] hid (null): unknown global tag 0xd [ 238.554619][ T50] hid (null): unknown global tag 0xd [ 238.556378][ T50] hid (null): invalid report_size -2125375034 [ 238.559932][ T50] hid (null): report_id 0 is invalid [ 238.561852][ T50] hid (null): invalid report_count -1724469666 [ 238.564319][ T50] hid (null): unknown global tag 0xc [ 238.564367][ T50] hid (null): unknown global tag 0xd [ 238.564384][ T50] hid (null): global environment stack overflow [ 238.564405][ T50] hid (null): unknown global tag 0xe [ 238.575414][ T50] hid (null): unknown global tag 0xc [ 238.575462][ T50] hid (null): unknown global tag 0xc [ 238.579956][ T50] hid_parser_main: 7 callbacks suppressed [ 238.579969][ T50] hid-generic 0009:0007:0077.0003: unknown main item tag 0x1 [ 238.584702][ T50] hid-generic 0009:0007:0077.0003: reserved main item tag 0xd [ 238.584734][ T50] hid-generic 0009:0007:0077.0003: unknown main item tag 0x1 [ 238.584748][ T50] hid-generic 0009:0007:0077.0003: unexpected long global item [ 238.585057][ T50] hid-generic 0009:0007:0077.0003: probe with driver hid-generic failed with error -22 [ 239.377609][ T40] audit: type=1326 audit(239.251:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27704 comm="syz.1.10528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7fc00000 [ 239.482714][T27735] xt_l2tp: invalid flags combination: 0 [ 239.768596][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 239.824247][T27771] syz.2.10558 (27771) used greatest stack depth: 18968 bytes left [ 239.930090][ T39] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 239.932718][ T39] usb 6-1: config 0 has no interface number 0 [ 239.934860][ T39] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.940846][ T39] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 239.945245][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.948818][ T39] usb 6-1: Product: syz [ 239.950674][ T39] usb 6-1: Manufacturer: syz [ 239.952491][ T39] usb 6-1: SerialNumber: syz [ 239.956326][ T39] usb 6-1: config 0 descriptor?? [ 239.961620][T27793] xt_l2tp: unknown flags: 51 [ 239.977349][ T39] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 240.108404][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10576'. [ 240.111402][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10576'. [ 240.186749][ T39] usb 6-1: USB disconnect, device number 10 [ 240.191714][ T39] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 240.238701][ T40] audit: type=1326 audit(240.121:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.245867][ T40] audit: type=1326 audit(240.121:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.253136][ T40] audit: type=1326 audit(240.121:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 240.260234][ T40] audit: type=1326 audit(240.121:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.267369][ T40] audit: type=1326 audit(240.121:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.274192][ T40] audit: type=1326 audit(240.121:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.280672][ T40] audit: type=1326 audit(240.121:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 240.287460][ T40] audit: type=1326 audit(240.121:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27821 comm="syz.3.10583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 240.461323][T27842] netlink: 208 bytes leftover after parsing attributes in process `syz.2.10593'. [ 240.914076][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10614'. [ 240.973213][T27894] program syz.3.10618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.349853][T27926] use of bytesused == 0 is deprecated and will be removed in the future, [ 241.352606][T27926] use the actual size instead. [ 242.014032][T27983] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 242.611708][T28057] gtp0: entered allmulticast mode [ 242.722788][T28067] __nla_validate_parse: 2 callbacks suppressed [ 242.722808][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10700'. [ 242.729888][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10700'. [ 243.125301][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10718'. [ 243.143096][T28110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.457233][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10744'. [ 243.469835][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10743'. [ 243.473603][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10743'. [ 243.586165][T28180] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 243.659503][T28191] netlink: 19 bytes leftover after parsing attributes in process `syz.0.10757'. [ 243.978085][T28230] netlink: 292 bytes leftover after parsing attributes in process `syz.2.10776'. [ 244.712151][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10820'. [ 244.862909][T28349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10833'. [ 245.303735][T28397] program syz.1.10856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.306923][T28397] ata1.00: invalid service action 3 [ 245.956639][T28458] Option ' ' to dns_resolver key: bad/missing value [ 246.374805][T28516] tipc: Started in network mode [ 246.376479][T28516] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 246.380539][T28516] tipc: Enabled bearer , priority 5 [ 246.750036][T28556] lo speed is unknown, defaulting to 1000 [ 246.753873][T28556] lo speed is unknown, defaulting to 1000 [ 246.980087][T28563] netlink: 'syz.2.10934': attribute type 14 has an invalid length. [ 247.290743][T28585] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 247.397093][T28599] program syz.0.10950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.400533][T28599] ata1.00: non-matching transfer count (8388608/133) [ 247.476163][T28611] : entered promiscuous mode [ 247.485741][T28615] IPVS: stopping backup sync thread 25458 ... [ 247.509906][ T50] tipc: Node number set to 9480874 [ 247.763703][T28654] PKCS7: Unknown OID: [5] (bad) [ 247.765345][T28654] PKCS7: Only support pkcs7_signedData type [ 247.841501][T28667] fuse: blksize only supported for fuseblk [ 247.956217][T28684] ptrace attach of "/syz-executor exec"[5746] was attempted by " [ 248.201424][T28708] lo speed is unknown, defaulting to 1000 [ 248.249056][T28708] lo speed is unknown, defaulting to 1000 [ 248.507350][T28738] __nla_validate_parse: 9 callbacks suppressed [ 248.507364][T28738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11016'. [ 248.625131][T28752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 248.976684][T28773] random: crng reseeded on system resumption [ 248.993363][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.004227][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.009055][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.014348][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.017102][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.303280][T28771] lo speed is unknown, defaulting to 1000 [ 249.306636][T28771] lo speed is unknown, defaulting to 1000 [ 249.605190][T28812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11049'. [ 249.689052][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 249.788394][ T5099] Bluetooth: hci4: command 0x1003 tx timeout [ 249.794088][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 250.222776][ T13] bond0 (unregistering): Released all slaves [ 250.231295][ T13] bond1 (unregistering): Released all slaves [ 250.242552][ T13] bond2 (unregistering): Released all slaves [ 250.250233][ T13] bond3 (unregistering): Released all slaves [ 250.261775][ T13] bond4 (unregistering): Released all slaves [ 250.272878][ T13] bond5 (unregistering): Released all slaves [ 250.285508][ T13] bond6 (unregistering): Released all slaves [ 250.297835][ T13] bond7 (unregistering): Released all slaves [ 250.308687][ T13] bond8 (unregistering): Released all slaves [ 250.324562][ T13] bond9 (unregistering): Released all slaves [ 250.336670][ T13] bond10 (unregistering): Released all slaves [ 250.666757][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.803655][T28771] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.806083][T28771] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.808740][T28771] bridge_slave_0: entered allmulticast mode [ 250.811555][T28771] bridge_slave_0: entered promiscuous mode [ 250.820157][T28771] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.828656][T28771] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.831126][T28771] bridge_slave_1: entered allmulticast mode [ 250.833957][T28771] bridge_slave_1: entered promiscuous mode [ 250.878673][T28771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.883586][T28771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.936265][T28771] team0: Port device team_slave_0 added [ 250.958154][T28771] team0: Port device team_slave_1 added [ 250.978627][T28771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.980940][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.990671][T28771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.999101][T28771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.004182][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.015506][T28771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.064772][T28943] bond7: (slave virt_wifi0): Device is not bonding slave [ 251.067832][T28943] bond7: option active_slave: invalid value (virt_wifi0) [ 251.068361][ T5753] Bluetooth: hci2: command tx timeout [ 251.076192][T28943] bond7 (unregistering): Released all slaves [ 251.090559][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 251.112987][T28950] netlink: 'syz.3.11104': attribute type 4 has an invalid length. [ 251.130332][T28771] hsr_slave_0: entered promiscuous mode [ 251.133774][T28771] hsr_slave_1: entered promiscuous mode [ 251.136537][T28771] debugfs: 'hsr0' already exists in 'hsr' [ 251.138850][T28771] Cannot create hsr debugfs directory [ 251.427088][T28959] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.504105][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 