last executing test programs: 2.227977521s ago: executing program 0 (id=624): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="d7b5f2963f95111c27287c0dd42a68d6011627eb177783ea7e3998af0fb9a6ab4a57", 0x22}], 0x1, &(0x7f00000009c0)=[@ip_tos_int={{0x10}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xd2, [@local, @private=0xa010100, @loopback, @private=0xa010100, @remote, @broadcast, @multicast2]}]}}}], 0x3c}}], 0x2, 0x8014) 2.178298683s ago: executing program 0 (id=626): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54e", 0xc9}, {&(0x7f0000001240)="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", 0x18c}, {&(0x7f00000005c0)="0875a5af2b1a78403017900cd651c16e174fb0b901a36164c75b9be64b7d9c8cda031eb74ee700206173afb52ae06352e73a77e74aa2bf153b846be228a0a32e5c0e1a28b43ba5c9f8a920b887", 0x4d}], 0x3}, 0x9cdc2384056b48b8) 2.09808679s ago: executing program 0 (id=628): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x0) 1.942373312s ago: executing program 0 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.932325982s ago: executing program 0 (id=631): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x13) 1.867890133s ago: executing program 0 (id=640): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 1.6677185s ago: executing program 2 (id=639): r0 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', 0x0}) 1.665758341s ago: executing program 2 (id=641): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x37dc12502000000, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 1.590140011s ago: executing program 2 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@size}]}) 1.530428416s ago: executing program 2 (id=644): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) readv(r0, &(0x7f0000000c00)=[{&(0x7f00000004c0)=""/155, 0x9b}], 0x1) 1.218773502s ago: executing program 1 (id=654): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.147675653s ago: executing program 1 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 1.147178748s ago: executing program 1 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410329bd7000fddbdf25070000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 1.05764716s ago: executing program 1 (id=659): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 977.923465ms ago: executing program 3 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x23, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050) 977.657313ms ago: executing program 3 (id=663): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0x58f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 889.472593ms ago: executing program 3 (id=664): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r0, 0x0) 887.581838ms ago: executing program 3 (id=672): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 129.801594ms ago: executing program 1 (id=665): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 129.637449ms ago: executing program 3 (id=666): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 74.974445ms ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.694871ms ago: executing program 3 (id=668): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="5a12a423483e", 0x0, 0xc07, 0x33, 0xffffffffffffffff, 0x0}) 23.709327ms ago: executing program 1 (id=669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 2 (id=670): setreuid(0x0, 0xee00) r0 = getpid() ptrace$setopts(0x4206, r0, 0x0, 0x200004) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:42127' (ED25519) to the list of known hosts. [ 48.281188][ T5653] cgroup: Unknown subsys name 'net' [ 48.449842][ T5653] cgroup: Unknown subsys name 'cpuset' [ 48.455357][ T5653] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.404861][ T5653] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.056899][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.062092][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.066165][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.074186][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.076805][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.080061][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.081423][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.082912][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.087712][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.088301][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.091545][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.094427][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.095690][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.096070][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.096387][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.097806][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.099672][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.103155][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.111598][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.115383][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.820002][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.823103][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.825734][ T5747] bridge_slave_0: entered allmulticast mode [ 53.828782][ T5747] bridge_slave_0: entered promiscuous mode [ 53.834015][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.836954][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.839334][ T5747] bridge_slave_1: entered allmulticast mode [ 53.842062][ T5747] bridge_slave_1: entered promiscuous mode [ 