last executing test programs: 3m15.714862596s ago: executing program 2 (id=14929): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) 3m15.653125475s ago: executing program 2 (id=14931): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000005c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000640)) 3m15.652350891s ago: executing program 2 (id=14934): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 3m15.613068075s ago: executing program 2 (id=14937): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m15.54251864s ago: executing program 2 (id=14940): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 3m15.540655287s ago: executing program 2 (id=14941): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300ce4d, 0x10) 3m0.040820088s ago: executing program 32 (id=14941): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300ce4d, 0x10) 2m41.786461604s ago: executing program 1 (id=15504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000010080000000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.715303078s ago: executing program 1 (id=15505): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0x0) 2m41.708238436s ago: executing program 1 (id=15507): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8}]}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 2m41.644611115s ago: executing program 1 (id=15509): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 2m41.574740334s ago: executing program 1 (id=15511): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m41.421289228s ago: executing program 1 (id=15514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0xfff, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2m41.367671648s ago: executing program 33 (id=15514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0xfff, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2m1.51439239s ago: executing program 0 (id=16441): r0 = open(&(0x7f0000000000)='.\x00', 0x80800, 0x0) setreuid(0x0, 0xee00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x80) 2m1.464400119s ago: executing program 0 (id=16443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 2m1.372193005s ago: executing program 0 (id=16444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 2m0.528653218s ago: executing program 0 (id=16454): mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000780)=[{}, {0x6460, 0x2, 0x4}], 0x2, 0x49, 0x0, 0x0, 0x0, 0x25}) 2m0.498814185s ago: executing program 0 (id=16458): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 2m0.428229655s ago: executing program 0 (id=16461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4280}], 0x1, 0x0, 0x0, 0x0) 1m44.935272271s ago: executing program 34 (id=16461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4280}], 0x1, 0x0, 0x0, 0x0) 788.496763ms ago: executing program 4 (id=20208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000002200)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10) 675.463704ms ago: executing program 4 (id=20214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 648.318125ms ago: executing program 3 (id=20215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 622.725348ms ago: executing program 4 (id=20217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0xf9}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x0, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x3}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x1d}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 562.698259ms ago: executing program 3 (id=20219): setreuid(0x0, 0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 562.471017ms ago: executing program 3 (id=20220): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 501.12282ms ago: executing program 5 (id=20221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 500.668629ms ago: executing program 6 (id=20222): inotify_init1(0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 436.025243ms ago: executing program 4 (id=20223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180) 435.811234ms ago: executing program 6 (id=20224): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000001}) 428.600236ms ago: executing program 4 (id=20225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 406.41923ms ago: executing program 3 (id=20226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 336.664627ms ago: executing program 4 (id=20227): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 336.489623ms ago: executing program 6 (id=20228): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 248.919957ms ago: executing program 5 (id=20229): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 248.747377ms ago: executing program 3 (id=20230): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc2) 160.626567ms ago: executing program 6 (id=20231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e1c, 0x3, 'none\x00', 0xb, 0x10000004, 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 160.409723ms ago: executing program 3 (id=20232): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2e60, &(0x7f00000002c0)={0x0, 0xa00000, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f0000000fc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}]) 160.208471ms ago: executing program 5 (id=20233): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9802) close_range(r0, 0xffffffffffffffff, 0x0) 60.622477ms ago: executing program 6 (id=20234): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000002, 0x162d}) 59.292123ms ago: executing program 5 (id=20235): capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000000)) 59.044485ms ago: executing program 6 (id=20236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x820}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1d2c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 239.366µs ago: executing program 5 (id=20237): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 0s ago: executing program 5 (id=20238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): 2'. [ 373.373534][ T7090] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.387378][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15993'. [ 373.537280][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.558637][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.566088][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.584411][ T1196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.717869][ T7184] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16013'. [ 373.720780][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16013'. [ 373.731763][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16013'. [ 373.805017][ T7191] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 374.024582][ T7214] IPVS: Error connecting to the multicast addr [ 374.778766][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16044'. [ 375.091461][ T7248] nftables ruleset with unbound set [ 375.325405][ T7274] dvmrp1: entered allmulticast mode [ 375.335294][ T7273] dvmrp1: left allmulticast mode [ 375.391308][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16060'. [ 375.394667][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16060'. [ 375.683063][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16065'. [ 375.697790][ T7299] vlan2: entered promiscuous mode [ 375.699673][ T7299] bridge0: entered promiscuous mode [ 375.877407][ T7317] netlink: 67 bytes leftover after parsing attributes in process `syz.5.16079'. [ 376.495192][ T7374] syz.5.16108 (7374): drop_caches: 2 [ 376.802468][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 376.961804][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 376.971160][ T39] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 376.974418][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.977163][ T39] usb 10-1: Product: syz [ 376.978613][ T39] usb 10-1: Manufacturer: syz [ 376.980350][ T39] usb 10-1: SerialNumber: syz [ 376.984046][ T39] usb 10-1: config 0 descriptor?? [ 376.999813][ T39] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 377.007569][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 377.011223][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.014925][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 377.016958][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.024009][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.027365][ T39] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 377.029915][ T39] usb 10-1: media controller created [ 377.040023][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.054823][ T39] usb 10-1: selecting invalid altsetting 3 [ 377.057181][ T39] ttusb2: set interface to alts=3 failed [ 377.082420][ T39] DVB: Unable to find symbol tda10086_attach() [ 377.084601][ T39] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 377.088256][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 377.090096][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.094250][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 377.096227][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.102973][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 377.196128][ T7381] ttusb2: i2c rd len=58 too high [ 377.202974][ T9] usb 10-1: USB disconnect, device number 3 [ 377.239424][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 377.369823][ T7413] CIFS: Unable to determine destination address [ 378.477823][ T7528] netlink: 'syz.4.16176': attribute type 11 has an invalid length. [ 378.481471][ T7528] netlink: 'syz.4.16176': attribute type 4 has an invalid length. [ 378.485579][ T7528] __nla_validate_parse: 3 callbacks suppressed [ 378.485594][ T7528] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.16176'. [ 378.614612][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16182'. [ 378.620751][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16182'. [ 378.634051][ T7547] [U]  [ 378.691423][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16186'. [ 378.695486][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16186'. [ 378.710787][ T7558] xt_time: unknown flags 0xf4 [ 378.983179][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16204'. [ 379.006742][ T5531] kernel read not supported for file /vcs (pid: 5531 comm: kworker/1:3) [ 379.061248][ T7605] tipc: Enabling not permitted [ 379.064052][ T7605] tipc: Enabling of bearer rejected, failed to enable media [ 379.136181][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16214'. [ 379.394812][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.591292][ T7655] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 380.542434][ T39] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 380.593226][ T7686] netlink: 'syz.4.16249': attribute type 2 has an invalid length. [ 380.594768][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16247'. [ 380.599349][ T7686] #{6c: entered promiscuous mode [ 380.650255][ T7681] veth9: entered promiscuous mode [ 380.706411][ T39] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 380.711710][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.714945][ T39] usb 10-1: Product: syz [ 380.716386][ T39] usb 10-1: Manufacturer: syz [ 380.718000][ T39] usb 10-1: SerialNumber: syz [ 380.721040][ T39] usb 10-1: config 0 descriptor?? [ 380.936598][ T39] usb 10-1: USB disconnect, device number 4 [ 381.526742][ T7730] vimc link validate: Scaler:src:4096x16 (0x33424752, 1, 0, 0, 4) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 381.677001][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.679775][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.686010][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.689057][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.058110][ T7764] overlayfs: conflicting lowerdir path [ 382.069221][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16287'. [ 382.074233][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16287'. [ 382.082109][ T7766] netlink: 'syz.0.16287': attribute type 18 has an invalid length. [ 382.391046][ T7803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.447617][ T7811] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 382.656773][ T7825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.771303][ T7825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.813948][ T7841] IPVS: Error connecting to the multicast addr [ 382.880941][ T7825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.952145][ T7825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.996154][ T7849] overlayfs: regular lower layers cannot follow data lower layers [ 383.117905][ T1196] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.134742][ T1196] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.146455][ T1196] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.177371][ T1196] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.335733][ T10] bridge0: entered promiscuous mode [ 383.487228][ T7887] can0: slcan on ptm0. [ 383.604042][ T7886] can0 (unregistered): slcan off ptm0. [ 383.865550][ T7933] __nla_validate_parse: 3 callbacks suppressed [ 383.865565][ T7933] netlink: 480 bytes leftover after parsing attributes in process `syz.5.16367'. [ 384.007228][ T7950] program syz.5.16373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.012252][ T7950] ata1.00: non-matching transfer count (8388608/133) [ 384.080751][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16377'. [ 384.221118][ T7973] netlink: 'syz.5.16384': attribute type 3 has an invalid length. [ 384.820573][ T8038] netlink: 348 bytes leftover after parsing attributes in process `syz.0.16416'. [ 385.508217][ T8103] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 386.285074][ T8132] netlink: 'syz.5.16453': attribute type 1 has an invalid length. [ 387.086422][ T8217] netlink: 'syz.3.16483': attribute type 6 has an invalid length. [ 387.333557][ T8230] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 387.962557][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16509'. [ 387.975198][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16509'. [ 388.031745][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 388.191684][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 388.200427][ T5893] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 388.206316][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.209836][ T5893] usb 9-1: Product: syz [ 388.211989][ T5893] usb 9-1: Manufacturer: syz [ 388.214511][ T5893] usb 9-1: SerialNumber: syz [ 388.226331][ T5893] usb 9-1: config 0 descriptor?? [ 388.237246][ T5893] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 388.240915][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 