251.610817][T28771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.617541][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.626986][T28771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.650061][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.654895][T28771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.665098][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.684647][T28771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.702727][T28771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.861605][T28771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.877733][T28771] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.897049][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.899924][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.926659][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.929996][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.965261][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 251.973872][ T13] hsr_slave_0: left promiscuous mode [ 251.977157][ T13] hsr_slave_1: left promiscuous mode [ 252.014528][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11129'. [ 252.197587][ T225] smc: removing ib device syz1 [ 252.221696][T29029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 252.280954][ T225] smbdirect: ib_dev[syz1] removed [ 252.633726][T29054] IPVS: Scheduler module ip_vs_sip not found [ 252.749632][T28771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.964977][T28771] veth0_vlan: entered promiscuous mode [ 252.976337][T28771] veth1_vlan: entered promiscuous mode [ 253.011651][T28771] veth0_macvtap: entered promiscuous mode [ 253.044533][T28771] veth1_macvtap: entered promiscuous mode [ 253.057550][T28771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.070664][T28771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.076680][ T188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.097912][ T188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.100921][ T188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.108766][ T188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.130194][T29104] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11148'. [ 253.150326][ T5753] Bluetooth: hci2: command tx timeout [ 253.280810][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.287583][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.322168][T29119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11154'. [ 253.334594][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.338595][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.626464][ T13] IPVS: stop unused estimator thread 0... [ 253.672857][T29135] hugetlbfs: Bad value '' for mount option 'size' [ 253.672857][T29135] [ 253.817994][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11168'. [ 255.099358][T29286] Bluetooth: MGMT ver 1.23 [ 255.228602][ T5753] Bluetooth: hci2: command tx timeout [ 255.575450][T29308] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 255.868382][ T5858] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 256.023837][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.029794][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 256.032609][ T5858] usb 5-1: can't read configurations, error -71 [ 256.349877][T29355] Bluetooth: MGMT ver 1.23 [ 256.645653][ T5822] kernel write not supported for file /radio5 (pid: 5822 comm: kworker/0:3) [ 256.862538][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 256.862551][ T40] audit: type=1326 audit(256.741:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.872229][ T40] audit: type=1326 audit(256.751:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.879327][ T40] audit: type=1326 audit(256.751:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.886532][ T40] audit: type=1326 audit(256.751:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.895457][ T40] audit: type=1326 audit(256.751:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.902914][ T40] audit: type=1326 audit(256.751:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.910013][ T40] audit: type=1326 audit(256.751:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.923963][ T40] audit: type=1326 audit(256.751:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.935347][ T40] audit: type=1326 audit(256.751:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 256.945968][ T40] audit: type=1326 audit(256.751:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29414 comm="syz.1.11294" exe="/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 257.127864][T29447] comedi comedi2: dac02: I/O base address or length out of range [ 257.308867][ T5753] Bluetooth: hci2: command tx timeout [ 257.578390][ T5189] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 257.738392][ T5189] usb 6-1: Using ep0 maxpacket: 16 [ 257.742603][ T5189] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.746812][ T5189] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 257.751157][ T5189] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 257.754884][ T5189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.761600][ T5189] usb 6-1: config 0 descriptor?? [ 257.767476][ T5189] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 257.770509][ T5189] dvb-usb: bulk message failed: -22 (3/0) [ 257.778608][ T5189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.784074][ T5189] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 257.787440][ T5189] usb 6-1: media controller created [ 257.797852][T29483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11326'. [ 257.803356][ T5189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.827344][ T5189] dvb-usb: bulk message failed: -22 (6/0) [ 257.830020][ T5189] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 257.834124][ T5189] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input59 [ 257.841039][ T5189] dvb-usb: schedule remote query interval to 150 msecs. [ 257.844025][ T5189] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 257.972322][ T5189] usb 6-1: USB disconnect, device number 11 [ 258.040869][ T5189] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 258.210451][ T104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.284533][ T104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.406727][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.411097][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.421919][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.423831][ T104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.426004][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.445943][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.474289][T29503] smc: net device vcan0 applied user defined pnetid SYZ1 [ 258.530210][ T104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.717775][ T104] bridge4: port 1(geneve4) entered disabled state [ 258.729009][ T104] dvmrp9: left allmulticast mode [ 258.829538][T29532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11347'. [ 259.014255][T29538] syz.1.11350: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.018637][T29538] CPU: 3 UID: 0 PID: 29538 Comm: syz.1.11350 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.018655][T29538] Tainted: [L]=SOFTLOCKUP [ 259.018658][T29538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.018665][T29538] Call Trace: [ 259.018668][T29538] [ 259.018673][T29538] dump_stack_lvl+0x100/0x190 [ 259.018689][T29538] warn_alloc.cold+0x95/0x1c1 [ 259.018701][T29538] ? __pfx_warn_alloc+0x10/0x10 [ 259.018718][T29538] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 259.018739][T29538] ? _mutex_trylock_nest_lock+0x170/0x310 [ 259.018762][T29538] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 259.018789][T29538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.018807][T29538] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.018822][T29538] ? lockdep_hardirqs_on+0x78/0x100 [ 259.018840][T29538] ? stack_depot_save_flags+0x479/0x9d0 [ 259.018856][T29538] ? comedi_isadma_alloc+0xc6/0x620 [ 259.018871][T29538] ? kasan_save_stack+0x3f/0x50 [ 259.018881][T29538] ? kasan_save_stack+0x30/0x50 [ 259.018890][T29538] ? kasan_save_track+0x14/0x30 [ 259.018900][T29538] ? __kasan_kmalloc+0xaa/0xb0 [ 259.018912][T29538] ? __do_fast_syscall_32+0xe7/0x950 [ 259.018928][T29538] ? do_fast_syscall_32+0x32/0x70 [ 259.018944][T29538] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.018962][T29538] __alloc_pages_noprof+0xb/0x110 [ 259.018980][T29538] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 259.018999][T29538] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 259.019015][T29538] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 259.019035][T29538] dma_direct_alloc+0x8f/0x590 [ 259.019050][T29538] dma_alloc_attrs+0x185/0x2b0 [ 259.019061][T29538] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 259.019073][T29538] ? dma_direct_supported+0xca/0x220 [ 259.019091][T29538] comedi_isadma_alloc+0x331/0x620 [ 259.019108][T29538] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 259.019125][T29538] ? request_threaded_irq+0x27b/0x3e0 [ 259.019145][T29538] pcl812_attach+0x18f5/0x2300 [ 259.019160][T29538] comedi_device_attach+0x40e/0x6b0 [ 259.019176][T29538] do_devconfig_ioctl+0x1b3/0x6d0 [ 259.019190][T29538] ? comedi_unlocked_ioctl+0x180/0x3310 [ 259.019208][T29538] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 259.019230][T29538] ? tomoyo_path_number_perm+0x46d/0x580 [ 259.019242][T29538] ? kasan_save_stack+0x3f/0x50 [ 259.019252][T29538] ? kasan_save_stack+0x30/0x50 [ 259.019261][T29538] ? kasan_save_track+0x14/0x30 [ 259.019271][T29538] ? kasan_save_free_info+0x3b/0x70 [ 259.019289][T29538] comedi_unlocked_ioctl+0x860/0x3310 [ 259.019310][T29538] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 259.019338][T29538] ? kasan_quarantine_put+0x104/0x240 [ 259.019348][T29538] ? lockdep_hardirqs_on+0x78/0x100 [ 259.019365][T29538] ? find_held_lock+0x2b/0x80 [ 259.019379][T29538] ? tomoyo_path_number_perm+0x28f/0x580 [ 259.019390][T29538] ? tomoyo_path_number_perm+0x28f/0x580 [ 259.019404][T29538] ? tomoyo_path_number_perm+0x188/0x580 [ 259.019418][T29538] comedi_compat_ioctl+0x438/0xe20 [ 259.019441][T29538] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 259.019459][T29538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.019476][T29538] ? do_vfs_ioctl+0x226/0x13e0 [ 259.019488][T29538] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.019502][T29538] ? find_held_lock+0x2b/0x80 [ 259.019516][T29538] ? __fget_files+0x215/0x3d0 [ 259.019528][T29538] ? hook_file_ioctl_common+0x149/0x410 [ 259.019543][T29538] ? __fget_files+0x21f/0x3d0 [ 259.019558][T29538] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 259.019576][T29538] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 259.019589][T29538] __do_fast_syscall_32+0xe7/0x950 [ 259.019608][T29538] do_fast_syscall_32+0x32/0x70 [ 259.019625][T29538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.019639][T29538] RIP: 0023:0xf707efcc [ 259.019648][T29538] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 259.019659][T29538] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 259.019669][T29538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 259.019676][T29538] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.019682][T29538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.019688][T29538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.019694][T29538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.019708][T29538] [ 259.019712][T29538] Mem-Info: [ 259.162995][T29538] active_anon:997 inactive_anon:5145 isolated_anon:0 [ 259.162995][T29538] active_file:4057 inactive_file:19486 isolated_file:0 [ 259.162995][T29538] unevictable:1768 dirty:562 writeback:0 [ 259.162995][T29538] slab_reclaimable:6852 slab_unreclaimable:62079 [ 259.162995][T29538] mapped:23135 shmem:2313 pagetables:1223 [ 259.162995][T29538] sec_pagetables:304 bounce:0 [ 259.162995][T29538] kernel_misc_reclaimable:0 [ 259.162995][T29538] free:62749 free_pcp:1 free_cma:0 [ 259.176400][T29538] Node 0 active_anon:40kB inactive_anon:2232kB active_file:0kB inactive_file:3516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8444kB pagetables:2048kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.186862][T29538] Node 0 DMA free:2508kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 259.196769][T29538] lowmem_reserve[]: 0 285 285 285 285 [ 259.198492][T29538] Node 0 DMA: 37*4kB (U) 11*8kB (U) 4*16kB (U) 5*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2508kB [ 259.203301][T29538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.206275][T29538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.209183][T29538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.212043][T29538] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 259.214828][T29538] 26830 total pagecache pages [ 259.216320][T29538] 978 pages in swap cache [ 259.217699][T29538] Free swap = 118180kB [ 259.219092][T29538] Total swap = 124996kB [ 259.220433][T29538] 524155 pages RAM [ 259.221640][T29538] 0 pages HighMem/MovableOnly [ 259.223236][T29538] 210119 pages reserved [ 259.224558][T29538] 0 pages cma reserved [ 259.388394][ T5099] Bluetooth: hci2: command tx timeout [ 259.452687][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11356'. [ 259.455507][T29550] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11356'. [ 259.605868][ T104] bond1 (unregistering): Released all slaves [ 259.620373][ T104] bond2 (unregistering): Released all slaves [ 259.630758][ T104] bond3 (unregistering): Released all slaves [ 259.639786][ T104] bond4 (unregistering): Released all slaves [ 259.652360][ T104] bond5 (unregistering): Released all slaves [ 259.667725][ T104] bond6 (unregistering): Released all slaves [ 259.682291][ T104] bond7 (unregistering): Released all slaves [ 259.731272][T29500] lo speed is unknown, defaulting to 1000 [ 259.836327][ T104] : left promiscuous mode [ 260.350818][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.518406][ T5099] Bluetooth: hci0: command tx timeout [ 260.574509][T28810] udevd[28810]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 260.601636][T29585] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 260.647955][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 260.686340][T29591] netlink: 'syz.3.11371': attribute type 62 has an invalid length. [ 260.838559][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.840982][T29500] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.843290][T29500] bridge_slave_0: entered allmulticast mode [ 260.846026][T29500] bridge_slave_0: entered promiscuous mode [ 260.855797][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.859068][T29500] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.865839][T29500] bridge_slave_1: entered allmulticast mode [ 260.875678][T29500] bridge_slave_1: entered promiscuous mode [ 260.914721][T29500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.921494][T29500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.938733][T29500] team0: Port device team_slave_0 added [ 260.947531][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 260.953913][T29500] team0: Port device team_slave_1 added [ 260.993426][T29500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.995638][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.004275][T29500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.009621][T29500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.011984][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.020786][T29500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.084113][T29500] hsr_slave_0: entered promiscuous mode [ 261.087183][T29500] hsr_slave_1: entered promiscuous mode [ 261.089570][T29500] debugfs: 'hsr0' already exists in 'hsr' [ 261.091735][T29500] Cannot create hsr debugfs directory [ 261.226762][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 261.236211][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 261.237867][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 261.249114][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 261.259249][ T39] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 261.260832][T29500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.262411][ T39] rtc rtc0: __rtc_set_alarm: err=-22 [ 261.279316][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.290973][T29500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.296660][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.301952][T29500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.306346][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.312581][T29500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.319557][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.403636][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.405951][T29500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.409571][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.411742][T29500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.450314][T29500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.462639][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.466707][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.489589][T29500] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.493255][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 261.505935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.510040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.541008][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.543374][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.652394][ T104] hsr_slave_0: left promiscuous mode [ 261.656272][ T104] hsr_slave_1: left promiscuous mode [ 262.029797][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11404'. [ 262.190610][T29500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.380853][ T104] IPVS: stop unused estimator thread 0... [ 262.409702][T29500] veth0_vlan: entered promiscuous mode [ 262.446194][T29500] veth1_vlan: entered promiscuous mode [ 262.477768][T29500] veth0_macvtap: entered promiscuous mode [ 262.486564][T29500] veth1_macvtap: entered promiscuous mode [ 262.506801][T29500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.516772][T29500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.527353][ T104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.531979][ T104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.537973][ T104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.544642][ T104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.591837][ T5099] Bluetooth: hci0: command tx timeout [ 262.631692][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.635311][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.699050][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.704618][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.805220][T29765] smc: net device wlan0 applied user defined pnetid SYZ0 [ 262.842195][T29770] netlink: 'syz.3.11421': attribute type 2 has an invalid length. [ 263.181811][T29807] netlink: 'syz.3.11440': attribute type 7 has an invalid length. [ 263.187530][T29807] netlink: 'syz.3.11440': attribute type 8 has an invalid length. [ 263.707980][T29869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11468'. [ 263.713326][T29869] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11468'. [ 263.716391][T29869] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11468'. [ 264.212730][T29911] netlink: 268 bytes leftover after parsing attributes in process `syz.3.11488'. [ 264.215947][T29911] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11488'. [ 264.350634][T29926] netlink: 'syz.5.11495': attribute type 1 has an invalid length. [ 264.593959][T29938] netlink: 'syz.5.11501': attribute type 14 has an invalid length. [ 264.668418][ T5099] Bluetooth: hci0: command tx timeout [ 264.716894][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11504'. [ 264.720957][T29945] netlink: 'syz.1.11504': attribute type 5 has an invalid length. [ 264.724361][T29945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11504'. [ 264.744970][T29945] geneve3: entered promiscuous mode [ 264.747343][T29945] geneve3: entered allmulticast mode [ 264.751132][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 264.765627][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 264.769922][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 264.773796][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 264.931170][T29956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11510'. [ 265.600543][T30016] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11535'. [ 265.607048][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11535'. [ 265.665281][T30024] overlayfs: conflicting