last executing test programs: 59.814909281s ago: executing program 0 (id=1020): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000001005400000001"], 0x14}}, 0x0) 59.7107404s ago: executing program 0 (id=1024): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)) 59.675986318s ago: executing program 0 (id=1029): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000380)) 59.615924161s ago: executing program 0 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 59.542883557s ago: executing program 0 (id=1038): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xf, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 59.073250048s ago: executing program 0 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 59.049987811s ago: executing program 32 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 50.159543827s ago: executing program 2 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8}, 0x8) 50.13881798s ago: executing program 2 (id=1299): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0x8}}, 0x28) 50.079590851s ago: executing program 2 (id=1302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 49.732633296s ago: executing program 2 (id=1309): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) 49.601947111s ago: executing program 2 (id=1311): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 49.520976568s ago: executing program 2 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 34.511736169s ago: executing program 33 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 28.21860889s ago: executing program 1 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0x8) 28.210221726s ago: executing program 1 (id=1828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) 28.168804344s ago: executing program 1 (id=1830): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) 28.065308132s ago: executing program 1 (id=1835): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 27.939372122s ago: executing program 1 (id=1839): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000000)='./cgroup\x00') 27.932032726s ago: executing program 1 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0xa0}}, 0x0) 12.58491907s ago: executing program 34 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0xa0}}, 0x0) 2.942506394s ago: executing program 5 (id=2274): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2.86050858s ago: executing program 5 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.66145354s ago: executing program 3 (id=2329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x22020600) syncfs(r0) 1.5519766s ago: executing program 4 (id=2332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 1.551861861s ago: executing program 3 (id=2333): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0500000001003f", 0x7) 1.502350847s ago: executing program 3 (id=2334): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x81, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x4800}) 1.402564641s ago: executing program 4 (id=2336): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 1.402339102s ago: executing program 3 (id=2337): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x8, 0xa6, 0x2, 0x9, 0x3, 0xead}) 1.401918004s ago: executing program 5 (id=2338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0x0, 0x0, 0x4}, 0x1c) 1.401663132s ago: executing program 3 (id=2340): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0}) 1.341737534s ago: executing program 5 (id=2341): move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) nanosleep(&(0x7f0000000040)={0x77359400}, 0x0) 1.242615449s ago: executing program 5 (id=2343): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x6, &(0x7f00000001c0)={0x17, "c955feb77e1d79a896356be7d707c8e7c7b00310dd308e527ef49847e457ebe789"}}) 211.772501ms ago: executing program 4 (id=2364): socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xcc, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d2f5ba45ae2ebc9ada87b3df9291090c892e0198c3f759d3e92e8decaae25b9b990f47f8df1c270029d925b2732eecacc9d666932d9b5c5dcd521b858fac948673349e947e9ca65237363d0b789ba205d750fa54becd4ca1de6bb40a938c9a4be3d9a9c4ac522d58ff52890c6aa4650d744fd35f3ca0c5dcb32eca250a7eaff99b7fde796d44afbc58204d321d638793c140451840b20c150be2e3e0eb9dcab21b4614b6a681ccaececef64934fef0872c2dc03"}}}}}, 0x0) 211.623122ms ago: executing program 6 (id=2365): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) 211.552266ms ago: executing program 6 (id=2366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 142.131601ms ago: executing program 4 (id=2367): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 141.918126ms ago: executing program 6 (id=2368): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 111.669816ms ago: executing program 4 (id=2369): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendto$inet6(r0, &(0x7f0000000480)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7d", 0x38, 0x40000, &(0x7f0000000280)={0x1d, 0x5e23, 0x1fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) 111.503868ms ago: executing program 6 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 449.353µs ago: executing program 4 (id=2371): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005"], 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 251.163µs ago: executing program 6 (id=2372): bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) 143.66µs ago: executing program 3 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 77.52µs ago: executing program 5 (id=2374): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 6 (id=2375): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 4 (id=2376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): 54.940267][ T5736] bridge_slave_1: entered promiscuous mode [ 54.948516][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.968087][ T5741] team0: Port device team_slave_0 added [ 54.977433][ T5741] team0: Port device team_slave_1 added [ 55.009333][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.035596][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.038969][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.042453][ T5745] bridge_slave_0: entered allmulticast mode [ 55.046204][ T5745] bridge_slave_0: entered promiscuous mode [ 55.071382][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.076393][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.087744][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.090904][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.094436][ T5745] bridge_slave_1: entered allmulticast mode [ 55.098366][ T5745] bridge_slave_1: entered promiscuous mode [ 55.115514][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.118374][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.129650][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.144217][ T5734] team0: Port device team_slave_0 added [ 55.158610][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.161779][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.172025][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.185235][ T5734] team0: Port device team_slave_1 added [ 55.194704][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.207938][ T5736] team0: Port device team_slave_0 added [ 55.218260][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.231072][ T5736] team0: Port device team_slave_1 added [ 55.243031][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.246311][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.257095][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.268724][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.271690][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.281385][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.315763][ T5741] hsr_slave_0: entered promiscuous mode [ 55.318436][ T5741] hsr_slave_1: entered promiscuous mode [ 55.322309][ T5745] team0: Port device team_slave_0 added [ 55.325350][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.327658][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.335871][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.340784][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.343391][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.351291][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.360081][ T5745] team0: Port device team_slave_1 added [ 55.387438][ T5734] hsr_slave_0: entered promiscuous mode [ 55.389865][ T5734] hsr_slave_1: entered promiscuous mode [ 55.392134][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 55.394589][ T5734] Cannot create hsr debugfs directory [ 55.454212][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.456710][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.465802][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.497156][ T5736] hsr_slave_0: entered promiscuous mode [ 55.500197][ T5736] hsr_slave_1: entered promiscuous mode [ 55.502631][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 55.504593][ T5736] Cannot create hsr debugfs directory [ 55.507476][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.510150][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.521600][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.644185][ T5745] hsr_slave_0: entered promiscuous mode [ 55.647234][ T5745] hsr_slave_1: entered promiscuous mode [ 55.650123][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 55.653315][ T5745] Cannot create hsr debugfs directory [ 55.854557][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.861484][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.867995][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.872962][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.887747][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.894095][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.897229][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.902075][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.945503][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.952834][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.955673][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.960563][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.966532][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.973513][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.989484][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.993702][ T5749] Bluetooth: hci1: command tx timeout [ 55.996386][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.030702][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.036212][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.039657][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.046581][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.050119][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.056237][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.059875][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.065966][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.072600][ T5749] Bluetooth: hci3: command tx timeout [ 56.073396][ T5742] Bluetooth: hci2: command tx timeout [ 56.073440][ T5748] Bluetooth: hci0: command tx timeout [ 56.152679][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.161222][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.165363][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.173008][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.182797][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.189242][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.197966][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.200844][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.205859][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.246097][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.269129][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.271927][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.287595][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.289951][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.306226][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.328011][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.353598][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.369255][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.380228][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.383519][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.395103][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.397389][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.404603][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.407661][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.431261][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.434768][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.467614][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.498881][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.518678][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.521799][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.536685][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.539425][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.595754][ T5745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.599080][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.737512][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.777342][ T5741] veth0_vlan: entered promiscuous mode [ 56.786573][ T5741] veth1_vlan: entered promiscuous mode [ 56.801186][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.808902][ T5741] veth0_macvtap: entered promiscuous