388.253159][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.257255][ T5893] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 388.260263][ T8316] netlink: 47 bytes leftover after parsing attributes in process `syz.5.16518'. [ 388.260291][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16518'. [ 388.267634][ T5893] usb 9-1: media controller created [ 388.278403][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.423958][ T5103] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 388.436987][ T8268] dvb-usb: bulk message failed: -22 (4/0) [ 388.456647][ T5893] cxusb: set interface failed [ 388.459606][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 388.490387][ T5893] DVB: Unable to find symbol mt352_attach() [ 388.493270][ T5893] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 388.542169][ T5893] rc_core: IR keymap rc-dvico-portable not found [ 388.545115][ T5893] Registered IR keymap rc-empty [ 388.548756][ T5893] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 388.555155][ T5893] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input54 [ 388.564006][ T5893] dvb-usb: schedule remote query interval to 100 msecs. [ 388.566520][ T5893] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 388.577502][ T5893] usb 9-1: USB disconnect, device number 2 [ 388.640566][ T5893] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 401.932267][ T40] audit: type=1800 audit(2000000490.335:22812): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.16543" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 402.191770][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.200255][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.210829][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.215341][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.221213][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.357872][ T220] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.443585][ T8481] netlink: 'syz.3.16556': attribute type 7 has an invalid length. [ 402.454984][ T8481] netlink: 'syz.3.16556': attribute type 8 has an invalid length. [ 402.473769][ T220] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.626537][ T220] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.760798][ T8534] bond2: (slave veth1_to_bridge): Device is not bonding slave [ 402.764488][ T8534] bond2: option active_slave: invalid value (veth1_to_bridge) [ 402.769299][ T8534] bond2 (unregistering): Released all slaves [ 402.794022][ T220] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.148972][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.153182][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.155485][ T8443] bridge_slave_0: entered allmulticast mode [ 403.158212][ T8443] bridge_slave_0: entered promiscuous mode [ 403.161865][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.164304][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.166836][ T8443] bridge_slave_1: entered allmulticast mode [ 403.169995][ T8443] bridge_slave_1: entered promiscuous mode [ 403.172864][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16576'. [ 403.197934][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16576'. [ 403.267248][ T220] dvmrp8: left allmulticast mode [ 403.269117][ T220] dvmrp9: left allmulticast mode [ 404.284307][ T5749] Bluetooth: hci2: command tx timeout [ 404.464726][ T8786] netlink: 'syz.5.16595': attribute type 58 has an invalid length. [ 404.467915][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16595'. [ 405.047436][ T220] bond0 (unregistering): Released all slaves [ 405.055186][ T220] bond1 (unregistering): Released all slaves [ 405.068218][ T220] bond2 (unregistering): Released all slaves [ 405.077067][ T220] bond3 (unregistering): Released all slaves [ 405.087689][ T220] bond4 (unregistering): Released all slaves [ 405.097725][ T220] bond5 (unregistering): Released all slaves [ 405.109836][ T220] bond6 (unregistering): Released all slaves [ 405.130591][ T220] bond7 (unregistering): Released all slaves [ 405.144906][ T220] bond8 (unregistering): Released all slaves [ 405.168818][ T8764] kthread_run failed with err -4 [ 405.192169][ T8443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.209178][ T8443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.281310][ T8443] team0: Port device team_slave_0 added [ 405.287391][ T8443] team0: Port device team_slave_1 added [ 405.343758][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.354097][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.373449][ T8443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.382412][ T220] tipc: Disabling bearer [ 405.403803][ T220] tipc: Left network mode [ 405.407892][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.411033][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.422832][ T8443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.444339][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 405.516001][ T8443] hsr_slave_0: entered promiscuous mode [ 405.523308][ T8443] hsr_slave_1: entered promiscuous mode [ 405.787234][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 405.974972][ T40] audit: type=1800 audit(2000000494.385:22813): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16619" name="file0" dev="tmpfs" ino=2315 res=0 errno=0 [ 406.048052][ T8443] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.060594][ T8443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.064172][ T8443] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 406.069147][ T8443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.097758][ T8443] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 406.112533][ T8443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.122543][ T8443] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 406.140357][ T8443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.152869][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 406.288540][ T9065] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 406.291918][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.319210][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.344639][ T8443] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.345456][ T9070] xt_l2tp: unknown flags: 51 [ 406.357052][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.360367][ T5021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.362689][ T5749] Bluetooth: hci2: command tx timeout [ 406.395798][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.398441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.414811][ T220] hsr_slave_0: left promiscuous mode [ 406.434543][ T220] hsr_slave_1: left promiscuous mode [ 406.700338][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 407.121114][ T8443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.129111][ T220] IPVS: stop unused estimator thread 0... [ 407.195000][ T9161] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16654'. [ 407.198674][ T9161] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16654'. [ 407.396458][ T8443] veth0_vlan: entered promiscuous mode [ 407.467517][ T8443] veth1_vlan: entered promiscuous mode [ 407.614512][ T8443] veth0_macvtap: entered promiscuous mode [ 407.660573][ T8443] veth1_macvtap: entered promiscuous mode [ 407.729250][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.754538][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.772399][ T9178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.777099][ T9178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.788430][ T9178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.794069][ T9178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.947110][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.949983][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.004049][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.006520][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.224704][ T9268] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16685'. [ 408.230307][ T9268] netlink: 43 bytes leftover after parsing attributes in process `syz.4.16685'. [ 408.234287][ T9268] netlink: 'syz.4.16685': attribute type 6 has an invalid length. [ 408.237134][ T9268] netlink: 'syz.4.16685': attribute type 5 has an invalid length. [ 408.239627][ T9268] netlink: 43 bytes leftover after parsing attributes in process `syz.4.16685'. [ 408.291988][ T10] kernel read not supported for file /bluetooth/6lowpan_control (pid: 10 comm: kworker/0:1) [ 408.321462][ T9286] trusted_key: encrypted_key: key user:syz not found [ 408.374794][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16697'. [ 408.442204][ T5749] Bluetooth: hci2: command tx timeout [ 408.536217][ T9326] tipc: Started in network mode [ 408.537986][ T9326] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 408.541069][ T9326] tipc: Enabling of bearer rejected, failed to enable media [ 408.918692][ T9349] hid-generic 0003:0627:0001.0001: pid 9349 passed too short report [ 408.932112][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 408.932728][ T9376] random: crng reseeded on system resumption [ 409.057049][ T9382] can0: slcan on ttynull. [ 409.084283][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.089913][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.093465][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.096541][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 409.100117][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 409.106271][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.109837][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.113237][ T10] usb 9-1: Product: syz [ 409.114885][ T10] usb 9-1: Manufacturer: syz [ 409.125290][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 409.127587][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 409.134056][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 409.136233][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 409.143131][ T9381] can0 (unregistered): slcan off ttynull. [ 409.323654][ T856] IPVS: starting estimator thread 0... [ 409.339110][ T1039] usb 9-1: USB disconnect, device number 3 [ 409.421847][ T9406] IPVS: using max 44 ests per chain, 105600 per kthread [ 409.572011][ T9436] team0 (unregistering): Port device team_slave_0 removed [ 409.579360][ T9436] team0 (unregistering): Port device team_slave_1 removed [ 410.137239][ T9482] tipc: Enabled bearer , priority 10 [ 410.474336][ T9526] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16771'. [ 410.522029][ T5749] Bluetooth: hci2: command tx timeout [ 410.548576][ T9542] netlink: 810 bytes leftover after parsing attributes in process `syz.6.16775'. [ 410.852615][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16789'. [ 410.892010][ T9577] tipc: Enabling of bearer rejected, failed to enable media [ 410.959531][ T9579] IPVS: persistence engine module ip_vs_pe_sir not found [ 411.906124][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16809'. [ 412.251409][ T9693] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 413.297985][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16845'. [ 413.880130][ T9832] netlink: 'syz.4.16885': attribute type 21 has an invalid length. [ 413.885190][ T9832] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.889083][ T9832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.892187][ T9832] IPv6: NLM_F_CREATE should be set when creating new route [ 413.895025][ T9832] IPv6: NLM_F_CREATE should be set when creating new route [ 413.897371][ T9832] IPv6: NLM_F_CREATE should be set when creating new route [ 413.903399][ T9832] netlink: 'syz.4.16885': attribute type 21 has an invalid length. [ 413.906751][ T9832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.912308][ T9836] netlink: 220 bytes leftover after parsing attributes in process `syz.3.16886'. [ 413.916587][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16886'. [ 413.924351][ T9840] netlink: 'syz.6.16887': attribute type 10 has an invalid length. [ 413.941941][ T9840] netlink: 152 bytes leftover after parsing attributes in process `syz.6.16887'. [ 414.110950][ T9869] : entered promiscuous mode [ 414.173559][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.197139][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16905'. [ 414.204156][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16906'. [ 414.204873][ T9889] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16905'. [ 414.659612][ T9931] loop4: detected capacity change from 0 to 7 [ 414.688848][ T9931] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 414.690822][ T9931] loop4: partition table partially beyond EOD, truncated [ 414.697027][ T9931] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 414.751192][ T8430] udevd[8430]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 414.767982][ T9943] netlink: 212372 bytes leftover after parsing attributes in process `syz.5.16924'. [ 414.790394][ T9943] openvswitch: netlink: Message has 6 unknown bytes. [ 414.825645][ T9948] 9pnet_fd: p9_fd_create_tcp (9948): problem binding to privport [ 415.661842][T10009] netlink: 100 bytes leftover after parsing attributes in process `syz.3.16942'. [ 415.665018][T10009] netlink: 100 bytes leftover after parsing attributes in process `syz.3.16942'. [ 416.465356][T10098] tipc: Resetting bearer [ 416.958918][T10158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.084305][T10171] binder: 10170:10171 ioctl c018620c 80000240 returned -22 [ 417.403039][T10210] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 418.496905][T10310] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 418.845087][T10367] xt_socket: unknown flags 0xd0 [ 418.975409][T10386] usb usb7: usbfs: process 10386 (syz.5.17061) did not claim interface 0 before use [ 419.702950][ T5531] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 419.766054][T10485] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 419.770758][T10485] ALSA: mixer_oss: invalid index 137438 [ 419.862254][ T5531] usb 10-1: Using ep0 maxpacket: 8 [ 419.866845][ T5531] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 419.870598][ T5531] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 419.875308][ T5531] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 419.879183][ T5531] usb 10-1: config 250 has no interface number 0 [ 419.882371][ T5531] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 419.888534][ T5531] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 419.893195][ T5531] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.898070][ T5531] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 419.903168][ T5531] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 