options: nfs_export=on,index=off [ 265.897294][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 265.897310][ T40] audit: type=1326 audit(265.771:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30043 comm="syz.5.11544" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f88fcc code=0x0 [ 266.387594][T30077] netlink: 'syz.1.11555': attribute type 3 has an invalid length. [ 266.758944][ T5753] Bluetooth: hci0: command tx timeout [ 266.854728][T30109] tipc: Enabling of bearer rejected, failed to enable media [ 266.921060][ T104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.924283][ T104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.927190][ T104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.931717][ T104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.967446][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11572'. [ 267.350744][T30166] xt_l2tp: v2 sid > 0xffff: 1114112 [ 267.400691][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11599'. [ 267.682727][T30207] comedi comedi3: unsupported base address 0x4f23 [ 268.635890][T30241] netlink: 'syz.3.11632': attribute type 11 has an invalid length. [ 268.639289][T30241] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.11632'. [ 268.741713][T30255] xt_time: unknown flags 0xf4 [ 268.828412][ T5753] Bluetooth: hci0: command 0x0411 tx timeout [ 269.097756][T30273] program syz.5.11647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.437261][T30298] [U]  [ 269.742175][T30313] tipc: Enabling of bearer rejected, failed to enable media [ 270.282692][T30354] can0: slcan on ttyprintk. [ 270.389013][T30352] can0 (unregistered): slcan off ttyprintk. [ 270.672234][T30392] netlink: 'syz.5.11705': attribute type 1 has an invalid length. [ 270.704036][T30395] netem: change failed [ 270.885999][ T5753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.894313][ T5753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.901034][ T5753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.905718][ T5753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.909194][ T5753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.015207][T30418] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11716'. [ 271.021740][T30418] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11716'. [ 271.149918][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.218582][T30407] lo speed is unknown, defaulting to 1000 [ 271.262385][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.362468][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.484412][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.586880][T30407] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.590162][T30407] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.593538][T30407] bridge_slave_0: entered allmulticast mode [ 271.597460][T30407] bridge_slave_0: entered promiscuous mode [ 271.607025][T30407] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.609493][T30407] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.612320][T30407] bridge_slave_1: entered allmulticast mode [ 271.615422][T30407] bridge_slave_1: entered promiscuous mode [ 271.703027][T30407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.721235][T30407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.747907][T30407] team0: Port device team_slave_0 added [ 271.754634][T30407] team0: Port device team_slave_1 added [ 271.794168][ T12] bridge_slave_1: left allmulticast mode [ 271.796116][ T12] bridge_slave_1: left promiscuous mode [ 271.802816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.810216][ T12] bridge_slave_0: left allmulticast mode [ 271.812551][ T12] bridge_slave_0: left promiscuous mode [ 271.814661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.030701][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.054690][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.061434][ T12] bond0 (unregistering): Released all slaves [ 272.076049][T30407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.081465][T30407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.098670][T30407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.150183][T30471] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 272.153968][T30471] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 272.157557][T30471] ALSA: mixer_oss: invalid OSS volume 'lg' [ 272.160931][T30471] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 272.164699][T30471] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 272.168985][T30471] ALSA: mixer_oss: invalid OSS volume '' [ 272.171379][T30471] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 272.174059][T30471] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 272.176647][T30471] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 272.181030][T30471] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 272.184564][T30471] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 272.184873][T30407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.195957][T30407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.206293][T30407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.294575][T30407] hsr_slave_0: entered promiscuous mode [ 272.297983][T30407] hsr_slave_1: entered promiscuous mode [ 272.301700][T30407] debugfs: 'hsr0' already exists in 'hsr' [ 272.304217][T30407] Cannot create hsr debugfs directory [ 272.647539][ T12] hsr_slave_0: left promiscuous mode [ 272.654400][ T12] hsr_slave_1: left promiscuous mode [ 272.661331][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.666907][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.684966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.695332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.730591][ T12] veth1_macvtap: left promiscuous mode [ 272.734856][ T12] veth0_macvtap: left promiscuous mode [ 272.737321][ T12] veth1_vlan: left promiscuous mode [ 272.740872][ T12] veth0_vlan: left promiscuous mode [ 272.983593][ T12] team0 (unregistering): Port device team_slave_1 removed [ 272.996010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 272.999408][ T5753] Bluetooth: hci4: command tx timeout [ 273.061488][T30520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11756'. [ 273.179055][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 273.467345][T30407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.474145][T30407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.477796][T30407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.525025][T30407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.531324][T30407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.548637][T30407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.551469][T30407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.564221][T30554] atomic_op ffff888054fef198 conn xmit_atomic 0000000000000000 [ 273.572825][T30407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.639013][T30407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.651785][T30407] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.660159][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.663207][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.676542][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.679765][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.848496][ T39] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 273.977186][T30407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.018780][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 274.023592][ T39] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.029144][ T39] usb 10-1: config 0 has no interface number 0 [ 274.033740][ T39] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.045202][ T39] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.049599][ T39] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.053632][ T39] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.057830][ T39] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.063446][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.068674][ T39] usb 10-1: config 0 descriptor?? [ 274.073782][ T39] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.216563][T30407] veth0_vlan: entered promiscuous mode [ 274.225659][T30407] veth1_vlan: entered promiscuous mode [ 274.258270][T30407] veth0_macvtap: entered promiscuous mode [ 274.266001][T30407] veth1_macvtap: entered promiscuous mode [ 274.275644][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 274.292403][T30407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.294272][ T39] usb 10-1: USB disconnect, device number 2 [ 274.300586][T30407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.315920][ T39] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 274.331291][ T225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.335796][ T225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.346448][ T225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.359271][ T188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.449585][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.454014][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.478332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.484323][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.587612][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 274.664698][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11781'. [ 274.807979][T30646] syz.1.11785 (30646) used obsolete PPPIOCDETACH ioctl [ 274.821440][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 274.921488][T30656] binder: 30655:30656 ioctl 4018620d 0 returned -22 [ 274.928382][T30656] binder: 30655:30656 ioctl c0306201 80000180 returned -11 [ 274.946851][T30659] netlink: 'syz.1.11790': attribute type 1 has an invalid length. [ 275.681707][ T40] audit: type=1326 audit(275.561:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.6.11823" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f13fcc code=0x0 [ 276.047142][T30761] program syz.5.11832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.620489][T30777] F2FS-fs: Conflicting test_dummy_encryption options [ 276.890748][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11845'. [ 277.068477][ T5753] Bluetooth: hci4: command tx timeout [ 277.629233][T30846] netlink: 