last executing test programs: 2m34.835462427s ago: executing program 1 (id=20155): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="9109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 2m34.776959416s ago: executing program 1 (id=20157): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001780)={0x80000000000010d, 0x0, [{0xffffffff, 0xf0, &(0x7f0000002880)=""/240}]}) 2m34.776579982s ago: executing program 1 (id=20159): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140)) read(r0, &(0x7f0000000180)=""/183, 0xb7) 2m34.722746432s ago: executing program 1 (id=20161): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) 2m34.638069281s ago: executing program 1 (id=20162): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 2m34.621906278s ago: executing program 1 (id=20163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x3f}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 2m18.497652949s ago: executing program 32 (id=20163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x3f}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 2m14.9613539s ago: executing program 2 (id=20314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006b3"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m14.807907624s ago: executing program 2 (id=20323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) 2m14.4485279s ago: executing program 2 (id=20333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m14.365421664s ago: executing program 2 (id=20337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 2m14.298648412s ago: executing program 2 (id=20339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x34}}, 0x4844) 2m14.038011316s ago: executing program 2 (id=20347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x283}) 2m13.845467574s ago: executing program 33 (id=20347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x283}) 1m14.126145468s ago: executing program 0 (id=22112): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 1m14.047188115s ago: executing program 0 (id=22114): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) 1m14.039029297s ago: executing program 0 (id=22116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xd8, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0xf, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x26, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14c"}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704b679b1590944225ea5c0e2560f04592cb4869c004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800000000000056ba17cee7571b10e41ea0c5a9af5d8c079a4b6442c18b264b802c8df0f18e3d345d215e6fb284ca1063693a35e42c55"}}}}, 0xe6) 1m13.903043561s ago: executing program 0 (id=22117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m13.901404414s ago: executing program 0 (id=22125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) 1m13.71078728s ago: executing program 0 (id=22119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1m13.615025836s ago: executing program 34 (id=22119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 22.389284748s ago: executing program 3 (id=23622): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20) 22.333511778s ago: executing program 3 (id=23627): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="711f0b8d0bfb464e3da9760000", 0xd}}, 0x8000) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2042, 0x0) 22.286902512s ago: executing program 3 (id=23628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.284913601s ago: executing program 6 (id=23631): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0x5, 0x3ff, 0x30383653, 0x6, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3}}) 22.230308105s ago: executing program 6 (id=23633): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 22.227594013s ago: executing program 3 (id=23634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000005200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000008001500c000000008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 22.150639075s ago: executing program 3 (id=23638): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 22.070969113s ago: executing program 3 (id=23640): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2}, 0x8}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x164, 0x164, 0x94, 0x28c, 0x94, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x8800}}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x1000000000000}}, @common=@SET={0x20, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x0, 0x1100, 0x88]}, {0x0, [0x5, 0x11, 0x700, 0x2, 0x4], 0x3, 0x6}}}}, {{@ip={@remote, @remote, 0xff, 0x0, 'wlan1\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x54}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 21.994958591s ago: executing program 6 (id=23642): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x7, 0x10, "10120df60ef7f0220000ff490a0080002a00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) 21.929440688s ago: executing program 6 (id=23645): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x88, [0x1, 0x7, 0x5, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x1, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0xd, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x5, 0x258d, 0x2, 0x9, 0x6, 0x4, 0xe, 0x40, 0x7ff, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}}) 21.054110784s ago: executing program 6 (id=23648): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 20.984124899s ago: executing program 6 (id=23651): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.902308174s ago: executing program 35 (id=23640): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2}, 0x8}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x164, 0x164, 0x94, 0x28c, 0x94, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x8800}}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x1000000000000}}, @common=@SET={0x20, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x0, 0x1100, 0x88]}, {0x0, [0x5, 0x11, 0x700, 0x2, 0x4], 0x3, 0x6}}}}, {{@ip={@remote, @remote, 0xff, 0x0, 'wlan1\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x54}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 4.900086734s ago: executing program 36 (id=23651): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.534712392s ago: executing program 5 (id=23675): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9140, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 3.35360691s ago: executing program 5 (id=23676): syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 3.353345398s ago: executing program 5 (id=23677): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x10000, @empty}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) 3.278918708s ago: executing program 5 (id=23678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.13951112s ago: executing program 5 (id=23679): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e80)=@bridge_delneigh={0x30, 0x1c, 0xf01, 0x2001, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0xa0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}}, 0x440c0) 2.497971151s ago: executing program 4 (id=23680): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 2.495491123s ago: executing program 4 (id=23681): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 2.41197786s ago: executing program 4 (id=23682): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.411755938s ago: executing program 4 (id=23683): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 7.147994ms ago: executing program 5 (id=23684): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) 6.884781ms ago: executing program 4 (id=23685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=23686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): interface: batadv_slave_1 [ 434.132959][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.144267][T15049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.192034][T15049] hsr_slave_0: entered promiscuous mode [ 434.195281][T15049] hsr_slave_1: entered promiscuous mode [ 434.199775][T15049] debugfs: 'hsr0' already exists in 'hsr' [ 434.202414][T15049] Cannot create hsr debugfs directory [ 434.403472][T15049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.409835][T15049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.417804][T15049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.427070][T15049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.430920][T15049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.437778][T15049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.442396][T15049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.451587][T15049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.526118][T15049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.541637][T15049] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.554220][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.557347][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.573387][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.576038][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.870393][T15154] netlink: 'syz.2.20250': attribute type 1 has an invalid length. [ 434.874466][T15154] netlink: 'syz.2.20250': attribute type 3 has an invalid length. [ 434.878249][T15154] netlink: 172 bytes leftover after parsing attributes in process `syz.2.20250'. [ 434.883796][T15154] NCSI netlink: No device for ifindex 813332851 [ 435.031111][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.087435][T15178] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 435.261436][T15049] veth0_vlan: entered promiscuous mode [ 435.280420][T15049] veth1_vlan: entered promiscuous mode [ 435.325808][T15049] veth0_macvtap: entered promiscuous mode [ 435.332860][T15049] veth1_macvtap: entered promiscuous mode [ 435.353987][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.368020][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.400419][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.411597][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.435013][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.435083][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.489485][ T6090] Bluetooth: hci4: command tx timeout [ 435.558461][ T472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.568397][ T472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.625958][T12024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.631502][T12024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.707010][T15228] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 436.164758][T15257] xt_l2tp: missing protocol rule (udp|l2tpip) [ 436.200481][T15260] netlink: 'syz.3.20295': attribute type 1 has an invalid length. [ 436.204478][T15260] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20295'. [ 436.210749][T15260] netlink: 1 bytes leftover after parsing attributes in process `syz.3.20295'. [ 436.215054][T15260] netlink: 'syz.3.20295': attribute type 1 has an invalid length. [ 436.220011][T15260] netlink: 634 bytes leftover after parsing attributes in process `syz.3.20295'. [ 436.266388][ T40] audit: type=1326 audit(2000000081.218:19230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.290595][ T40] audit: type=1326 audit(2000000081.218:19231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.312435][ T40] audit: type=1326 audit(2000000081.227:19232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.329781][ T40] audit: type=1326 audit(2000000081.227:19233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.340354][ T40] audit: type=1326 audit(2000000081.227:19234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.350481][ T40] audit: type=1326 audit(2000000081.227:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.359790][ T40] audit: type=1326 audit(2000000081.227:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.372699][ T40] audit: type=1326 audit(2000000081.227:19237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.20298" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efcc code=0x7ffc0000 [ 436.529992][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.539425][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.543060][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.555452][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.899351][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20323'. [ 436.943428][T15321] veth9: entered promiscuous mode [ 436.974163][T15337] netlink: 'syz.3.20330': attribute type 1 has an invalid length. [ 436.977810][T15337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20330'. [ 436.982717][T15337] netlink: 'syz.3.20330': attribute type 1 has an invalid length. [ 436.986687][T15337] netlink: 'syz.3.20330': attribute type 8 has an invalid length. [ 436.990970][T15337] netlink: 606 bytes leftover after parsing attributes in process `syz.3.20330'. [ 436.995349][T15337] netlink: 1 bytes leftover after parsing attributes in process `syz.3.20330'. [ 437.574497][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.582012][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.588050][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41711 - 0 [ 437.702757][ T6090] Bluetooth: hci4: command tx timeout [ 437.719498][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 437.726853][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.730838][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.739414][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41711 - 0 [ 437.798792][T15378] netlink: 'syz.4.20353': attribute type 21 has an invalid length. [ 437.802489][T15378] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.805790][T15378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.810130][T15378] IPv6: NLM_F_CREATE should be set when creating new route [ 437.815783][T15378] IPv6: NLM_F_CREATE should be set when creating new route [ 437.818305][T15378] IPv6: NLM_F_CREATE should be set when creating new route [ 437.825285][T15378] netlink: 'syz.4.20353': attribute type 21 has an invalid length. [ 437.828429][T15378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.837206][ T6095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.859064][ T6095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.875943][ T6095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.892659][ T6095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.897570][ T6095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.963258][ T12] bridge0: port 3(netdevsim1) entered disabled state [ 437.996080][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 438.014556][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 