53.947381][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.950558][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.953819][ T5746] bridge_slave_0: entered allmulticast mode [ 53.958078][ T5746] bridge_slave_0: entered promiscuous mode [ 53.962813][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.965313][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.969359][ T5752] bridge_slave_0: entered allmulticast mode [ 53.973061][ T5752] bridge_slave_0: entered promiscuous mode [ 53.977064][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.979422][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.981735][ T5752] bridge_slave_1: entered allmulticast mode [ 53.984635][ T5752] bridge_slave_1: entered promiscuous mode [ 53.989332][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.996352][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.008114][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.010867][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.013227][ T5746] bridge_slave_1: entered allmulticast mode [ 54.016966][ T5746] bridge_slave_1: entered promiscuous mode [ 54.068589][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.073926][ T5747] team0: Port device team_slave_0 added [ 54.077640][ T5747] team0: Port device team_slave_1 added [ 54.087095][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.091970][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.097111][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.131235][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.133773][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.136212][ T5741] bridge_slave_0: entered allmulticast mode [ 54.138920][ T5741] bridge_slave_0: entered promiscuous mode [ 54.142409][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.144745][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.147242][ T5741] bridge_slave_1: entered allmulticast mode [ 54.149919][ T5741] bridge_slave_1: entered promiscuous mode [ 54.169086][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.173412][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.181946][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.202659][ T5752] team0: Port device team_slave_0 added [ 54.206320][ T5752] team0: Port device team_slave_1 added [ 54.208709][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.210965][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.219333][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.231090][ T5746] team0: Port device team_slave_0 added [ 54.234847][ T5746] team0: Port device team_slave_1 added [ 54.251874][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.277683][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.280372][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.291058][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.297415][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.300899][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.303608][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.312155][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.323105][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.325458][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.333853][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.338304][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.340613][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.350188][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.378546][ T5747] hsr_slave_0: entered promiscuous mode [ 54.382035][ T5747] hsr_slave_1: entered promiscuous mode [ 54.402822][ T5741] team0: Port device team_slave_0 added [ 54.409362][ T5741] team0: Port device team_slave_1 added [ 54.466391][ T5752] hsr_slave_0: entered promiscuous mode [ 54.469719][ T5752] hsr_slave_1: entered promiscuous mode [ 54.472029][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 54.474221][ T5752] Cannot create hsr debugfs directory [ 54.477753][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.479965][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.488655][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.497422][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.499961][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.508736][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.528231][ T5746] hsr_slave_0: entered promiscuous mode [ 54.530947][ T5746] hsr_slave_1: entered promiscuous mode [ 54.533507][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 54.535370][ T5746] Cannot create hsr debugfs directory [ 54.631143][ T5741] hsr_slave_0: entered promiscuous mode [ 54.633966][ T5741] hsr_slave_1: entered promiscuous mode [ 54.636500][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 54.638428][ T5741] Cannot create hsr debugfs directory [ 54.867285][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.875227][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.878258][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.883083][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.886496][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.891413][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.896648][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.903092][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.963586][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.973132][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.978061][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.987746][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xae000) [ 