419.909340][ T5531] usb 10-1: config 250 interface 228 has no altsetting 0 [ 419.914673][ T5531] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 419.918745][ T5531] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 419.923052][ T5531] usb 10-1: Product: syz [ 419.925080][ T5531] usb 10-1: SerialNumber: syz [ 419.936682][ T5531] hub 10-1:250.228: bad descriptor, ignoring hub [ 419.940936][T10501] __nla_validate_parse: 1 callbacks suppressed [ 419.940956][T10501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17100'. [ 419.941924][ T5531] hub 10-1:250.228: probe with driver hub failed with error -5 [ 419.992487][T10505] netlink: 'syz.6.17101': attribute type 15 has an invalid length. [ 420.001703][T10505] netlink: 666 bytes leftover after parsing attributes in process `syz.6.17101'. [ 420.142930][ T5531] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 420.452212][ T856] usb 10-1: USB disconnect, device number 5 [ 420.459041][ T856] usblp0: removed [ 420.823357][T10560] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 420.972607][T10581] Invalid ELF header len 9 [ 421.064049][T10597] netlink: 136 bytes leftover after parsing attributes in process `syz.5.17129'. [ 421.067038][T10597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 421.204904][ C1] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 421.208538][ C1] sr 2:0:0:0: [sr0] tag#17 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 421.355160][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17145'. [ 421.409913][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17148'. [ 421.419314][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17150'. [ 421.423140][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17150'. [ 421.428551][T10652] netlink: 'syz.6.17150': attribute type 14 has an invalid length. [ 421.431456][T10652] netlink: 'syz.6.17150': attribute type 12 has an invalid length. [ 421.479894][T10663] netlink: 39 bytes leftover after parsing attributes in process `syz.6.17154'. [ 421.485122][T10663] netlink: 1 bytes leftover after parsing attributes in process `syz.6.17154'. [ 421.964431][T10737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17177'. [ 422.377250][T10763] netlink: 'syz.5.17195': attribute type 7 has an invalid length. [ 422.379989][T10763] netlink: 'syz.5.17195': attribute type 8 has an invalid length. [ 422.989591][T10811] netlink: 'syz.3.17209': attribute type 1 has an invalid length. [ 422.993031][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.584621][T10838] Invalid logical block size (53355) [ 423.746949][T10847] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 425.110989][T10989] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 425.410616][T11035] __nla_validate_parse: 7 callbacks suppressed [ 425.410641][T11035] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17287'. [ 425.417813][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17287'. [ 425.829938][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17299'. [ 426.007939][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17313'. [ 426.199541][T11128] vivid-000: disconnect [ 426.202652][T11127] vivid-000: reconnect [ 426.423702][T11159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.053463][T11191] can0: slcan on ptm0. [ 427.438243][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17351'. [ 427.438609][T11189] can0 (unregistered): slcan off ptm0. [ 427.442676][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17351'. [ 427.447962][T11205] netlink: 'syz.3.17351': attribute type 11 has an invalid length. [ 427.451366][T11205] netlink: 'syz.3.17351': attribute type 12 has an invalid length. [ 427.714053][T11250] digital: digital_start_poll: Unknown protocol [ 428.389788][ T40] audit: type=1326 audit(2000000516.795:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.4.17393" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3f7c code=0x0 [ 428.542675][T11337] binder_alloc: binder_alloc_mmap_handler: 11336 80ffd000-81000000 already mapped failed -16 [ 428.675499][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17401'. [ 428.681042][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17401'. [ 428.781171][ T40] audit: type=1326 audit(2000000517.185:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.5.17381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7fc00000 [ 428.816714][T11364] netlink: 'syz.6.17406': attribute type 1 has an invalid length. [ 428.819346][T11364] netlink: 'syz.6.17406': attribute type 2 has an invalid length. [ 428.823904][T11364] netlink: 'syz.6.17406': attribute type 2 has an invalid length. [ 429.020704][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17418'. [ 430.369200][T11465] Cannot find del_set index 14804 as target [ 430.565548][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17453'. [ 430.570652][T11491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17453'. [ 430.626229][T11499] netlink: 766 bytes leftover after parsing attributes in process `syz.5.17457'. [ 430.837372][ T5531] kernel write not supported for file /amidi2 (pid: 5531 comm: kworker/1:3) [ 430.885787][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17477'. [ 430.974058][T11561] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 431.034511][T11570] max out of range [ 431.228717][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17498'. [ 431.244009][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17500'. [ 431.340514][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17506'. [ 431.344913][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17506'. [ 431.349548][T11617] netlink: 'syz.5.17506': attribute type 19 has an invalid length. [ 431.356382][T11617] netlink: 'syz.5.17506': attribute type 20 has an invalid length. [ 432.101686][ T5531] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 432.265741][ T5531] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.271007][ T5531] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.274128][ T5531] usb 9-1: Product: syz [ 432.275472][ T5531] usb 9-1: Manufacturer: syz [ 432.277154][ T5531] usb 9-1: SerialNumber: syz [ 432.290802][ T5531] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.322412][ T5531] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 432.566384][T11716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17545'. [ 433.412212][ T5531] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 433.417466][ T5531] ath9k_htc: Failed to initialize the device [ 433.445305][ T5531] usb 9-1: ath9k_htc: USB layer deinitialized [ 434.868122][ T856] usb 9-1: USB disconnect, device number 4 [ 435.454115][T11943] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17622'. [ 435.460536][T11929] bond1: (slave bond_slave_1): Device is not our slave [ 435.464064][T11929] bond1: option active_slave: invalid value (bond_slave_1) [ 435.470113][T11929] bond1 (unregistering): Released all slaves [ 436.106508][T11903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 436.110282][T11903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 436.141361][T11903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 436.154746][T11903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.161346][T11903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.167164][T11903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.170872][T11903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.175024][T11903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.183759][T11903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.273784][T12066] __nla_validate_parse: 1 callbacks suppressed [ 436.273802][T12066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17648'. [ 436.290752][ T1039] IPVS: starting estimator thread 0... [ 436.317654][T12072] ptrace attach of "/syz-executor exec"[12074] was attempted by "/syz-executor exec"[12072] [ 436.392445][T12070] IPVS: using max 42 ests per chain, 100800 per kthread [ 436.422473][ T4531] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 436.572487][ T4531] usb 11-1: Using ep0 maxpacket: 16 [ 436.578246][ T4531] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 436.581286][ T4531] usb 11-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.586374][ T4531] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.593266][ T4531] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 436.602439][ T4531] usb 11-1: config 0 interface 0 has no altsetting 0 [ 436.610379][ T4531] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 436.616975][ T4531] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.620733][ T4531] usb 11-1: Product: syz [ 436.623636][ T4531] usb 11-1: Manufacturer: syz [ 436.625461][ T4531] usb 11-1: SerialNumber: syz [ 436.634424][ T4531] usb 11-1: config 0 descriptor?? [ 436.867525][ T4531] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input56 [ 436.891649][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.899164][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.910219][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.940143][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.994411][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.994548][T12140] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 437.021973][ T8469] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 437.027779][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 437.042725][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 437.047047][ T5137] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 437.122430][T12042] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 437.139471][ T856] usb 11-1: USB disconnect, device number 2 [ 437.194161][T12169] bond14: (slave bond_slave_1): Device is not our slave [ 437.196877][T12169] bond14: option active_slave: invalid value (bond_slave_1) [ 437.200360][T12169] bond14 (unregistering): Released all slaves [ 437.334478][T12246] xt_l2tp: missing protocol rule (udp|l2tpip) [ 437.412035][ T5749] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.480018][T12267] [U]  [ 437.481352][T12267] [U] K{ [ 437.484592][T12267] [U] t 1ŠFfˊ`GJgo/mC [ 437.488075][T12267] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 437.500643][T12267] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 437.506671][T12267] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 437.523201][T12267] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 437.532956][T12267] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 437.538119][T12267] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 437.542982][T12267] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 437.582556][ T856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 437.587199][T12267] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 437.587310][ T856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 437.591715][T12267] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 437.596461][ T856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 437.599876][T12267] [U] 22Ʃx?0;3u [ 437.604972][T12267] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 437.605128][ T856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 437.614598][T12267] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 437.620671][ T856] rtc rtc0: __rtc_set_alarm: err=-22 [ 437.620682][T12267] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 437.626334][T12267] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 437.628904][T12267] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 437.634693][T12267] [U] ec [ 437.636217][T12267] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 437.687930][T12266] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 438.014780][T12346] netlink: 'syz.5.17714': attribute type 4 has an invalid length. [ 438.018612][T12346] netlink: 17 bytes leftover after parsing attributes in process `syz.5.17714'. [ 438.212337][ T5749] Bluetooth: hci2: command 0x0405 tx timeout [ 438.214871][ T5103] Bluetooth: hci0: command 0x0401 tx timeout [ 438.522763][T12424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17743'. [ 438.529812][T12424] netlink: 'syz.3.17743': attribute type 6 has an invalid length. [ 438.535355][T12424] netlink: 'syz.3.17743': attribute type 5 has an invalid length. [ 438.541786][T12424] netlink: 'syz.3.17743': attribute type 4 has an invalid length. [ 438.977869][ T5749] Bluetooth: hci1: sending frame failed (-49) [ 438.984853][ T5103] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 439.269122][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17765'. [ 439.321274][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17769'. [ 439.482730][ T5103] Bluetooth: hci4: command 0x0c1a tx timeout [ 440.281841][ T5749] Bluetooth: hci0: command 0x0401 tx timeout [ 440.281879][ T7027] Bluetooth: hci2: command 0x0405 tx timeout [ 440.552684][T12624] raw_sendmsg: syz.4.17802 forgot to set AF_INET. Fix it! [ 440.823705][T12664] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 440.826220][T12664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.949102][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17819'. [ 441.157873][T12687] netlink: 'syz.5.17824': attribute type 32 has an invalid length. [ 441.160485][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17824'. [ 441.198018][T12687] bond1: Setting coupled_control to off (0) [ 441.493183][T12755] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 441.532983][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17840'. [ 441.574584][ T7027] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.305839][T12850] netlink: 'syz.5.17870': attribute type 2 has an invalid length. [ 442.362503][ T7027] Bluetooth: hci2: command 0x0405 tx timeout [ 442.372202][ T7027] Bluetooth: hci0: command 0x0401 tx timeout [ 442.377790][ T40] audit: type=1326 audit(2000000530.785:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.402077][ T40] audit: type=1326 audit(2000000530.785:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.421052][ T40] audit: type=1326 audit(2000000530.785:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.450246][ T40] audit: type=1326 audit(2000000530.785:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.472908][ T40] audit: type=1326 audit(2000000530.785:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.482113][ T40] audit: type=1326 audit(2000000530.785:22821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.498271][T12879] CIFS: VFS: UNC: path must begin with // or \\ [ 442.500519][T12879] CIFS: VFS: Malformed UNC in devname [ 442.501084][ T40] audit: type=1326 audit(2000000530.785:22822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.529662][ T40] audit: type=1326 audit(2000000530.785:22823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.532126][T12872] [U] k [ 442.538150][ T40] audit: type=1326 audit(2000000530.785:22824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.548437][ T40] audit: type=1326 audit(2000000530.785:22825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.3.17871" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 442.665978][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17880'. [ 443.036528][T12936] netlink: 'syz.3.17897': attribute type 83 has an invalid length. [ 443.122561][T12943] netlink: 'syz.3.17900': attribute type 3 has an invalid length. [ 443.298463][T12960] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 444.439920][ T8430] udevd[8430]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 444.451691][ T7027] Bluetooth: hci2: command 0x0405 tx timeout [ 444.538282][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17959'. [ 444.681206][T13137] tipc: Enabling of bearer rejected, failed to enable media [ 445.145799][T13187] netlink: 'syz.5.17983': attribute type 9 has an invalid length. [ 445.148512][T13187] netlink: 'syz.5.17983': attribute type 7 has an invalid length. [ 445.151259][T13187] netlink: 'syz.5.17983': attribute type 8 has an invalid length. [ 445.574407][T13223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17998'. [ 446.004834][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18013'. [ 446.008205][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18013'. [ 446.047149][ T7027] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 446.585138][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18026'. [ 446.643619][T13316] tipc: Enabling of bearer rejected, failed to enable media [ 446.879090][T13339] fuse: Invalid rootmode [ 446.993955][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18044'. [ 447.522863][ T9] kernel write not supported for file /radio5 (pid: 9 comm: kworker/0:0) [ 447.632711][T13466] smc: net device wlan0 erased user defined pnetid SYZ0 [ 447.794035][T13488] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18097'. [ 447.797411][T13488] netlink: 'syz.4.18097': attribute type 10 has an invalid length. [ 447.998584][T13518] comedi comedi3: unsupported base address 0x4f23 [ 448.146051][T13547] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 448.274791][T13570] binder: 13569:13570 ioctl c0306201 80000080 returned -22 [ 448.326933][T13580] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 448.635595][T13606] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 448.636320][T13605] IPVS: stopping backup sync thread 13606 ... [ 448.689323][T13609] sctp: [Deprecated]: syz.6.18140 (pid 13609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.689323][T13609] Use struct sctp_sack_info instead [ 448.732943][T13612] [U] V3Fپ"S/4:XTZWTLW= [ 448.735965][T13612] [U] J"E:" [ 448.814264][T13621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.857534][T13623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18145'. [ 448.972360][T13629] tipc: Started in network mode [ 448.974393][T13629] tipc: Node identity 9, cluster identity 4711 [ 448.976631][T13629] tipc: Node number set to 9 [ 449.087023][T13636] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.18150'. [ 449.090990][T13636] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 449.251134][T13662] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 449.288332][ T7027] Bluetooth: hci2: unexpected event for opcode 0x203c [ 449.494506][T13692] sctp: [Deprecated]: syz.4.18168 (pid 13692) Use of int in max_burst socket option. [ 449.494506][T13692] Use struct sctp_assoc_value instead [ 449.502323][ T40] audit: type=1326 audit(2000000537.915:22826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.512911][ T40] audit: type=1326 audit(2000000537.915:22827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.523458][ T40] audit: type=1326 audit(2000000537.925:22828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.533802][ T40] audit: type=1326 audit(2000000537.945:22829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 449.536768][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18171'. [ 449.544308][ T40] audit: type=1326 audit(2000000537.945:22830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.549323][T13701] netlink: 'syz.4.18171': attribute type 5 has an invalid length. [ 449.556900][ T40] audit: type=1326 audit(2000000537.945:22831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.558979][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18171'. [ 449.573534][ T40] audit: type=1326 audit(2000000537.955:22832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.683637][ T40] audit: type=1326 audit(2000000538.095:22833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.690636][ T40] audit: type=1326 audit(2000000538.095:22834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef98 code=0x7ffc0000 [ 449.697630][ T40] audit: type=1326 audit(2000000538.095:22835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.5.18169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 449.757962][T13712] IPVS: stopping backup sync thread 12755 ... [ 450.550704][T13759] pimreg: entered allmulticast mode [ 450.805203][T13774] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 450.944809][T13792] [U]  [ 450.945711][T13792] [U] K{ [ 450.946959][T13792] [U] T 1ŠFFˊ`GJǘGO/MC [ 450.949465][T13792] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 450.954670][T13792] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 450.958492][T13792] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 450.971159][T13792] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 450.979108][T13792] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 450.982866][T13792] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 450.986889][T13792] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 451.023397][T13792] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 451.028153][T13792] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 451.034578][T13792] [U] 22Ʃ۩X?0;3U [ 451.036906][T13792] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 451.047668][T13792] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 451.050764][T13792] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 451.054511][T13792] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 451.056873][T13792] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 451.061154][T13792] [U] EC [ 451.062969][T13792] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 451.080208][T13791] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 451.477492][T13836] tmpfs: Cannot change global quota limit on remount [ 451.598105][T13845] sg_read: process 742 (syz.6.18221) changed security contexts after opening file descriptor, this is not allowed. [ 452.123094][T13873] gtp0: entered allmulticast mode [ 452.129848][T13877] netlink: 'syz.5.18231': attribute type 1 has an invalid length. [ 452.129891][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18231'. [ 452.332379][T13883] netlink: 'syz.5.18234': attribute type 14 has an invalid length. [ 452.449395][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18236'. [ 452.449423][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18236'. [ 452.740310][T13946] pimreg: entered allmulticast mode [ 453.957284][T14048] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 454.115985][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18295'. [ 454.122764][T14067] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18295'. [ 454.198695][T14082] netlink: 27 bytes leftover after parsing attributes in process `syz.3.18301'. [ 454.455637][T14103] netlink: 68 bytes leftover after parsing attributes in process `syz.6.18308'. [ 454.458690][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18308'. [ 454.670654][T14118] netlink: 'syz.6.18313': attribute type 11 has an invalid length. [ 454.674205][T14118] netlink: 199788 bytes leftover after parsing attributes in process `syz.6.18313'. [ 454.893873][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 454.893886][ T40] audit: type=1326 audit(2000000543.305:22838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.905469][ T40] audit: type=1326 audit(2000000543.315:22839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.917079][ T40] audit: type=1326 audit(2000000543.325:22840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 454.930201][ T40] audit: type=1326 audit(2000000543.325:22841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.952067][ T40] audit: type=1326 audit(2000000543.325:22842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.961425][ T40] audit: type=1326 audit(2000000543.325:22843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.968661][ T40] audit: type=1326 audit(2000000543.325:22844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 454.975733][ T40] audit: type=1326 audit(2000000543.325:22845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.983633][ T40] audit: type=1326 audit(2000000543.325:22846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 454.983660][ T40] audit: type=1326 audit(2000000543.335:22847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.18319" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 455.066734][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18327'. [ 456.061960][ T842] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 456.212244][ T842] usb 9-1: Using ep0 maxpacket: 32 [ 456.215538][ T842] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 456.215556][ T842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.215566][ T842] usb 9-1: Product: syz [ 456.215574][ T842] usb 9-1: Manufacturer: syz [ 456.215581][ T842] usb 9-1: SerialNumber: syz [ 456.217642][ T842] usb 9-1: config 0 descriptor?? [ 456.230169][ T842] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 456.230232][ T842] dvb-usb: bulk message failed: -22 (4/0) [ 456.230262][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 456.230307][ T842] dvb-usb: bulk message failed: -22 (5/0) [ 456.242838][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 456.245333][ T842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 456.250528][ T842] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 456.250562][ T842] usb 9-1: media controller created [ 456.256027][ T842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.261407][ T842] usb 9-1: selecting invalid altsetting 3 [ 456.261420][ T842] ttusb2: set interface to alts=3 failed [ 456.292863][ T842] DVB: Unable to find symbol tda10086_attach() [ 456.292875][ T842] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 456.293461][ T842] dvb-usb: bulk message failed: -22 (4/0) [ 456.302860][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 456.302924][ T842] dvb-usb: bulk message failed: -22 (5/0) [ 456.302932][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 456.302957][ T842] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 456.446844][T14272] dvb-usb: bulk message failed: -22 (7/0) [ 456.449212][T14272] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 456.453208][T14272] ttusb2: i2c transfer failed. [ 456.455936][ T5893] usb 9-1: USB disconnect, device number 5 [ 456.480599][ T5893] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 456.528975][T14326] comedi comedi1: dt2817: I/O base address or length out of range [ 457.382760][T14404] devpts: Bad value for 'max' [ 457.432794][T14407] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 457.541668][ T5894] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 457.701770][ T5894] usb 9-1: Using ep0 maxpacket: 32 [ 457.705399][ T5894] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.708992][ T5894] usb 9-1: config 0 has no interface number 0 [ 457.713361][ T5894] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 457.716659][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.720075][ T5894] usb 9-1: Product: syz [ 457.722697][ T5894] usb 9-1: Manufacturer: syz [ 457.725925][ T5894] usb 9-1: SerialNumber: syz [ 457.730852][ T5894] usb 9-1: config 0 descriptor?? [ 457.740754][ T5894] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 457.759479][ T5894] usb 9-1: selecting invalid altsetting 1 [ 457.762158][ T5894] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 457.763630][T14430] tipc: Enabling of bearer rejected, failed to enable media [ 457.777554][ T5894] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 457.783115][ T5894] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 457.786694][ T5894] usb 9-1: media controller created [ 457.809712][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.203070][T14485] program syz.3.18435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.266155][T14491] can0: slcan on ttyprintk. [ 458.401835][T14489] can0 (unregistered): slcan off ttyprintk. [ 458.858555][T14537] __nla_validate_parse: 3 callbacks suppressed [ 458.858577][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18455'. [ 458.872853][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18456'. [ 458.940476][ T5894] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 458.949830][ T5894] zl10353_read_register: readreg error (reg=127, ret==-110) [ 458.950000][T14393] usb 9-1: dvb_usb_ce6230: I2C read not implemented [ 458.986782][ T5894] usb 9-1: USB disconnect, device number 6 [ 459.369397][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18468'. [ 459.660724][T14618] program syz.4.18478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.233232][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18495'. [ 460.237928][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18495'. [ 460.347368][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18498'. [ 460.467808][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18504'. [ 460.470796][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18504'. [ 460.474935][T14699] netlink: 'syz.6.18504': attribute type 13 has an invalid length. [ 460.965878][T14752] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 460.965878][T14752] program syz.3.18525 not setting count and/or reply_len properly [ 460.987598][ T5531] kernel write not supported for file /uinput (pid: 5531 comm: kworker/1:3) [ 461.116726][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 461.116742][ T40] audit: type=1326 audit(2000000549.525:22851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.4.18533" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3f7c code=0x0 [ 461.320876][T14800] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 461.961811][ T5531] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 462.111606][ T5531] usb 11-1: Using ep0 maxpacket: 32 [ 462.115434][ T5531] usb 11-1: unable to get BOS descriptor or descriptor too short [ 462.118930][ T5531] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 462.122190][ T5531] usb 11-1: config 8 has no interface number 0 [ 462.124218][ T5531] usb 11-1: config 8 interface 188 has no altsetting 0 [ 462.132382][ T5531] usb 11-1: string descriptor 0 read error: -22 [ 462.136915][ T5531] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 462.140945][ T5531] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.152153][ T5531] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 462.159158][ T5531] dw2102: su3000_power_ctrl: 1, initialized 0 [ 462.161089][ T5531] dvb-usb: bulk message failed: -22 (2/0) [ 462.173226][ T5531] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.178107][ T5531] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 462.182640][ T5531] usb 11-1: media controller created [ 462.184750][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.186866][ T5531] dw2102: i2c transfer failed. [ 462.188887][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.196129][ T5531] dw2102: i2c transfer failed. [ 462.198633][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.201118][ T5531] dw2102: i2c transfer failed. [ 462.208594][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.211067][ T5531] dw2102: i2c transfer failed. [ 462.211112][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.216100][ T5531] dw2102: i2c transfer failed. [ 462.216123][ T5531] dvb-usb: bulk message failed: -22 (6/0) [ 462.216134][ T5531] dw2102: i2c transfer failed. [ 462.216141][ T5531] dvb-usb: MAC address: 02:02:02:02:02:02 [ 462.226469][ T5531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.233648][T14886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.253032][ T5531] dvb-usb: bulk message failed: -22 (3/0) [ 462.255538][ T5531] dw2102: command 0x0e transfer failed. [ 462.258376][ T5531] dvb-usb: bulk message failed: -22 (3/0) [ 462.260733][ T5531] dw2102: command 0x0e transfer failed. [ 462.299776][T14890] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 462.299776][T14890] program syz.3.18575 not setting count and/or reply_len properly [ 462.415907][ T40] audit: type=1326 audit(2000000550.825:22852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.425011][ T40] audit: type=1326 audit(2000000550.825:22853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.435241][ T40] audit: type=1326 audit(2000000550.825:22854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.452540][ T40] audit: type=1326 audit(2000000550.825:22855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.465383][ T40] audit: type=1326 audit(2000000550.825:22856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.481452][ T40] audit: type=1326 audit(2000000550.825:22857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14906 comm="syz.5.18581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 462.571903][ T5531] dvb-usb: bulk message failed: -22 (3/0) [ 462.577113][ T5531] dw2102: command 0x0e transfer failed. [ 462.579335][ T5531] dvb-usb: bulk message failed: -22 (3/0) [ 462.587205][ T5531] dw2102: command 0x0e transfer failed. [ 462.588962][ T5531] dvb-usb: bulk message failed: -22 (1/0) [ 462.590998][ T5531] dw2102: command 0x51 transfer failed. [ 462.596819][T14834] dvb-usb: bulk message failed: -22 (5/0) [ 462.599867][T14834] dw2102: i2c transfer failed. [ 462.627369][ T5531] DVB: Unable to find symbol ds3000_attach() [ 462.629838][ T5531] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 462.684885][T14943] netlink: 'syz.5.18596': attribute type 1 has an invalid length. [ 462.687574][T14943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.691586][ T5531] rc_core: IR keymap rc-su3000 not found [ 462.694445][ T5531] Registered IR keymap rc-empty [ 462.700402][ T5531] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 462.706375][ T5531] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input59 [ 462.712263][ T5531] dvb-usb: schedule remote query interval to 150 msecs. [ 462.714921][ T5531] dw2102: su3000_power_ctrl: 0, initialized 1 [ 462.717270][ T5531] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 462.722708][ T5531] usb 11-1: USB disconnect, device number 3 [ 462.826690][ T5531] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 463.146660][T14970] macsec1: entered promiscuous mode [ 463.150730][T14970] macsec1: entered allmulticast mode [ 463.206884][T14987] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 463.218187][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18608'. [ 463.225725][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18608'. [ 463.243161][T14987] bond1 (unregistering): Released all slaves [ 463.620204][T15115] batadv0: entered promiscuous mode [ 463.625980][T15115] vlan2: entered promiscuous mode [ 464.031973][ T9183] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.038710][ T9183] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.046972][ T9183] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.051083][ T9183] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.140601][ T856] libceph: connect (1)[c::]:6789 error -101 [ 464.143352][ T856] libceph: mon0 (1)[c::]:6789 connect error [ 464.216119][ T40] audit: type=1326 audit(2000000552.625:22858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15187 comm="syz.5.18663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 464.232229][ T40] audit: type=1326 audit(2000000552.625:22859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15187 comm="syz.5.18663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 464.240621][ T40] audit: type=1326 audit(2000000552.625:22860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15187 comm="syz.5.18663" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 464.415177][ T856] libceph: connect (1)[c::]:6789 error -101 [ 464.421727][ T856] libceph: mon0 (1)[c::]:6789 connect error [ 464.914188][T15169] ceph: No mds server is up or the cluster is laggy [ 464.932109][ T856] libceph: connect (1)[c::]:6789 error -101 [ 464.934524][ T856] libceph: mon0 (1)[c::]:6789 connect error [ 465.388961][T15247] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 465.426427][T15287] __nla_validate_parse: 4 callbacks suppressed [ 465.426447][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18677'. [ 465.427760][T15247] bond2 (unregistering): Released all slaves [ 465.441072][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18677'. [ 465.650776][ T1039] kernel write not supported for file /dsp1 (pid: 1039 comm: kworker/1:2) [ 465.711709][ T5531] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 465.815701][T15354] netlink: 116 bytes leftover after parsing attributes in process `syz.4.18692'. [ 465.863558][ T5531] usb 11-1: config 0 has no interfaces? [ 465.868442][ T5531] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 465.872967][ T5531] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.876881][ T5531] usb 11-1: Product: syz [ 465.878970][ T5531] usb 11-1: Manufacturer: syz [ 465.881238][ T5531] usb 11-1: SerialNumber: syz [ 465.896795][ T5531] usb 11-1: config 0 descriptor?? [ 465.927504][T15369] vlan4: entered allmulticast mode [ 465.930191][T15369] bond0: entered allmulticast mode [ 465.935179][T15369] bond_slave_0: entered allmulticast mode [ 465.937437][T15369] bond_slave_1: entered allmulticast mode [ 465.949984][T15374] overlay: Unknown parameter '/6M߶}5&IG$ΆPAHB-\,Hftd&C)ZVF*kdՠQcTiw UEpΛS2 p* W~xVAg]XC4M3 !' [ 466.110984][ T5531] usb 11-1: USB disconnect, device number 4 [ 466.328852][T15402] tipc: New replicast peer: 0.0.0.0 [ 466.334390][T15402] tipc: Enabled bearer , priority 5 [ 466.449198][T15410] netlink: 344 bytes leftover after parsing attributes in process `syz.5.18709'. [ 466.885636][T15429] netlink: 'syz.5.18717': attribute type 12 has an invalid length. [ 466.888270][T15429] netlink: 'syz.5.18717': attribute type 29 has an invalid length. [ 466.890993][T15429] netlink: 148 bytes leftover after parsing attributes in process `syz.5.18717'. [ 466.894396][T15429] netlink: 59 bytes leftover after parsing attributes in process `syz.5.18717'. [ 467.141639][ T856] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 467.303042][ T856] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 467.311566][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.314533][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.317084][T15463] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 467.318108][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.326845][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.330218][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.333736][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.336586][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.344588][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.348109][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.348424][T15466] netlink: 268 bytes leftover after parsing attributes in process `syz.4.18732'. [ 467.350969][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.353940][T15466] netlink: 136 bytes leftover after parsing attributes in process `syz.4.18732'. [ 467.356832][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.360561][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18732'. [ 467.364062][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.365423][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.365447][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.365461][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.367105][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.383849][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.387384][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.390300][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.393560][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.397202][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.406325][ T856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.410142][ T856] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.415086][ T856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.420088][ T856] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 467.424253][ T856] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 467.427972][ T856] usb 11-1: Product: syz [ 467.429700][ T856] usb 11-1: Manufacturer: syz [ 467.431752][ T856] usb 11-1: SerialNumber: syz [ 467.436659][ T856] usb 11-1: config 0 descriptor?? [ 467.452688][ T856] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 467.514271][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 467.514283][ T40] audit: type=1326 audit(2000000002.479:22865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.527409][ T40] audit: type=1326 audit(2000000002.479:22866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.545421][ T40] audit: type=1326 audit(2000000002.479:22867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.553858][ T40] audit: type=1326 audit(2000000002.479:22868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.560873][ T40] audit: type=1326 audit(2000000002.479:22869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.569481][ T40] audit: type=1326 audit(2000000002.479:22870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.577018][ T40] audit: type=1326 audit(2000000002.479:22871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.588804][ T40] audit: type=1326 audit(2000000002.479:22872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.18737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 467.615134][ T40] audit: type=1326 audit(2000000002.579:22873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.4.18741" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3f7c code=0x0 [ 467.920430][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18749'. [ 468.132329][T15539] [U] [ 469.721848][ C2] usb 11-1: yurex_control_callback - control failed: -2 [ 469.726087][ T5894] usb 11-1: USB disconnect, device number 5 [ 469.738252][ T5894] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 469.761761][T15629] overlayfs: workdir and upperdir must reside under the same mount [ 470.712123][ T1039] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 470.893051][ T1039] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.896475][ T1039] usb 11-1: config 0 interface 0 has no altsetting 0 [ 470.900667][ T1039] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.904232][ T1039] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.906977][ T1039] usb 11-1: Product: syz [ 470.908285][ T1039] usb 11-1: Manufacturer: syz [ 470.909714][ T1039] usb 11-1: SerialNumber: syz [ 470.915163][ T1039] usb 11-1: config 0 descriptor?? [ 470.926432][ T40] audit: type=1326 audit(2000000005.889:22874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.5.18803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7fc00000 [ 470.926554][ T1039] usb 11-1: selecting invalid altsetting 0 [ 471.162320][ T1039] usb 11-1: USB disconnect, device number 6 [ 471.745779][T15816] sock: sock_timestamping_bind_phc: sock not bind to device [ 472.146355][T15880] __nla_validate_parse: 1 callbacks suppressed [ 472.146379][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18866'. [ 472.266966][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18871'. [ 472.322191][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18874'. [ 472.341963][ T856] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 472.355825][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18876'. [ 472.359277][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18876'. [ 472.362759][T15902] netlink: 'syz.6.18876': attribute type 14 has an invalid length. [ 472.483350][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18882'. [ 472.486694][T15917] netlink: 5 bytes leftover after parsing attributes in process `syz.6.18882'. [ 472.514012][ T856] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 472.522324][ T856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 472.526522][ T856] usb 9-1: Product: syz [ 472.528136][ T856] usb 9-1: Manufacturer: syz [ 472.529597][ T856] usb 9-1: SerialNumber: syz [ 472.533391][ T856] usb 9-1: config 0 descriptor?? [ 472.538204][ T856] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 472.540721][ T856] dvb-usb: bulk message failed: -22 (2/0) [ 472.545183][ T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.550131][ T856] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 472.556110][ T856] usb 9-1: media controller created [ 472.564341][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.740636][T15872] cxusb: i2c rd: len=108 is too big! [ 472.740636][T15872] [ 472.744360][ T856] cxusb: set interface failed [ 472.746622][ T856] dvb-usb: bulk message failed: -22 (1/0) [ 472.779834][ T856] DVB: Unable to find symbol mt352_attach() [ 472.781827][ T856] dvb-usb: bulk message failed: -22 (5/0) [ 472.784291][ T856] zl10353_read_register: readreg error (reg=127, ret==-121) [ 472.786742][ T856] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 472.832025][ T856] rc_core: IR keymap rc-dvico-mce not found [ 472.836211][ T856] Registered IR keymap rc-empty [ 472.839834][ T856] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 472.849796][ T856] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input60 [ 472.861273][ T856] dvb-usb: schedule remote query interval to 100 msecs. [ 472.866357][ T856] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 472.873151][ T856] usb 9-1: USB disconnect, device number 7 [ 472.972325][ T856] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 473.104410][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18900'. [ 473.204802][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18904'. [ 474.010766][T16117] netlink: 'syz.4.18942': attribute type 16 has an invalid length. [ 474.014408][T16117] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.18942'. [ 474.814866][ T1039] libceph: connect (1)[c::]:6789 error -13 [ 474.816931][ T1039] libceph: mon0 (1)[c::]:6789 connect error [ 475.082220][ T1039] libceph: connect (1)[c::]:6789 error -13 [ 475.085803][ T1039] libceph: mon0 (1)[c::]:6789 connect error [ 475.178667][T16258] netlink: 'syz.6.18984': attribute type 1 has an invalid length. [ 475.483007][T16292] ubi: mtd0 is already attached to ubi31 [ 475.602670][ T1039] libceph: connect (1)[c::]:6789 error -13 [ 475.605081][ T1039] libceph: mon0 (1)[c::]:6789 connect error [ 475.634728][T16211] ceph: No mds server is up or the cluster is laggy [ 476.417105][T16397] Option ' ' to dns_resolver key: bad/missing value [ 476.608610][T16423] batadv0: entered promiscuous mode [ 476.613783][T16423] macsec2: entered promiscuous mode [ 476.615745][T16423] macsec2: entered allmulticast mode [ 476.617483][T16423] batadv0: entered allmulticast mode [ 476.619878][T16423] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 476.644123][T16423] batadv0: left allmulticast mode [ 476.646676][T16423] batadv0: left promiscuous mode [ 476.808731][T16456] sctp: [Deprecated]: syz.6.19050 (pid 16456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.808731][T16456] Use struct sctp_sack_info instead [ 476.815784][T16456] sctp: [Deprecated]: syz.6.19050 (pid 16456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.815784][T16456] Use struct sctp_sack_info instead [ 478.276981][T16554] nbd: must specify a device to reconfigure [ 478.341869][T16567] random: crng reseeded on system resumption [ 478.402789][T16576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.899775][T16637] __nla_validate_parse: 3 callbacks suppressed [ 478.899788][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19118'. [ 479.564726][T16721] IPVS: ip_vs_add_dest(): server weight less than zero [ 479.633337][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19146'. [ 479.699306][T16730] macsec1: entered promiscuous mode [ 479.702228][T16730] macsec1: entered allmulticast mode [ 479.704439][T16730] bridge0: entered allmulticast mode [ 479.720753][T16730] bridge0: port 3(macsec1) entered blocking state [ 479.725232][T16730] bridge0: port 3(macsec1) entered disabled state [ 479.771983][T16730] bridge0: left allmulticast mode [ 480.255572][T16773] vlan3: entered allmulticast mode [ 480.257363][T16773] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 480.312273][T16792] pimreg3: entered allmulticast mode [ 480.332072][T16800] vlan4: entered promiscuous mode [ 480.333746][T16800] bridge0: entered promiscuous mode [ 480.469260][T16818] : entered promiscuous mode [ 480.496050][T16825] tmpfs: Cannot change global quota limit on remount [ 480.595877][T16831] sg_write: data in/out 815792128/1 bytes for SCSI command 0xf2-- guessing data in; [ 480.595877][T16831] program syz.5.19176 not setting count and/or reply_len properly [ 481.413962][T16887] netlink: 56 bytes leftover after parsing attributes in process `syz.5.19198'. [ 481.693109][ C2] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 481.696367][ C2] sr 2:0:0:0: [sr0] tag#18 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 481.976210][T16999] netlink: 'syz.5.19235': attribute type 2 has an invalid length. [ 481.978904][T16999] netlink: 'syz.5.19235': attribute type 1 has an invalid length. [ 481.981295][T16999] netlink: 'syz.5.19235': attribute type 1 has an invalid length. [ 482.911235][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19267'. [ 483.091774][ T5894] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 483.247818][ T5894] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 483.252319][ T5894] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 483.255785][ T5894] usb 11-1: Product: syz [ 483.257587][ T5894] usb 11-1: Manufacturer: syz [ 483.259788][ T5894] usb 11-1: SerialNumber: syz [ 483.265013][ T5894] usb 11-1: config 0 descriptor?? [ 483.270978][ T5894] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 483.276850][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 483.287639][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.292288][ T5894] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 483.295622][ T5894] usb 11-1: media controller created [ 483.304116][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.481335][T17092] cxusb: i2c rd: len=108 is too big! [ 483.481335][T17092] [ 483.487848][ T5894] cxusb: set interface failed [ 483.489561][ T5894] dvb-usb: bulk message failed: -22 (1/0) [ 483.528579][ T5894] DVB: Unable to find symbol mt352_attach() [ 483.532848][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 483.537940][ T5894] zl10353_read_register: readreg error (reg=127, ret==-121) [ 483.541346][ T5894] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 483.575207][T17168] pimreg3: entered allmulticast mode [ 483.601770][ T5894] rc_core: IR keymap rc-dvico-mce not found [ 483.608314][ T5894] Registered IR keymap rc-empty [ 483.610456][ T5894] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 483.620219][ T5894] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input61 [ 483.625906][ T5894] dvb-usb: schedule remote query interval to 100 msecs. [ 483.628257][ T5894] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 483.635626][ T5894] usb 11-1: USB disconnect, device number 7 [ 483.712634][ T5894] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 484.977881][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19299'. [ 485.111648][ T1039] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 485.221354][T17327] random: crng reseeded on system resumption [ 485.274462][ T1039] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 485.279274][ T1039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 485.284235][ T1039] usb 10-1: Product: syz [ 485.285725][ T1039] usb 10-1: Manufacturer: syz [ 485.289812][ T1039] usb 10-1: SerialNumber: syz [ 485.295550][ T1039] usb 10-1: config 0 descriptor?? [ 485.305416][ T1039] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 485.308082][ T1039] dvb-usb: bulk message failed: -22 (2/0) [ 485.314695][ T1039] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.318410][ T1039] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 485.325379][ T1039] usb 10-1: media controller created [ 485.347029][ T1039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.520735][T17281] cxusb: i2c rd: len=108 is too big! [ 485.520735][T17281] [ 485.542884][ T1039] cxusb: set interface failed [ 485.544987][ T1039] dvb-usb: bulk message failed: -22 (1/0) [ 485.568031][ T1039] DVB: Unable to find symbol mt352_attach() [ 485.569978][ T1039] dvb-usb: bulk message failed: -22 (5/0) [ 485.573444][ T1039] zl10353_read_register: readreg error (reg=127, ret==-121) [ 485.575823][ T1039] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 485.616395][ T5531] kernel read not supported for file /media0 (pid: 5531 comm: kworker/1:3) [ 485.631802][ T1039] rc_core: IR keymap rc-dvico-mce not found [ 485.633686][ T1039] Registered IR keymap rc-empty [ 485.662762][ T1039] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 485.683816][ T1039] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input63 [ 485.684869][ T1039] dvb-usb: schedule remote query interval to 100 msecs. [ 485.684881][ T1039] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 485.685716][ T1039] usb 10-1: USB disconnect, device number 6 [ 485.778663][ T1039] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 486.158542][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19352'. [ 486.181085][T17493] tipc: Started in network mode [ 486.188240][T17493] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 486.195907][T17493] tipc: Enabled bearer , priority 5 [ 486.698465][T17582] netlink: 'syz.5.19379': attribute type 1 has an invalid length. [ 486.727682][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19382'. [ 487.201829][ T5894] tipc: Node number set to 4269801488 [ 487.292955][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.295142][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.299259][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.301971][T17670] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 487.306617][T17670] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 487.312016][T17670] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 487.319213][T17670] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 487.335129][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.338137][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.341035][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.343981][T17670] wlan0 speed is unknown, defaulting to 1000 [ 487.382518][T17676] netlink: 136 bytes leftover after parsing attributes in process `syz.5.19404'. [ 487.435451][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19407'. [ 487.439695][T17686] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19407'. [ 487.443604][T17686] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19407'. [ 487.710877][T17714] vim2m vim2m.0: vidioc_s_fmt queue busy [ 487.872099][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 487.973237][T17758] netlink: 10 bytes leftover after parsing attributes in process `syz.6.19431'. [ 488.021939][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 488.026367][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 488.030919][ T34] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 488.035968][ T34] usb 10-1: config 8 has no interface number 0 [ 488.038751][ T34] usb 10-1: config 8 interface 188 has no altsetting 0 [ 488.044786][ T34] usb 10-1: string descriptor 0 read error: -22 [ 488.047324][ T34] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 488.050883][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.059388][ T34] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 488.063682][ T34] dw2102: su3000_power_ctrl: 1, initialized 0 [ 488.066318][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 488.069904][T17769] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 488.074198][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.075915][ T34] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 488.080566][ T34] usb 10-1: media controller created [ 488.083652][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.086146][ T34] dw2102: i2c transfer failed. [ 488.088165][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.090516][ T34] dw2102: i2c transfer failed. [ 488.092932][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.095439][ T34] dw2102: i2c transfer failed. [ 488.097560][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.100199][ T34] dw2102: i2c transfer failed. [ 488.102664][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.105196][ T34] dw2102: i2c transfer failed. [ 488.107262][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 488.109660][ T34] dw2102: i2c transfer failed. [ 488.115636][ T34] dvb-usb: MAC address: 02:02:02:02:02:02 [ 488.132084][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.147808][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 488.149736][ T34] dw2102: command 0x0e transfer failed. [ 488.151826][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 488.156023][ T34] dw2102: command 0x0e transfer failed. [ 488.368366][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19447'. [ 488.436275][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19449'. [ 488.462425][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 488.464450][ T34] dw2102: command 0x0e transfer failed. [ 488.466499][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 488.469093][ T34] dw2102: command 0x0e transfer failed. [ 488.474040][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 488.475941][ T34] dw2102: command 0x51 transfer failed. [ 488.477939][T17703] dvb-usb: bulk message failed: -22 (5/0) [ 488.480899][T17703] dw2102: i2c transfer failed. [ 488.501321][ T34] DVB: Unable to find symbol ds3000_attach() [ 488.504250][ T34] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 488.552574][ T34] rc_core: IR keymap rc-su3000 not found [ 488.554942][ T34] Registered IR keymap rc-empty [ 488.557544][ T34] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 488.564795][ T34] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input65 [ 488.574126][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 488.577885][ T34] dw2102: su3000_power_ctrl: 0, initialized 1 [ 488.580246][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 488.585567][ T34] usb 10-1: USB disconnect, device number 7 [ 488.608711][T17837] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 488.613817][T17837] @0: renamed from bond_slave_1 (while UP) [ 488.733686][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 489.240677][T17942] nbd: must specify a size in bytes for the device [ 489.448016][T17968] digital: digital_start_poll: Unknown protocol [ 489.660429][T17998] binder: 17996:17998 ioctl 400c620e 80000100 returned -22 [ 489.995712][T18035] __nla_validate_parse: 5 callbacks suppressed [ 489.995729][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19522'. [ 490.591398][T18118] Invalid option length (1047916) for dns_resolver key [ 