438.029851][ T12] bridge0: port 3(netdevsim1) entered disabled state [ 438.077551][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.082047][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.088284][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41711 - 0 [ 438.101544][T15394] use of bytesused == 0 is deprecated and will be removed in the future, [ 438.105245][T15394] use the actual size instead. [ 438.220527][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 438.526767][T15379] lo speed is unknown, defaulting to 1000 [ 438.585372][ T12] bridge_slave_1: left allmulticast mode [ 438.589039][ T12] bridge_slave_1: left promiscuous mode [ 438.597246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.619237][ T12] bridge_slave_0: left allmulticast mode [ 438.622607][ T12] bridge_slave_0: left promiscuous mode [ 438.628930][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.662422][T15434] comedi comedi3: aio_aio12_8: I/O port conflict (0x100,32) [ 438.704371][ T12] pimreg: left allmulticast mode [ 438.708511][ T12] pimreg3: left allmulticast mode [ 439.908941][ T12] bond1 (unregistering): Released all slaves [ 439.913461][ T6095] Bluetooth: hci4: command tx timeout [ 439.919039][ T12] bond2 (unregistering): Released all slaves [ 439.931308][ T12] bond3 (unregistering): Released all slaves [ 439.944936][ T12] bond4 (unregistering): Released all slaves [ 439.972629][ T12] bond5 (unregistering): Released all slaves [ 439.984708][ T12] bond0 (unregistering): Released all slaves [ 439.994406][ T12] bond6 (unregistering): Released all slaves [ 440.009534][ T12] bond7 (unregistering): Released all slaves [ 440.027798][ T12] bond8 (unregistering): Released all slaves [ 440.040102][ T12] bond9 (unregistering): Released all slaves [ 440.056195][ T12] bond10 (unregistering): Released all slaves [ 440.076203][ T12] bond11 (unregistering): Released all slaves [ 440.084491][ T6095] Bluetooth: hci1: command tx timeout [ 440.093460][ T12] bond12 (unregistering): Released all slaves [ 440.110857][ T12] bond13 (unregistering): Released all slaves [ 440.148982][T15379] wg1 speed is unknown, defaulting to 1000 [ 440.167747][T15453] tipc: Started in network mode [ 440.170914][T15453] tipc: Node identity ac14142f, cluster identity 4711 [ 440.174662][T15453] tipc: New replicast peer: 0.0.0.0 [ 440.177585][T15453] tipc: Enabled bearer , priority 10 [ 440.184720][ T9] wg1 speed is unknown, defaulting to 1000 [ 440.200282][ T9] syz0: Port: 1 Link DOWN [ 440.386492][ T12] : left promiscuous mode [ 440.732594][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 440.739620][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20392'. [ 440.954654][T15379] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.957726][T15379] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.962204][T15379] bridge_slave_0: entered allmulticast mode [ 440.966111][T15379] bridge_slave_0: entered promiscuous mode [ 440.992596][T15379] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.001058][T15379] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.012787][T15379] bridge_slave_1: entered allmulticast mode [ 441.019920][T15379] bridge_slave_1: entered promiscuous mode [ 441.076858][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20398'. [ 441.161071][T15379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.189000][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 441.198920][T15379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.270976][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20405'. [ 441.284979][T15379] team0: Port device team_slave_0 added [ 441.299266][T15379] team0: Port device team_slave_1 added [ 441.371495][ T9] tipc: Node number set to 2886997039 [ 441.391015][T15379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.398456][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.436249][T15379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.446264][T15379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.450104][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.465862][T15379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.582280][T15379] hsr_slave_0: entered promiscuous mode [ 441.585694][T15379] hsr_slave_1: entered promiscuous mode [ 441.589155][T15379] debugfs: 'hsr0' already exists in 'hsr' [ 441.592607][T15379] Cannot create hsr debugfs directory [ 441.749982][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 442.109181][T15379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.143480][ T6095] Bluetooth: hci4: command tx timeout [ 442.161406][T15379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.165281][T15379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.179024][T15379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.185810][T15379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.215344][T15379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.227192][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 442.236757][T15379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.271798][T15379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.317649][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 442.379442][T15379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.400350][T15379] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.421616][ T12] hsr_slave_1: left promiscuous mode [ 442.426138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.429637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.450307][ T12] veth1_macvtap: left promiscuous mode [ 442.452714][ T12] veth0_macvtap: left promiscuous mode [ 442.552647][ T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 442.734327][ T12] team0 (unregistering): Port device team_slave_1 removed [ 442.747484][ T50] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.763259][ T12] team0 (unregistering): Port device team_slave_0 removed [ 442.763703][ T50] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.770145][ T50] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.773608][ T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.778913][ T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.784967][ T50] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.788892][ T50] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.792265][ T50] usb 9-1: Product: syz [ 442.793959][ T50] usb 9-1: Manufacturer: syz [ 442.807920][ T50] cdc_wdm 9-1:1.0: skipping garbage [ 442.811072][ T50] cdc_wdm 9-1:1.0: skipping garbage [ 442.824013][ T50] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 442.826652][ T50] cdc_wdm 9-1:1.0: Unknown control protocol [ 442.876059][T15583] smbdirect: ib_dev[syz0] removed [ 442.986024][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.990115][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.998415][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.001449][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.029455][ T34] usb 9-1: USB disconnect, device number 2 [ 443.134443][T15588] tipc: Started in network mode [ 443.136859][T15588] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 443.141479][T15588] tipc: Enabling of bearer rejected, failed to enable media [ 443.218711][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20427'. [ 443.542350][T15379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.571732][ T12] IPVS: stop unused estimator thread 0... [ 443.802983][ T40] audit: type=1326 audit(2000000088.264:19238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.816085][ T40] audit: type=1326 audit(2000000088.264:19239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.838106][ T40] audit: type=1326 audit(2000000088.264:19240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.852255][T15379] veth0_vlan: entered promiscuous mode [ 443.864696][T15379] veth1_vlan: entered promiscuous mode [ 443.865154][ T40] audit: type=1326 audit(2000000088.264:19241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.879556][ T40] audit: type=1326 audit(2000000088.264:19242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.892430][ T40] audit: type=1326 audit(2000000088.264:19243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.902134][ T40] audit: type=1326 audit(2000000088.274:19244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.912694][ T40] audit: type=1326 audit(2000000088.274:19245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.4.20431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 443.933992][T15379] veth0_macvtap: entered promiscuous mode [ 443.940747][T15379] veth1_macvtap: entered promiscuous mode [ 443.954681][T15379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.966102][T15379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.976337][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.981029][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.991028][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.994724][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.149853][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.165324][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.220462][T15583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.225609][T15583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.529966][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 444.604292][ T3983] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 444.809590][ T3983] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 444.813645][ T3983] usb 5-1: config 0 has no interface number 0 [ 444.816782][ T3983] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 444.822414][ T3983] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.839364][ T3983] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 444.851921][ T3983] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 444.859910][ T3983] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 444.863260][ T3983] usb 5-1: Product: syz [ 444.864865][ T3983] usb 5-1: SerialNumber: syz [ 444.869571][ T3983] usb 5-1: config 0 descriptor?? [ 444.875675][ T3983] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 444.882130][ T3983] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input65 [ 445.108601][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 445.109555][ T50] usb 5-1: USB disconnect, device number 17 [ 445.111832][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 445.129041][ T50] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 445.453524][T15721] blktrace: Concurrent blktraces are not allowed on sg0 [ 445.582437][T15727] pim6reg: entered allmulticast mode [ 445.600697][T15727] pim6reg: left allmulticast mode [ 445.947263][T15751] netlink: 220 bytes leftover after parsing attributes in process `syz.3.20479'. [ 445.951943][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20479'. [ 446.647091][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20505'. [ 446.752605][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 446.779480][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20514'. [ 446.828708][ T3983] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 447.005441][ T3983] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.014744][ T3983] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 447.019702][ T3983] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.025153][ T3983] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.030572][ T3983] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 447.047085][ T3983] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.054271][ T3983] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.054304][ T3983] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.061185][ T3983] usb 10-1: Product: syz [ 447.061198][ T3983] usb 10-1: Manufacturer: syz [ 447.089524][T15803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.091569][ T3983] cdc_wdm 10-1:1.0: skipping garbage [ 447.098715][ T3983] cdc_wdm 10-1:1.0: skipping garbage [ 447.101179][ T3983] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 447.103707][ T3983] cdc_wdm 10-1:1.0: Unknown control protocol [ 447.330649][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20529'. [ 447.334545][T15867] tipc: Invalid UDP bearer configuration [ 447.334601][T15867] tipc: Enabling of bearer rejected, failed to enable media [ 447.344334][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 447.347365][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 447.350123][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 447.352997][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 447.355919][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 447.364136][ T843] usb 10-1: USB disconnect, device number 2 [ 448.039767][ T40] audit: type=1326 audit(2000000092.232:19246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.5.20540" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 448.317772][T15903] netlink: 216 bytes leftover after parsing attributes in process `syz.3.20545'. [ 448.321287][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20545'. [ 448.324025][T15903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20545'. [ 448.354958][T15905] netlink: 'syz.4.20546': attribute type 4 has an invalid length. [ 448.390672][T15909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20548'. [ 448.395371][T15909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20548'. [ 448.446267][T15915] pim6reg99999999: entered allmulticast mode [ 448.615139][T15931] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 448.733585][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20564'. [ 448.844537][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20568'. [ 448.986205][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 449.222658][T15991] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 449.229087][T15991] CUSE: unknown device info "ٮ,<_eF" [ 449.233209][T15991] CUSE: unknown device info "3ܟ,̘" [ 449.235911][T15991] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 449.240027][T15991] CUSE: unknown device info " [ 449.240027][T15991] fzXS! [ 449.240027][T15991] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 449.247559][T15991] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 449.254270][T15991] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 449.262721][T15991] CUSE: zero length info key specified [ 449.594818][T15438] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 449.758902][T15438] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 449.762586][T15438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.765319][T15438] usb 5-1: Product: syz [ 449.767791][T15438] usb 5-1: Manufacturer: syz [ 449.769512][T15438] usb 5-1: SerialNumber: syz [ 449.773435][T15438] usb 5-1: config 0 descriptor?? [ 449.998287][T16042] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 450.007878][ T50] usb 5-1: USB disconnect, device number 18 [ 450.260836][ T40] audit: type=1326 audit(2000000094.319:19247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.269966][ T40] audit: type=1326 audit(2000000094.319:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.279192][ T40] audit: type=1326 audit(2000000094.319:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.288465][ T40] audit: type=1326 audit(2000000094.319:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.297772][ T40] audit: type=1326 audit(2000000094.319:19251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.307776][ T40] audit: type=1326 audit(2000000094.319:19252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.316932][ T40] audit: type=1326 audit(2000000094.319:19253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.326633][ T40] audit: type=1326 audit(2000000094.319:19254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.359303][ T40] audit: type=1326 audit(2000000094.319:19255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 450.368704][ T40] audit: type=1326 audit(2000000094.319:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.4.20595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7fc00000 [ 451.507212][T16134] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 451.556931][T16139] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 451.757171][T16147] syz.0.20653 (16147) used greatest stack depth: 18520 bytes left [ 451.796396][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 452.618877][T15438] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 452.794676][T15438] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 452.797919][T15438] usb 5-1: config 0 has no interface number 0 [ 452.803792][T15438] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.810479][T15438] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 452.823656][T15438] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 452.829419][T15438] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 452.840330][T15438] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 452.848901][T15438] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.858931][T15438] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 452.865717][T15438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.882144][T15438] usb 5-1: config 0 descriptor?? [ 452.889291][T16183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.896481][T16183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.923018][T15438] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.148405][T16183] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 453.233585][ T50] usb 5-1: USB disconnect, device number 19 [ 453.245064][ T50] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 453.272005][T16224] __nla_validate_parse: 5 callbacks suppressed [ 453.272031][T16224] netlink: 268 bytes leftover after parsing attributes in process `syz.4.20685'. [ 453.278403][T16224] netlink: 136 bytes leftover after parsing attributes in process `syz.4.20685'. [ 454.120632][T16282] vlan2: entered promiscuous mode [ 454.122734][T16282] bridge0: entered promiscuous mode [ 454.220088][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20715'. [ 454.237190][T16294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.291385][T16297] loop6: detected capacity change from 0 to 524287999 [ 454.309982][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.325833][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.333644][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.343500][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.348453][T15053] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.352666][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.356503][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.359962][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.363033][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.366121][T16297] ldm_validate_partition_table(): Disk read failed. [ 454.369247][T16297] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.372863][T16297] Dev loop6: unable to read RDB block 0 [ 454.376712][T16297] loop6: unable to read partition table [ 454.379157][T16297] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 454.490540][T16312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20725'. [ 454.756175][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20731'. [ 454.959469][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20744'. [ 454.999003][T16365] vivid-007: disconnect [ 455.004979][T16364] vivid-007: reconnect [ 455.058941][T16372] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 455.189850][T16390] loop6: detected capacity change from 0 to 524287999 [ 455.193559][T16390] ldm_validate_partition_table(): Disk read failed. [ 455.196772][T16390] Dev loop6: unable to read RDB block 0 [ 455.200027][T16390] loop6: unable to read partition table [ 455.212486][T16390] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 455.238391][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20759'. [ 455.562046][T16424] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20772'. [ 455.565839][T16424] netlink: 'syz.0.20772': attribute type 10 has an invalid length. [ 455.592186][T16428] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 455.595355][T16428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.503000][T16472] new mount options do not match the existing superblock, will be ignored [ 456.523130][T16472] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 457.018716][T16513] comedi comedi1: dt2817: I/O base address or length out of range [ 457.066686][T16517] syz.4.20810 (16517): drop_caches: 4 [ 457.796861][T16584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20841'. [ 459.030771][ T1340] hid_parser_main: 7 callbacks suppressed [ 459.030825][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.044284][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.049624][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.055005][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.058093][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.061426][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.065148][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.068146][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.072118][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.076074][ T1340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.091877][ T1340] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 459.118948][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20892'. [ 459.216373][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20895'. [ 459.237885][T16703] fido_id[16703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.880571][T16771] CIFS mount error: No usable UNC path provided in device string! [ 459.880571][T16771] [ 459.885134][T16771] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 460.308073][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 460.308089][ T40] audit: type=1326 audit(2000000104.713:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.328344][ T40] audit: type=1326 audit(2000000104.732:19317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.339102][ T40] audit: type=1326 audit(2000000104.732:19318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.348523][ T40] audit: type=1326 audit(2000000104.741:19319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.373390][ T40] audit: type=1326 audit(2000000104.741:19320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.387730][ T40] audit: type=1326 audit(2000000104.741:19321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.396879][ T40] audit: type=1326 audit(2000000104.741:19322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.405187][ T40] audit: type=1326 audit(2000000104.741:19323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.415392][ T40] audit: type=1326 audit(2000000104.741:19324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.427323][ T40] audit: type=1326 audit(2000000104.741:19325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16810 comm="syz.3.20945" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fcc code=0x7ffc0000 [ 460.566116][T11873] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 460.729683][T11873] usb 5-1: Using ep0 maxpacket: 8 [ 460.734109][T11873] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 460.742228][T11873] usb 5-1: config 0 has no interface number 0 [ 460.747762][T11873] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.756436][T11873] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 460.763833][T11873] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 460.769506][T11873] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 460.775108][T11873] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 460.779489][T11873] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.789157][T11873] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 460.796713][T11873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.800482][T11873] usb 5-1: Product: syz [ 460.804535][T11873] usb 5-1: Manufacturer: syz [ 460.806558][T11873] usb 5-1: SerialNumber: syz [ 460.815378][T11873] usb 5-1: config 0 descriptor?? [ 460.861278][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20966'. [ 461.151203][T11873] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 461.279593][ T1340] usb 5-1: USB disconnect, device number 20 [ 461.533952][T16874] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.541511][T16874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.623439][T16874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.644362][T16874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.665248][T16874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.669692][T16874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.686361][T16874] veth1_vlan: left promiscuous mode [ 461.690530][T16874] veth0_vlan: left promiscuous mode [ 461.701366][T16874] veth0_vlan: entered promiscuous mode [ 461.712201][T16874] veth1_vlan: entered promiscuous mode [ 461.729894][T16874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.740408][T16874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.763820][T16874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.769308][T16874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.782800][T16874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.794219][T16874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.800256][T16874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.813191][T16874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.885070][T16891] netlink: 'syz.0.20982': attribute type 5 has an invalid length. [ 461.915222][T16874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.929607][T16874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.962939][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.966253][T12024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.972564][T12024] bridge0: port 2(.) entered blocking state [ 461.975200][T12024] bridge0: port 2(.) entered forwarding state [ 462.017419][ T13] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 48605 - 0 [ 462.021989][ T13] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 48605 - 0 [ 462.027339][T16893] netlink: 'syz.0.20985': attribute type 3 has an invalid length. [ 462.035291][ T13] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 48605 - 0 [ 462.047825][ T13] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 48605 - 0 [ 462.350167][T16911] team0: entered allmulticast mode [ 462.352509][T16911] team_slave_0: entered allmulticast mode [ 462.355438][T16911] team_slave_1: entered allmulticast mode [ 462.439737][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 462.610322][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 462.618819][ T29] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 462.628658][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.634319][ T29] usb 5-1: Product: syz [ 462.636209][ T29] usb 5-1: Manufacturer: syz [ 462.638205][ T29] usb 5-1: SerialNumber: syz [ 462.644028][ T29] usb 5-1: config 0 descriptor?? [ 462.649045][ T29] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 462.652392][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 462.687577][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.691868][ T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 462.695860][ T29] usb 5-1: media controller created [ 462.715200][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.875715][T16907] dvb-usb: bulk message failed: -22 (4/0) [ 462.963860][ T29] cxusb: set interface failed [ 462.965668][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 463.057002][ T29] DVB: Unable to find symbol mt352_attach() [ 463.062605][ T29] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 463.123249][ T29] rc_core: IR keymap rc-dvico-portable not found [ 463.126113][ T29] Registered IR keymap rc-empty [ 463.132793][ T29] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 463.140166][ T29] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input66 [ 463.150080][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 463.156147][ T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 463.164655][ T29] usb 5-1: USB disconnect, device number 21 [ 463.242594][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.242675][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.251024][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.274188][ T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 463.276886][T16956] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 463.290475][T16956] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 463.299510][T16956] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 463.319670][T16956] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 463.352414][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.361092][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.367353][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.373409][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.377883][T16956] wlan0 speed is unknown, defaulting to 1000 [ 463.584051][T16968] sch_tbf: peakrate 1 is lower than or equals to rate 13370017219913373684 ! [ 463.784419][T16982] "syz.5.21025" (16982) uses obsolete ecb(arc4) skcipher [ 464.685782][T17046] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.275403][T17092] netlink: 'syz.0.21075': attribute type 