55.010720][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.015902][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.027615][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 55.028381][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.029756][ T1131] ata1: failed to read log page 10h (errno=-5) [ 55.034525][ T1131] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 55.037628][ T1131] ata1.00: irq_stat 0x40000000 [ 55.037682][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.039867][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 55.045223][ T1131] ata1.00: cmd 61/70:70:36:11:08/05:00:00:00:00/40 tag 14 ncq dma 712704 out [ 55.045223][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 55.053603][ T1131] ata1.00: status: { DRDY } [ 55.055752][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 55.057782][ T1131] ata1.00: cmd 61/c0:78:a6:16:08/02:00:00:00:00/40 tag 15 ncq dma 360448 out [ 55.057782][ T1131] res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 55.063179][ T1131] ata1.00: status: { DRDY } [ 55.066993][ T1131] ata1.00: configured for UDMA/100 [ 55.070292][ T1131] ata1: EH complete [ 55.083245][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.090155][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.095379][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.102797][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.107185][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.118151][ T5752] 8021q: adding VLAN 0 to HW filter on deqemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) vice netdevsim2 [ 55.124012][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.136849][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.147405][ T5749] Bluetooth: hci0: command tx timeout [ 55.147755][ T62] Bluetooth: hci1: command tx timeout [ 55.150994][ T5757] Bluetooth: hci2: command tx timeout [ 55.155664][ T5757] Bluetooth: hci3: command tx timeout [ 55.224130][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.231221][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.234351][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.240193][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.245206][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.249476][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.257359][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.263562][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.309103][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.341034][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.353369][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.372764][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.375336][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.393649][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.396117][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.402121][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.414026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.416411][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.441195][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.444352][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.452730][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.488021][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.500721][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.527971][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.530863][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.542848][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.571789][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.575143][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.588943][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.591725][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.617393][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.620464][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.900015][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.906292][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.983082][ T5746] veth0_vlan: entered promiscuous mode [ 55.993236][ T5747] veth0_vlan: entered promiscuous mode [ 56.006786][ T5747] veth1_vlan: entered promiscuous mode [ 56.015451][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.020697][ T5746] veth1_vlan: entered promiscuous mode [ 56.042062][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.082474][ T5746] veth0_macvtap: entered promiscuous mode [ 56.088085][ T5747] veth0_macvtap: entered promiscuous mode [ 56.102220][ T5746] veth1_macvtap: entered promiscuous mode [ 56.110420][ T5747] veth1_macvtap: entered promiscuous mode [ 56.128473][ T5752] veth0_vlan: entered promiscuous mode [ 56.141298][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.150652][ T5741] veth0_vlan: entered promiscuous mode [ 56.156434][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.162788][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.177582][ T5752] veth1_vlan: entered promiscuous mode [ 56.182707][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.186543][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.191317][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.196351][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.209350][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.219837][ T5741] veth1_vlan: entered promiscuous mode [ 56.225972][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.242947][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.246738][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.257706][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.305410][ T5752] veth0_macvtap: entered promiscuous mode [ 56.331481][ T5752] veth1_macvtap: entered promiscuous mode [ 56.337970][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.343535][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.359263][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.359934][ T5741] veth0_macvtap: entered promiscuous mode [ 56.362372][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.377089][ T5741] veth1_macvtap: entered promiscuous mode [ 56.394447][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.396340][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.398226][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.418200][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.418600][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.426229][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.436212][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.439426][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442962][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.452831][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.458078][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.466461][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.480018][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.483819][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.486619][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.500044][ T228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.503291][ T228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.604375][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.609303][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.677545][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.680543][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.691541][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.694635][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.695397][ T5834] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5834 comm: kworker/0:4) [ 56.709202][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.712832][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.764020][ T5896] Illegal XDP return value 1190041933 on prog (id 2) dev N/A, expect packet loss! [ 56.896362][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.941913][ T5902] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 57.057927][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 57.063358][ T5857] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 57.071534][ T5857] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 57.081134][ T5857] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 57.085297][ T5857] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 57.090347][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.095315][ T5857] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 57.104898][ T5857] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 57.108119][ T5857] usb 6-1: Product: syz [ 57.109638][ T5857] usb 6-1: Manufacturer: syz [ 57.112769][ T5857] usb 6-1: SerialNumber: syz [ 57.141349][ T5857] usb 6-1: config 0 descriptor?? [ 57.152895][ T5857] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 57.162558][ T5857] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 57.226722][ T5757] Bluetooth: hci3: command tx timeout [ 57.227841][ T62] Bluetooth: hci2: command tx timeout [ 57.229356][ T5757] Bluetooth: hci0: command tx timeout [ 57.229652][ T5757] Bluetooth: hci1: command tx timeout [ 57.354604][ T5932] mmap: syz.2.20 (5932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.367050][ T5849] usb 6-1: USB disconnect, device number 2 [ 57.375432][ T5849] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 57.977131][ T5958] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.31'. [ 58.195333][ T5969] fuseblk: block size(9216) > page size(4096) not supported by filesystem [ 58.310410][ T5978] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.460556][ T5989] tmpfs: Cannot change global quota limit on remount [ 58.495294][ T5991] Bluetooth: MGMT ver 1.23 [ 58.550257][ T5997] block nbd0: not configured, cannot reconfigure [ 58.644266][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 58.733224][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 58.738963][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 58.954681][ T6029] netlink: 128 bytes leftover after parsing attributes in process `syz.3.66'. [ 59.015691][ T872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.175733][ T872] usb 6-1: Using ep0 maxpacket: 32 [ 59.182674][ T872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.187556][ T872] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 59.191183][ T872] usb 6-1: config 8 has no interface number 0 [ 59.194463][ T872] usb 6-1: config 8 interface 188 has no altsetting 0 [ 59.201981][ T872] usb 6-1: string descriptor 0 read error: -22 [ 59.204590][ T872] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 59.208182][ T872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.221875][ T872] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 59.226723][ T872] dw2102: su3000_power_ctrl: 1, initialized 0 [ 59.229736][ T872] dvb-usb: bulk message failed: -22 (2/0) [ 59.238181][ T872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.243696][ T872] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 59.249208][ T872] usb 6-1: media controller created [ 