766 bytes leftover after parsing attributes in process `syz.5.11872'. [ 277.848173][T30865] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 277.854973][T30865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.303792][T30904] netlink: 'syz.1.11899': attribute type 1 has an invalid length. [ 278.307172][T30904] netlink: 'syz.1.11899': attribute type 2 has an invalid length. [ 278.315318][T30904] netlink: 'syz.1.11899': attribute type 1 has an invalid length. [ 278.321285][T30904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11899'. [ 278.375775][T30910] netlink: 'syz.5.11901': attribute type 32 has an invalid length. [ 278.383673][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11901'. [ 278.397150][T30913] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11903'. [ 278.406692][T30910] bond1: Setting coupled_control to off (0) [ 278.608354][ T1354] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 278.758530][ T1354] usb 6-1: Using ep0 maxpacket: 8 [ 278.762237][ T1354] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.765033][ T1354] usb 6-1: config 0 has no interface number 0 [ 278.767004][ T1354] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.771685][ T1354] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.777731][ T1354] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.787761][ T1354] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.796749][ T1354] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.805911][ T1354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.810298][ T1354] usb 6-1: config 0 descriptor?? [ 278.824208][ T1354] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.018433][ T1354] usb 6-1: USB disconnect, device number 12 [ 279.032733][ T1354] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 279.149508][ T5753] Bluetooth: hci4: command tx timeout [ 279.634734][T30972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11931'. [ 279.980153][T30988] netlink: 212372 bytes leftover after parsing attributes in process `syz.5.11939'. [ 279.984254][T30988] openvswitch: netlink: Message has 6 unknown bytes. [ 280.391531][T31013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11950'. [ 280.401820][T31013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11950'. [ 280.661466][T31033] veth1_macvtap: left promiscuous mode [ 280.663940][T31033] macsec0: entered allmulticast mode [ 280.675892][T31033] veth1_macvtap: entered promiscuous mode [ 280.678570][T31033] veth1_macvtap: entered allmulticast mode [ 280.681314][T31033] macsec0: left allmulticast mode [ 280.683551][T31033] veth1_macvtap: left allmulticast mode [ 280.877721][T31042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.883265][T31042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.948395][T31042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.951881][T31042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 281.075047][T31042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.079006][T31042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 281.161826][T31042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.166582][T31042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 281.287431][ T46] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.290248][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 281.332094][ T46] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.336677][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 281.357291][ T46] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.360896][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 281.377878][ T46] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.383083][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 281.488674][T31068] tipc: Enabling of bearer rejected, failed to enable media [ 281.590265][T30525] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 281.748314][T30525] usb 11-1: Using ep0 maxpacket: 8 [ 281.754079][T30525] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.761531][T30525] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.771664][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.781787][T30525] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.791400][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.800295][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.812994][T30525] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.820264][T30525] usb 11-1: config 168 interface 0 has no altsetting 0 [ 281.825488][T30525] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.829518][T30525] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.834300][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.842216][T30525] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.847356][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.852212][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.858997][T30525] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.864950][T30525] usb 11-1: config 168 interface 0 has no altsetting 0 [ 281.870353][T30525] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.873687][T30525] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.878448][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.883358][T30525] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.888457][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.895271][T30525] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.899699][T30525] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.904842][T30525] usb 11-1: config 168 interface 0 has no altsetting 0 [ 281.911351][T30525] usb 11-1: string descriptor 0 read error: -22 [ 281.914443][T30525] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.920075][T30525] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.940261][T30525] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 281.946310][T31092] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.051019][T31092] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.130858][T31092] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.237993][T31092] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.385363][ T46] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.397516][ T104] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.408922][ T104] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.432093][ T104] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.737034][T31114] hugetlbfs: Bad value 't1' for mount option 'nr_inodes' [ 282.737034][T31114] [ 282.782983][T31117] veth1_macvtap: left promiscuous mode [ 282.980686][T31135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12007'. [ 283.096027][ T5453] veth1_macvtap: entered promiscuous mode [ 284.202664][T30525] usb 11-1: USB disconnect, device number 2 [ 284.541445][T31223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12044'. [ 284.601184][T31231] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 285.019969][ T40] audit: type=1326 audit(2000000000.780:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.034928][ T40] audit: type=1326 audit(2000000000.780:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.042901][ T40] audit: type=1326 audit(2000000000.790:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.052176][ T40] audit: type=1326 audit(2000000000.790:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.061558][ T40] audit: type=1326 audit(2000000000.790:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.070634][ T40] audit: type=1326 audit(2000000000.790:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.080872][ T40] audit: type=1326 audit(2000000000.790:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.090265][ T40] audit: type=1326 audit(2000000000.790:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.102605][ T40] audit: type=1326 audit(2000000000.790:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.123745][ T40] audit: type=1326 audit(2000000000.790:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.6.12067" exe="/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 285.244489][T31292] qrtr: Invalid version 255 [ 285.380170][T31306] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12080'. [ 285.383145][T31306] netlink: 'syz.5.12080': attribute type 6 has an invalid length. [ 285.385710][T31306] netlink: 'syz.5.12080': attribute type 5 has an invalid length. [ 285.388323][T31306] netlink: 'syz.5.12080': attribute type 4 has an invalid length. [ 285.423003][T31310] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 285.689499][T31321] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12087'. [ 285.937168][T31349] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12098'. [ 285.945687][T31349] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12098'. [ 285.999322][T31354] macsec1: entered promiscuous mode [ 286.001089][T31354] macsec1: entered allmulticast mode [ 286.112320][T31362] Invalid source name [ 286.144093][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12105'. [ 286.510994][T31389] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12116'. [ 286.514421][T31389] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12116'. [ 286.633593][ T29] libceph: connect (1)[c::]:6789 error -101 [ 286.651740][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 286.681799][ T29] libceph: connect (1)[c::]:6789 error -101 [ 286.684886][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 286.954633][ T29] libceph: connect (1)[c::]:6789 error -101 [ 286.960062][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 287.418614][T31393] ceph: No mds server is up or the cluster is laggy [ 287.482604][ T29] libceph: connect (1)[c::]:6789 error -101 [ 287.485417][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 288.061580][T31469] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 288.064118][T31469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.075835][T31469] vhci_hcd vhci_hcd.0: Device attached [ 288.082110][T31469] vhci_hcd vhci_hcd.0: port 0 already used [ 288.087117][T31471] vhci_hcd: connection closed [ 288.089046][ T225] vhci_hcd vhci_hcd.5: stop threads [ 288.093269][ T225] vhci_hcd vhci_hcd.5: release socket [ 288.095539][ T225] vhci_hcd vhci_hcd.5: disconnect device [ 288.101238][T31476] Bluetooth: MGMT ver 1.23 [ 