mode [ 56.818095][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.825239][ T5741] veth1_macvtap: entered promiscuous mode [ 56.847208][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.858220][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.874798][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885650][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.888690][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.896719][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.904786][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.909321][ T5736] veth0_vlan: entered promiscuous mode [ 56.934680][ T5736] veth1_vlan: entered promiscuous mode [ 56.937995][ T5734] veth0_vlan: entered promiscuous mode [ 56.967791][ T5734] veth1_vlan: entered promiscuous mode [ 57.013061][ T5736] veth0_macvtap: entered promiscuous mode [ 57.013192][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.019440][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.036875][ T5736] veth1_macvtap: entered promiscuous mode [ 57.044642][ T5745] veth0_vlan: entered promiscuous mode [ 57.067199][ T5734] veth0_macvtap: entered promiscuous mode [ 57.075292][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.075951][ T5745] veth1_vlan: entered promiscuous mode [ 57.078069][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.084606][ T5734] veth1_macvtap: entered promiscuous mode [ 57.094060][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.105564][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.113773][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.121105][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.124861][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.132307][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.136108][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.140155][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.149267][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.164808][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.174532][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.185011][ T5745] veth0_macvtap: entered promiscuous mode [ 57.189016][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.192650][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.205687][ T5745] veth1_macvtap: entered promiscuous mode [ 57.243910][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.246912][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.248155][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.250045][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.268589][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.273506][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296281][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.299236][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303020][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.305724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.336084][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.340591][ T5886] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.346252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.354255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.384924][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.388963][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.400625][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.405860][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.428853][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.432625][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.502360][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.628016][ T5903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 57.749029][ T5916] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 57.954749][ T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 57.958279][ T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 57.959168][ T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 57.959883][ T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 57.959896][ T50] rtc rtc0: __rtc_set_alarm: err=-22 [ 58.085285][ T5742] Bluetooth: hci1: command tx timeout [ 58.152019][ T5742] Bluetooth: hci2: command tx timeout [ 58.152358][ T5749] Bluetooth: hci3: command tx timeout [ 58.152388][ T5748] Bluetooth: hci0: command tx timeout qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 58.287263][ T5961] netlink: 208 bytes leftover after parsing attributes in process `syz.0.37'. [ 58.304629][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 58.310847][ T1128] ata1: failed to read log page 10h (errno=-5) [ 58.313134][ T1128] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 58.315732][ T1128] ata1.00: irq_stat 0x41000000 [ 58.317523][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 58.319812][ T1128] ata1.00: cmd 60/40:70:5e:89:03/05:00:00:00:00/40 tag 14 ncq dma 688128 in [ 58.319812][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 58.326184][ T1128] ata1.00: status: { DRDY } [ 58.327746][ T1128] ata1.00: error: { ABRT } [ 58.329248][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 58.331275][ T1128] ata1.00: cmd 60/c8:78:9e:8e:03/02:00:00:00:00/40 tag 15 ncq dma 364544 in [ 58.331275][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 58.337429][ T1128] ata1.00: status: { DRDY } [ 58.338891][ T1128] ata1.00: error: { ABRT } [ 58.341451][ T1128] ata1.00: configured for UDMA/100 [ 58.343563][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 58.346947][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 58.349838][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 58.352862][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 89 5e 00 05 40 00 [ 58.355389][ T1128] I/O error, dev sda, sector 231774 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 58.358653][ T1128] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 58.362893][ T1128] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 58.365800][ T1128] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 58.368495][ T1128] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 03 8e 9e 00 02 c8 00 [ 58.371193][ T1128] I/O error, dev sda, sector 233118 op 0x0:(READ) flags 0x84700 phys_seg 88 prio class 2 [ 58.374467][ T1128] ata1: EH complete [ 58.627886][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 58.727372][ T5992] use of bytesused == 0 is deprecated and will be removed in the future, [ 58.732875][ T5992] use the actual size instead. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x98000) [ 58.803500][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 58.806492][ T1128] ata1: failed to read log page 10h (errno=-5) [ 58.809244][ T1128] ata1.00: NCQ disabled due to excessive errors [ 58.814073][ T1128] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 58.818150][ T1128] ata1.00: irq_stat 0x40000000 [ 58.820593][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 58.823308][ T1128] ata1.00: cmd 60/c0:70:76:91:03/04:00:00:00:00/40 tag 14 ncq dma 622592 in [ 58.823308][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 58.830487][ T1128] ata1.00: status: { DRDY } [ 58.832962][ T1128] ata1.00: error: { ABRT } [ 58.836891][ T1128] ata1.00: configured for UDMA/100 [ 58.840048][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 58.844811][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 58.848257][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 58.851759][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 91 76 00 04 c0 00 [ 58.854515][ T1128] I/O error, dev sda, sector 233846 op 0x0:(READ) flags 0x80700 phys_seg 152 prio class 2 [ 58.858091][ T1128] ata1: EH complete [ 58.878635][ T6005] Cannot find add_set index 46338 as target [ 58.926823][ T6012] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 58.996222][ T6017] smc: net device wlan0 applied user defined pnetid SYZ0 [ 59.024371][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 59.102452][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 59.406469][ T6055] process 'syz.0.78' launched './file2' with NULL argv: empty string added [ 59.552510][ T6070] netlink: 348 bytes leftover after parsing attributes in process `syz.2.85'. [ 59.596004][ T6074] program syz.2.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.666364][ T6084] capability: warning: `syz.0.92' uses deprecated v2 capabilities in a way that may be insecure [ 59.878833][ T6109] Bluetooth: MGMT ver 1.23 [ 60.161768][ T5742] Bluetooth: hci1: command tx timeout [ 60.191213][ T6152] [U]  [ 60.232235][ T5742] Bluetooth: hci3: command tx timeout [ 60.232745][ T5748] Bluetooth: hci2: command tx timeout [ 60.242159][ T5748] Bluetooth: hci0: command tx timeout [ 60.899636][ T6200] ======================================================= [ 60.899636][ T6200] WARNING: The mand mount option has been deprecated and [ 60.899636][ T6200] and is ignored by this kernel. Remove the mand [ 60.899636][ T6200] option from the mount to silence this warning. [ 60.899636][ T6200] ======================================================= [ 61.762592][ T6290] Bluetooth: MGMT ver 1.23 [ 61.943826][ T1340] IPVS: starting estimator thread 0... [ 62.030221][ T6318] tipc: Enabling of bearer rejected, failed to enable media [ 62.035363][ T6308] IPVS: using max 23 ests per chain, 55200 per kthread [ 62.134693][ T40] audit: type=1326 audit(1778525862.113:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.210" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x0 [ 62.233403][ T5748] Bluetooth: hci1: command tx timeout [ 62.313287][ T5748] Bluetooth: hci0: command tx timeout [ 62.313309][ T5742] Bluetooth: hci2: command tx timeout [ 62.321906][ T5742] Bluetooth: hci3: command 0x0419 tx timeout [ 63.081481][ T6367] warning: `syz.2.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.140345][ T6373] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 63.151382][ T6373] netlink: 96 bytes leftover after parsing attributes in process `syz.0.231'. [ 63.166571][ T6373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.231'. [ 63.170187][ T6373] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 63.173737][ T6373] netlink: 'syz.0.231': attribute type 8 has an invalid length. [ 63.176781][ T6373] netlink: 606 bytes leftover after parsing attributes in process `syz.0.231'. [ 63.196125][ T6380] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 63.224173][ T6381] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.230907][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 63.238862][ T6385] netlink: 277 bytes leftover after parsing attributes in process `syz.1.236'. [ 63.252406][ T6385] netlink: 277 bytes leftover after parsing attributes in process `syz.1.236'. [ 63.312821][ T6391] can0: slcan on ptm0. [ 63.423421][ T6390] can0 (unregistered): slcan off ptm0. [ 63.680124][ T40] audit: type=1326 audit(1778525863.653:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.3.257" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefcc code=0x0 [ 63.733132][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 63.736103][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 63.739297][ T6434] netlink: 'syz.2.260': attribute type 7 has an invalid length. [ 63.742956][ T6434] netlink: 'syz.2.260': attribute type 13 has an invalid length. [ 64.000205][ T40] audit: type=1326 audit(1778525863.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.2.270" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff6fcc code=0x0 [ 64.041694][ T6464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.272'. [ 64.156155][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 64.392689][ T5749] Bluetooth: hci3: command 0x0419 tx timeout [ 64.596421][ T6502] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 64.759263][ T6516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 64.838083][ T50] IPVS: starting estimator thread 0... [ 64.840484][ T6523] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 64.896489][ T40] audit: type=1326 audit(1778525864.873:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.906115][ T40] audit: type=1326 audit(1778525864.873:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.917434][ T40] audit: type=1326 audit(1778525864.873:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.930842][ T40] audit: type=1326 audit(1778525864.873:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.940755][ T40] audit: type=1326 audit(1778525864.873:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.942542][ T6524] IPVS: using max 29 ests per chain, 69600 per kthread [ 64.949947][ T40] audit: type=1326 audit(1778525864.883:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 64.959181][ T40] audit: type=1326 audit(1778525864.883:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 65.440558][ T6592] netlink: 'syz.3.331': attribute type 83 has an invalid length. [ 65.756190][ T6632] netlink: 'syz.0.351': attribute type 5 has an invalid length. [ 65.768758][ T6632] geneve2: entered promiscuous mode [ 65.771167][ T6632] geneve2: entered allmulticast mode [ 65.777760][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 65.780885][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 65.786447][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 65.789549][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 65.906280][ T6652] capability: warning: `syz.2.361' uses 32-bit capabilities (legacy support in use) [ 66.003432][ T5819] kernel read not supported for file 246/task/247/cmdline (pid: 5819 comm: kworker/1:3) [ 66.048671][ T6662] netlink: 'syz.0.366': attribute type 11 has an invalid length. [ 66.147423][ T6672] program syz.3.