10 has an invalid length. [ 465.320331][T17092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.323147][T17092] team0: Device netdevsim1 is of different type [ 466.524486][T17157] netlink: 'syz.5.21104': attribute type 10 has an invalid length. [ 466.547533][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.559987][T17157] team0: Port device netdevsim1 added [ 466.793278][T17185] EXT4-fs: Conflicting test_dummy_encryption options [ 466.865251][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.942644][T17187] 8021q: adding VLAN 0 to HW filter on device bond12 [ 466.953031][T17187] 8021q: adding VLAN 0 to HW filter on device bond13 [ 466.960256][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 467.093863][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 467.093884][ T40] audit: type=1326 audit(2000000111.067:19348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.116608][ T40] audit: type=1326 audit(2000000111.076:19349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.131699][ T40] audit: type=1326 audit(2000000111.076:19350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.151973][ T40] audit: type=1326 audit(2000000111.076:19351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.165280][ T40] audit: type=1326 audit(2000000111.076:19352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.174504][ T40] audit: type=1326 audit(2000000111.076:19353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.182793][ T40] audit: type=1326 audit(2000000111.076:19354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.193359][ T40] audit: type=1326 audit(2000000111.086:19355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.204601][ T40] audit: type=1326 audit(2000000111.086:19356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.21125" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 467.385409][ T6171] hid-generic FFFF:0008:0003.0004: item fetching failed at offset 0/1 [ 467.393891][ T6171] hid-generic FFFF:0008:0003.0004: probe with driver hid-generic failed with error -22 [ 467.719256][ T3983] kernel read not supported for file /vcs (pid: 3983 comm: kworker/2:2) [ 467.889438][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21161'. [ 470.879039][T17386] tipc: Enabling not permitted [ 470.881805][T17386] tipc: Enabling of bearer rejected, failed to enable media [ 470.956197][ C2] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 471.012018][ T3983] wlan0 speed is unknown, defaulting to 1000 [ 471.014677][ T3983] syz0: Port: 1 Link DOWN [ 471.043197][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.063500][T17403] gtp0: entered allmulticast mode [ 471.259929][T17419] [U]  [ 471.667604][ T40] audit: type=1326 audit(2000000115.344:19357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17432 comm="syz.4.21234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fcc code=0x7ffc0000 [ 472.093895][T17460] netlink: 84 bytes leftover after parsing attributes in process `syz.4.21248'. [ 472.125860][T17462] Bluetooth: MGMT ver 1.23 [ 472.785807][T17502] gtp0: entered allmulticast mode [ 472.837249][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21269'. [ 473.515082][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21287'. [ 474.907235][T17676] xt_l2tp: wrong L2TP version: 0 [ 475.945481][T17697] netlink: 228 bytes leftover after parsing attributes in process `syz.4.21356'. [ 476.733890][T17753] Invalid source name [ 477.667831][T17836] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 477.686714][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21423'. [ 477.690808][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21423'. [ 478.165216][T17858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.210331][T17866] gfs2: error -5 reading superblock [ 478.323665][T17858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.514754][T17858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.606755][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 478.606774][ T40] audit: type=1326 audit(2000000121.838:19383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.5.21446" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 478.654543][T17858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.787589][T16108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.821640][T12024] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.834676][T12024] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.845202][T12024] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.248545][ C2] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 479.387941][ T40] audit: type=1326 audit(2000000122.577:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17934 comm="syz.3.21468" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7fcc code=0x0 [ 480.002954][T17959] netlink: 120 bytes leftover after parsing attributes in process `syz.5.21478'. [ 480.007513][T17959] netlink: 'syz.5.21478': attribute type 1 has an invalid length. [ 480.010659][T17959] netlink: 64 bytes leftover after parsing attributes in process `syz.5.21478'. [ 480.064025][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21480'. [ 480.211238][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21484'. [ 480.215361][T17972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21484'. [ 480.345193][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21486'. [ 480.458966][T17984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.887670][T18013] program syz.5.21504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.389668][T18057] netlink: 'syz.3.21526': attribute type 1 has an invalid length. [ 481.393243][T18057] netlink: 224 bytes leftover after parsing attributes in process `syz.3.21526'. [ 481.397555][T18057] NCSI netlink: No device for ifindex 2164177684 [ 481.623460][T18080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21536'. [ 483.528776][T18244] binder: 18243:18244 ioctl c0306201 0 returned -14 [ 483.734772][T18258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.21624'. [ 484.091934][T18290] sctp: [Deprecated]: syz.0.21638 (pid 18290) Use of int in max_burst socket option. [ 484.091934][T18290] Use struct sctp_assoc_value instead [ 484.380491][T18315] netlink: 136 bytes leftover after parsing attributes in process `syz.4.21650'. [ 484.387249][T18315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 484.878577][T18343] binder: 18341:18343 ioctl 541b 0 returned -22 [ 484.998182][T18354] netlink: 'syz.3.21666': attribute type 1 has an invalid length. [ 485.174113][T18366] hugetlbfs: Bad value '' for mount option 'size' [ 485.174113][T18366] [ 485.233766][T18360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.240928][T18360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.245891][T18360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.255195][T18360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48605 - 0 [ 485.417763][T18360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.426005][T18360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.433818][T18360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.440509][T18360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 48605 - 0 [ 485.620471][T18360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.638733][T18360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.643649][T18360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.647965][T18360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 48605 - 0 [ 485.805433][T18360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.815400][T18360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.819325][T18360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.824023][T18360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 48605 - 0 [ 486.086920][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.089931][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 48605 - 0 [ 486.099654][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 486.104780][ T13] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 486.125529][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.130476][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 48605 - 0 [ 486.130510][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 486.130533][ T13] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 486.145199][ T472] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.149592][ T472] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 48605 - 0 [ 486.153944][ T472] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 486.156635][ T472] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 486.173202][ T472] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.175938][ T472] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 48605 - 0 [ 486.178630][ T472] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 486.181557][ T472] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 486.238240][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21694'. [ 486.250078][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21694'. [ 486.263578][T18419] netlink: 'syz.5.21694': attribute type 18 has an invalid length. [ 486.267244][T18422] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 486.271168][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21694'. [ 486.273729][T18422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.342163][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21700'. [ 486.346893][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21700'. [ 486.350756][T18428] netlink: 'syz.0.21700': attribute type 11 has an invalid length. [ 486.413900][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21705'. [ 486.416777][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21705'. [ 486.420401][T18437] netlink: 'syz.5.21705': attribute type 14 has an invalid length. [ 486.423219][T18437] netlink: 'syz.5.21705': attribute type 12 has an invalid length. [ 486.515685][ T6095] Bluetooth: hci1: command 0x041b tx timeout [ 486.671897][T18464] tipc: Enabling of bearer rejected, failed to enable media [ 487.069535][T18501] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21735'. [ 487.145218][T18509] can0: slcan on ttyprintk. [ 487.266452][T18506] can0 (unregistered): slcan off ttyprintk. [ 487.285073][T18512] program syz.3.21740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.474746][T18534] netlink: 184 bytes leftover after parsing attributes in process `syz.5.21749'. [ 487.893550][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 488.088002][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 488.094385][ T39] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 488.100598][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.107168][ T39] usb 10-1: Product: syz [ 488.109091][ T39] usb 10-1: Manufacturer: syz [ 488.111993][ T39] usb 10-1: SerialNumber: syz [ 488.129362][ T39] usb 10-1: config 0 descriptor?? [ 488.134849][ T39] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 488.138983][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 488.146265][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.151639][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 488.158122][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.195459][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.206266][ T39] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 488.210394][ T39] usb 10-1: media controller created [ 488.224241][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.253733][ T39] usb 10-1: selecting invalid altsetting 3 [ 488.256538][ T39] ttusb2: set interface to alts=3 failed [ 488.298353][T18599] comedi comedi3: fl512: I/O base address not correctly aligned [ 488.301589][ T39] DVB: Unable to find symbol tda10086_attach() [ 488.309636][ T39] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 488.314583][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 488.326740][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.332261][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 488.335758][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 488.348573][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 488.363988][T18545] ttusb2: i2c wr len=133 too high [ 488.370802][ T39] usb 10-1: USB disconnect, device number 3 [ 488.413988][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 488.425851][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21785'. [ 489.982462][T18699] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 490.034233][ T6171] Process accounting resumed [ 490.057180][T18702] Process accounting resumed [ 490.251470][T18721] team0: Device gtp0 is up. Set it down before adding it as a team port [ 490.509664][T18738] tmpfs: Cannot change global quota limit on remount [ 490.738746][T18760] tmpfs: Cannot change global quota limit on remount [ 490.802366][T18767] openvswitch: netlink: Message has 6 unknown bytes. [ 491.516285][ T40] audit: type=1800 audit(2000000133.929:19385): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.21888" name="file0" dev="tmpfs" ino=1783 res=0 errno=0 [ 491.662537][T18840] __nla_validate_parse: 12 callbacks suppressed [ 491.662553][T18840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21894'. [ 491.669088][T18840] block nbd0: not configured, cannot reconfigure [ 491.901779][T18862] CUSE: DEVNAME unspecified [ 492.209822][T18888] CIFS: Unable to determine destination address [ 492.572236][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21935'. [ 492.872760][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21953'. [ 492.915659][T18968] openvswitch: netlink: IP tunnel dst address not specified [ 492.921031][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.982152][T18978] CUSE: unknown device info "" [ 492.984049][T18978] CUSE: unknown device info "" [ 492.992155][T18978] CUSE: unknown device info "" [ 492.993719][T18978] CUSE: unknown device info "" [ 492.996431][T18978] CUSE: unknown device info "" [ 492.998644][T18978] CUSE: unknown device info "" [ 493.000326][T18978] CUSE: unknown device info "" [ 493.003853][T18978] CUSE: unknown device info "" [ 493.005439][T18978] CUSE: unknown device info "" [ 493.007100][T18978] CUSE: unknown device info "" [ 493.008665][T18978] CUSE: unknown device info "" [ 493.010190][T18978] CUSE: unknown device info "r" [ 493.011858][T18978] CUSE: unknown device info "#" [ 493.014130][T18978] CUSE: unknown device info "" [ 493.015828][T18978] CUSE: unknown device info "" [ 493.017451][T18978] CUSE: unknown device info "" [ 493.019117][T18978] CUSE: DEVNAME unspecified [ 493.548042][T19016] lo speed is unknown, defaulting to 1000 [ 493.648772][T19016] wlan0 speed is unknown, defaulting