490.805517][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19567'. [ 490.916837][ T842] hid (null): invalid report_size 51505 [ 490.920800][ T842] hid (null): unknown global tag 0xc [ 490.923266][ T842] hid (null): unknown global tag 0xc [ 490.924880][ T842] hid (null): unknown global tag 0x9f [ 490.926568][ T842] hid (null): unknown global tag 0xc [ 490.928205][ T842] hid (null): unknown global tag 0x42 [ 490.929819][ T842] hid (null): unknown global tag 0xd [ 490.931669][ T842] hid (null): unknown global tag 0xc [ 490.933434][ T842] hid (null): unknown global tag 0xc [ 490.935185][ T842] hid (null): report_id 0 is invalid [ 490.935210][ T7027] Bluetooth: hci0: unexpected event for opcode 0x202f [ 490.936877][ T842] hid (null): unknown global tag 0xe [ 490.940542][ T842] hid (null): report_id 16697 is invalid [ 490.942419][ T842] hid (null): bogus close delimiter [ 490.943989][ T842] hid (null): unknown global tag 0xc [ 490.945552][ T842] hid (null): invalid report_size 1234625101 [ 490.947439][ T842] hid (null): unknown global tag 0xd [ 490.949104][ T842] hid (null): unknown global tag 0xd [ 490.950783][ T842] hid (null): invalid report_size -2125375034 [ 490.953829][ T842] hid (null): report_id 0 is invalid [ 490.955678][ T842] hid (null): invalid report_count -1724469666 [ 490.957497][ T842] hid (null): unknown global tag 0xc [ 490.959028][ T842] hid (null): unknown global tag 0xd [ 490.960600][ T842] hid (null): global environment stack overflow [ 490.963140][ T842] hid (null): unknown global tag 0xe [ 490.964822][ T842] hid (null): unknown global tag 0xc [ 490.966469][ T842] hid (null): unknown global tag 0xc [ 490.972764][ T842] hid-generic 0009:0007:0077.0008: unknown main item tag 0x1 [ 490.975110][ T842] hid-generic 0009:0007:0077.0008: reserved main item tag 0xd [ 490.977447][ T842] hid-generic 0009:0007:0077.0008: unknown main item tag 0x1 [ 490.979770][ T842] hid-generic 0009:0007:0077.0008: unexpected long global item [ 490.982813][ T842] hid-generic 0009:0007:0077.0008: probe with driver hid-generic failed with error -22 [ 491.448802][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19594'. [ 492.060362][T18325] netlink: 'syz.6.19626': attribute type 10 has an invalid length. [ 492.581236][T18378] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 492.918133][T18406] hugetlbfs: Bad value '' for mount option 'size' [ 492.918133][T18406] [ 493.258272][T18430] netlink: 100 bytes leftover after parsing attributes in process `syz.5.19668'. [ 493.427376][T18456] netlink: 'syz.4.19681': attribute type 1 has an invalid length. [ 493.716391][T18502] comedi comedi2: dac02: I/O base address or length out of range [ 493.772853][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19702'. [ 493.897942][T18538] batman_adv: batadv0: Adding interface: gretap1 [ 493.900856][T18538] batman_adv: batadv0: Interface activated: gretap1 [ 494.027902][T18561] xt_socket: unknown flags 0x50 [ 494.256999][T18578] comedi comedi3: comedi_parport: I/O base address or length out of range [ 494.655823][T18631] netlink: 'syz.6.19741': attribute type 4 has an invalid length. [ 494.660031][T18631] netlink: 240 bytes leftover after parsing attributes in process `syz.6.19741'. [ 494.807167][T18653] openvswitch: netlink: IP tunnel dst address not specified [ 494.809566][T18653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.815079][T18654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.859029][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19752'. [ 494.877824][T18662] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 495.015903][T18686] qrtr: Invalid version 255 [ 495.114113][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19767'. [ 495.119321][T18696] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19767'. [ 495.122761][T18696] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19767'. [ 495.164330][T18701] genirq: Flags mismatch irq 19. 00200000 (pcmmio) vs. 00200080 (ehci_hcd:usb2) [ 495.649077][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19784'. [ 495.654307][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19784'. [ 496.203254][T18820] Invalid source name [ 496.204865][T18820] UBIFS error (pid: 18820): cannot open "./file0", error -22 [ 496.346379][T18851] netlink: 'syz.5.19822': attribute type 1 has an invalid length. [ 496.361833][T18851] netlink: 'syz.5.19822': attribute type 2 has an invalid length. [ 496.365727][T18851] netlink: 'syz.5.19822': attribute type 1 has an invalid length. [ 496.368463][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19822'. [ 496.745528][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 496.745543][ T40] audit: type=1326 audit(2000000031.709:22883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.755656][ T40] audit: type=1326 audit(2000000031.709:22884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.769273][ T40] audit: type=1326 audit(2000000031.709:22885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.779514][ T40] audit: type=1326 audit(2000000031.709:22886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.795320][ T40] audit: type=1326 audit(2000000031.709:22887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.804449][ T40] audit: type=1326 audit(2000000031.709:22888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.817012][ T40] audit: type=1326 audit(2000000031.709:22889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 496.826746][ T40] audit: type=1326 audit(2000000031.709:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.4.19843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3f7c code=0x7ffc0000 [ 497.209768][T18960] netlink: 'syz.6.19860': attribute type 4 has an invalid length. [ 497.213776][T18960] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19860'. [ 497.559565][T19011] netlink: 'syz.6.19879': attribute type 3 has an invalid length. [ 497.604174][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19883'. [ 497.802197][ T4531] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 497.840486][T19041] syz.3.19890 (19041) used greatest stack depth: 18936 bytes left [ 497.954188][ T4531] usb 10-1: Using ep0 maxpacket: 8 [ 497.961890][ T4531] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 497.965116][ T4531] usb 10-1: config 0 has no interface number 0 [ 497.967780][ T4531] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.971358][ T4531] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 497.975724][ T4531] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 497.979506][ T4531] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 497.983528][ T4531] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 497.986873][ T4531] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.994535][ T4531] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 497.997781][ T4531] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.000349][ T4531] usb 10-1: Product: syz [ 498.002010][ T4531] usb 10-1: Manufacturer: syz [ 498.003547][ T4531] usb 10-1: SerialNumber: syz [ 498.006466][ T4531] usb 10-1: config 0 descriptor?? [ 498.214517][ T4531] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 498.414156][T19012] iowarrior 10-1:0.186: Error -90 while submitting URB [ 498.426518][ T9] usb 10-1: USB disconnect, device number 8 [ 498.924705][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19919'. [ 499.358577][T19210] comedi comedi2: pcl730: I/O port conflict (0x100,4) [ 499.439911][T19223] netlink: 'syz.4.19950': attribute type 11 has an invalid length. [ 499.718486][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19965'. [ 499.724948][T19268] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 499.862209][ T5894] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 499.968279][T19301] CIFS mount error: No usable UNC path provided in device string! [ 499.968279][T19301] [ 499.972943][T19301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.012852][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.016379][ T5894] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.020382][ T5894] usb 9-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 500.024096][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.033494][ T5894] usb 9-1: config 0 descriptor?? [ 500.037854][ T5894] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 500.759108][ T5531] usb 9-1: USB disconnect, device number 8 [ 500.827465][ T40] audit: type=1326 audit(2000000035.789:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.5.20012" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef7c code=0x0 [ 500.886804][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20016'. [ 500.895368][T19418] vlan4: entered promiscuous mode [ 501.119401][T19450] tmpfs: Cannot change global quota limit on remount [ 501.299999][T19465] [U]  [ 501.455863][T19481] F2FS-fs: Conflicting test_dummy_encryption options [ 501.591875][ T5894] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 501.764600][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 501.767852][ T5894] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 501.771072][ T5894] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.776240][ T5894] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.779737][ T5894] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.783837][ T5894] usb 9-1: config 0 interface 0 has no altsetting 0 [ 501.788166][ T5894] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 501.792350][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.794951][ T5894] usb 9-1: Product: syz [ 501.796281][ T5894] usb 9-1: Manufacturer: syz [ 501.797686][ T5894] usb 9-1: SerialNumber: syz [ 501.800674][ T5894] usb 9-1: config 0 descriptor?? [ 501.804644][T19471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.020450][T19471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.028023][ T5894] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input66 [ 502.123101][T19548] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19548 comm: syz.6.20056) [ 502.134566][ T40] audit: type=1800 audit(2000000037.099:22892): pid=19548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.20056" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=159499 res=0 errno=0 [ 502.394619][T19579] tipc: Enabling of bearer rejected, already enabled [ 502.486809][ T842] usb 9-1: USB disconnect, device number 9 [ 502.901231][T19638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20086'. [ 502.989181][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20089'. [ 502.995839][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20089'. [ 502.998820][T19645] netlink: 'syz.5.20089': attribute type 7 has an invalid length. [ 503.001932][T19645] netlink: 'syz.5.20089': attribute type 13 has an invalid length. [ 503.058887][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20093'. [ 503.430428][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20103'. [ 503.484532][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20106'. [ 504.060001][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20126'. [ 504.483656][T19793] Bluetooth: MGMT ver 1.23 [ 504.496903][T19790] IPVS: Scheduler module ip_vs_sip not found [ 504.726165][T19838] program syz.6.20156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.075413][T19878] tipc: Enabled bearer , priority 5 [ 505.604614][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20194'. [ 505.608101][T19941] tc_dump_action: action bad kind [ 506.022721][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20206'. [ 506.031418][T19969] team0: Device is already in use. [ 506.073156][ T1039] tipc: Node number set to 4278190081 [ 506.223291][T19995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20216'. [ 506.250230][T20003] kAFS: unable to lookup cell 'syz1' [ 506.255301][T20003] kAFS: unable to lookup cell 'syz1' [ 506.369393][T20017] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20223'. [ 506.499450][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.502609][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.505509][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.508288][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.510913][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.513799][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.516916][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.520014][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.523951][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.527357][ T4531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 506.545442][ T4531] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.03 Device [syz1] on syz1 [ 506.634662][T20031] syz.4.20227 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 506.638909][T20031] CPU: 0 UID: 0 PID: 20031 Comm: syz.4.20227 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.638928][T20031] Tainted: [L]=SOFTLOCKUP [ 506.638932][T20031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.638939][T20031] Call Trace: [ 506.638943][T20031] [ 506.638948][T20031] dump_stack_lvl+0x100/0x190 [ 506.638965][T20031] dump_header+0xfb/0x606 [ 506.638978][T20031] oom_kill_process.cold+0xd/0x330 [ 506.638991][T20031] out_of_memory+0x1256/0x14f0 [ 506.639009][T20031] ? _mutex_trylock_nest_lock+0x170/0x310 [ 506.639022][T20031] ? __pfx_out_of_memory+0x10/0x10 [ 506.639042][T20031] __alloc_frozen_pages_noprof+0x232d/0x2bc0 [ 506.639068][T20031] ? percpu_ref_tryget_live+0xe8/0x320 [ 506.639081][T20031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 506.639101][T20031] ? find_held_lock+0x2b/0x80 [ 506.639115][T20031] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 506.639127][T20031] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 506.639149][T20031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.639166][T20031] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 506.639179][T20031] ? policy_nodemask+0xed/0x4f0 [ 506.639193][T20031] alloc_pages_mpol+0x1fb/0x540 [ 506.639206][T20031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 506.639221][T20031] ? __lock_acquire+0x4a5/0x2630 [ 506.639232][T20031] folio_alloc_mpol_noprof+0x36/0x260 [ 506.639248][T20031] vma_alloc_folio_noprof+0xed/0x1d0 [ 506.639263][T20031] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 506.639282][T20031] do_anonymous_page+0xb46/0x2050 [ 506.639299][T20031] ? rcu_read_unlock+0x2d/0xb0 [ 506.639319][T20031] __handle_mm_fault+0x1d2c/0x2a00 [ 506.639337][T20031] ? mt_find+0x45e/0x8e0 [ 506.639349][T20031] ? __pfx___handle_mm_fault+0x10/0x10 [ 506.639365][T20031] ? __pfx_mt_find+0x10/0x10 [ 506.639382][T20031] ? find_vma+0xbf/0x140 [ 506.639394][T20031] ? __pfx_find_vma+0x10/0x10 [ 