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.152809][ T6674] netlink: 'syz.0.372': attribute type 83 has an invalid length. [ 66.344941][ T6694] netlink: 'syz.2.381': attribute type 5 has an invalid length. [ 66.360901][ T6694] geneve2: entered promiscuous mode [ 66.363918][ T6694] geneve2: entered allmulticast mode [ 66.367118][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 66.372157][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 66.374947][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 66.378140][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 66.807722][ T6742] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 66.810452][ T6742] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.817006][ T6742] vhci_hcd vhci_hcd.0: Device attached [ 66.824870][ T6742] vhci_hcd vhci_hcd.0: port 0 already used [ 66.829658][ T6744] vhci_hcd: connection closed [ 66.831201][ T5874] vhci_hcd vhci_hcd.0: stop threads [ 66.837158][ T5874] vhci_hcd vhci_hcd.0: release socket [ 66.846613][ T5874] vhci_hcd vhci_hcd.0: disconnect device [ 66.853606][ T6749] tipc: Started in network mode [ 66.855541][ T6749] tipc: Node identity 4246, cluster identity 4711 [ 66.857690][ T6749] tipc: Node number set to 16966 [ 66.859598][ T6749] tipc: Cannot configure node identity twice [ 67.066216][ T6769] Zero length message leads to an empty skb [ 67.641162][ T6816] vlan2: entered promiscuous mode [ 67.644703][ T6816] gretap0: entered promiscuous mode [ 68.094867][ T6876] : entered promiscuous mode [ 68.196507][ T6896] comedi comedi3: unsupported base address 0x4f23 [ 68.348231][ T6917] __nla_validate_parse: 22 callbacks suppressed [ 68.348249][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.489'. [ 68.365116][ T6917] vlan3: entered promiscuous mode [ 68.366980][ T6917] gretap0: entered promiscuous mode [ 68.553137][ T5819] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.711848][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 68.724769][ T5819] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 68.732993][ T5819] usb 8-1: config 0 has no interface number 0 [ 68.738386][ T5819] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.749060][ T5819] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 68.754577][ T5819] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 68.759939][ T5819] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 68.765101][ T5819] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 68.768971][ T5819] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.769177][ T6955] validate_nla: 4 callbacks suppressed [ 68.769189][ T6955] netlink: 'syz.0.506': attribute type 5 has an invalid length. [ 68.777449][ T5819] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 68.785017][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.789250][ T5819] usb 8-1: Product: syz [ 68.791263][ T5819] usb 8-1: Manufacturer: syz [ 68.793603][ T5819] usb 8-1: SerialNumber: syz [ 68.799859][ T5819] usb 8-1: config 0 descriptor?? [ 69.030497][ T5819] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 69.223743][ T6910] iowarrior 8-1:0.186: Error -90 while submitting URB [ 69.236775][ T24] usb 8-1: USB disconnect, device number 2 [ 69.489109][ T7014] vivid-007: disconnect [ 69.495483][ T7013] vivid-007: reconnect [ 70.647778][ T7069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 70.755690][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'. [ 70.800640][ T7086] sctp: [Deprecated]: syz.2.568 (pid 7086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.800640][ T7086] Use struct sctp_sack_info instead [ 70.856016][ T7092] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 70.859535][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 70.869105][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 70.883982][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 70.889763][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 71.473824][ T7162] vivid-000: disconnect [ 71.475698][ T7161] vivid-000: reconnect [ 71.510245][ T7168] netlink: 116 bytes leftover after parsing attributes in process `syz.0.610'. [ 71.555473][ T7174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 71.629886][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 71.629897][ T40] audit: type=1326 audit(1778525871.603:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.652640][ T40] audit: type=1326 audit(1778525871.603:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.665247][ T40] audit: type=1326 audit(1778525871.613:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.678848][ T40] audit: type=1326 audit(1778525871.613:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.686489][ T40] audit: type=1326 audit(1778525871.613:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.699726][ T40] audit: type=1326 audit(1778525871.613:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.706780][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.619'. [ 71.709990][ T40] audit: type=1326 audit(1778525871.613:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 71.711828][ T7193] netlink: 'syz.1.620': attribute type 19 has an invalid length. [ 71.723705][ T7193] netlink: 'syz.1.620': attribute type 20 has an invalid length. [ 71.873158][ T1340] hid-generic FFFF:0008:0003.0002: item fetching failed at offset 0/1 [ 71.878201][ T1340] hid-generic FFFF:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 72.017108][ T7233] binder: 7231:7233 ioctl 541b 0 returned -22 [ 72.356626][ T7271] program syz.1.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.373197][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.446467][ T7279] tmpfs: Cannot change global quota limit on remount [ 72.533379][ T5818] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.540184][ T5818] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.552134][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.555899][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.560222][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.569850][ T5818] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.575233][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.578663][ T5818] usb 5-1: Product: syz [ 72.580532][ T5818] usb 5-1: Manufacturer: syz [ 72.592108][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 72.595420][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 72.601006][ T5818] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 72.608836][ T5818] cdc_wdm 5-1:1.0: Unknown control protocol [ 72.792200][ T1340] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.878507][ T5818] usb 5-1: USB disconnect, device number 2 [ 72.957323][ T1340] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 72.964847][ T1340] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.976347][ T1340] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.980278][ T1340] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.984459][ T1340] usb 6-1: Product: syz [ 72.986300][ T1340] usb 6-1: Manufacturer: syz [ 72.988519][ T1340] usb 6-1: SerialNumber: syz [ 72.995563][ T1340] usb 6-1: config 0 descriptor?? [ 72.999052][ T7291] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.008697][ T1340] usb 6-1: selecting invalid altsetting 0 [ 73.216615][ T7291] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.220418][ T7291] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.229427][ T7290] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 73.235339][ T1340] usb 6-1: USB disconnect, device number 2 [ 73.312426][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 73.418596][ T7374] __nla_validate_parse: 6 callbacks suppressed [ 73.418616][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 74.534566][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 74.857595][ T7425] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 75.360307][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 75.384783][ T7464] tipc: Enabled bearer , priority 9 [ 75.482798][ T7479] overlay: Unknown parameter '/6M߶}5&IG$ΆPAHB-\,Hftd&C)ZVF*kdՠQcTiw UEpΛS2 p* W~xVAg]XC4M3 !' [ 75.743960][ T7512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.764'. [ 75.745005][ T7511] qrtr: Invalid version 255 [ 76.043276][ T7550] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 76.043276][ T7550] program syz.0.783 not setting count and/or reply_len properly [ 76.104279][ T40] audit: type=1800 audit(1778525876.083:20): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.784" name="file0" dev="tmpfs" ino=1096 res=0 errno=0 [ 76.210085][ T7572] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 76.212166][ T7573] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 76.213660][ T7572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.315104][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.318178][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.359602][ T7598] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 76.472170][ T5742] Bluetooth: hci3: command 0x0419 tx timeout [ 76.481294][ T7612] netlink: 810 bytes leftover after parsing attributes in process `syz.0.812'. [ 76.651798][ T1340] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.811881][ T1340] usb 8-1: Using ep0 maxpacket: 8 [ 76.816696][ T1340] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.820239][ T1340] usb 8-1: config 0 has no interface number 0 [ 76.823459][ T1340] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.828319][ T1340] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.835511][ T1340] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.838970][ T7646] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 76.840557][ T1340] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.850881][ T1340] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.855110][ T1340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.864231][ T1340] usb 8-1: config 0 descriptor?? [ 76.878599][ T1340] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 77.080182][ T5819] usb 8-1: USB disconnect, device number 3 [ 77.081401][ T7657] netlink: 'syz.0.834': attribute type 11 has an invalid length. [ 77.086424][ T5819] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 77.087213][ T7657] netlink: 'syz.0.834': attribute type 4 has an invalid length. [ 77.091626][ T7657] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.834'. [ 77.411051][ T7659] vivid-007: disconnect [ 77.421676][ T7658] vivid-007: reconnect [ 79.002078][ T5605] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.164239][ T5605] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 79.167863][ T5605] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.172617][ T5605] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.175851][ T5605] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.178909][ T5605] usb 5-1: Product: syz [ 79.180488][ T5605] usb 5-1: Manufacturer: syz [ 79.182363][ T5605] usb 5-1: SerialNumber: syz [ 79.189804][ T5605] usb 5-1: config 0 descriptor?? [ 79.193391][ T7811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.198229][ T5605] usb 5-1: selecting invalid altsetting 0 [ 79.411521][ T7811] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 79.414638][ T7811] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 79.423094][ T7809] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 79.431033][ T5882] usb 5-1: USB disconnect, device number 3 [ 80.059603][ T7842] smc: net device vcan0 applied user defined pnetid SYZ1 [ 80.205522][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 80.293214][ T40] audit: type=1326 audit(1778525880.273:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.936" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x0 [ 80.391778][ T5882] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.415896][ T7888] netlink: 228 bytes leftover after parsing attributes in process `syz.1.946'. [ 80.557380][ T5882] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 80.558259][ T7905] pim6reg99999999: entered allmulticast mode [ 80.563502][ T5882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.569887][ T5882] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.575831][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.578774][ T5882] usb 7-1: Product: syz [ 80.580280][ T5882] usb 7-1: Manufacturer: syz [ 80.582699][ T5882] usb 7-1: SerialNumber: syz [ 80.586213][ T5882] usb 7-1: config 0 descriptor?? [ 80.589194][ T7854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.598672][ T5882] usb 7-1: selecting invalid altsetting 0 [ 80.808462][ T7854] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.813291][ T7854] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.823599][ T7853] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 80.828383][ T7062] usb 7-1: USB disconnect, device number 2 [ 80.899257][ T7934] tipc: Enabling of bearer rejected, failed to enable media [ 80.964753][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'. [ 81.632941][ T7990] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 81.752365][ T7062] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.908194][ T7062] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.915923][ T7062] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.922078][ T7062] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.927789][ T7062] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 81.937138][ T7062] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 81.950353][ T7062] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.962851][ T7062] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.966446][ T7062] usb 7-1: Product: syz [ 81.967875][ T7062] usb 7-1: Manufacturer: syz [ 81.981766][ T7062] cdc_wdm 7-1:1.0: skipping garbage [ 81.983566][ T7062] cdc_wdm 7-1:1.0: skipping garbage [ 81.988890][ T7062] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 81.991109][ T7062] cdc_wdm 7-1:1.0: Unknown control protocol [ 82.102842][ T40] audit: type=1326 audit(1778525883.082:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.1014" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefcc code=0x0 [ 82.242607][ T7062] usb 7-1: USB disconnect, device number 3 [ 82.963690][ T8040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.021456][ T8045] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1022'. [ 83.090667][ T8056] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 83.475056][ T8091] trusted_key: encrypted_key: key user:syz not found [ 83.611198][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 83.672309][ T6580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.676877][ T6580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 83.776807][ T6580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.782004][ T6580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 83.823139][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.829079][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.833162][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.836356][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.839272][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.878282][ T6580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.884639][ T6580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.018946][ T6580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.023626][ T6580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.038770][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 84.289156][ T6580] bridge_slave_1: left allmulticast mode [ 84.292068][ T6580] bridge_slave_1: left promiscuous mode [ 84.296512][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.938103][ T6580] bridge_slave_0: left allmulticast mode [ 84.941251][ T6580] bridge_slave_0: left promiscuous mode [ 84.945010][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.189102][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.203205][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.208621][ T6580] bond0 (unregistering): Released all slaves [ 85.317763][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.333338][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.335864][ T8120] bridge_slave_0: entered allmulticast mode [ 85.350485][ T8120] bridge_slave_0: entered promiscuous mode [ 85.363148][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.366678][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.369530][ T8120] bridge_slave_1: entered allmulticast mode [ 85.375239][ T8120] bridge_slave_1: entered promiscuous mode [ 85.428358][ T8221] atomic_op ffff888026502198 conn xmit_atomic 0000000000000000 [ 85.449949][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.455503][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 85.461922][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.486004][ T8120] team0: Port device team_slave_0 added [ 85.491550][ T8120] team0: Port device team_slave_1 added [ 85.541848][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.544242][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.554015][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.558567][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.560771][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.569912][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.596610][ T8120] hsr_slave_0: entered promiscuous mode [ 85.599113][ T8120] hsr_slave_1: entered promiscuous mode [ 85.601213][ T8120] debugfs: 'hsr0' already exists in 'hsr' [ 85.603376][ T8120] Cannot create hsr debugfs directory [ 85.633592][ T6580] hsr_slave_0: left promiscuous mode [ 85.635903][ T6580] hsr_slave_1: left promiscuous mode [ 85.638046][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.640473][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.643997][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.646588][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.654645][ T6580] veth1_macvtap: left promiscuous mode [ 85.656935][ T6580] veth0_macvtap: left promiscuous mode [ 85.658862][ T6580] veth1_vlan: left promiscuous mode [ 85.660615][ T6580] veth0_vlan: left promiscuous mode [ 85.826546][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 85.837050][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 85.907067][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 85.924600][ T5749] Bluetooth: hci0: command tx timeout [ 86.018807][ T8120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.023869][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.026734][ T8120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.031373][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.035537][ T8120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.044148][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.047838][ T8120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.057164][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.100552][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.103531][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.106415][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.108847][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.118320][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 86.165909][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.176365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.179629][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.190799][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.199902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.202633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.213584][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.216504][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.278483][ T6580] IPVS: stop unused estimator thread 0... [ 86.316784][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 86.486093][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.557774][ T1037] cfg80211: failed to load regulatory.db [ 86.640789][ T8120] veth0_vlan: entered promiscuous mode [ 86.648326][ T8120] veth1_vlan: entered promiscuous mode [ 86.665289][ T8120] veth0_macvtap: entered promiscuous mode [ 86.670021][ T8120] veth1_macvtap: entered promiscuous mode [ 86.684152][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.693744][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.701561][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.705372][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.709230][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.712599][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.769130][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.772091][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.785333][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.788641][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.311325][ T8320] binder_alloc: binder_alloc_mmap_handler: 8319 80ffd000-81000000 already mapped failed -16 [ 87.612212][ T7062] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.652120][ T8346] qrtr: Invalid version 255 [ 87.689092][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 87.693675][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 87.697520][ T8348] netlink: 'syz.2.1132': attribute type 19 has an invalid length. [ 87.701085][ T8348] netlink: 'syz.2.1132': attribute type 20 has an invalid length. [ 87.762134][ T7062] usb 6-1: Using ep0 maxpacket: 8 [ 87.766788][ T7062] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 87.770004][ T7062] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 87.775317][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.780525][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.785118][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.789459][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.796216][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 87.801535][ T7062] usb 6-1: config 168 interface 0 has no altsetting 0 [ 87.805190][ T7062] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 87.808526][ T7062] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 87.812515][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.816840][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.820794][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.824668][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.833549][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 87.839261][ T7062] usb 6-1: config 168 interface 0 has no altsetting 0 [ 87.849203][ T7062] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 87.851585][ T7062] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 87.855178][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.859153][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.864563][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.868376][ T7062] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.872554][ T7062] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 87.872572][ T7062] usb 6-1: config 168 interface 0 has no altsetting 0 [ 87.874802][ T7062] usb 6-1: string descriptor 0 read error: -22 [ 87.881606][ T7062] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.885344][ T7062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.895149][ T7062] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 87.992492][ T5749] Bluetooth: hci0: command tx timeout [ 88.302141][ T8392] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 88.302513][ T39] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 88.475994][ T39] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 88.478732][ T39] usb 8-1: config 0 has no interface number 0 [ 88.480799][ T39] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 88.485151][ T39] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.490330][ T39] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.496458][ T39] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 88.500336][ T39] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 88.504164][ T39] usb 8-1: Product: syz [ 88.505742][ T39] usb 8-1: SerialNumber: syz [ 88.509134][ T39] usb 8-1: config 0 descriptor?? [ 88.517692][ T39] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 88.532849][ T39] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input6 [ 88.729604][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.730403][ T7062] usb 8-1: USB disconnect, device number 4 [ 88.733115][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 88.749302][ T7062] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 88.852666][ T5088] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 88.872367][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 88.934633][ T8431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1171'. [ 90.083169][ T5749] Bluetooth: hci0: command tx timeout [ 90.164283][ T5088] usb 6-1: USB disconnect, device number 3 [ 90.410356][ T8503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1206'. [ 90.416580][ T8503] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1206'. [ 90.421439][ T8503] netlink: 'syz.1.1206': attribute type 6 has an invalid length. [ 90.426611][ T8503] netlink: 'syz.1.1206': attribute type 5 has an invalid length. [ 90.431201][ T8503] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1206'. [ 90.527419][ T8516] ptrace attach of "/syz-executor exec"[5741] was attempted by ""[8516] [ 90.614055][ T8526] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 90.784099][ T8553] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1230'. [ 90.846627][ T5749] Bluetooth: hci1: hardware error 0xff [ 91.489787][ T8596] Bluetooth: MGMT ver 1.23 [ 91.971664][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 92.153174][ T5742] Bluetooth: hci0: command tx timeout [ 92.176177][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 92.750732][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 92.884277][ T5749] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 93.452636][ T8743] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.1315'. [ 93.719953][ T8751] IPVS: Error connecting to the multicast addr [ 94.233381][ T5749] Bluetooth: hci0: command tx timeout [ 95.409879][ T8809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.438796][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 95.577044][ T8824] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 96.206032][ T8878] netem: change failed [ 96.346041][ T8890] mmap: syz.3.1380 (8890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.895178][ T5088] hid-generic 000F:FFFFFFFA:0009.0003: unknown main item tag 0x5 [ 96.904338][ T5088] hid-generic 000F:FFFFFFFA:0009.0003: hidraw1: HID v0.02 Device [syz0] on syz1 [ 96.979419][ T8948] fido_id[8948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.168221][ T8969] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1414'. [ 97.273815][ T5088] kernel write not supported for file /uinput (pid: 5088 comm: kworker/2:2) [ 97.327440][ T8981] vlan3: entered allmulticast mode [ 97.330244][ T8981] macsec0: entered allmulticast mode [ 97.332548][ T8981] veth1_macvtap: entered allmulticast mode [ 97.369937][ T8985] program