to 1000 [ 493.735571][T19026] netlink: 72 bytes leftover after parsing attributes in process `syz.5.21982'. [ 494.764776][T19101] team0: Cannot enslave team device to itself [ 494.806227][T19103] fuse: blksize only supported for fuseblk [ 494.844885][T19105] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 494.968657][ C2] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 495.056979][T19111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.199744][T19111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.261085][ T40] audit: type=1326 audit(2000000137.429:19386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19120 comm="syz.0.22028" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efcc code=0x0 [ 495.287956][T19111] team0: Port device netdevsim1 removed [ 495.296127][T19111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.446995][T19111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.618856][T12024] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.639880][T12024] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.648408][T12024] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.676727][ T71] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.840214][T19164] ALSA: mixer_oss: invalid index 20000 [ 495.888526][T19170] comedi comedi2: dac02: I/O base address or length out of range [ 496.154938][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22060'. [ 496.429609][T19244] overlayfs: conflicting lowerdir path [ 496.765049][T19286] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 496.854117][T19296] netlink: 'syz.5.22096': attribute type 1 has an invalid length. [ 496.857612][T19296] netlink: 96 bytes leftover after parsing attributes in process `syz.5.22096'. [ 496.864699][T19296] netlink: 'syz.5.22096': attribute type 1 has an invalid length. [ 496.868423][T19296] netlink: 634 bytes leftover after parsing attributes in process `syz.5.22096'. [ 497.844650][T12024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.849302][T12024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.947380][T12024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.952546][T12024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.038722][ T6095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.054472][ T6095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.062362][ T6095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.072957][ T6095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.078161][ T6095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.105931][T12024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.113405][T12024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.255728][T12024] bond0: (slave netdevsim0): Releasing backup interface [ 498.266091][T12024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.271246][T12024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.351406][T19416] tipc: Failed to obtain node identity [ 498.353770][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 498.412684][T19374] lo speed is unknown, defaulting to 1000 [ 498.455464][ T40] audit: type=1326 audit(2000000140.414:19387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.470819][ T40] audit: type=1326 audit(2000000140.423:19388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.481990][ T40] audit: type=1326 audit(2000000140.423:19389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm="syz.5.22135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.496250][ T40] audit: type=1326 audit(2000000140.423:19390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm="syz.5.22135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.527820][ T40] audit: type=1326 audit(2000000140.423:19391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.540934][ T40] audit: type=1326 audit(2000000140.423:19392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c61ab code=0x7ffc0000 [ 498.573736][ T40] audit: type=1326 audit(2000000140.423:19393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c61ab code=0x7ffc0000 [ 498.587204][ T40] audit: type=1326 audit(2000000140.423:19394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c61ab code=0x7ffc0000 [ 498.597250][ T40] audit: type=1326 audit(2000000140.423:19395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71c61ab code=0x7ffc0000 [ 498.607446][ T40] audit: type=1326 audit(2000000140.423:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19428 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 498.712432][T12024] pimreg: left allmulticast mode [ 498.714706][T12024] dvmrp9: left allmulticast mode [ 499.877102][T12024] bond1 (unregistering): Released all slaves [ 499.885447][T12024] bond2 (unregistering): Released all slaves [ 499.893579][T12024] bond0 (unregistering): Released all slaves [ 499.902202][T12024] bond3 (unregistering): Released all slaves [ 499.913215][T12024] bond4 (unregistering): Released all slaves [ 499.922226][T12024] bond5 (unregistering): Released all slaves [ 499.933093][T12024] bond6 (unregistering): Released all slaves [ 499.948134][T12024] bond7 (unregistering): Released all slaves [ 499.959156][T12024] bond8 (unregistering): Released all slaves [ 499.968450][T12024] bond9 (unregistering): Released all slaves [ 499.976300][T12024] bond10 (unregistering): Released all slaves [ 499.988600][T12024] bond11 (unregistering): Released all slaves [ 500.004406][T12024] bond12 (unregistering): Released all slaves [ 500.012335][T12024] bond13 (unregistering): Released all slaves [ 500.021971][T19463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22141'. [ 500.026208][T19374] wlan0 speed is unknown, defaulting to 1000 [ 500.173890][T12024] : left promiscuous mode [ 500.280605][ T6090] Bluetooth: hci0: command tx timeout [ 500.295629][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 500.360610][T12024] tipc: Left network mode [ 500.575137][T19374] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.577595][T19374] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.580592][T19374] bridge_slave_0: entered allmulticast mode [ 500.583851][T19374] bridge_slave_0: entered promiscuous mode [ 500.589700][T19374] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.592804][T19374] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.595721][T19374] bridge_slave_1: entered allmulticast mode [ 500.610484][T19374] bridge_slave_1: entered promiscuous mode [ 500.620097][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 500.694230][T19374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.705749][T19374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.737639][T19665] netlink: 'syz.5.22157': attribute type 1 has an invalid length. [ 500.741855][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22157'. [ 500.758776][T19374] team0: Port device team_slave_0 added [ 500.767984][T19374] team0: Port device team_slave_1 added [ 500.821241][T19374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.826789][T19374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.838209][T19374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.852121][T19374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.858529][T19374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.873666][T19374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.951239][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 500.987583][T19374] hsr_slave_0: entered promiscuous mode [ 500.990073][T19374] hsr_slave_1: entered promiscuous mode [ 500.992626][T19374] debugfs: 'hsr0' already exists in 'hsr' [ 500.994374][T19374] Cannot create hsr debugfs directory [ 501.448551][T19852] ip6gretap0: entered promiscuous mode [ 501.495010][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 501.598125][ T1340] kernel write not supported for file /sg0 (pid: 1340 comm: kworker/0:2) [ 501.601775][T19870] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 501.607420][T19870] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.724603][T19374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 501.735506][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.741189][T19374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 501.759731][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.762801][T19374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 501.771146][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.774273][T19374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 501.789414][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.855514][T19374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.874453][T19374] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.884817][T15583] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.887613][T15583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.898460][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.901230][T16108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.914895][T12024] hsr_slave_0: left promiscuous mode [ 501.917285][T12024] hsr_slave_1: left promiscuous mode [ 501.964857][T19922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22180'. [ 502.059030][T12024] pim6reg (unregistering): left allmulticast mode [ 502.238511][T12024] team0 (unregistering): Port device wg2 removed [ 502.497647][T19970] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 502.502403][ T6095] Bluetooth: hci0: command tx timeout [ 502.769034][T19374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.927880][T12024] IPVS: stop unused estimator thread 0... [ 502.948917][T20010] : entered promiscuous mode [ 503.003994][T20017] netlink: 774 bytes leftover after parsing attributes in process `syz.4.22198'. [ 503.054917][T19374] veth0_vlan: entered promiscuous mode [ 503.069479][T19374] veth1_vlan: entered promiscuous mode [ 503.107984][T19374] veth0_macvtap: entered promiscuous mode [ 503.117137][T19374] veth1_macvtap: entered promiscuous mode [ 503.146429][T19374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.162579][T19374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.184745][T12024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.189432][T12024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.196874][T12024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.203008][T12024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.348827][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.351647][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.381710][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.390212][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.648887][T20095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.924760][ T6095] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 504.713910][ T6095] Bluetooth: hci0: command tx timeout [ 505.031646][T20239] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.22255'. [ 505.779858][T20334] program syz.5.22282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.073780][ T6095] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 506.189264][T20366] netlink: 'syz.6.22291': attribute type 7 has an invalid length. [ 506.193167][T20366] netlink: 'syz.6.22291': attribute type 8 has an invalid length. [ 506.869172][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.22299'. [ 506.936572][ T6095] Bluetooth: hci0: command tx timeout [ 507.333807][T20430] netlink: 40 bytes leftover after parsing attributes in process `syz.6.22312'. [ 508.038371][T20503] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 508.187631][T20516] netlink: 'syz.5.22338': attribute type 3 has an invalid length. [ 508.576281][T12022] hid_parser_main: 73 callbacks suppressed [ 508.576300][T12022] hid-generic 000F:FFFFFFFA:0009.0005: unknown main item tag 0x5 [ 508.587907][T12022] hid-generic 000F:FFFFFFFA:0009.0005: hidraw1: HID v0.02 Device [syz0] on syz1 [ 508.771551][T20580] fido_id[20580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 509.557930][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22376'. [ 509.561908][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22376'. [ 509.566215][T20634] netlink: 'syz.6.22376': attribute type 14 has an invalid length. [ 509.735720][T12034] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 509.896098][T12034] usb 10-1: Using ep0 maxpacket: 32 [ 509.908900][T12034] usb 10-1: unable to get BOS descriptor or descriptor too short [ 509.915374][T12034] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 509.923019][T12034] usb 10-1: config 8 has no interface number 0 [ 509.932189][T12034] usb 10-1: config 8 interface 188 has no altsetting 0 [ 509.941560][T12034] usb 10-1: string descriptor 0 read error: -22 [ 509.949615][T12034] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 509.955326][T12034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.976795][T12034] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 509.984652][T12034] dw2102: su3000_power_ctrl: 1, initialized 0 [ 509.989631][T12034] dvb-usb: bulk message failed: -22 (2/0) [ 510.011738][T12034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 510.018917][T12034] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 510.022316][T12034] usb 10-1: media controller created [ 510.024786][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.027693][T12034] dw2102: i2c transfer failed. [ 510.030070][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.032452][T12034] dw2102: i2c transfer failed. [ 510.033811][T20674] ptrace attach of "/syz-executor exec"[19374] was attempted by ""[20674] [ 510.034525][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.041937][T12034] dw2102: i2c transfer failed. [ 510.043922][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.048130][T12034] dw2102: i2c transfer failed. [ 510.052594][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.055029][T12034] dw2102: i2c transfer failed. [ 510.058618][T12034] dvb-usb: bulk message failed: -22 (6/0) [ 510.062462][T12034] dw2102: i2c transfer failed. [ 510.064774][T12034] dvb-usb: MAC address: 02:02:02:02:02:02 [ 510.076627][T12034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.095964][T12034] dvb-usb: bulk message failed: -22 (3/0) [ 510.098562][T12034] dw2102: command 0x0e transfer failed. [ 510.105378][T12034] dvb-usb: bulk message failed: -22 (3/0) [ 510.108174][T12034] dw2102: command 0x0e transfer failed. [ 510.110629][T20682] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 510.110629][T20682] program syz.4.22389 not setting count and/or reply_len properly [ 510.301630][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 510.301646][ T40] audit: type=1804 audit(2000000151.494:19399): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.22393" name="/newroot/57/file0" dev="tmpfs" ino=304 