59.252975][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.256787][ T872] dw2102: i2c transfer failed. [ 59.259836][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.262842][ T872] dw2102: i2c transfer failed. [ 59.265280][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.268765][ T872] dw2102: i2c transfer failed. [ 59.270987][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.273404][ T872] dw2102: i2c transfer failed. [ 59.275384][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.278945][ T872] dw2102: i2c transfer failed. [ 59.281604][ T872] dvb-usb: bulk message failed: -22 (6/0) [ 59.284312][ T872] dw2102: i2c transfer failed. [ 59.286751][ T872] dvb-usb: MAC address: 02:02:02:02:02:02 [ 59.300020][ T872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.306697][ T5749] Bluetooth: hci2: command tx timeout [ 59.307105][ T62] Bluetooth: hci0: command tx timeout [ 59.309315][ T5744] Bluetooth: hci3: command tx timeout [ 59.315126][ T5757] Bluetooth: hci1: command tx timeout [ 59.337247][ T872] dvb-usb: bulk message failed: -22 (3/0) [ 59.340122][ T872] dw2102: command 0x0e transfer failed. [ 59.342776][ T872] dvb-usb: bulk message failed: -22 (3/0) [ 59.345126][ T872] dw2102: command 0x0e transfer failed. [ 59.404862][ T6050] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 59.666949][ T872] dvb-usb: bulk message failed: -22 (3/0) [ 59.669206][ T872] dw2102: command 0x0e transfer failed. [ 59.672348][ T872] dvb-usb: bulk message failed: -22 (3/0) [ 59.674816][ T872] dw2102: command 0x0e transfer failed. [ 59.677280][ T872] dvb-usb: bulk message failed: -22 (1/0) [ 59.679714][ T872] dw2102: command 0x51 transfer failed. [ 59.683375][ T6009] dvb-usb: bulk message failed: -22 (5/0) [ 59.686584][ T6009] dw2102: i2c transfer failed. [ 59.716232][ T872] DVB: Unable to find symbol ds3000_attach() [ 59.718933][ T872] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 59.775587][ T872] rc_core: IR keymap rc-su3000 not found [ 59.778231][ T872] Registered IR keymap rc-empty [ 59.787196][ T872] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 59.796183][ T872] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input6 [ 59.809012][ T872] dvb-usb: schedule remote query interval to 150 msecs. [ 59.812259][ T872] dw2102: su3000_power_ctrl: 0, initialized 1 [ 59.815286][ T872] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 59.823690][ T872] usb 6-1: USB disconnect, device number 3 [ 59.878065][ T872] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 59.912247][ T40] audit: type=1326 audit(1779140953.842:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.0.85" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 59.940358][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'. [ 60.733919][ T6132] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 61.042523][ T6166] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 61.045237][ T6166] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 61.050228][ T6166] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 61.275221][ T6193] process 'syz.1.144' launched './file2' with NULL argv: empty string added [ 61.385967][ T5744] Bluetooth: hci2: command tx timeout [ 61.388718][ T5757] Bluetooth: hci1: command tx timeout [ 61.396392][ T5757] Bluetooth: hci0: command tx timeout [ 61.551714][ T6222] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 61.946161][ T1350] kernel write not supported for file /amidi2 (pid: 1350 comm: kworker/3:2) [ 62.451513][ T6297] vlan2: entered promiscuous mode [ 62.453869][ T6297] bridge0: entered promiscuous mode [ 62.524145][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.691555][ T6321] PKCS7: Unknown OID: [5] (bad) [ 62.697684][ T6321] PKCS7: Only support pkcs7_signedData type [ 62.757571][ T6330] netem: change failed [ 63.135337][ T6360] Invalid logical block size (53355) [ 63.893401][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.239'. [ 63.917618][ T6393] [U] [ 64.285741][ T6434] xt_limit: Overflow, try lower: 271964/0 [ 64.421727][ T6444] xt_socket: unknown flags 0xe4 [ 64.520156][ T6448] sctp: [Deprecated]: syz.1.267 (pid 6448) Use of int in max_burst socket option. [ 64.520156][ T6448] Use struct sctp_assoc_value instead [ 65.135910][ T6507] capability: warning: `syz.1.296' uses 32-bit capabilities (legacy support in use) [ 66.276639][ T6566] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.441291][ T6576] Zero length message leads to an empty skb [ 66.853147][ T40] audit: type=1326 audit(1779140960.782:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.343" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24f7c code=0x0 [ 66.891866][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 66.899481][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 67.434637][ T6644] can0: slcan on ptm0. [ 67.587089][ T6642] can0 (unregistered): slcan off ptm0. [ 67.724817][ T40] audit: type=1326 audit(1779140961.652:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.1.366" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef7c code=0x0 [ 67.904054][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 67.907348][ T6680] tc_dump_action: action bad kind [ 68.668084][ T6742] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 68.676695][ T6740] IPVS: stopping backup sync thread 6742 ... [ 69.149075][ T6782] random: crng reseeded on system resumption [ 69.175890][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 69.291253][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 69.301149][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 