syz.4.1421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.723333][ T5819] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.887922][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 97.891094][ T5819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 97.896679][ T5819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.903226][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.911164][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.916108][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.919850][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.924643][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.929869][ T5819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 97.935093][ T5819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 97.939828][ T5819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.948557][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.952490][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.956576][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.965481][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.977618][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.988985][ T5819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 97.994691][ T5819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 98.001987][ T5819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 98.006629][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.011406][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.018919][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.025275][ T5819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.030407][ T5819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 98.036434][ T5819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 98.042413][ T5819] usb 8-1: string descriptor 0 read error: -22 [ 98.045412][ T5819] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.049310][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.065387][ T5819] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.916181][ T9054] tipc: Enabling of bearer rejected, failed to enable media [ 99.100734][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 99.670787][ T9079] block device autoloading is deprecated and will be removed. [ 100.314690][ T7062] usb 8-1: USB disconnect, device number 5 [ 100.548817][ T9150] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.611901][ T9150] @0: renamed from bond_slave_1 (while UP) [ 100.702908][ T9152] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 100.797984][ T9158] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 101.039736][ T9170] trusted_key: encrypted_key: key trusted:syz not found [ 101.181852][ T5818] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 101.331885][ T5818] usb 9-1: Using ep0 maxpacket: 8 [ 101.336029][ T5818] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 101.339360][ T5818] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.346080][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.350903][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.357264][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.361677][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.366647][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.372594][ T5818] usb 9-1: config 168 interface 0 has no altsetting 0 [ 101.376062][ T5818] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 101.379031][ T5818] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.384619][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.389404][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.394329][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.399183][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.405339][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.410790][ T5818] usb 9-1: config 168 interface 0 has no altsetting 0 [ 101.414883][ T5818] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 101.418073][ T5818] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.423068][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.426861][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.434410][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.439206][ T5818] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.443376][ T5818] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.448318][ T5818] usb 9-1: config 168 interface 0 has no altsetting 0 [ 101.455826][ T5818] usb 9-1: string descriptor 0 read error: -22 [ 101.458395][ T5818] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.461473][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.473358][ T5818] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.783353][ T9203] netlink: 'syz.3.1519': attribute type 4 has an invalid length. [ 102.291837][ T5882] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 102.443607][ T5882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.447815][ T5882] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.451681][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.458947][ T5882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.462442][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.465944][ T5882] usb 6-1: Product: syz [ 102.467542][ T5882] usb 6-1: Manufacturer: syz [ 102.469153][ T5882] usb 6-1: SerialNumber: syz [ 102.478110][ T5882] hub 6-1:1.0: bad descriptor, ignoring hub [ 102.480246][ T5882] hub 6-1:1.0: probe with driver hub failed with error -5 [ 102.581977][ T5818] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.685558][ T5882] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.741857][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 102.745744][ T5818] usb 8-1: unable to get BOS descriptor or descriptor too short [ 102.749956][ T5818] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 102.753341][ T5818] usb 8-1: config 8 has no interface number 0 [ 102.755438][ T5818] usb 8-1: config 8 interface 188 has no altsetting 0 [ 102.760689][ T5818] usb 8-1: string descriptor 0 read error: -22 [ 102.763331][ T5818] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 102.766550][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.775212][ T5818] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 102.778092][ T5818] dw2102: su3000_power_ctrl: 1, initialized 0 [ 102.780739][ T5818] dvb-usb: bulk message failed: -22 (2/0) [ 102.789992][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.798051][ T5818] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 102.802259][ T5818] usb 8-1: media controller created [ 102.804216][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.806233][ T5818] dw2102: i2c transfer failed. [ 102.808142][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.810069][ T5818] dw2102: i2c transfer failed. [ 102.811656][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.813846][ T5818] dw2102: i2c transfer failed. [ 102.815475][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.817531][ T5818] dw2102: i2c transfer failed. [ 102.820929][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.824350][ T5818] dw2102: i2c transfer failed. [ 102.826508][ T5818] dvb-usb: bulk message failed: -22 (6/0) [ 102.829020][ T5818] dw2102: i2c transfer failed. [ 102.831020][ T5818] dvb-usb: MAC address: 02:02:02:02:02:02 [ 102.843474][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.860688][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 102.864022][ T5818] dw2102: command 0x0e transfer failed. [ 102.866672][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 102.870245][ T5818] dw2102: command 0x0e transfer failed. [ 103.192182][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 103.196531][ T5818] dw2102: command 0x0e transfer failed. [ 103.198365][ T5818] dvb-usb: bulk message failed: -22 (3/0) [ 103.200438][ T5818] dw2102: command 0x0e transfer failed. [ 103.202546][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 103.204729][ T5818] dw2102: command 0x51 transfer failed. [ 103.208908][ T9211] dvb-usb: bulk message failed: -22 (5/0) [ 103.212547][ T9211] dw2102: i2c transfer failed. [ 103.232419][ T5818] DVB: Unable to find symbol ds3000_attach() [ 103.234396][ T5818] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 103.281810][ T5818] rc_core: IR keymap rc-su3000 not found [ 103.283642][ T5818] Registered IR keymap rc-empty [ 103.288008][ T5818] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 103.294713][ T5818] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input8 [ 103.302086][ T5818] dvb-usb: schedule remote query interval to 150 msecs. [ 103.304444][ T5818] dw2102: su3000_power_ctrl: 0, initialized 1 [ 103.306373][ T5818] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 103.310572][ T5818] usb 8-1: USB disconnect, device number 6 [ 103.411566][ T5818] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 103.753073][ T5088] usb 9-1: USB disconnect, device number 2 [ 103.873828][ T5882] usb 6-1: USB disconnect, device number 4 [ 103.879089][ T5882] usblp1: removed [ 103.958584][ T9223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.068871][ T9235] program syz.4.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.974824][ T40] audit: type=1326 audit(1778525905.952:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.3.1578" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x0 [ 106.002928][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 106.130062][ T9356] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1593'. [ 106.179874][ T5819] kernel read not supported for file /media0 (pid: 5819 comm: kworker/1:3) [ 106.398205][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 106.401864][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.401884][ T5749] Tainted: [L]=SOFTLOCKUP [ 106.401889][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.401896][ T5749] Workqueue: hci2 hci_rx_work [ 106.401916][ T5749] Call Trace: [ 106.401921][ T5749] [ 106.401925][ T5749] dump_stack_lvl+0x100/0x190 [ 106.401939][ T5749] sysfs_warn_dup.cold+0x1c/0x28 [ 106.401956][ T5749] sysfs_create_dir_ns+0x24b/0x2b0 [ 106.401970][ T5749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 106.401981][ T5749] ? find_held_lock+0x2b/0x80 [ 106.402001][ T5749] ? kobject_add_internal+0x25f/0x930 [ 106.402013][ T5749] ? kobject_add_internal+0x25f/0x930 [ 106.402025][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.402039][ T5749] kobject_add_internal+0x2c8/0x930 [ 106.402053][ T5749] kobject_add+0x16a/0x1e0 [ 106.402065][ T5749] ? __pfx_kobject_add+0x10/0x10 [ 106.402076][ T5749] ? class_to_subsys+0x10f/0x150 [ 106.402093][ T5749] ? kobject_put+0xb9/0x640 [ 106.402102][ T5749] ? _raw_spin_unlock+0x28/0x50 [ 106.402120][ T5749] device_add+0x294/0x1950 [ 106.402134][ T5749] ? __pfx_dev_set_name+0x10/0x10 [ 106.402149][ T5749] ? __pfx_device_add+0x10/0x10 [ 106.402163][ T5749] ? mgmt_send_event_skb+0x2fb/0x460 [ 106.402184][ T5749] hci_conn_add_sysfs+0x1a3/0x260 [ 106.402201][ T5749] le_conn_complete_evt+0x11eb/0x1f60 [ 106.402221][ T5749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.402239][ T5749] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 106.402255][ T5749] ? skb_pull_data+0x15f/0x1e0 [ 106.402271][ T5749] hci_le_meta_evt+0x34a/0x5f0 [ 106.402287][ T5749] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 106.402304][ T5749] hci_event_packet+0x51c/0xcd0 [ 106.402318][ T5749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.402334][ T5749] ? __pfx_hci_event_packet+0x10/0x10 [ 106.402350][ T5749] ? kcov_remote_start+0x374/0x660 [ 106.402365][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 106.402384][ T5749] hci_rx_work+0x451/0xfc0 [ 106.402402][ T5749] process_one_work+0xa0e/0x1980 [ 106.402456][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 106.402483][ T5749] ? __pfx_hci_rx_work+0x10/0x10 [ 106.402507][ T5749] worker_thread+0x5ef/0xe50 [ 106.402535][ T5749] ? kthread+0x13a/0x450 [ 106.402548][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 106.402560][ T5749] kthread+0x370/0x450 [ 106.402568][ T5749] ? __pfx_kthread+0x10/0x10 [ 106.402579][ T5749] ret_from_fork+0x72b/0xd50 [ 106.402592][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 106.402604][ T5749] ? __switch_to+0x800/0x1100 [ 106.402620][ T5749] ? __pfx_kthread+0x10/0x10 [ 106.402630][ T5749] ret_from_fork_asm+0x1a/0x30 [ 106.402651][ T5749] [ 106.402668][ T5749] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.500313][ T5749] Bluetooth: hci2: failed to register connection device [ 107.254855][ T9404] syz.4.1613 (9404): drop_caches: 4 [ 107.840152][ T9463] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 107.850913][ T9465] xt_l2tp: invalid flags combination: 8 [ 107.870214][ T9467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.921775][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'. [ 108.352503][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.356211][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.361430][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.367658][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.371243][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.648463][ T7062] hid-generic 000F:FFFFFFFA:0009.0004: unknown main item tag 0x5 [ 108.656032][ T7062] hid-generic 000F:FFFFFFFA:0009.0004: hidraw1: HID v0.02 Device [syz0] on syz1 [ 108.695827][ T9545] fido_id[9545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.008946][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.012269][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.015455][ T9505] bridge_slave_0: entered allmulticast mode [ 109.021951][ T9505] bridge_slave_0: entered promiscuous mode [ 109.025519][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.028999][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.031965][ T9505] bridge_slave_1: entered allmulticast mode [ 109.035375][ T9505] bridge_slave_1: entered promiscuous mode [ 109.052271][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.056851][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.083036][ T9505] team0: Port device team_slave_0 added [ 109.086613][ T9505] team0: Port device team_slave_1 added [ 109.093569][ T1340] hid-generic 000F:FFFFFFFA:0009.0005: unknown main item tag 0x5 [ 109.100692][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.101142][ T1340] hid-generic 000F:FFFFFFFA:0009.0005: hidraw1: HID v0.02 Device [syz0] on syz1 [ 109.104488][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.104510][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.105651][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.123426][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.132773][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.132911][ T9574] fido_id[9574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.184314][ T9505] hsr_slave_0: entered promiscuous mode [ 109.187751][ T9505] hsr_slave_1: entered promiscuous mode [ 109.190876][ T9505] debugfs: 'hsr0' already exists in 'hsr' [ 109.194040][ T9505] Cannot create hsr debugfs directory [ 109.342159][ T9505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.386603][ T9505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.390680][ T9505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.424838][ T9505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.428018][ T9505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.473620][ T9505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.476413][ T9505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.525533][ T9505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.542030][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.544534][ T9505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.546938][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.549295][ T9505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.585377][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.622653][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.662578][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.875554][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.880902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.883178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.889561][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.892377][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.127953][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.296855][ T9505] veth0_vlan: entered promiscuous mode [ 110.306673][ T9505] veth1_vlan: entered promiscuous mode [ 110.326608][ T9505] veth0_macvtap: entered promiscuous mode [ 110.331079][ T9505] veth1_macvtap: entered promiscuous mode [ 110.341357][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.348528][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.356947][ T6580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.360388][ T6580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.364541][ T6580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.367669][ T6580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.392053][ T5742] Bluetooth: hci4: command tx timeout [ 110.555834][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.559165][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.584545][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.587814][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.021900][ T7062] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.172172][ T7062] usb 10-1: Using ep0 maxpacket: 8 [ 111.175149][ T7062] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 111.178019][ T7062] usb 10-1: config 0 has no interface number 0 [ 111.180109][ T7062] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.184221][ T7062] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 111.188085][ T7062] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 111.192355][ T7062] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 111.195919][ T7062] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.199050][ T7062] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.205229][ T7062] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 111.208175][ T7062] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.210651][ T7062] usb 10-1: Product: syz [ 111.212121][ T7062] usb 10-1: Manufacturer: syz [ 111.213699][ T7062] usb 10-1: SerialNumber: syz [ 111.216473][ T7062] usb 10-1: config 0 descriptor?? [ 111.429392][ T7062] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 111.629855][ T9616] iowarrior 10-1:0.186: Error -90 while submitting URB [ 111.635494][ T5818] usb 10-1: USB disconnect, device number 2 [ 112.473733][ T5742] Bluetooth: hci4: command tx timeout [ 112.964968][ T9703] ptrace attach of "/syz-executor exec"[9505] was attempted by " [ 113.325595][ T9731] batman_adv: batadv0: Adding interface: gretap1 [ 113.360704][ T9731] batman_adv: batadv0: Interface activated: gretap1 [ 113.365952][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 113.464704][ T9741] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 113.804875][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'. [ 114.293383][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'. [ 114.345004][ T9851] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 114.456970][ T9870] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1819'. [ 114.498221][ T9872] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1820'. [ 114.502233][ T9872] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1820'. [ 114.505941][ T9872] netlink: 'syz.5.1820': attribute type 5 has an invalid length. [ 114.508637][ T9872] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1820'. [ 114.551811][ T5742] Bluetooth: hci4: command tx timeout [ 114.612123][ T9884] [U]  [ 114.723833][ T9896] "syz.3.1832" (9896) uses obsolete ecb(arc4) skcipher [ 114.810062][ T9907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1835'. [ 114.811642][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 114.819836][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 115.453261][ T9949] loop4: detected capacity change from 0 to 7 [ 115.472678][ T9949] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 115.480337][ T9949] loop4: partition table partially beyond EOD, truncated [ 115.483447][ T9949] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 115.551050][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 115.607786][ T9961] tipc: Started in network mode [ 115.609521][ T9961] tipc: Node identity ac14142f, cluster identity 4711 [ 115.613362][ T9961] tipc: New replicast peer: 0.0.0.0 [ 115.615515][ T9961] tipc: Enabled bearer , priority 10 [ 115.673248][ T5742] Bluetooth: hci0: command 0x0406 tx timeout [ 116.632303][ T5749] Bluetooth: hci4: command tx timeout [ 116.734074][T10063] netlink: 'syz.5.1912': attribute type 14 has an invalid length. [ 116.736627][T10063] netlink: 'syz.5.1912': attribute type 12 has an invalid length. [ 116.746864][ T7062] tipc: Node number set to 2886997039 [ 117.116444][T10101] fuseblk: block size(7680) > page size(4096) not supported by filesystem [ 117.323391][T10119] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 117.326597][T10119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.404627][T10123] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 117.684755][T10143] pimreg3: entered allmulticast mode [ 118.085301][T10185] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 118.199523][T10198] usb usb9: usbfs: process 10198 (syz.4.1978) did not claim interface 0 before use [ 118.255791][T10206] xt_socket: unknown flags 0xd0 [ 118.752213][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 119.033067][ T5749] Bluetooth: hci4: command tx timeout [ 123.159080][T10277] __nla_validate_parse: 3 callbacks suppressed [ 123.159092][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 123.273836][ T40] audit: type=1326 audit(1778525924.252:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.283280][ T40] audit: type=1326 audit(1778525924.252:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.293670][ T40] audit: type=1326 audit(1778525924.252:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.307229][ T40] audit: type=1326 audit(1778525924.252:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.313276][ T40] audit: type=1326 audit(1778525924.252:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.319889][ T40] audit: type=1326 audit(1778525924.252:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.327228][ T40] audit: type=1326 audit(1778525924.252:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.335491][ T40] audit: type=1326 audit(1778525924.252:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.342939][ T40] audit: type=1326 audit(1778525924.252:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.351008][ T40] audit: type=1326 audit(1778525924.252:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.5.2009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fcc code=0x7ffc0000 [ 123.412371][T10296] [U]  [ 123.413912][T10296] [U] K{ [ 123.415445][T10296] [U] t 1ŠFfˊ`GJgo/mC [ 123.418624][T10296] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 123.425639][T10296] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 123.430373][T10296] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 123.445483][T10296] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 123.460136][T10296] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 123.465002][T10296] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 123.469608][T10296] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 123.509796][T10296] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 123.513277][T10296] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 123.519087][T10296] [U] 22Ʃx?0;3u [ 123.521005][T10296] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 123.534380][T10296] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 123.538481][T10296] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 123.541458][T10296] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 123.544994][T10296] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 123.550129][T10296] [U] ec [ 123.551480][T10296] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 123.572876][T10295] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 123.694473][T10313] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 123.940436][T10328] xt_socket: unknown flags 0xe4 [ 123.946411][T10329] netlink: 'syz.3.2029': attribute type 11 has an invalid length. [ 124.076465][T10340] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 124.103934][T10342] tipc: Started in network mode [ 124.105700][T10342] tipc: Node identity ac14142f, cluster identity 4711 [ 124.113220][T10342] tipc: New replicast peer: 0.0.0.0 [ 124.115641][T10342] tipc: Enabled bearer , priority 10 [ 124.513597][T10364] tipc: New replicast peer: 0.0.0.0 [ 124.517829][T10364] tipc: Enabled bearer , priority 10 [ 124.694885][T10378] 9pnet_virtio: no channels available for device syz [ 124.698005][T10376] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 125.231951][ T7062] tipc: Node number set to 2886997039 [ 130.235701][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 130.235717][ T40] audit: type=1326 audit(1778525931.212:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.248330][ T40] audit: type=1326 audit(1778525931.212:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.255595][ T40] audit: type=1326 audit(1778525931.212:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.263141][ T40] audit: type=1326 audit(1778525931.212:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.274762][ T40] audit: type=1326 audit(1778525931.212:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.285433][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.297390][ T40] audit: type=1326 audit(1778525931.212:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.297451][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.314693][ T40] audit: type=1326 audit(1778525931.212:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.324072][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.330306][ T40] audit: type=1326 audit(1778525931.212:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.339988][ T40] audit: type=1326 audit(1778525931.212:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.346255][T10406] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 130.350817][ T40] audit: type=1326 audit(1778525931.212:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 130.354159][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.360976][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 130.372793][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.423123][T10416] [U]  [ 130.424111][T10416] [U] K{ [ 130.425150][T10416] [U] t 1ŠFfˊ`GJgo/mC [ 130.427375][T10416] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 130.432983][T10416] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 130.437330][T10416] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 130.453358][T10416] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 130.463984][T10416] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 