res=1 errno=0 [ 510.454025][T12034] dvb-usb: bulk message failed: -22 (3/0) [ 510.456590][T12034] dw2102: command 0x0e transfer failed. [ 510.461606][T12034] dvb-usb: bulk message failed: -22 (3/0) [ 510.465858][T12034] dw2102: command 0x0e transfer failed. [ 510.468435][T12034] dvb-usb: bulk message failed: -22 (1/0) [ 510.470850][T12034] dw2102: command 0x51 transfer failed. [ 510.480427][T20624] dvb-usb: bulk message failed: -22 (4/0) [ 510.489584][T20624] dw2102: i2c transfer failed. [ 510.572942][T12034] DVB: Unable to find symbol ds3000_attach() [ 510.572957][T12034] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 510.633551][T12034] rc_core: IR keymap rc-su3000 not found [ 510.637033][T12034] Registered IR keymap rc-empty [ 510.654820][T12034] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 510.665705][T12034] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input68 [ 510.678865][T12034] dvb-usb: schedule remote query interval to 150 msecs. [ 510.681828][T12034] dw2102: su3000_power_ctrl: 0, initialized 1 [ 510.684252][T12034] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 510.690859][T12034] usb 10-1: USB disconnect, device number 4 [ 510.777097][T12034] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 510.888319][T20780] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 511.037178][T12022] kernel write not supported for file /dsp1 (pid: 12022 comm: kworker/2:3) [ 511.144104][T20818] netlink: 84 bytes leftover after parsing attributes in process `syz.5.22429'. [ 511.152070][T20818] netlink: 84 bytes leftover after parsing attributes in process `syz.5.22429'. [ 511.157094][T23832] kernel write not supported for file /radio5 (pid: 23832 comm: kworker/3:5) [ 511.636195][T20895] netlink: 67 bytes leftover after parsing attributes in process `syz.6.22456'. [ 511.839986][T20928] lo speed is unknown, defaulting to 1000 [ 511.994396][T20928] wlan0 speed is unknown, defaulting to 1000 [ 512.528040][T21027] nbd: must specify a device to reconfigure [ 512.805634][T21060] program syz.6.22499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.983854][T21084] netlink: 'syz.4.22506': attribute type 11 has an invalid length. [ 512.988572][T21084] netlink: 'syz.4.22506': attribute type 4 has an invalid length. [ 512.991454][T21084] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.22506'. [ 513.077399][T21097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22510'. [ 513.288002][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22521'. [ 513.291842][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22521'. [ 513.375981][T21147] tipc: Enabling of bearer rejected, failed to enable media [ 513.719374][T21187] netlink: 'syz.6.22536': attribute type 1 has an invalid length. [ 513.883994][T21202] tipc: Invalid UDP bearer configuration [ 513.884043][T21202] tipc: Enabling of bearer rejected, failed to enable media [ 514.106785][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22549'. [ 514.118384][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.121964][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.125475][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.134642][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.139368][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.143346][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.147136][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.152992][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.156629][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.160254][T15438] hid-generic 0007:0001:FFFFFFFF.0006: unknown main item tag 0x0 [ 514.185482][T15438] hid-generic 0007:0001:FFFFFFFF.0006: hidraw1: HID va.e8 Device [syz0] on syz1 [ 514.230450][T21240] fido_id[21240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.528925][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22562'. [ 514.638655][T21291] CIFS: VFS: UNC: path must begin with // or \\ [ 514.643309][T21291] CIFS: VFS: Malformed UNC in devname [ 514.740112][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22569'. [ 514.974906][T21336] netlink: 128 bytes leftover after parsing attributes in process `syz.6.22578'. [ 515.067213][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22581'. [ 515.154285][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22583'. [ 515.168393][T21358] binder: 21357:21358 ioctl c018620c 80000240 returned -22 [ 515.351930][T21379] veth0: entered promiscuous mode [ 515.558362][T21413] netlink: 'syz.6.22602': attribute type 7 has an invalid length. [ 515.562262][T21413] netlink: 'syz.6.22602': attribute type 8 has an invalid length. [ 515.759325][T21450] netlink: 'syz.3.22612': attribute type 1 has an invalid length. [ 516.320553][T21516] Bluetooth: MGMT ver 1.23 [ 516.326289][T21494] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 516.776141][T21553] netlink: 'syz.5.22645': attribute type 12 has an invalid length. [ 516.805051][ T29] libceph: connect (1)[c::]:6789 error -22 [ 516.814292][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 516.840459][ T29] libceph: connect (1)[c::]:6789 error -22 [ 516.842638][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 517.133052][T12034] libceph: connect (1)[c::]:6789 error -22 [ 517.137123][T12034] libceph: mon0 (1)[c::]:6789 connect error [ 517.151894][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 517.333583][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 517.338168][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 517.345268][ T29] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 517.350776][ T29] usb 10-1: config 8 has no interface number 0 [ 517.352769][ T29] usb 10-1: config 8 interface 188 has no altsetting 0 [ 517.368044][ T29] usb 10-1: string descriptor 0 read error: -22 [ 517.370146][ T29] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 517.373047][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.382152][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 517.397770][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 517.400398][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 517.408680][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.417770][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 517.421482][ T29] usb 10-1: media controller created [ 517.423553][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.425821][ T29] dw2102: i2c transfer failed. [ 517.427493][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.429549][ T29] dw2102: i2c transfer failed. [ 517.435075][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.437077][ T29] dw2102: i2c transfer failed. [ 517.438695][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.441024][ T29] dw2102: i2c transfer failed. [ 517.442593][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.448435][ T29] dw2102: i2c transfer failed. [ 517.450063][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 517.457224][ T29] dw2102: i2c transfer failed. [ 517.460952][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 517.481433][T21636] lo speed is unknown, defaulting to 1000 [ 517.485365][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.498287][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 517.500322][ T29] dw2102: command 0x0e transfer failed. [ 517.502393][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 517.505379][ T29] dw2102: command 0x0e transfer failed. [ 517.546448][T21645] binder: 21643:21645 ioctl 4018620d 0 returned -22 [ 517.550550][T21645] binder: 21643:21645 ioctl c0306201 80000180 returned -11 [ 517.659292][T21551] ceph: No mds server is up or the cluster is laggy [ 517.680162][T21636] wlan0 speed is unknown, defaulting to 1000 [ 517.688706][T12034] libceph: connect (1)[c::]:6789 error -22 [ 517.690727][T12034] libceph: mon0 (1)[c::]:6789 connect error [ 517.836417][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 517.840539][ T29] dw2102: command 0x0e transfer failed. [ 517.843508][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 517.850405][ T29] dw2102: command 0x0e transfer failed. [ 517.852780][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 517.860732][ T29] dw2102: command 0x51 transfer failed. [ 517.862770][T21571] dw2102: i2c wr: len=66 is too big! [ 517.862770][T21571] [ 517.894318][ T29] DVB: Unable to find symbol ds3000_attach() [ 517.902154][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 517.964667][T21701] block device autoloading is deprecated and will be removed. [ 517.965754][ T29] rc_core: IR keymap rc-su3000 not found [ 517.985322][ T29] Registered IR keymap rc-empty [ 517.997836][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 518.009117][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input69 [ 518.025535][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 518.031571][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 518.037661][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 518.059276][ T29] usb 10-1: USB disconnect, device number 5 [ 518.073110][T21715] trusted_key: encrypted_key: key user:syz not found [ 518.106780][T21718] ALSA: seq fatal error: cannot create timer (-22) [ 518.173899][T21728] atomic_op ffff888060fa7198 conn xmit_atomic 0000000000000000 [ 518.229566][T21736] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component [ 518.250913][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 518.336222][T21750] usb usb3: usbfs: process 21750 (syz.6.22691) did not claim interface 0 before use [ 518.468933][T12022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 518.483612][ T6095] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 518.511023][T21761] vlan2: entered promiscuous mode [ 518.512617][T21761] bridge0: entered promiscuous mode [ 518.557785][T21773] tipc: Started in network mode [ 518.559511][T21773] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 518.562561][T21773] tipc: Enabling of bearer rejected, failed to enable media [ 519.591494][T21802] batadv0: entered promiscuous mode [ 519.605913][T21802] vlan2: entered promiscuous mode [ 519.654995][T21824] __nla_validate_parse: 10 callbacks suppressed [ 519.655014][T21824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22711'. [ 519.892575][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22729'. [ 520.162208][T21918] comedi comedi3: pcl816: I/O base address not correctly aligned [ 520.767495][T21958] comedi comedi1: rti802: I/O base address not correctly aligned [ 521.015946][T21978] lo speed is unknown, defaulting to 1000 [ 521.184895][T21978] wlan0 speed is unknown, defaulting to 1000 [ 521.935767][T22103] netlink: 26 bytes leftover after parsing attributes in process `syz.4.22792'. [ 521.946158][T22104] lo speed is unknown, defaulting to 1000 [ 522.204914][T22104] wlan0 speed is unknown, defaulting to 1000 [ 522.680465][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22812'. [ 522.830504][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22818'. [ 524.037245][ T3983] libceph: connect (1)[c::]:6789 error -101 [ 524.039315][ T3983] libceph: mon0 (1)[c::]:6789 connect error [ 524.333428][ T3983] libceph: connect (1)[c::]:6789 error -101 [ 524.335472][ T3983] libceph: mon0 (1)[c::]:6789 connect error [ 524.619367][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22880'. [ 524.666674][T22392] hugetlbfs: Bad value 't1' for mount option 'nr_inodes' [ 524.666674][T22392] [ 524.679464][T22394] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22882'. [ 524.895800][T12022] libceph: connect (1)[c::]:6789 error -101 [ 524.898285][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 524.922734][T22320] ceph: No mds server is up or the cluster is laggy [ 525.342029][T12022] libceph: connect (1)[c::]:6789 error -101 [ 525.351358][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 525.359271][T12022] libceph: connect (1)[c::]:6789 error -101 [ 525.364543][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 525.648361][T12022] libceph: connect (1)[c::]:6789 error -101 [ 525.651296][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 525.877097][T22501] tipc: Enabled bearer , priority 10 [ 526.124379][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22920'. [ 526.128688][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22920'. [ 526.204418][T12022] libceph: connect (1)[c::]:6789 error -101 [ 526.209736][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 526.249847][T22464] ceph: No mds server is up or the cluster is laggy [ 526.505039][T22562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22935'. [ 526.613813][T22577] netlink: 'syz.3.22940': attribute type 83 has an invalid length. [ 526.716151][T22590] ALSA: seq fatal error: cannot create timer (-22) [ 526.911437][T15438] kernel read not supported for file /vga_arbiter (pid: 15438 comm: kworker/0:1) [ 526.982422][T23832] tipc: Node number set to 4278190081 [ 527.136618][T22640] vlan3: entered promiscuous mode [ 527.143460][T22640] bridge0: entered promiscuous mode [ 527.346093][T12034] hid (null): global environment stack underflow [ 527.366885][T12034] hid-generic 616F:20C2607D:F72986D9.0007: global environment stack underflow [ 527.374060][T12034] hid-generic 616F:20C2607D:F72986D9.0007: item 0 1 1 11 parsing failed [ 527.378626][T12034] hid-generic 616F:20C2607D:F72986D9.0007: probe with driver hid-generic failed with error -22 [ 527.606102][T22710] tmpfs: Cannot enable quota on remount [ 528.055882][T22775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23006'. [ 528.358015][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23018'. [ 528.436417][T15438] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 528.500292][T22832] [U]  [ 528.505728][T22832] [U] K{ [ 528.507371][T22832] [U] T 1ŠFFˊ`GJǘGO/MC [ 528.511947][T22832] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 528.518868][T22832] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 528.525270][T22832] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 528.540479][T22832] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 528.550069][T22832] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 528.555648][T22832] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 528.560495][T22832] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 528.591655][T22835] netem: change failed [ 528.596644][T22832] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 528.600727][T22832] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 528.605295][T22832] [U] 22Ʃ۩X?0;3U [ 528.607589][T15438] usb 11-1: Using ep0 maxpacket: 8 [ 528.610443][T22832] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 