288.233356][T31482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12153'. [ 288.958597][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 289.138557][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 289.152675][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 289.156595][ T29] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 289.165573][ T29] usb 10-1: config 8 has no interface number 0 [ 289.168506][ T29] usb 10-1: config 8 interface 188 has no altsetting 0 [ 289.180870][ T29] usb 10-1: string descriptor 0 read error: -22 [ 289.188481][ T29] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 289.194762][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.216732][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 289.228323][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 289.230977][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 289.242764][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.258758][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 289.262197][ T29] usb 10-1: media controller created [ 289.264334][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.267131][ T29] dw2102: i2c transfer failed. [ 289.278756][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.295161][ T29] dw2102: i2c transfer failed. [ 289.300566][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.305185][ T29] dw2102: i2c transfer failed. [ 289.307288][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.314495][ T29] dw2102: i2c transfer failed. [ 289.316600][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.323813][ T29] dw2102: i2c transfer failed. [ 289.328045][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 289.332839][ T29] dw2102: i2c transfer failed. [ 289.334716][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 289.358179][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.403382][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 289.405859][ T29] dw2102: command 0x0e transfer failed. [ 289.424020][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 289.438521][ T29] dw2102: command 0x0e transfer failed. [ 289.748361][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 289.750393][ T29] dw2102: command 0x0e transfer failed. [ 289.752582][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 289.754582][ T29] dw2102: command 0x0e transfer failed. [ 289.756374][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 289.758177][ T29] dw2102: command 0x51 transfer failed. [ 289.761460][T31509] dvb-usb: bulk message failed: -22 (20/0) [ 289.763703][T31509] dw2102: i2c transfer failed. [ 289.781052][ T29] DVB: Unable to find symbol ds3000_attach() [ 289.783039][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 289.807618][T31525] netlink: 228 bytes leftover after parsing attributes in process `syz.6.12171'. [ 289.839731][ T29] rc_core: IR keymap rc-su3000 not found [ 289.841979][ T29] Registered IR keymap rc-empty [ 289.847630][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 289.861956][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input60 [ 289.874634][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 289.881244][T31527] ALSA: seq fatal error: cannot create timer (-19) [ 289.885907][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 289.885924][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 289.886870][ T29] usb 10-1: USB disconnect, device number 3 [ 289.900761][T28810] udevd[28810]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 289.934995][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 289.966601][T31536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12175'. [ 290.113145][T31545] team0: Device gtp0 is up. Set it down before adding it as a team port [ 290.188340][ T5753] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 290.581625][T31573] program syz.5.12194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.634814][T31578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12197'. [ 290.639181][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12197'. [ 290.642507][T31578] netlink: 'syz.6.12197': attribute type 7 has an invalid length. [ 290.645156][T31578] netlink: 'syz.6.12197': attribute type 13 has an invalid length. [ 290.673930][T31581] netlink: 'syz.5.12198': attribute type 1 has an invalid length. [ 290.684252][T31581] nbd: error processing sock list [ 291.340745][ C2] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 291.345013][ C2] sr 2:0:0:0: [sr0] tag#3 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 291.916040][T31661] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.12236'. [ 291.964789][ T24] kernel write not supported for file /uhid (pid: 24 comm: kworker/2:0) [ 292.141200][T31681] netlink: 'syz.6.12244': attribute type 1 has an invalid length. [ 292.145013][T31681] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12244'. [ 292.151820][T31681] netlink: 'syz.6.12244': attribute type 1 has an invalid length. [ 292.156452][T31681] netlink: 634 bytes leftover after parsing attributes in process `syz.6.12244'. [ 292.466046][T31716] netlink: 'syz.5.12259': attribute type 4 has an invalid length. [ 292.469418][T31716] netlink: 17 bytes leftover after parsing attributes in process `syz.5.12259'. [ 292.558756][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.567016][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.567719][T31726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12263'. [ 292.580987][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.587529][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.594953][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.903821][T31725] lo speed is unknown, defaulting to 1000 [ 293.135276][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.138176][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.140957][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.144173][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.147415][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.157666][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.165625][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.169151][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.172634][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.176075][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: unknown main item tag 0x0 [ 293.199831][ T5858] hid-generic 0007:0001:FFFFFFFF.0004: hidraw1: HID va.e8 Device [syz0] on syz1 [ 293.204205][T31725] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.210016][T31725] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.216815][T31725] bridge_slave_0: entered allmulticast mode [ 293.229078][T31725] bridge_slave_0: entered promiscuous mode [ 293.252800][T31725] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.256064][T31725] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.259862][T31725] bridge_slave_1: entered allmulticast mode [ 293.262793][T31725] bridge_slave_1: entered promiscuous mode [ 293.291176][T31725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.294649][T31920] __nla_validate_parse: 1 callbacks suppressed [ 293.294664][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12285'. [ 293.296717][T31725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.338756][T31937] nbd: must specify a size in bytes for the device [ 293.353305][T31725] team0: Port device team_slave_0 added [ 293.359890][T31725] team0: Port device team_slave_1 added [ 293.383219][T31899] fido_id[31899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.417975][T31725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.424943][T31725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.439277][T31725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.452637][T31725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.459161][T31725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.469809][T31725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.542908][T31725] hsr_slave_0: entered promiscuous mode [ 293.545292][T31725] hsr_slave_1: entered promiscuous mode [ 293.547379][T31725] debugfs: 'hsr0' already exists in 'hsr' [ 293.550402][T31725] Cannot create hsr debugfs directory [ 293.719780][ T88] pimreg3: left allmulticast mode [ 293.851673][T32085] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 293.954635][ T88] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 294.343165][ T88] bond0 (unregistering): Released all slaves [ 294.349888][ T88] bond1 (unregistering): Released all slaves [ 294.357464][ T88] bond2 (unregistering): Released all slaves [ 294.366477][ T88] bond3 (unregistering): Released all slaves [ 294.373519][ T88] bond4 (unregistering): Released all slaves [ 294.383370][ T88] bond5 (unregistering): Released all slaves [ 294.390608][ T88] bond6 (unregistering): Released all slaves [ 294.400333][ T88] bond7 (unregistering): Released all slaves [ 294.634127][ T88] IPVS: stopping backup sync thread 25700 ... [ 294.647244][ T88] IPVS: stopping backup sync thread 25699 ... [ 294.664781][ T88] IPVS: stopping backup sync thread 25698 ... [ 294.668602][ T88] IPVS: stopping backup sync thread 25697 ... [ 294.671248][ T5753] Bluetooth: hci2: command tx timeout [ 294.765996][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 294.801588][T32175] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12325'. [ 294.825316][T31725] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.835122][T31725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.847348][T31725] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.871860][T31725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.915196][T31725] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.921820][T32194] netlink: 'syz.6.12324': attribute type 9 has an invalid length. [ 294.924713][T32194] netlink: 'syz.6.12324': attribute type 7 has an invalid length. [ 294.927403][T32194] netlink: 'syz.6.12324': attribute type 8 has an invalid length. [ 294.936127][T31725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.942981][T31725] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.952159][T31725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.977804][T32206] CIFS: Unable to determine destination address [ 294.987145][T32210] netlink: 'syz.6.12328': attribute