69.380652][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 70.357896][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.615123][ T40] audit: type=1326 audit(1779140964.542:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.630059][ T40] audit: type=1326 audit(1779140964.542:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.641039][ T40] audit: type=1326 audit(1779140964.542:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.650698][ T40] audit: type=1326 audit(1779140964.542:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.664538][ T40] audit: type=1326 audit(1779140964.542:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.677680][ T40] audit: type=1326 audit(1779140964.542:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.691336][ T40] audit: type=1326 audit(1779140964.542:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.702696][ T40] audit: type=1326 audit(1779140964.542:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.2.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 70.927786][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 70.992318][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 71.700919][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 71.883231][ T7021] xt_socket: unknown flags 0xe4 [ 72.078365][ T7038] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 72.167497][ T7051] Cannot find set identified by id 0 to match [ 72.333029][ T7066] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.384068][ T7068] netlink: 68 bytes leftover after parsing attributes in process `syz.3.563'. [ 72.389905][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 72.729148][ C3] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 72.733395][ C3] sr 2:0:0:0: [sr0] tag#22 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 73.255213][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 73.255235][ T40] audit: type=1326 audit(1779140967.182:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.285825][ T40] audit: type=1326 audit(1779140967.182:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.305737][ T40] audit: type=1326 audit(1779140967.182:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.327527][ T40] audit: type=1326 audit(1779140967.192:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.336240][ T40] audit: type=1326 audit(1779140967.192:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71261ab code=0x7ffc0000 [ 73.345681][ T40] audit: type=1326 audit(1779140967.192:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.354922][ T40] audit: type=1326 audit(1779140967.242:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.408121][ T7150] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 73.414015][ T40] audit: type=1326 audit(1779140967.342:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.431798][ T40] audit: type=1326 audit(1779140967.362:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24f98 code=0x7ffc0000 [ 73.441086][ T40] audit: type=1326 audit(1779140967.362:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 73.954927][ T7184] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 73.958780][ T7184] netlink: 240 bytes leftover after parsing attributes in process `syz.2.616'. [ 74.801704][ T7243] ======================================================= [ 74.801704][ T7243] WARNING: The mand mount option has been deprecated and [ 74.801704][ T7243] and is ignored by this kernel. Remove the mand [ 74.801704][ T7243] option from the mount to silence this warning. [ 74.801704][ T7243] ======================================================= [ 74.818968][ T7243] tmpfs: Bad value for 'size' [ 75.056074][ T7257] overlay: Unknown parameter '/6M߶}5&IG$ΆPAHB-\,Hftd&C)ZVF*kdՠQcTiw UEpΛS2 p* W~xVAg]XC4M3 !' [ 75.072639][ T7259] netlink: 'syz.3.649': attribute type 11 has an invalid length. [ 75.076098][ T7259] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.649'. [ 75.116224][ T5841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.277717][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 75.286370][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 75.291573][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 75.297003][ T5841] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 75.307353][ T5841] usb 7-1: config 8 has no interface number 0 [ 75.310053][ T5841] usb 7-1: config 8 interface 188 has no altsetting 0 [ 75.320318][ T5841] usb 7-1: string descriptor 0 read error: -22 [ 75.323510][ T5841] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 75.328326][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.361157][ T5841] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 75.364934][ T5841] dw2102: su3000_power_ctrl: 1, initialized 0 [ 75.368400][ T5841] dvb-usb: bulk message failed: -22 (2/0) [ 75.376212][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.389054][ T5841] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 75.392671][ T5841] usb 7-1: media controller created [ 75.394864][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.398006][ T5841] dw2102: i2c transfer failed. [ 75.399895][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.402311][ T5841] dw2102: i2c transfer failed. [ 75.404601][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.408205][ T5841] dw2102: i2c transfer failed. [ 75.410219][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.412605][ T5841] dw2102: i2c transfer failed. [ 75.414550][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.417618][ T5841] dw2102: i2c transfer failed. [ 75.420075][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 75.422304][ T5841] dw2102: i2c transfer failed. [ 75.424268][ T5841] dvb-usb: MAC address: 02:02:02:02:02:02 [ 75.442278][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.459219][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 75.461582][ T5841] dw2102: command 0x0e transfer failed. [ 75.464261][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 75.469336][ T5841] dw2102: command 0x0e transfer failed. [ 75.776289][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 75.780360][ T5841] dw2102: command 0x0e transfer failed. [ 75.782657][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 75.784816][ T5841] dw2102: command 0x0e transfer failed. [ 75.790177][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 75.793750][ T5841] dw2102: command 0x51 transfer failed. [ 75.797309][ T7247] dw2102: i2c rd: len=155 is too big! [ 75.797309][ T7247] [ 75.832469][ T5841] DVB: Unable to find symbol ds3000_attach() [ 75.835073][ T5841] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 75.886168][ T5841] rc_core: IR keymap rc-su3000 not found [ 75.888870][ T5841] Registered IR keymap rc-empty [ 75.893303][ T5841] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 75.899358][ T5841] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input7 [ 75.904960][ T5841] dvb-usb: schedule remote query interval to 150 msecs. [ 75.908061][ T5841] dw2102: su3000_power_ctrl: 0, initialized 1 [ 75.910546][ T5841] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 75.919757][ T5841] usb 7-1: USB disconnect, device number 2 [ 76.119047][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.122786][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.252369][ T5841] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 76.407252][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 76.414342][ T7303] ------------[ cut here ]------------ [ 76.417297][ T7303] 1 [ 76.417311][ T7303] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#3: syz.1.669/7303 [ 76.422209][ T7303] Modules linked in: [ 76.424611][ T7303] CPU: 3 UID: 0 PID: 7303 Comm: syz.1.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.428972][ T7303] Tainted: [L]=SOFTLOCKUP [ 76.430724][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.434931][ T7303] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 76.437303][ T7303] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ec 4a 1b f8 66 90 e8 e5 4a 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 36 22 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 03 eb 9e 01 e8 be 4a 1b [ 76.445621][ T7303] RSP: 0000:ffffc90003787390 EFLAGS: 00010283 [ 76.448371][ T7303] RAX: 0000000000000dd6 RBX: ffff888013456c80 RCX: ffffc9000c402000 [ 76.451398][ T7303] RDX: 0000000000080000 RSI: ffffffff8958e354 RDI: ffffffff8c1c4180 [ 76.454127][ T7303] RBP: ffff888013456c80 R08: 0000000000000001 R09: 0000000000000000 [ 76.457533][ T7303] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888048aa0000 [ 76.461681][ T7303] R13: ffff888021a27800 R14: 0000000000000000 R15: ffff888013456cd8 [ 76.465272][ T7303] FS: 0000000000000000(0000) GS:ffff888097474000(0063) knlGS:00000000f53cdb40 [ 76.469119][ T7303] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 76.472002][ T7303] CR2: 00000000f7386d50 CR3: 000000004fd3a000 CR4: 0000000000352ef0 [ 76.475224][ T7303] Call Trace: [ 76.476810][ T7303] [ 76.478144][ T7303] ? __pfx_ip_rt_bug+0x10/0x10 [ 76.480343][ T7303] ip_push_pending_frames+0x29e/0x300 [ 76.482667][ T7303] icmp_push_reply+0x30e/0x450 [ 76.484521][ T7303] __icmp_send+0x11b4/0x2c70 [ 76.486076][ T7303] ? __pfx___icmp_send+0x10/0x10 [ 76.487861][ T7303] ? __pfx_ip_route_input_slow+0x10/0x10 [ 76.490144][ T7303] ? __lock_acquire+0x4a5/0x2630 [ 76.492370][ T7303] ? __ip_options_compile+0x604/0x16a0 [ 76.494978][ T7303] ? ip_route_input_noref+0x15f/0x2e0 [ 76.497351][ T7303] ip_options_compile+0xb6/0x100 [ 76.499448][ T7303] ? __pfx_ip_options_compile+0x10/0x10 [ 76.501748][ T7303] ? __pfx_ip_rcv_finish+0x10/0x10 [ 76.503859][ T7303] ip_rcv_finish_core+0x693/0x2c30 [ 76.506479][ T7303] ip_rcv+0x1c0/0x3c0 [ 76.508328][ T7303] ? __pfx_ip_rcv+0x10/0x10 [ 76.510313][ T7303] __netif_receive_skb_one_core+0x197/0x1e0 [ 76.512707][ T7303] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 76.515306][ T7303] ? lock_acquire+0x1b1/0x370 [ 76.517401][ T7303] __netif_receive_skb+0x1f/0x120 [ 76.519643][ T7303] netif_receive_skb+0x13b/0x7f0 [ 76.521958][ T7303] ? __pfx_netif_receive_skb+0x10/0x10 [ 76.524236][ T7303] tun_rx_batched.isra.0+0x3f6/0x750 [ 76.526466][ T7303] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 76.528915][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.530697][ T7303] ? tun_get_user+0x1cc8/0x3c20 [ 76.532551][ T7303] tun_get_user+0x1e31/0x3c20 [ 76.534845][ T7303] ? __pfx_tun_get_user+0x10/0x10 [ 76.537301][ T7303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 76.539518][ T7303] ? find_held_lock+0x2b/0x80 [ 76.541454][ T7303] ? tun_get+0x191/0x370 [ 76.543179][ T7303] ? tun_get+0x191/0x370 [ 76.544908][ T7303] tun_chr_write_iter+0xdc/0x200 [ 76.547107][ T7303] vfs_write+0x6ac/0x1070 [ 76.549212][ T7303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 76.551729][ T7303] ? __pfx_vfs_write+0x10/0x10 [ 76.553734][ T7303] ? find_held_lock+0x2b/0x80 [ 76.555709][ T7303] ksys_write+0x12a/0x250 [ 76.557583][ T7303] ? __pfx_ksys_write+0x10/0x10 [ 76.559812][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.562147][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.564350][ T7303] do_int80_emulation+0x141/0x700 [ 76.566430][ T7303] asm_int80_emulation+0x1a/0x20 [ 76.568035][ T7303] RIP: 0023:0xf71161ab [ 76.569666][ T7303] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 76.577756][ T7303] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 76.580951][ T7303] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 76.584394][ T7303] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.588158][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.591269][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.594214][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.597125][ T7303] [ 76.598717][ T7303] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.601998][ T7303] CPU: 3 UID: 0 PID: 7303 Comm: syz.1.