528.620203][T22832] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 528.623559][T15438] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 528.626245][T15438] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 528.628855][T22832] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 528.630220][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.633423][T22832] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 528.637231][T15438] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.639641][T22832] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 528.641456][T22837] comedi comedi3: pcl816: I/O base address not correctly aligned [ 528.644282][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.648293][T22832] [U] EC [ 528.650907][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.655005][T22832] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 528.655493][T15438] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 528.667526][T15438] usb 11-1: config 168 interface 0 has no altsetting 0 [ 528.670647][T15438] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 528.673031][T15438] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 528.676997][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.680602][T15438] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.684316][T22831] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 528.689025][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.693544][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.697195][T15438] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 528.701493][T15438] usb 11-1: config 168 interface 0 has no altsetting 0 [ 528.704664][T15438] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 528.707554][T15438] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 528.711199][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.714866][T15438] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.718772][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.722606][T15438] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.726394][T15438] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 528.731427][T15438] usb 11-1: config 168 interface 0 has no altsetting 0 [ 528.736987][T15438] usb 11-1: string descriptor 0 read error: -22 [ 528.739235][T15438] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 528.742554][T15438] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.760108][T15438] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 528.785755][T22842] hid-generic 0003:0627:0001.0001: pid 22842 passed too short report [ 529.017563][T22875] program syz.5.23046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.917567][T22912] netlink: 'syz.5.23052': attribute type 10 has an invalid length. [ 531.141821][T12022] usb 11-1: USB disconnect, device number 2 [ 531.578902][T23020] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 531.629450][T23017] netlink: 'syz.4.23080': attribute type 2 has an invalid length. [ 531.947639][T23073] netlink: 'syz.4.23098': attribute type 14 has an invalid length. [ 532.250681][T23113] netlink: 'syz.4.23110': attribute type 1 has an invalid length. [ 532.254402][T23115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23111'. [ 532.259141][T23113] netlink: 96 bytes leftover after parsing attributes in process `syz.4.23110'. [ 532.262176][T23113] netlink: 1 bytes leftover after parsing attributes in process `syz.4.23110'. [ 532.264789][T23115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23111'. [ 532.268599][T23113] netlink: 'syz.4.23110': attribute type 1 has an invalid length. [ 532.271069][T23113] netlink: 'syz.4.23110': attribute type 8 has an invalid length. [ 532.274333][T23113] netlink: 606 bytes leftover after parsing attributes in process `syz.4.23110'. [ 532.806362][T23218] netlink: 504 bytes leftover after parsing attributes in process `syz.3.23147'. [ 532.821015][T23222] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.23148'. [ 532.824359][T23222] veth0_to_bond: default FDB implementation only supports local addresses [ 532.913535][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23152'. [ 532.919456][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23153'. [ 533.501865][T15438] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 533.663554][T15438] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.668402][T15438] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.672863][T15438] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.676615][T15438] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.683245][T23273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 533.688650][T15438] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 533.984853][ T29] usb 10-1: USB disconnect, device number 6 [ 534.220392][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23183'. [ 534.223272][T23361] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 535.263672][T23438] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 535.459413][T23452] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 535.465291][T23452] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 535.469338][T23452] ALSA: mixer_oss: invalid OSS volume 'lg' [ 535.471299][T23452] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 535.473841][T23452] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 535.476933][T23452] ALSA: mixer_oss: invalid OSS volume '' [ 535.479093][T23452] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 535.481531][T23452] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 535.484163][T23452] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 535.486815][T23452] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 535.490067][T23452] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 536.268543][T23517] macsec1: entered promiscuous mode [ 536.273557][T23517] macsec1: entered allmulticast mode [ 536.276016][T23517] bridge0: entered allmulticast mode [ 536.278964][T23517] bridge0: port 3(macsec1) entered blocking state [ 536.281909][T23517] bridge0: port 3(macsec1) entered disabled state [ 536.355269][T23517] bridge0: left allmulticast mode [ 536.697870][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.758622][T23603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.812245][T23608] __nla_validate_parse: 6 callbacks suppressed [ 537.812268][T23608] netlink: 44 bytes leftover after parsing attributes in process `syz.6.23269'. [ 537.827611][T23608] netlink: 43 bytes leftover after parsing attributes in process `syz.6.23269'. [ 537.838468][T23608] netlink: 'syz.6.23269': attribute type 6 has an invalid length. [ 537.849330][T23608] netlink: 'syz.6.23269': attribute type 5 has an invalid length. [ 537.853852][T23608] netlink: 43 bytes leftover after parsing attributes in process `syz.6.23269'. [ 537.952913][T23631] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.23274'. [ 537.956529][T23631] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.23274'. [ 538.025901][ T24] hid (null): invalid report_size 51505 [ 538.040915][ T24] hid (null): unknown global tag 0xc [ 538.048861][ T24] hid (null): unknown global tag 0xc [ 538.051118][ T24] hid (null): unknown global tag 0x9f [ 538.053454][ T24] hid (null): unknown global tag 0xc [ 538.056216][ T24] hid (null): unknown global tag 0x42 [ 538.059125][ T24] hid (null): unknown global tag 0xd [ 538.061446][ T24] hid (null): unknown global tag 0xc [ 538.064074][ T24] hid (null): unknown global tag 0xc [ 538.067001][ T24] hid (null): report_id 0 is invalid [ 538.076413][ T24] hid (null): unknown global tag 0xe [ 538.078883][ T24] hid (null): report_id 16697 is invalid [ 538.094062][ T24] hid (null): bogus close delimiter [ 538.096864][ T24] hid (null): unknown global tag 0xc [ 538.099156][ T24] hid (null): invalid report_size 1234625101 [ 538.101665][ T24] hid (null): unknown global tag 0xd [ 538.103937][ T24] hid (null): unknown global tag 0xd [ 538.106197][T12034] IPVS: starting estimator thread 0... [ 538.106240][ T24] hid (null): invalid report_size -2125375034 [ 538.110099][ T24] hid (null): report_id 0 is invalid [ 538.111851][ T24] hid (null): invalid report_count -1724469666 [ 538.113860][ T24] hid (null): unknown global tag 0xc [ 538.115945][ T24] hid (null): unknown global tag 0xd [ 538.124361][ T24] hid (null): global environment stack overflow [ 538.126654][ T24] hid (null): unknown global tag 0xe [ 538.128420][ T24] hid (null): unknown global tag 0xc [ 538.130548][ T24] hid (null): unknown global tag 0xc [ 538.135243][ T24] hid_parser_main: 96 callbacks suppressed [ 538.135257][ T24] hid-generic 0009:0007:0077.0008: unknown main item tag 0x1 [ 538.140084][ T24] hid-generic 0009:0007:0077.0008: reserved main item tag 0xd [ 538.142860][ T24] hid-generic 0009:0007:0077.0008: unknown main item tag 0x1 [ 538.145229][ T24] hid-generic 0009:0007:0077.0008: unexpected long global item [ 538.150989][ T24] hid-generic 0009:0007:0077.0008: probe with driver hid-generic failed with error -22 [ 538.215605][T23658] IPVS: using max 46 ests per chain, 110400 per kthread [ 538.442940][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23310'. [ 538.523444][T23744] [U]  [ 538.525273][T23744] [U] K{ [ 538.526706][T23744] [U] T 1ŠFFˊ`GJǘGO/MC [ 538.530583][T23744] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 538.534391][T23746] netem: change failed [ 538.538219][T23744] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 538.543792][T23744] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 538.559430][T23744] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 538.568654][T23744] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 538.572895][T23744] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 538.577064][T23744] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 538.616713][T23744] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 538.621534][T23744] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 538.630330][T23744] [U] 22Ʃ۩X?0;3U [ 538.632458][T23744] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 538.640899][T23744] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 538.644480][T23744] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 538.647319][T23744] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 538.649505][T23744] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 538.656895][T23744] [U] EC [ 538.658338][T23744] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 538.686274][T23742] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 538.895007][T23794] Invalid logical block size (53355) [ 539.023737][T23804] hid-generic 0003:0627:0001.0001: pid 23804 passed too short report [ 539.111331][T23823] syz.3.23346 (23823) used obsolete PPPIOCDETACH ioctl [ 539.914444][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23379'. [ 540.134132][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23390'. [ 540.214382][T23998] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 540.232645][T23993] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 540.234959][T23993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 540.245427][T23993] vhci_hcd vhci_hcd.0: Device attached [ 540.279937][T24000] vhci_hcd: connection closed [ 540.280220][ T1168] vhci_hcd vhci_hcd.5: stop threads [ 540.283573][ T1168] vhci_hcd vhci_hcd.5: release socket [ 540.285285][ T1168] vhci_hcd vhci_hcd.5: disconnect device [ 540.845619][T24064] netlink: 'syz.4.23411': attribute type 2 has an invalid length. [ 541.158991][T24110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23426'. [ 541.211549][T24118] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.23429'. [ 541.295558][ C1] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 541.299352][ C1] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 541.928483][ T3983] kernel write not supported for file /uinput (pid: 3983 comm: kworker/2:2) [ 542.584892][T24294] netlink: 'syz.6.23483': attribute type 12 has an invalid length. [ 542.588213][T24294] netlink: 'syz.6.23483': attribute type 29 has an invalid length. [ 542.757297][ T3983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 543.984889][T24354] netlink: 'syz.3.23498': attribute type 3 has an invalid length. [ 544.302239][T24257] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 544.559232][T24401] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 545.541297][T24488] __nla_validate_parse: 3 callbacks suppressed [ 545.541310][T24488] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23541'. [ 545.755361][T24416] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 545.755448][T24426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.761331][T24426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.831153][T24426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.917825][T24426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 545.920741][T24426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 546.024405][T24426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 546.122677][T24426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.332302][T24519] can0: slcan on ttynull. [ 546.453173][T24517] can0 (unregistered): slcan off ttynull. [ 546.688105][ T6090] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 546.688164][ T6095] Bluetooth: hci3: command 0x1003 tx timeout [ 546.892756][T24594] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 546.894905][T24594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 546.901893][T24594] vhci_hcd vhci_hcd.0: Device attached [ 546.909856][T24596] vhci_hcd: connection closed [ 546.910133][ T13] vhci_hcd vhci_hcd.6: stop threads [ 546.917329][ T13] vhci_hcd vhci_hcd.6: release socket [ 546.919250][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 547.201224][ T6090] Bluetooth: hci4: command 0x0c1a tx timeout [ 547.563808][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23577'. [ 547.581687][T24619] macsec2: entered promiscuous mode [ 547.584255][T24619] macsec2: entered allmulticast mode [ 547.586845][T24619] bridge0: entered allmulticast mode [ 547.590877][T24619] bridge0: port 3(macsec2) entered blocking state [ 547.593741][T24619] bridge0: port 3(macsec2) entered disabled state [ 547.682376][T24619] bridge0: left allmulticast mode [ 548.056356][ T6090] Bluetooth: hci1: command 0x041b tx timeout [ 549.261237][T24774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.283673][T24782] devpts: Bad value for 'max' [ 549.423951][ T6090] Bluetooth: hci4: command 0x0c1a tx timeout [ 549.507740][T24806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23641'. [ 549.510676][T24806] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23641'. [ 