130.467928][T10416] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 130.472407][T10416] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 130.502294][T10416] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 130.505084][T10416] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 130.509331][T10416] [U] 22Ʃx?0;3u [ 130.510683][T10416] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 130.518227][T10416] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 130.521312][T10416] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 130.524205][T10416] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 130.526367][T10416] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 130.530428][T10416] [U] ec [ 130.531643][T10416] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 130.542450][T10415] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 131.045990][ T117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.333497][ T117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.666785][ T117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.728825][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.731402][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.733872][T10402] bridge_slave_0: entered allmulticast mode [ 131.736907][T10402] bridge_slave_0: entered promiscuous mode [ 131.740310][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.742770][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.745210][T10402] bridge_slave_1: entered allmulticast mode [ 131.748078][T10402] bridge_slave_1: entered promiscuous mode [ 131.765362][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.770457][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.926436][ T117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.964977][T10402] team0: Port device team_slave_0 added [ 132.086177][T10402] team0: Port device team_slave_1 added [ 132.113850][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.116294][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.129107][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.134105][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.136633][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.140119][T10513] program syz.5.2108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.145525][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.182882][T10402] hsr_slave_0: entered promiscuous mode [ 132.185487][T10402] hsr_slave_1: entered promiscuous mode [ 132.187863][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 132.189912][T10402] Cannot create hsr debugfs directory [ 132.279149][ T5826] kernel read not supported for file /vga_arbiter (pid: 5826 comm: kworker/3:3) [ 132.378084][T10529] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2115'. [ 132.402133][ T5749] Bluetooth: hci3: command tx timeout [ 132.445309][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 132.619401][ T7062] kernel read not supported for file /vga_arbiter (pid: 7062 comm: kworker/2:3) [ 132.672148][ T117] bridge_slave_1: left allmulticast mode [ 132.673965][ T117] bridge_slave_1: left promiscuous mode [ 132.675957][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.752452][ T117] bridge_slave_0: left allmulticast mode [ 132.754333][ T117] bridge_slave_0: left promiscuous mode [ 132.756152][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.035799][T10549] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2124'. [ 133.116916][T10557] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2129'. [ 133.722269][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.792216][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.842828][ T117] bond0 (unregistering): Released all slaves [ 133.977096][ T117] : left promiscuous mode [ 134.229653][T10584] netlink: 480 bytes leftover after parsing attributes in process `syz.4.2137'. [ 134.243132][T10402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.276583][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.280726][T10402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.324604][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.328793][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 134.333510][T10402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.363687][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.366753][T10402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.415473][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.472900][ T5749] Bluetooth: hci3: command tx timeout [ 135.067853][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.082676][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.097015][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.100251][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.105917][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.109081][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.406025][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 135.673219][ T117] hsr_slave_0: left promiscuous mode [ 135.721928][ T117] hsr_slave_1: left promiscuous mode [ 135.725886][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.728432][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.762414][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.765468][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.832682][ T117] veth1_macvtap: left promiscuous mode [ 135.834764][ T117] veth0_macvtap: left promiscuous mode [ 135.836641][ T117] veth1_vlan: left promiscuous mode [ 135.838423][ T117] veth0_vlan: left promiscuous mode [ 136.542961][ T117] team0 (unregistering): Port device team_slave_1 removed [ 136.551849][ T5749] Bluetooth: hci3: command tx timeout [ 136.632512][ T117] team0 (unregistering): Port device team_slave_0 removed [ 136.700266][ T117] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 136.743772][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 136.911302][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 136.927642][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.089551][T10402] veth0_vlan: entered promiscuous mode [ 137.097480][T10402] veth1_vlan: entered promiscuous mode [ 137.116100][T10402] veth0_macvtap: entered promiscuous mode [ 137.120125][T10402] veth1_macvtap: entered promiscuous mode [ 137.129326][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.134999][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.142413][ T6580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.145341][ T6580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.151219][ T6580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.155345][ T6580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.341028][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.344280][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.365518][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.368247][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.564379][T10648] tipc: Started in network mode [ 137.566857][T10648] tipc: Node identity ac14142f, cluster identity 4711 [ 137.570050][T10648] tipc: New replicast peer: 0.0.0.0 [ 137.574338][T10648] tipc: Enabled bearer , priority 10 [ 137.750550][T10674] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2158'. [ 137.753253][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.757146][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.819440][T10681] Invalid source name [ 137.987697][T10706] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2174'. [ 138.043802][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 138.043813][ T40] audit: type=1326 audit(1778525939.022:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.062037][ T40] audit: type=1326 audit(1778525939.032:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.073433][ T40] audit: type=1326 audit(1778525939.032:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.4.2178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.079189][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 138.080971][ T40] audit: type=1326 audit(1778525939.032:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.091881][T10721] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2181'. [ 138.094875][T10724] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 138.099969][ T40] audit: type=1326 audit(1778525939.032:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712616b code=0x7ffc0000 [ 138.108312][ T40] audit: type=1326 audit(1778525939.032:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712616b code=0x7ffc0000 [ 138.114828][ T40] audit: type=1326 audit(1778525939.032:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712616b code=0x7ffc0000 [ 138.121306][ T40] audit: type=1326 audit(1778525939.032:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf712616b code=0x7ffc0000 [ 138.128841][ T40] audit: type=1326 audit(1778525939.032:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.136428][ T40] audit: type=1326 audit(1778525939.032:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 138.201259][T10736] netlink: 'syz.3.2188': attribute type 3 has an invalid length. [ 138.219678][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'. [ 138.321441][T10754] tipc: Enabled bearer , priority 10 [ 138.377357][ T50] kernel read not supported for file /bluetooth/6lowpan_control (pid: 50 comm: kworker/2:1) [ 138.387688][T10765] team0: Cannot enslave team device to itself [ 138.483894][T10780] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 138.483894][T10780] Please contact the netfilter-devel mailing list or update your nftables rules. [ 138.642054][ T5749] Bluetooth: hci3: command tx timeout [ 138.713368][ T50] tipc: Node number set to 2886997039 [ 138.958758][T10828] netlink: 'syz.5.2231': attribute type 21 has an invalid length. [ 138.965060][T10828] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.968673][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.973328][T10828] IPv6: NLM_F_CREATE should be set when creating new route [ 138.976549][T10828] IPv6: NLM_F_CREATE should be set when creating new route [ 138.979886][T10828] IPv6: NLM_F_CREATE should be set when creating new route [ 138.988307][T10828] netlink: 'syz.5.2231': attribute type 21 has an invalid length. [ 138.991969][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.040294][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.046960][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.050313][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.054257][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.057425][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.060786][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.064124][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.066675][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.069188][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.072381][ T1340] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 139.080019][ T1340] hid-generic 0103:0004:0000.0006: hidraw1: HID v0.02 Device [syz1] on syz1 [ 139.138358][T10840] fido_id[10840]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.237302][T10852] Option ' ' to dns_resolver key: bad/missing value [ 140.127786][T10932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.162147][T10952] ip6gretap0: entered promiscuous mode [ 140.405085][T10932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.468465][T10975] netlink: 'syz.4.2295': attribute type 12 has an invalid length. [ 140.473838][T10975] netlink: 'syz.4.2295': attribute type 29 has an invalid length. [ 140.477229][T10975] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2295'. [ 140.481158][T10975] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2295'. [ 140.756249][T10932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.784732][T11005] ALSA: mixer_oss: invalid OSS volume '' [ 140.919881][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 140.924116][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 141.024825][T10932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.102788][T11035] program syz.6.2324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.173250][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2328'. [ 141.238704][ T117] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.256906][ T117] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.268235][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.292978][ T117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.611931][ T5826] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 141.632150][ T7062] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 141.761981][ T5826] usb 9-1: Using ep0 maxpacket: 32 [ 141.762764][ T5605] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 141.768643][ T5826] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.775434][ T5826] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.779316][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.782938][ T5826] usb 9-1: Product: syz [ 141.784694][ T5826] usb 9-1: Manufacturer: syz [ 141.786620][ T5826] usb 9-1: SerialNumber: syz [ 141.790704][ T5826] usb 9-1: config 0 descriptor?? [ 141.795072][T11058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.802238][ T7062] usb 8-1: Using ep0 maxpacket: 32 [ 141.807146][ T7062] usb 8-1: unable to get BOS descriptor or descriptor too short [ 141.811491][ T7062] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 141.814372][ T7062] usb 8-1: config 8 has no interface number 0 [ 141.816338][ T7062] usb 8-1: config 8 interface 188 has no altsetting 0 [ 141.821174][ T7062] usb 8-1: string descriptor 0 read