type 1 has an invalid length. [ 295.040167][T32215] kAFS: unable to lookup cell 'syz1' [ 295.043102][T32215] kAFS: unable to lookup cell 'syz1' [ 295.079375][T31725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.115116][T31725] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.161105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.163662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.172417][T31624] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.175519][T31624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.441041][ T88] hsr_slave_0: left promiscuous mode [ 295.449376][ T88] hsr_slave_1: left promiscuous mode [ 295.612912][ T88] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 295.631180][ T46] smbdirect: ib_dev[syz0] removed [ 295.632005][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 295.673351][T32289] openvswitch: netlink: IP tunnel dst address not specified [ 295.676047][T32289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.773019][T31725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.842281][ T5453] 8021q: adding VLAN 0 to HW filter on device eth16 [ 295.982209][ T88] IPVS: stop unused estimator thread 0... [ 296.010708][T31725] veth0_vlan: entered promiscuous mode [ 296.021266][T31725] veth1_vlan: entered promiscuous mode [ 296.040484][T31725] veth0_macvtap: entered promiscuous mode [ 296.045291][T31725] veth1_macvtap: entered promiscuous mode [ 296.054067][T31725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.059463][T31725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.076711][ T1165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.080837][ T1165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.086205][ T5453] 8021q: adding VLAN 0 to HW filter on device eth17 [ 296.090747][ T1165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.094555][ T1165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.236815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.242339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.261027][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.264290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.350054][T32345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12258'. [ 296.556688][T32372] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 296.723178][T32393] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 296.761475][ T5753] Bluetooth: hci2: command tx timeout [ 297.377912][T32452] tipc: Started in network mode [ 297.379865][T32452] tipc: Node identity e0000001, cluster identity 4711 [ 297.382234][T32452] tipc: Enabling of bearer rejected, failed to enable media [ 297.418719][T32447] ALSA: seq fatal error: cannot create timer (-19) [ 297.760789][T32500] IPVS: Error connecting to the multicast addr [ 298.028155][T32535] No buffer was provided with the request [ 298.614737][T32578] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 298.828357][ T5753] Bluetooth: hci2: command tx timeout [ 298.966391][T32618] binder: 32616:32618 ioctl c0306201 0 returned -14 [ 299.553235][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12476'. [ 299.560218][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12476'. [ 299.798743][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12476'. [ 299.802326][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12476'. [ 299.806490][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12476'. [ 300.908664][ T5753] Bluetooth: hci2: command tx timeout [ 300.976571][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 302.104464][ T450] validate_nla: 1 callbacks suppressed [ 302.104508][ T450] netlink: 'syz.6.12555': attribute type 1 has an invalid length. [ 302.120806][ T450] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12555'. [ 302.123924][ T450] netlink: 'syz.6.12555': attribute type 1 has an invalid length. [ 302.126454][ T450] netlink: 'syz.6.12555': attribute type 8 has an invalid length. [ 302.130384][ T450] netlink: 606 bytes leftover after parsing attributes in process `syz.6.12555'. [ 302.133458][ T450] netlink: 1 bytes leftover after parsing attributes in process `syz.6.12555'. [ 302.267395][ T480] EXT4-fs: Conflicting test_dummy_encryption options [ 302.362703][ T491] ip6gretap0: entered promiscuous mode [ 302.371787][ T499] comedi comedi2: dt2801: I/O base address or length out of range [ 302.443329][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 302.443341][ T40] audit: type=1326 audit(2000000018.199:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=506 comm="syz.1.12572" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x0 [ 303.515403][ T40] audit: type=1326 audit(2000000019.269:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=572 comm="syz.7.12594" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x0 [ 303.676622][ T580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12595'. [ 303.687493][ T583] netlink: 7060 bytes leftover after parsing attributes in process `syz.6.12592'. [ 303.880856][ T600] netlink: 'syz.5.12601': attribute type 3 has an invalid length. [ 304.767380][ T674] RDS: rds_bind could not find a transport for fe88::108, load rds_tcp or rds_rdma? [ 305.065870][ T693] __nla_validate_parse: 1 callbacks suppressed [ 305.065890][ T693] netlink: 220 bytes leftover after parsing attributes in process `syz.7.12629'. [ 305.073074][ T693] netlink: 'syz.7.12629': attribute type 2 has an invalid length. [ 306.088359][ T39] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 306.100880][ T760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12653'. [ 306.238728][ T39] usb 12-1: Using ep0 maxpacket: 32 [ 306.243709][ T39] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 306.247149][ T39] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.250103][ T39] usb 12-1: Product: syz [ 306.251665][ T39] usb 12-1: Manufacturer: syz [ 306.253573][ T39] usb 12-1: SerialNumber: syz [ 306.267870][ T39] usb 12-1: config 0 descriptor?? [ 306.271704][ T39] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 306.274979][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 306.276923][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.280751][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 306.283356][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.292489][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.296645][ T39] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 306.304120][ T39] usb 12-1: media controller created [ 306.317966][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.326609][ T5891] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5891 comm: kworker/0:5) [ 306.335865][ T39] usb 12-1: selecting invalid altsetting 3 [ 306.338854][ T39] ttusb2: set interface to alts=3 failed [ 306.363655][ T39] DVB: Unable to find symbol tda10086_attach() [ 306.366679][ T39] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 306.371281][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 306.374173][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.380310][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 306.382762][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.386973][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 306.484926][ T741] dvb-usb: bulk message failed: -22 (7/0) [ 306.490561][ T741] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 306.496543][ T741] ttusb2: i2c transfer failed. [ 306.500113][ T5189] usb 12-1: USB disconnect, device number 2 [ 306.542621][ T5189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 306.858540][ T842] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 306.935688][ T40] audit: type=1326 audit(2000000022.689:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.944608][ T40] audit: type=1326 audit(2000000022.689:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.953724][ T40] audit: type=1326 audit(2000000022.689:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.963900][ T40] audit: type=1326 audit(2000000022.689:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.972502][ T40] audit: type=1326 audit(2000000022.689:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.982575][ T40] audit: type=1326 audit(2000000022.689:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 306.991963][ T40] audit: type=1326 audit(2000000022.689:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 307.001275][ T40] audit: type=1326 audit(2000000022.689:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=851 comm="syz.6.12673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fcc code=0x7ffc0000 [ 307.027820][ T863] random: crng reseeded on system resumption [ 307.059392][ T863] Restarting kernel threads ... [ 307.061776][ T863] Done restarting kernel threads. [ 307.309552][ T888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12684'. [ 307.347752][ T5753] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 309.267484][ T1078] tmpfs: Cannot disable swap on remount [ 309.678443][ T1037] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 309.770137][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 309.770148][ T40] audit: type=1326 audit(2000000025.529:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1179 comm="syz.7.12771" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efcc code=0x0 [ 309.828325][ T1037] usb 10-1: Using ep0 maxpacket: 16 [ 309.833622][ T1037] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 309.837279][ T1037] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 309.840147][ T1037] usb 10-1: Product: syz [ 309.841661][ T1037] usb 10-1: Manufacturer: syz [ 309.843271][ T1037] usb 10-1: SerialNumber: syz [ 309.846315][ T1037] usb 10-1: config 0 descriptor?? [ 309.938423][ T39] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 310.059602][ T1037] usb 10-1: USB disconnect, device number 4 [ 310.088321][ T39] usb 11-1: Using ep0 maxpacket: 32 [ 310.092735][ T39] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.096313][ T39] usb 11-1: config 0 has no interface number 0 [ 310.101707][ T39] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 310.105590][ T39] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.109619][ T39] usb 11-1: Product: syz [ 310.111487][ T39] usb 11-1: Manufacturer: syz [ 310.113534][ T39] usb 