549.513442][T24806] netlink: 'syz.4.23641': attribute type 6 has an invalid length. [ 549.515905][T24806] netlink: 'syz.4.23641': attribute type 5 has an invalid length. [ 549.522113][T24806] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23641'. [ 550.278693][ T6090] Bluetooth: hci1: command 0x041b tx timeout [ 550.492990][T24831] devpts: Bad value for 'max' [ 550.596577][T24845] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 550.749185][T12022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 550.930825][T24870] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.23661'. [ 551.646598][ T6090] Bluetooth: hci4: command 0x0c1a tx timeout [ 552.501424][ T6090] Bluetooth: hci1: command 0x041b tx timeout [ 565.749625][ T6095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.756765][ T6095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.761027][ T6095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.774463][ T6095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.782162][ T6095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.041496][ T472] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.045911][ T472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 48605 - 0 [ 566.049888][ T472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 566.055764][ T472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 566.119669][T24907] lo speed is unknown, defaulting to 1000 [ 566.205857][T24907] wlan0 speed is unknown, defaulting to 1000 [ 566.330565][ T472] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.336708][ T472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 48605 - 0 [ 566.341089][ T472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 566.344400][ T472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 566.495127][T24907] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.497758][T24907] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.500171][T24907] bridge_slave_0: entered allmulticast mode [ 566.502971][T24907] bridge_slave_0: entered promiscuous mode [ 566.506693][T24907] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.509073][T24907] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.513521][T24907] bridge_slave_1: entered allmulticast mode [ 566.516607][T24907] bridge_slave_1: entered promiscuous mode [ 566.565182][ T472] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.568870][ T472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 48605 - 0 [ 566.572074][ T472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 566.575198][ T472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 566.656893][T24907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.667375][T24907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.707870][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 566.711599][T24907] team0: Port device team_slave_0 added [ 566.713136][T24907] team0: Port device team_slave_1 added [ 566.769011][ T472] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.772440][ T472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 48605 - 0 [ 566.774792][T15052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.775791][ T472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 566.786483][ T472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 566.792739][T15052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.798191][T15052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.803888][T15052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.808357][T15052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 566.847604][T24907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.850590][T24907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.861759][T24907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.874031][T24907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.877391][T24907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.888934][T24907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.196711][T24907] hsr_slave_0: entered promiscuous mode [ 567.199946][T24907] hsr_slave_1: entered promiscuous mode [ 567.202194][T24907] debugfs: 'hsr0' already exists in 'hsr' [ 567.204144][T24907] Cannot create hsr debugfs directory [ 567.404295][T25080] lo speed is unknown, defaulting to 1000 [ 567.862491][ T472] .: left allmulticast mode [ 567.865827][ T472] .: left promiscuous mode [ 567.868350][ T472] bridge0: port 2(.) entered disabled state [ 567.943341][ T472] bridge_slave_0: left allmulticast mode [ 567.945584][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.975239][ T6090] Bluetooth: hci3: command tx timeout [ 568.060456][ T472] pimreg: left allmulticast mode [ 568.915287][ T6090] Bluetooth: hci2: command 0x1003 tx timeout [ 568.915332][ T6095] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 569.011358][ T6095] Bluetooth: hci5: command tx timeout [ 570.208835][ T6095] Bluetooth: hci3: command tx timeout [ 571.012152][ T472] bond1 (unregistering): Released all slaves [ 571.019983][ T472] bond2 (unregistering): Released all slaves [ 571.027768][ T472] bond3 (unregistering): Released all slaves [ 571.035982][ T472] bond4 (unregistering): Released all slaves [ 571.046107][ T472] bond0 (unregistering): Released all slaves [ 571.056351][ T472] bond5 (unregistering): Released all slaves [ 571.064177][ T472] bond6 (unregistering): Released all slaves [ 571.223374][ T6095] Bluetooth: hci5: command tx timeout [ 571.452461][T25080] wlan0 speed is unknown, defaulting to 1000 [ 571.500421][ T472] M: left promiscuous mode [ 571.548754][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23686'. [ 571.554091][T25274] ------------[ cut here ]------------ [ 571.558537][T25274] 1 [ 571.558548][T25274] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#1: syz.4.23686/25274 [ 571.562444][T25274] Modules linked in: [ 571.564267][T25274] CPU: 1 UID: 0 PID: 25274 Comm: syz.4.23686 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.568453][T25274] Tainted: [L]=SOFTLOCKUP [ 571.570009][T25274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc [ 571.573043][T25274] RIP: 0010:ip_rt_bug+0x2b/0x150 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.574998][T25274] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 571.581757][T25274] RSP: 0000:ffffc900039ef390 EFLAGS: 00010283 [ 571.584046][T25274] RAX: 0000000000000d25 RBX: ffff88804f990dc0 RCX: ffffc9002d522000 [ 571.587193][T25274] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 571.590695][T25274] RBP: ffff88804f990dc0 R08: 0000000000000001 R09: 0000000000000000 [ 571.593928][T25274] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880134126c0 [ 571.596722][T25274] R13: ffff888021b38780 R14: 0000000000000000 R15: ffff88804f990e18 [ 571.599472][T25274] FS: 0000000000000000(0000) GS:ffff888097277000(0063) knlGS:00000000f5426b40 [ 571.602584][T25274] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 571.604722][T25274] CR2: 00000000f73d6d50 CR3: 0000000074d27000 CR4: 0000000000352ef0 [ 571.607718][T25274] Call Trace: [ 571.608949][T25274] [ 571.609975][T25274] ? __pfx_ip_rt_bug+0x10/0x10 [ 571.611578][T25274] ip_push_pending_frames+0x29e/0x300 [ 571.613361][T25274] icmp_push_reply+0x30e/0x450 [ 571.614896][T25274] __icmp_send+0x11b4/0x2c70 [ 571.616410][T25274] ? __pfx___icmp_send+0x10/0x10 [ 571.617973][T25274] ? __pfx_ip_route_input_slow+0x10/0x10 [ 571.619793][T25274] ? __lock_acquire+0x4a5/0x2630 [ 571.621434][T25274] ? __ip_options_compile+0x604/0x16a0 [ 571.623224][T25274] ? ip_route_input_noref+0x15f/0x2e0 [ 571.625010][T25274] ip_options_compile+0xb6/0x100 [ 571.626705][T25274] ? __pfx_ip_options_compile+0x10/0x10 [ 571.628541][T25274] ? __pfx_ip_rcv_finish+0x10/0x10 [ 571.630236][T25274] ip_rcv_finish_core+0x693/0x2c30 [ 571.631853][T25274] ip_rcv+0x1c0/0x3c0 [ 571.633163][T25274] ? __pfx_ip_rcv+0x10/0x10 [ 571.634612][T25274] __netif_receive_skb_one_core+0x197/0x1e0 [ 571.636673][T25274] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 571.639047][T25274] ? lock_acquire+0x1b1/0x370 [ 571.640592][T25274] __netif_receive_skb+0x1f/0x120 [ 571.642261][T25274] netif_receive_skb+0x13b/0x7f0 [ 571.644128][T25274] ? __pfx_netif_receive_skb+0x10/0x10 [ 571.646053][T25274] tun_rx_batched.isra.0+0x3f6/0x750 [ 571.647870][T25274] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 571.650239][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.652148][T25274] ? tun_get_user+0x1cc8/0x3c20 [ 571.654010][T25274] tun_get_user+0x1e31/0x3c20 [ 571.655887][T25274] ? __pfx_tun_get_user+0x10/0x10 [ 571.657508][T25274] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 571.659254][T25274] ? find_held_lock+0x2b/0x80 [ 571.660765][T25274] ? tun_get+0x191/0x370 [ 571.662222][T25274] ? tun_get+0x191/0x370 [ 571.663593][T25274] tun_chr_write_iter+0xdc/0x200 [ 571.665337][T25274] vfs_write+0x6ac/0x1070 [ 571.666823][T25274] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 571.668873][T25274] ? __pfx_vfs_write+0x10/0x10 [ 571.670539][T25274] ? find_held_lock+0x2b/0x80 [ 571.672200][T25274] ksys_write+0x12a/0x250 [ 571.673677][T25274] ? __pfx_ksys_write+0x10/0x10 [ 571.675464][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.677238][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.678810][T25274] do_int80_emulation+0x141/0x700 [ 571.680381][T25274] asm_int80_emulation+0x1a/0x20 [ 571.681929][T25274] RIP: 0023:0xf71661ab [ 571.683289][T25274] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 571.689929][T25274] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 571.692555][T25274] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 571.695108][T25274] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.697572][T25274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.700016][T25274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.702843][T25274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.705615][T25274] [ 571.706674][T25274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 571.709295][T25274] CPU: 1 UID: 0 PID: 25274 Comm: syz.4.23686 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.712681][T25274] Tainted: [L]=SOFTLOCKUP [ 571.714039][T25274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 571.717261][T25274] Call Trace: [ 571.718422][T25274] [ 571.719612][T25274] dump_stack_lvl+0x100/0x190 [ 571.721297][T25274] vpanic+0x552/0x970 [ 571.722770][T25274] ? __pfx_vpanic+0x10/0x10 [ 571.724300][T25274] panic+0xd1/0xe0 [ 571.725530][T25274] ? __pfx_panic+0x10/0x10 [ 571.727081][T25274] check_panic_on_warn.cold+0x19/0x34 [ 571.728696][T25274] ? ip_rt_bug+0x2b/0x150 [ 571.730112][T25274] __warn.cold+0x191/0x328 [ 571.731564][T25274] __report_bug+0x296/0x3d0 [ 571.733000][T25274] ? ip_rt_bug+0x2b/0x150 [ 571.734390][T25274] ? __pfx___report_bug+0x10/0x10 [ 571.736025][T25274] ? ip_rt_bug+0x2b/0x150 [ 571.737393][T25274] report_bug+0xb2/0x220 [ 571.738981][T25274] ? ip_rt_bug+0x2b/0x150 [ 571.740394][T25274] handle_bug+0x16a/0x2a0 [ 571.741796][T25274] exc_invalid_op+0x17/0x50 [ 571.743350][T25274] asm_exc_invalid_op+0x1a/0x20 [ 571.745130][T25274] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 571.746822][T25274] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 571.752831][T25274] RSP: 0000:ffffc900039ef390 EFLAGS: 00010283 [ 571.754750][T25274] RAX: 0000000000000d25 RBX: ffff88804f990dc0 RCX: ffffc9002d522000 [ 571.757216][T25274] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 571.759685][T25274] RBP: ffff88804f990dc0 R08: 0000000000000001 R09: 0000000000000000 [ 571.762453][T25274] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880134126c0 [ 571.765335][T25274] R13: ffff888021b38780 R14: 0000000000000000 R15: ffff88804f990e18 [ 571.767854][T25274] ? sk_skb_reason_drop+0x114/0x1b0 [ 571.769465][T25274] ? __pfx_ip_rt_bug+0x10/0x10 [ 571.771003][T25274] ip_push_pending_frames+0x29e/0x300 [ 571.772914][T25274] icmp_push_reply+0x30e/0x450 [ 571.774567][T25274] __icmp_send+0x11b4/0x2c70 [ 571.776152][T25274] ? __pfx___icmp_send+0x10/0x10 [ 571.777792][T25274] ? __pfx_ip_route_input_slow+0x10/0x10 [ 571.779661][T25274] ? __lock_acquire+0x4a5/0x2630 [ 571.781303][T25274] ? __ip_options_compile+0x604/0x16a0 [ 571.783124][T25274] ? ip_route_input_noref+0x15f/0x2e0 [ 571.784897][T25274] ip_options_compile+0xb6/0x100 [ 571.786493][T25274] ? __pfx_ip_options_compile+0x10/0x10 [ 571.788224][T25274] ? __pfx_ip_rcv_finish+0x10/0x10 [ 571.789829][T25274] ip_rcv_finish_core+0x693/0x2c30 [ 571.791468][T25274] ip_rcv+0x1c0/0x3c0 [ 571.792850][T25274] ? __pfx_ip_rcv+0x10/0x10 [ 571.794446][T25274] __netif_receive_skb_one_core+0x197/0x1e0 [ 571.796321][T25274] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 571.798415][T25274] ? lock_acquire+0x1b1/0x370 [ 571.799910][T25274] __netif_receive_skb+0x1f/0x120 [ 571.801577][T25274] netif_receive_skb+0x13b/0x7f0 [ 571.803253][T25274] ? __pfx_netif_receive_skb+0x10/0x10 [ 571.805106][T25274] tun_rx_batched.isra.0+0x3f6/0x750 [ 571.806908][T25274] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 571.808793][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.810509][T25274] ? tun_get_user+0x1cc8/0x3c20 [ 571.812139][T25274] tun_get_user+0x1e31/0x3c20 [ 571.813723][T25274] ? __pfx_tun_get_user+0x10/0x10 [ 571.815424][T25274] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 571.817239][T25274] ? find_held_lock+0x2b/0x80 [ 571.819229][T25274] ? tun_get+0x191/0x370 [ 571.820866][T25274] ? tun_get+0x191/0x370 [ 571.822853][T25274] tun_chr_write_iter+0xdc/0x200 [ 571.824871][T25274] vfs_write+0x6ac/0x1070 [ 571.826735][T25274] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 571.829132][T25274] ? __pfx_vfs_write+0x10/0x10 [ 571.831206][T25274] ? find_held_lock+0x2b/0x80 [ 571.833233][T25274] ksys_write+0x12a/0x250 [ 571.834909][T25274] ? __pfx_ksys_write+0x10/0x10 [ 571.836881][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.838792][T25274] ? rcu_is_watching+0x12/0xc0 [ 571.840558][T25274] do_int80_emulation+0x141/0x700 [ 571.842645][T25274] asm_int80_emulation+0x1a/0x20 [ 571.844531][T25274] RIP: 0023:0xf71661ab [ 571.845989][T25274] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 571.853092][T25274] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 571.856978][T25274] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 571.860242][T25274] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.863451][T25274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.866547][T25274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.869587][T25274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.872632][T25274] [ 571.874820][T25274] Kernel Offset: disabled [ 571.876702][T25274] Rebooting in 86400 seconds..