error: -22 [ 141.823572][ T7062] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 141.826537][ T7062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.834924][ T7062] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 141.837882][ T7062] dw2102: su3000_power_ctrl: 1, initialized 0 [ 141.840494][ T7062] dvb-usb: bulk message failed: -22 (2/0) [ 141.848726][ T7062] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.853518][ T7062] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 141.858055][ T7062] usb 8-1: media controller created [ 141.860287][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.864175][ T7062] dw2102: i2c transfer failed. [ 141.866922][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.869400][ T7062] dw2102: i2c transfer failed. [ 141.871458][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.875669][ T7062] dw2102: i2c transfer failed. [ 141.877796][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.880218][ T7062] dw2102: i2c transfer failed. [ 141.882422][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.884866][ T7062] dw2102: i2c transfer failed. [ 141.886913][ T7062] dvb-usb: bulk message failed: -22 (6/0) [ 141.889322][ T7062] dw2102: i2c transfer failed. [ 141.891368][ T7062] dvb-usb: MAC address: 02:02:02:02:02:02 [ 141.903302][ T7062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.912163][ T5605] usb 10-1: Using ep0 maxpacket: 32 [ 141.917774][ T5605] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.920866][ T5605] usb 10-1: config 0 has no interface number 0 [ 141.921837][ T7062] dvb-usb: bulk message failed: -22 (3/0) [ 141.925074][ T5605] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 141.925394][ T7062] dw2102: command 0x0e transfer failed. [ 141.928436][ T5605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.930693][ T7062] dvb-usb: bulk message failed: -22 (3/0) [ 141.930708][ T7062] dw2102: command 0x0e transfer failed. [ 141.937453][ T5605] usb 10-1: Product: syz [ 141.938878][ T5605] usb 10-1: Manufacturer: syz [ 141.940463][ T5605] usb 10-1: SerialNumber: syz [ 141.944908][ T5605] usb 10-1: config 0 descriptor?? [ 141.950167][ T5605] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 141.954240][ T5605] usb 10-1: selecting invalid altsetting 1 [ 141.956936][ T5605] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 141.963031][ T5605] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.967649][ T5605] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 141.977177][ T5605] usb 10-1: media controller created [ 141.988393][ T5605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.000967][ T50] usb 9-1: USB disconnect, device number 3 [ 142.231979][ T7062] dvb-usb: bulk message failed: -22 (3/0) [ 142.234178][ T7062] dw2102: command 0x0e transfer failed. [ 142.236354][ T7062] dvb-usb: bulk message failed: -22 (3/0) [ 142.238296][ T7062] dw2102: command 0x0e transfer failed. [ 142.240108][ T7062] dvb-usb: bulk message failed: -22 (1/0) [ 142.242093][ T7062] dw2102: command 0x51 transfer failed. [ 142.245037][T11066] dvb-usb: bulk message failed: -22 (4/0) [ 142.247910][T11066] dw2102: i2c transfer failed. [ 142.252377][T11073] dvb-usb: bulk message failed: -22 (5/0) [ 142.255263][T11073] dw2102: i2c transfer failed. [ 142.258681][ T5605] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 142.262046][ T5605] zl10353_read_register: readreg error (reg=127, ret==-71) [ 142.265700][ T5605] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 142.267491][ T7062] DVB: Unable to find symbol ds3000_attach() [ 142.269970][ T7062] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 142.295223][ T5605] usb 10-1: USB disconnect, device number 3 [ 142.333853][ T7062] rc_core: IR keymap rc-su3000 not found [ 142.335784][ T7062] Registered IR keymap rc-empty [ 142.338227][ T7062] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 142.342864][ T7062] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input11 [ 142.350397][ T7062] dvb-usb: schedule remote query interval to 150 msecs. [ 142.353801][ T7062] dw2102: su3000_power_ctrl: 0, initialized 1 [ 142.355812][ T7062] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 142.361335][ T7062] usb 8-1: USB disconnect, device number 7 [ 142.476317][ T7062] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 142.779018][T11136] __nla_validate_parse: 1 callbacks suppressed [ 142.779032][T11136] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2371'. [ 142.833915][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 142.840190][T11143] ------------[ cut here ]------------ [ 142.844280][T11143] 1 [ 142.844292][T11143] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#3: syz.4.2376/11143 [ 142.849312][T11143] Modules linked in: [ 142.851667][T11143] CPU: 3 UID: 0 PID: 11143 Comm: syz.4.2376 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.857281][T11143] Tainted: [L]=SOFTLOCKUP [ 142.859531][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.863707][T11143] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 142.865713][T11143] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 142.873727][T11143] RSP: 0000:ffffc90002da7390 EFLAGS: 00010287 [ 142.876510][T11143] RAX: 0000000000000d50 RBX: ffff88805a14cb40 RCX: ffffc90002f3f000 [ 142.880135][T11143] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 142.883698][T11143] RBP: ffff88805a14cb40 R08: 0000000000000001 R09: 0000000000000000 [ 142.887225][T11143] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804ea34d80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.891075][T11143] R13: ffff8880219f7800 R14: 0000000000000000 R15: ffff88805a14cb98 [ 142.894609][T11143] FS: 0000000000000000(0000) GS:ffff888097477000(0063) knlGS:00000000f53ddb40 [ 142.898345][T11143] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 142.901282][T11143] CR2: 00000000f7396d50 CR3: 000000006e9ba000 CR4: 0000000000352ef0 [ 142.901414][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2378'. [ 142.905297][T11143] Call Trace: [ 142.905356][T11143] [ 142.905368][T11143] ? __pfx_ip_rt_bug+0x10/0x10 [ 142.905418][T11143] ip_push_pending_frames+0x29e/0x300 [ 142.905460][T11143] icmp_push_reply+0x30e/0x450 [ 142.905493][T11143] __icmp_send+0x11b4/0x2c70 [ 142.905533][T11143] ? __pfx___icmp_send+0x10/0x10 [ 142.905563][T11143] ? __pfx_ip_route_input_slow+0x10/0x10 [ 142.905595][T11143] ? __lock_acquire+0x4a5/0x2630 [ 142.905629][T11143] ? __ip_options_compile+0x604/0x16a0 [ 142.905675][T11143] ? ip_route_input_noref+0x15f/0x2e0 [ 142.905708][T11143] ip_options_compile+0xb6/0x100 [ 142.905740][T11143] ? __pfx_ip_options_compile+0x10/0x10 [ 142.905770][T11143] ? __pfx_ip_rcv_finish+0x10/0x10 [ 142.905806][T11143] ip_rcv_finish_core+0x693/0x2c30 [ 142.905845][T11143] ip_rcv+0x1c0/0x3c0 [ 142.905874][T11143] ? __pfx_ip_rcv+0x10/0x10 [ 142.905936][T11143] __netif_receive_skb_one_core+0x197/0x1e0 [ 142.948517][T11143] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 142.951908][T11143] ? lock_acquire+0x1b1/0x370 [ 142.953790][T11143] __netif_receive_skb+0x1f/0x120 [ 142.955441][T11143] netif_receive_skb+0x13b/0x7f0 [ 142.956927][T11143] ? __pfx_netif_receive_skb+0x10/0x10 [ 142.958692][T11143] tun_rx_batched.isra.0+0x3f6/0x750 [ 142.960470][T11143] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 142.962625][T11143] ? rcu_is_watching+0x12/0xc0 [ 142.964211][T11143] ? tun_get_user+0x1cc8/0x3c20 [ 142.965856][T11143] tun_get_user+0x1e31/0x3c20 [ 142.967405][T11143] ? __pfx_tun_get_user+0x10/0x10 [ 142.969013][T11143] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.970846][T11143] ? find_held_lock+0x2b/0x80 [ 142.972650][T11143] ? tun_get+0x191/0x370 [ 142.974279][T11143] ? tun_get+0x191/0x370 [ 142.976196][T11143] tun_chr_write_iter+0xdc/0x200 [ 142.978334][T11143] vfs_write+0x6ac/0x1070 [ 142.979847][T11143] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.981796][T11143] ? __pfx_vfs_write+0x10/0x10 [ 142.983505][T11143] ? find_held_lock+0x2b/0x80 [ 142.985187][T11143] ksys_write+0x12a/0x250 [ 142.986654][T11143] ? __pfx_ksys_write+0x10/0x10 [ 142.988472][T11143] ? rcu_is_watching+0x12/0xc0 [ 142.990118][T11143] ? rcu_is_watching+0x12/0xc0 [ 142.992145][T11143] do_int80_emulation+0x141/0x700 [ 142.994345][T11143] asm_int80_emulation+0x1a/0x20 [ 142.996584][T11143] RIP: 0023:0xf712616b [ 142.998423][T11143] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 143.006907][T11143] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 143.010518][T11143] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 143.013942][T11143] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.017344][T11143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.020686][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.024163][T11143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.027585][T11143] [ 143.028980][T11143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.032047][T11143] CPU: 3 UID: 0 PID: 11143 Comm: syz.4.2376 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.036309][T11143] Tainted: [L]=SOFTLOCKUP [ 143.038345][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.042971][T11143] Call Trace: [ 143.044474][T11143] [ 143.045742][T11143] dump_stack_lvl+0x100/0x190 [ 143.047724][T11143] vpanic+0x552/0x970 [ 143.049298][T11143] ? __pfx_vpanic+0x10/0x10 [ 143.051206][T11143] panic+0xd1/0xe0 [ 143.052850][T11143] ? __pfx_panic+0x10/0x10 [ 143.054740][T11143] check_panic_on_warn.cold+0x19/0x34 [ 143.056950][T11143] ? ip_rt_bug+0x2b/0x150 [ 143.058371][T11143] __warn.cold+0x191/0x328 [ 143.059813][T11143] __report_bug+0x296/0x3d0 [ 143.061559][T11143] ? ip_rt_bug+0x2b/0x150 [ 143.063559][T11143] ? __pfx___report_bug+0x10/0x10 [ 143.065949][T11143] ? ip_rt_bug+0x2b/0x150 [ 143.067908][T11143] report_bug+0xb2/0x220 [ 143.069769][T11143] ? ip_rt_bug+0x2b/0x150 [ 143.071617][T11143] handle_bug+0x16a/0x2a0 [ 143.073434][T11143] exc_invalid_op+0x17/0x50 [ 143.075504][T11143] asm_exc_invalid_op+0x1a/0x20 [ 143.077838][T11143] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 143.080124][T11143] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 143.088046][T11143] RSP: 0000:ffffc90002da7390 EFLAGS: 00010287 [ 143.090682][T11143] RAX: 0000000000000d50 RBX: ffff88805a14cb40 RCX: ffffc90002f3f000 [ 143.094193][T11143] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c2800 [ 143.097869][T11143] RBP: ffff88805a14cb40 R08: 0000000000000001 R09: 0000000000000000 [ 143.101294][T11143] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804ea34d80 [ 143.104638][T11143] R13: ffff8880219f7800 R14: 0000000000000000 R15: ffff88805a14cb98 [ 143.107915][T11143] ? sk_skb_reason_drop+0x114/0x1b0 [ 143.110146][T11143] ? __pfx_ip_rt_bug+0x10/0x10 [ 143.112212][T11143] ip_push_pending_frames+0x29e/0x300 [ 143.114633][T11143] icmp_push_reply+0x30e/0x450 [ 143.117348][T11143] __icmp_send+0x11b4/0x2c70 [ 143.119892][T11143] ? __pfx___icmp_send+0x10/0x10 [ 143.122123][T11143] ? __pfx_ip_route_input_slow+0x10/0x10 [ 143.124508][T11143] ? __lock_acquire+0x4a5/0x2630 [ 143.126617][T11143] ? __ip_options_compile+0x604/0x16a0 [ 143.128971][T11143] ? ip_route_input_noref+0x15f/0x2e0 [ 143.131369][T11143] ip_options_compile+0xb6/0x100 [ 143.133506][T11143] ? __pfx_ip_options_compile+0x10/0x10 [ 143.136008][T11143] ? __pfx_ip_rcv_finish+0x10/0x10 [ 143.138340][T11143] ip_rcv_finish_core+0x693/0x2c30 [ 143.140744][T11143] ip_rcv+0x1c0/0x3c0 [ 143.142895][T11143] ? __pfx_ip_rcv+0x10/0x10 [ 143.145369][T11143] __netif_receive_skb_one_core+0x197/0x1e0 [ 143.148151][T11143] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 143.150891][T11143] ? lock_acquire+0x1b1/0x370 [ 143.152898][T11143] __netif_receive_skb+0x1f/0x120 [ 143.155266][T11143] netif_receive_skb+0x13b/0x7f0 [ 143.157511][T11143] ? __pfx_netif_receive_skb+0x10/0x10 [ 143.159946][T11143] tun_rx_batched.isra.0+0x3f6/0x750 [ 143.162419][T11143] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 143.165286][T11143] ? rcu_is_watching+0x12/0xc0 [ 143.167642][T11143] ? tun_get_user+0x1cc8/0x3c20 [ 143.170152][T11143] tun_get_user+0x1e31/0x3c20 [ 143.172225][T11143] ? __pfx_tun_get_user+0x10/0x10 [ 143.174353][T11143] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.176611][T11143] ? find_held_lock+0x2b/0x80 [ 143.178599][T11143] ? tun_get+0x191/0x370 [ 143.180399][T11143] ? tun_get+0x191/0x370 [ 143.182211][T11143] tun_chr_write_iter+0xdc/0x200 [ 143.184350][T11143] vfs_write+0x6ac/0x1070 [ 143.186228][T11143] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 143.188691][T11143] ? __pfx_vfs_write+0x10/0x10 [ 143.190828][T11143] ? find_held_lock+0x2b/0x80 [ 143.193129][T11143] ksys_write+0x12a/0x250 [ 143.195235][T11143] ? __pfx_ksys_write+0x10/0x10 [ 143.197484][T11143] ? rcu_is_watching+0x12/0xc0 [ 143.199728][T11143] ? rcu_is_watching+0x12/0xc0 [ 143.201834][T11143] do_int80_emulation+0x141/0x700 [ 143.204085][T11143] asm_int80_emulation+0x1a/0x20 [ 143.206235][T11143] RIP: 0023:0xf712616b [ 143.208041][T11143] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 143.216184][T11143] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 143.220182][T11143] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 143.223287][T11143] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.226540][T11143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.229858][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.233530][T11143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.236936][T11143] [ 143.238939][T11143] Kernel Offset: disabled [ 143.240759][T11143] Rebooting in 86400 seconds..