11-1: SerialNumber: syz [ 310.121590][ T39] usb 11-1: config 0 descriptor?? [ 310.126538][ T39] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 310.131860][ T39] usb 11-1: selecting invalid altsetting 1 [ 310.134370][ T39] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 310.145121][ T39] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.149726][ T39] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 310.153143][ T39] usb 11-1: media controller created [ 310.164157][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.875885][ T1244] netlink: 35 bytes leftover after parsing attributes in process `syz.1.12786'. [ 311.228561][ T39] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 311.236649][ T39] zl10353_read_register: readreg error (reg=127, ret==-110) [ 311.243910][ T1169] usb 11-1: dvb_usb_ce6230: I2C read not implemented [ 311.279285][ T39] usb 11-1: USB disconnect, device number 3 [ 311.518329][ T1299] overlayfs: regular lower layers cannot follow data lower layers [ 311.738998][ T1323] 9pnet_virtio: no channels available for device syz [ 311.766193][ T1326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12810'. [ 311.770987][ T1326] ------------[ cut here ]------------ [ 311.774296][ T1326] 1 [ 311.774303][ T1326] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#2: syz.5.12810/1326 [ 311.778606][ T1326] Modules linked in: [ 311.780262][ T1326] CPU: 2 UID: 0 PID: 1326 Comm: syz.5.12810 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.783713][ T1326] Tainted: [L]=SOFTLOCKUP [ 311.785113][ T1326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.789182][ T1326] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 311.791719][ T1326] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 311.800161][ T1326] RSP: 0000:ffffc90020427390 EFLAGS: 00010283 [ 311.802669][ T1326] RAX: 0000000000000c76 RBX: ffff8880514692c0 RCX: ffffc90006d11000 [ 311.805342][ T1326] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 311.808695][ T1326] RBP: ffff8880514692c0 R08: 0000000000000001 R09: 0000000000000000 [ 311.811309][ T1326] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806f0a0000 [ 311.813895][ T1326] R13: ffff8880217e0000 R14: 0000000000000000 R15: ffff888051469318 [ 311.814033][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12812'. [ 311.816558][ T1326] FS: 0000000000000000(0000) GS:ffff888097377000(0063) knlGS:00000000f5446b40 [ 311.816639][ T1326] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 311.816650][ T1326] CR2: 00000000f707c590 CR3: 000000006690f000 CR4: 0000000000352ef0 [ 311.816658][ T1326] Call Trace: [ 311.816663][ T1326] [ 311.816669][ T1326] ? __pfx_ip_rt_bug+0x10/0x10 [ 311.816690][ T1326] ip_push_pending_frames+0x29e/0x300 [ 311.816710][ T1326] icmp_push_reply+0x30e/0x450 [ 311.816726][ T1326] __icmp_send+0x11b4/0x2c70 [ 311.816750][ T1326] ? __pfx___icmp_send+0x10/0x10 [ 311.816770][ T1326] ? __pfx_ip_route_input_slow+0x10/0x10 [ 311.820696][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12812'. [ 311.844049][ T1326] ? __lock_acquire+0x4a5/0x2630 [ 311.845641][ T1326] ? __ip_options_compile+0x604/0x16a0 [ 311.847386][ T1326] ? ip_route_input_noref+0x15f/0x2e0 [ 311.849592][ T1326] ip_options_compile+0xb6/0x100 [ 311.851736][ T1326] ? __pfx_ip_options_compile+0x10/0x10 [ 311.854105][ T1326] ? __pfx_ip_rcv_finish+0x10/0x10 [ 311.856317][ T1326] ip_rcv_finish_core+0x693/0x2c30 [ 311.858625][ T1326] ip_rcv+0x1c0/0x3c0 [ 311.860368][ T1326] ? __pfx_ip_rcv+0x10/0x10 [ 311.862316][ T1326] __netif_receive_skb_one_core+0x197/0x1e0 [ 311.864886][ T1326] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 311.867599][ T1326] ? lock_acquire+0x1b1/0x370 [ 311.869690][ T1326] __netif_receive_skb+0x1f/0x120 [ 311.871902][ T1326] netif_receive_skb+0x13b/0x7f0 [ 311.873848][ T1326] ? __pfx_netif_receive_skb+0x10/0x10 [ 311.875963][ T1326] tun_rx_batched.isra.0+0x3f6/0x750 [ 311.878191][ T1326] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 311.880813][ T1326] ? rcu_is_watching+0x12/0xc0 [ 311.882835][ T1326] ? tun_get_user+0x1cc8/0x3c20 [ 311.884617][ T1326] tun_get_user+0x1e31/0x3c20 [ 311.886184][ T1326] ? __pfx_tun_get_user+0x10/0x10 [ 311.887795][ T1326] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 311.889825][ T1326] ? find_held_lock+0x2b/0x80 [ 311.891407][ T1326] ? tun_get+0x191/0x370 [ 311.892781][ T1326] ? tun_get+0x191/0x370 [ 311.894142][ T1326] tun_chr_write_iter+0xdc/0x200 [ 311.895962][ T1326] vfs_write+0x6ac/0x1070 [ 311.897672][ T1326] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 311.900111][ T1326] ? __pfx_vfs_write+0x10/0x10 [ 311.901991][ T1326] ? find_held_lock+0x2b/0x80 [ 311.903843][ T1326] ksys_write+0x12a/0x250 [ 311.905649][ T1326] ? __pfx_ksys_write+0x10/0x10 [ 311.907592][ T1326] ? rcu_is_watching+0x12/0xc0 [ 311.909768][ T1326] ? rcu_is_watching+0x12/0xc0 [ 311.911474][ T1326] do_int80_emulation+0x141/0x700 [ 311.913086][ T1326] asm_int80_emulation+0x1a/0x20 [ 311.914660][ T1326] RIP: 0023:0xf718616b [ 311.915963][ T1326] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 311.923361][ T1326] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 311.926107][ T1326] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 311.928914][ T1326] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.931483][ T1326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.934286][ T1326] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 311.936877][ T1326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.939669][ T1326] [ 311.940717][ T1326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.943486][ T1326] CPU: 2 UID: 0 PID: 1326 Comm: syz.5.12810 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.947894][ T1326] Tainted: [L]=SOFTLOCKUP [ 311.949737][ T1326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.953859][ T1326] Call Trace: [ 311.955303][ T1326] [ 311.956601][ T1326] dump_stack_lvl+0x100/0x190 [ 311.958649][ T1326] vpanic+0x552/0x970 [ 311.960361][ T1326] ? __pfx_vpanic+0x10/0x10 [ 311.962290][ T1326] panic+0xd1/0xe0 [ 311.963907][ T1326] ? __pfx_panic+0x10/0x10 [ 311.965726][ T1326] check_panic_on_warn.cold+0x19/0x34 [ 311.967771][ T1326] ? ip_rt_bug+0x2b/0x150 [ 311.969210][ T1326] __warn.cold+0x191/0x328 [ 311.970676][ T1326] __report_bug+0x296/0x3d0 [ 311.972183][ T1326] ? ip_rt_bug+0x2b/0x150 [ 311.973584][ T1326] ? __pfx___report_bug+0x10/0x10 [ 311.975189][ T1326] ? ip_rt_bug+0x2b/0x150 [ 311.976688][ T1326] report_bug+0xb2/0x220 [ 311.978044][ T1326] ? ip_rt_bug+0x2b/0x150 [ 311.979451][ T1326] handle_bug+0x16a/0x2a0 [ 311.980841][ T1326] exc_invalid_op+0x17/0x50 [ 311.982285][ T1326] asm_exc_invalid_op+0x1a/0x20 [ 311.983876][ T1326] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 311.985476][ T1326] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 311.991507][ T1326] RSP: 0000:ffffc90020427390 EFLAGS: 00010283 [ 311.993395][ T1326] RAX: 0000000000000c76 RBX: ffff8880514692c0 RCX: ffffc90006d11000 [ 311.995838][ T1326] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 311.998349][ T1326] RBP: ffff8880514692c0 R08: 0000000000000001 R09: 0000000000000000 [ 312.001055][ T1326] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806f0a0000 [ 312.003706][ T1326] R13: ffff8880217e0000 R14: 0000000000000000 R15: ffff888051469318 [ 312.006918][ T1326] ? sk_skb_reason_drop+0x114/0x1b0 [ 312.009181][ T1326] ? __pfx_ip_rt_bug+0x10/0x10 [ 312.011190][ T1326] ip_push_pending_frames+0x29e/0x300 [ 312.013487][ T1326] icmp_push_reply+0x30e/0x450 [ 312.015527][ T1326] __icmp_send+0x11b4/0x2c70 [ 312.017538][ T1326] ? __pfx___icmp_send+0x10/0x10 [ 312.019660][ T1326] ? __pfx_ip_route_input_slow+0x10/0x10 [ 312.022061][ T1326] ? __lock_acquire+0x4a5/0x2630 [ 312.024172][ T1326] ? __ip_options_compile+0x604/0x16a0 [ 312.026207][ T1326] ? ip_route_input_noref+0x15f/0x2e0 [ 312.028139][ T1326] ip_options_compile+0xb6/0x100 [ 312.030024][ T1326] ? __pfx_ip_options_compile+0x10/0x10 [ 312.032390][ T1326] ? __pfx_ip_rcv_finish+0x10/0x10 [ 312.034589][ T1326] ip_rcv_finish_core+0x693/0x2c30 [ 312.036796][ T1326] ip_rcv+0x1c0/0x3c0 [ 312.038524][ T1326] ? __pfx_ip_rcv+0x10/0x10 [ 312.040466][ T1326] __netif_receive_skb_one_core+0x197/0x1e0 [ 312.042956][ T1326] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 312.045651][ T1326] ? lock_acquire+0x1b1/0x370 [ 312.047674][ T1326] __netif_receive_skb+0x1f/0x120 [ 312.049843][ T1326] netif_receive_skb+0x13b/0x7f0 [ 312.051863][ T1326] ? __pfx_netif_receive_skb+0x10/0x10 [ 312.054211][ T1326] tun_rx_batched.isra.0+0x3f6/0x750 [ 312.056469][ T1326] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 312.058945][ T1326] ? rcu_is_watching+0x12/0xc0 [ 312.060988][ T1326] ? tun_get_user+0x1cc8/0x3c20 [ 312.063065][ T1326] tun_get_user+0x1e31/0x3c20 [ 312.065007][ T1326] ? __pfx_tun_get_user+0x10/0x10 [ 312.066986][ T1326] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 312.069064][ T1326] ? find_held_lock+0x2b/0x80 [ 312.070683][ T1326] ? tun_get+0x191/0x370 [ 312.072119][ T1326] ? tun_get+0x191/0x370 [ 312.073454][ T1326] tun_chr_write_iter+0xdc/0x200 [ 312.074948][ T1326] vfs_write+0x6ac/0x1070 [ 312.076347][ T1326] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 312.078163][ T1326] ? __pfx_vfs_write+0x10/0x10 [ 312.080130][ T1326] ? find_held_lock+0x2b/0x80 [ 312.081679][ T1326] ksys_write+0x12a/0x250 [ 312.083073][ T1326] ? __pfx_ksys_write+0x10/0x10 [ 312.084629][ T1326] ? rcu_is_watching+0x12/0xc0 [ 312.086162][ T1326] ? rcu_is_watching+0x12/0xc0 [ 312.087694][ T1326] do_int80_emulation+0x141/0x700 [ 312.089371][ T1326] asm_int80_emulation+0x1a/0x20 [ 312.090890][ T1326] RIP: 0023:0xf718616b [ 312.092154][ T1326] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 312.098628][ T1326] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 312.101983][ T1326] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 312.105326][ T1326] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.108644][ T1326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.111841][ T1326] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 312.115100][ T1326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.118403][ T1326] [ 312.120504][ T1326] Kernel Offset: disabled [ 312.122253][ T1326] Rebooting in 86400 seconds..