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.606662][ T7303] Tainted: [L]=SOFTLOCKUP [ 76.608568][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.612182][ T7303] Call Trace: [ 76.613611][ T7303] [ 76.614865][ T7303] dump_stack_lvl+0x100/0x190 [ 76.616886][ T7303] vpanic+0x552/0x970 [ 76.618561][ T7303] ? __pfx_vpanic+0x10/0x10 [ 76.620490][ T7303] panic+0xd1/0xe0 [ 76.622039][ T7303] ? __pfx_panic+0x10/0x10 [ 76.623854][ T7303] check_panic_on_warn.cold+0x19/0x34 [ 76.626244][ T7303] ? ip_rt_bug+0x2b/0x150 [ 76.628172][ T7303] __warn.cold+0x191/0x328 [ 76.630167][ T7303] __report_bug+0x296/0x3d0 [ 76.632339][ T7303] ? ip_rt_bug+0x2b/0x150 [ 76.634357][ T7303] ? __pfx___report_bug+0x10/0x10 [ 76.636069][ T7303] ? ip_rt_bug+0x2b/0x150 [ 76.637930][ T7303] report_bug+0xb2/0x220 [ 76.639647][ T7303] ? ip_rt_bug+0x2b/0x150 [ 76.641353][ T7303] handle_bug+0x16a/0x2a0 [ 76.643110][ T7303] exc_invalid_op+0x17/0x50 [ 76.644668][ T7303] asm_exc_invalid_op+0x1a/0x20 [ 76.646437][ T7303] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 76.648590][ T7303] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 ec 4a 1b f8 66 90 e8 e5 4a 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 36 22 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 03 eb 9e 01 e8 be 4a 1b [ 76.656507][ T7303] RSP: 0000:ffffc90003787390 EFLAGS: 00010283 [ 76.659078][ T7303] RAX: 0000000000000dd6 RBX: ffff888013456c80 RCX: ffffc9000c402000 [ 76.662321][ T7303] RDX: 0000000000080000 RSI: ffffffff8958e354 RDI: ffffffff8c1c4180 [ 76.665078][ T7303] RBP: ffff888013456c80 R08: 0000000000000001 R09: 0000000000000000 [ 76.668306][ T7303] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888048aa0000 [ 76.670743][ T7303] R13: ffff888021a27800 R14: 0000000000000000 R15: ffff888013456cd8 [ 76.673809][ T7303] ? sk_skb_reason_drop+0x114/0x1b0 [ 76.675713][ T7303] ? __pfx_ip_rt_bug+0x10/0x10 [ 76.677480][ T7303] ip_push_pending_frames+0x29e/0x300 [ 76.679940][ T7303] icmp_push_reply+0x30e/0x450 [ 76.682178][ T7303] __icmp_send+0x11b4/0x2c70 [ 76.684064][ T7303] ? __pfx___icmp_send+0x10/0x10 [ 76.686135][ T7303] ? __pfx_ip_route_input_slow+0x10/0x10 [ 76.688449][ T7303] ? __lock_acquire+0x4a5/0x2630 [ 76.690449][ T7303] ? __ip_options_compile+0x604/0x16a0 [ 76.692629][ T7303] ? ip_route_input_noref+0x15f/0x2e0 [ 76.694536][ T7303] ip_options_compile+0xb6/0x100 [ 76.696310][ T7303] ? __pfx_ip_options_compile+0x10/0x10 [ 76.698708][ T7303] ? __pfx_ip_rcv_finish+0x10/0x10 [ 76.701128][ T7303] ip_rcv_finish_core+0x693/0x2c30 [ 76.703135][ T7303] ip_rcv+0x1c0/0x3c0 [ 76.704728][ T7303] ? __pfx_ip_rcv+0x10/0x10 [ 76.706335][ T7303] __netif_receive_skb_one_core+0x197/0x1e0 [ 76.708308][ T7303] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 76.710422][ T7303] ? lock_acquire+0x1b1/0x370 [ 76.712026][ T7303] __netif_receive_skb+0x1f/0x120 [ 76.713714][ T7303] netif_receive_skb+0x13b/0x7f0 [ 76.715454][ T7303] ? __pfx_netif_receive_skb+0x10/0x10 [ 76.717561][ T7303] tun_rx_batched.isra.0+0x3f6/0x750 [ 76.719625][ T7303] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 76.721952][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.723662][ T7303] ? tun_get_user+0x1cc8/0x3c20 [ 76.725273][ T7303] tun_get_user+0x1e31/0x3c20 [ 76.726827][ T7303] ? __pfx_tun_get_user+0x10/0x10 [ 76.728841][ T7303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 76.731060][ T7303] ? find_held_lock+0x2b/0x80 [ 76.732784][ T7303] ? tun_get+0x191/0x370 [ 76.734353][ T7303] ? tun_get+0x191/0x370 [ 76.735785][ T7303] tun_chr_write_iter+0xdc/0x200 [ 76.737420][ T7303] vfs_write+0x6ac/0x1070 [ 76.738806][ T7303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 76.740566][ T7303] ? __pfx_vfs_write+0x10/0x10 [ 76.742078][ T7303] ? find_held_lock+0x2b/0x80 [ 76.743655][ T7303] ksys_write+0x12a/0x250 [ 76.745144][ T7303] ? __pfx_ksys_write+0x10/0x10 [ 76.746887][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.748632][ T7303] ? rcu_is_watching+0x12/0xc0 [ 76.750486][ T7303] do_int80_emulation+0x141/0x700 [ 76.752319][ T7303] asm_int80_emulation+0x1a/0x20 [ 76.753998][ T7303] RIP: 0023:0xf71161ab [ 76.755391][ T7303] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 76.761436][ T7303] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 76.764138][ T7303] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 76.767055][ T7303] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.769828][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.772235][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.774813][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.777542][ T7303] [ 76.779320][ T7303] Kernel Offset: disabled [ 76.780719][ T7303] Rebooting in 86400 seconds..