506.639406][T20031] handle_mm_fault+0x36d/0xa20 [ 506.639424][T20031] do_user_addr_fault+0x74c/0x12f0 [ 506.639440][T20031] ? trace_page_fault_kernel+0x7a/0x200 [ 506.639454][T20031] exc_page_fault+0x6f/0xd0 [ 506.639470][T20031] asm_exc_page_fault+0x26/0x30 [ 506.639480][T20031] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 506.639493][T20031] Code: 00 e8 34 e6 12 fd 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 ac b3 7f fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 506.639503][T20031] RSP: 0000:ffffc9002264f9e8 EFLAGS: 00050246 [ 506.639513][T20031] RAX: 0000000000000001 RBX: 00000000000002ba RCX: 00000000000002ba [ 506.639520][T20031] RDX: 0000000000000001 RSI: ffff88806a310000 RDI: 0000000080002140 [ 506.639526][T20031] RBP: ffffc9002264fbf0 R08: 0000000000000000 R09: ffffed100d462057 [ 506.639532][T20031] R10: ffff88806a3102b9 R11: 0000000000000000 R12: ffff88806a310000 [ 506.639538][T20031] R13: 0000000000000000 R14: 0000000080002140 R15: 00000000000002ba [ 506.639551][T20031] ? _copy_to_iter+0x4b4/0x1720 [ 506.639565][T20031] ? __pfx__copy_to_iter+0x10/0x10 [ 506.639577][T20031] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 506.639587][T20031] ? seq_read_iter+0x819/0x1270 [ 506.639602][T20031] seq_read_iter+0xdab/0x1270 [ 506.639619][T20031] seq_read+0x33b/0x4c0 [ 506.639631][T20031] ? __pfx_seq_read+0x10/0x10 [ 506.639641][T20031] ? __pfx___might_resched+0x10/0x10 [ 506.639654][T20031] ? lock_acquire+0x1b1/0x370 [ 506.639670][T20031] ? rw_verify_area+0xce/0x6d0 [ 506.639681][T20031] ? __pfx_seq_read+0x10/0x10 [ 506.639692][T20031] vfs_read+0x1e4/0xb30 [ 506.639706][T20031] ? __pfx_vfs_read+0x10/0x10 [ 506.639716][T20031] ? find_held_lock+0x2b/0x80 [ 506.639730][T20031] ? __fget_files+0x215/0x3d0 [ 506.639745][T20031] ? __fget_files+0x21f/0x3d0 [ 506.639761][T20031] ksys_read+0x12a/0x250 [ 506.639772][T20031] ? __pfx_ksys_read+0x10/0x10 [ 506.639785][T20031] ? rcu_is_watching+0x12/0xc0 [ 506.639800][T20031] __do_fast_syscall_32+0xe7/0x950 [ 506.639810][T20031] ? lockdep_hardirqs_on+0x78/0x100 [ 506.639827][T20031] do_fast_syscall_32+0x32/0x70 [ 506.639837][T20031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.639850][T20031] RIP: 0023:0xf7fd3f7c [ 506.639859][T20031] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 506.639869][T20031] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 506.639878][T20031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002140 [ 506.639884][T20031] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.639890][T20031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.639896][T20031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 506.639901][T20031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.639914][T20031] [ 506.639918][T20031] Mem-Info: [ 506.676757][T20036] fido_id[20036]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 506.682267][T20031] active_anon:1105 inactive_anon:636 isolated_anon:0 [ 506.682267][T20031] active_file:2280 inactive_file:5492 isolated_file:0 [ 506.682267][T20031] unevictable:1743 dirty:159 writeback:0 [ 506.682267][T20031] slab_reclaimable:7049 slab_unreclaimable:61354 [ 506.682267][T20031] mapped:23305 shmem:1772 pagetables:2161 [ 506.682267][T20031] sec_pagetables:332 bounce:0 [ 506.682267][T20031] kernel_misc_reclaimable:0 [ 506.682267][T20031] free:84667 free_pcp:0 free_cma:0 [ 506.823451][T20031] Node 0 active_anon:0kB inactive_anon:44kB active_file:72kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8108kB pagetables:1256kB sec_pagetables:1168kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 506.832301][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20238'. [ 506.834691][T20031] Node 0 DMA free:3344kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.848126][T20031] lowmem_reserve[]: 0 285 285 285 285 [ 506.849829][T20031] Node 0 DMA32 free:40900kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:72kB inactive_file:16kB unevictable:3536kB writepending:16kB zspages:412kB present:1032196kB managed:292508kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.855101][T20063] ------------[ cut here ]------------ [ 506.859668][T20031] lowmem_reserve[]: 0 [ 506.861653][T20063] 1 [ 506.861655][T20031] 0 [ 506.861662][T20063] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#3: syz.5.20238/20063 [ 506.864407][T20031] 0 [ 506.864619][T20063] Modules linked in: [ 506.867526][T20031] 0 0 [ 506.868644][T20063] [ 506.869973][T20031] Node 0 DMA: 190*4kB (U) 23*8kB (U) 8*16kB (U) 23*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3344kB [ 506.870178][T20031] Node 0 DMA32: [ 506.873325][T20063] CPU: 3 UID: 0 PID: 20063 Comm: syz.5.20238 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.877237][T20031] 1357*4kB [ 506.878325][T20063] Tainted: [L]=SOFTLOCKUP [ 506.881754][T20031] (UME) [ 506.882886][T20063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.884221][T20031] 719*8kB (UME) 391*16kB (UM) 343*32kB (UME) 91*64kB (UME) 24*128kB (UME) [ 506.885160][T20063] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 506.888439][T20031] 6*256kB (UM) [ 506.891342][T20063] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ac 48 1b f8 66 90 e8 a5 48 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 36 22 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 c3 f8 9e 01 e8 7e 48 1b [ 506.892994][T20031] 2*512kB (UM) [ 506.894130][T20063] RSP: 0000:ffffc9000652f390 EFLAGS: 00010287 [ 506.900174][T20031] 1*1024kB [ 506.901810][T20063] [ 506.905615][T20031] (M) [ 506.906258][T20063] RAX: 0000000000000ff5 RBX: ffff88807067b2c0 RCX: ffffc90027389000 [ 506.906277][T20063] RDX: 0000000000080000 RSI: ffffffff8958e594 RDI: ffffffff8c1c4180 [ 506.906292][T20063] RBP: ffff88807067b2c0 R08: 0000000000000001 R09: 0000000000000000 [ 506.907227][T20031] 0*2048kB [ 506.910492][T20063] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056368000 [ 506.912989][T20031] 0*4096kB = 40892kB [ 506.913010][T20031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.913021][T20031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.915812][T20063] R13: ffff8880215d7800 R14: 0000000000000000 R15: ffff88807067b318 [ 506.915826][T20063] FS: 0000000000000000(0000) GS:ffff888097474000(0063) knlGS:00000000f546db40 [ 506.915850][T20063] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 506.916850][T20031] 10092 total pagecache pages [ 506.919651][T20063] CR2: 00000000f7426d50 CR3: 000000006669b000 CR4: 0000000000352ef0 [ 506.920842][T20031] 477 pages in swap cache [ 506.920852][T20031] Free swap = 29836kB [ 506.924383][T20063] Call Trace: [ 506.924398][T20063] [ 506.927402][T20031] Total swap = 124996kB [ 506.929945][T20063] ? __pfx_ip_rt_bug+0x10/0x10 [ 506.932829][T20031] 524155 pages RAM [ 506.934867][T20063] ip_push_pending_frames+0x29e/0x300 [ 506.936440][T20031] 0 pages HighMem/MovableOnly [ 506.938969][T20063] icmp_push_reply+0x30e/0x450 [ 506.940494][T20031] 210135 pages reserved [ 506.941978][T20063] __icmp_send+0x11b4/0x2c70 [ 506.943168][T20031] 0 pages cma reserved [ 506.944193][T20063] ? __pfx___icmp_send+0x10/0x10 [ 506.945591][T20031] Unreclaimable slab info: [ 506.947124][T20063] ? __pfx_ip_route_input_slow+0x10/0x10 [ 506.947147][T20063] ? __lock_acquire+0x4a5/0x2630 [ 506.947165][T20063] ? __ip_options_compile+0x604/0x16a0 [ 506.947185][T20063] ? ip_route_input_noref+0x15f/0x2e0 [ 506.947201][T20063] ip_options_compile+0xb6/0x100 [ 506.947217][T20063] ? __pfx_ip_options_compile+0x10/0x10 [ 506.947232][T20063] ? __pfx_ip_rcv_finish+0x10/0x10 [ 506.947249][T20063] ip_rcv_finish_core+0x693/0x2c30 [ 506.947268][T20063] ip_rcv+0x1c0/0x3c0 [ 506.947283][T20063] ? __pfx_ip_rcv+0x10/0x10 [ 506.947296][T20063] __netif_receive_skb_one_core+0x197/0x1e0 [ 506.947309][T20063] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 506.947322][T20063] ? lock_acquire+0x1b1/0x370 [ 506.947336][T20063] __netif_receive_skb+0x1f/0x120 [ 506.947347][T20063] netif_receive_skb+0x13b/0x7f0 [ 506.947358][T20063] ? __pfx_netif_receive_skb+0x10/0x10 [ 506.947374][T20063] tun_rx_batched.isra.0+0x3f6/0x750 [ 506.947394][T20063] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 506.947414][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.947427][T20063] ? tun_get_user+0x1cc8/0x3c20 [ 506.947445][T20063] tun_get_user+0x1e31/0x3c20 [ 506.947468][T20063] ? __pfx_tun_get_user+0x10/0x10 [ 506.947485][T20063] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 506.947506][T20063] ? find_held_lock+0x2b/0x80 [ 506.947519][T20063] ? tun_get+0x191/0x370 [ 506.947534][T20063] ? tun_get+0x191/0x370 [ 506.947553][T20063] tun_chr_write_iter+0xdc/0x200 [ 506.947565][T20063] vfs_write+0x6ac/0x1070 [ 506.947579][T20063] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 506.947591][T20063] ? __pfx_vfs_write+0x10/0x10 [ 506.947602][T20063] ? find_held_lock+0x2b/0x80 [ 506.947629][T20063] ksys_write+0x12a/0x250 [ 506.947641][T20063] ? __pfx_ksys_write+0x10/0x10 [ 506.947653][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.947667][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.947682][T20063] do_int80_emulation+0x141/0x700 [ 506.947695][T20063] asm_int80_emulation+0x1a/0x20 [ 506.947707][T20063] RIP: 0023:0xf71b61ab [ 506.947717][T20063] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 506.947728][T20063] RSP: 002b:00000000f546d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 506.947741][T20063] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 506.947748][T20063] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.947755][T20063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.947762][T20063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 506.947768][T20063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.947783][T20063] [ 506.947790][T20063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.947802][T20063] CPU: 3 UID: 0 PID: 20063 Comm: syz.5.20238 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.947819][T20063] Tainted: [L]=SOFTLOCKUP [ 506.947823][T20063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.947830][T20063] Call Trace: [ 506.947834][T20063] [ 506.947838][T20063] dump_stack_lvl+0x100/0x190 [ 506.947851][T20063] vpanic+0x552/0x970 [ 506.947862][T20063] ? __pfx_vpanic+0x10/0x10 [ 506.947876][T20063] panic+0xd1/0xe0 [ 506.947886][T20063] ? __pfx_panic+0x10/0x10 [ 506.947902][T20063] check_panic_on_warn.cold+0x19/0x34 [ 506.947914][T20063] ? ip_rt_bug+0x2b/0x150 [ 506.947923][T20063] __warn.cold+0x191/0x328 [ 506.947935][T20063] __report_bug+0x296/0x3d0 [ 506.947951][T20063] ? ip_rt_bug+0x2b/0x150 [ 506.947961][T20063] ? __pfx___report_bug+0x10/0x10 [ 506.947982][T20063] ? ip_rt_bug+0x2b/0x150 [ 506.947992][T20063] report_bug+0xb2/0x220 [ 506.948006][T20063] ? ip_rt_bug+0x2b/0x150 [ 506.948016][T20063] handle_bug+0x16a/0x2a0 [ 506.948034][T20063] exc_invalid_op+0x17/0x50 [ 506.948052][T20063] asm_exc_invalid_op+0x1a/0x20 [ 506.948070][T20063] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 506.948081][T20063] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ac 48 1b f8 66 90 e8 a5 48 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 36 22 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 c3 f8 9e 01 e8 7e 48 1b [ 506.948092][T20063] RSP: 0000:ffffc9000652f390 EFLAGS: 00010287 [ 506.948105][T20063] RAX: 0000000000000ff5 RBX: ffff88807067b2c0 RCX: ffffc90027389000 [ 506.948116][T20063] RDX: 0000000000080000 RSI: ffffffff8958e594 RDI: ffffffff8c1c4180 [ 506.948129][T20063] RBP: ffff88807067b2c0 R08: 0000000000000001 R09: 0000000000000000 [ 506.948139][T20063] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056368000 [ 506.948150][T20063] R13: ffff8880215d7800 R14: 0000000000000000 R15: ffff88807067b318 [ 506.948168][T20063] ? sk_skb_reason_drop+0x114/0x1b0 [ 506.948198][T20063] ? __pfx_ip_rt_bug+0x10/0x10 [ 506.948214][T20063] ip_push_pending_frames+0x29e/0x300 [ 506.948234][T20063] icmp_push_reply+0x30e/0x450 [ 506.948253][T20063] __icmp_send+0x11b4/0x2c70 [ 506.948271][T20063] ? __pfx___icmp_send+0x10/0x10 [ 506.948284][T20063] ? __pfx_ip_route_input_slow+0x10/0x10 [ 506.948298][T20063] ? __lock_acquire+0x4a5/0x2630 [ 506.948313][T20063] ? __ip_options_compile+0x604/0x16a0 [ 506.948334][T20063] ? ip_route_input_noref+0x15f/0x2e0 [ 506.948349][T20063] ip_options_compile+0xb6/0x100 [ 506.948364][T20063] ? __pfx_ip_options_compile+0x10/0x10 [ 506.948379][T20063] ? __pfx_ip_rcv_finish+0x10/0x10 [ 506.948396][T20063] ip_rcv_finish_core+0x693/0x2c30 [ 506.948414][T20063] ip_rcv+0x1c0/0x3c0 [ 506.948428][T20063] ? __pfx_ip_rcv+0x10/0x10 [ 506.948440][T20063] __netif_receive_skb_one_core+0x197/0x1e0 [ 506.948452][T20063] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 506.948464][T20063] ? lock_acquire+0x1b1/0x370 [ 506.948477][T20063] __netif_receive_skb+0x1f/0x120 [ 506.948488][T20063] netif_receive_skb+0x13b/0x7f0 [ 506.948499][T20063] ? __pfx_netif_receive_skb+0x10/0x10 [ 506.948515][T20063] tun_rx_batched.isra.0+0x3f6/0x750 [ 506.948532][T20063] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 506.948551][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.948563][T20063] ? tun_get_user+0x1cc8/0x3c20 [ 506.948581][T20063] tun_get_user+0x1e31/0x3c20 [ 506.948603][T20063] ? __pfx_tun_get_user+0x10/0x10 [ 506.948625][T20063] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 506.948644][T20063] ? find_held_lock+0x2b/0x80 [ 506.948657][T20063] ? tun_get+0x191/0x370 [ 506.948672][T20063] ? tun_get+0x191/0x370 [ 506.948690][T20063] tun_chr_write_iter+0xdc/0x200 [ 506.948701][T20063] vfs_write+0x6ac/0x1070 [ 506.948714][T20063] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 506.948726][T20063] ? __pfx_vfs_write+0x10/0x10 [ 506.948737][T20063] ? find_held_lock+0x2b/0x80 [ 506.948758][T20063] ksys_write+0x12a/0x250 [ 506.948770][T20063] ? __pfx_ksys_write+0x10/0x10 [ 506.948783][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.948795][T20063] ? rcu_is_watching+0x12/0xc0 [ 506.948810][T20063] do_int80_emulation+0x141/0x700 [ 506.948821][T20063] asm_int80_emulation+0x1a/0x20 [ 506.948832][T20063] RIP: 0023:0xf71b61ab [ 506.948840][T20063] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 506.948850][T20063] RSP: 002b:00000000f546d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 506.948860][T20063] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 506.948867][T20063] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.948873][T20063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.948880][T20063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 506.948886][T20063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.948899][T20063] [ 506.950781][T20063] Kernel Offset: disabled