last executing test programs: 1m20.61448098s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 1m20.52389381s ago: executing program 2 (id=16): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x4010) 1m20.518763391s ago: executing program 2 (id=18): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_exec(r0, &(0x7f0000000a80)={'exec ', ':\x00\b\xc4\x99\x10\tV\xc22b\xe8\r\xfa\xc1\xd6-\xe5\xd3-&\v\xa0\xd3\v#E\xc4I\x97\xfd\xda\xd0o%\xc2OMD\xac\x0f\xb0\xc3\x93\x93P\x99j\xdb\x13\x1a\f\xfb\xcd\x95\x8a\xe0a?;\xc0\xd2\xe3\xbe\x9d\xd4\x1b\x87\x91Ux\xf9\xeb@\xc3p\xf9\xa2\npqu\xc6C\xd9\x8b\xf1O\x1e\x17\x15\x9d{W1|\xd9\xa4\x10h\xc3V+GZ\xe4\xa2U\x05\x13\xfb\xba\xc9\xe42/\xd3\xb9T\x0e\x13\xcc\xf8\xff\xff\xff\x00\x00\x00\x00(\vs\xf1ni\xd1@\fp\xd9nM*\x97F\xcc\x87\xa3\xe1\xce8W\xc0\xden\x9ed\x82\x96\v\x99V\xaf\x00\xb1\x99z\x9b\x8a\xf6\x19\xd2\x83f\xc2t\xcd\xb9\'\xec\xed\x1c\x8f\x0eq\xfb\xc1\xdc6\xcb\xc8\'\xca\xc82Cz\x16\x9d\xdd\x81\xc7\x007\x18\xac\xd2\xae\x92\xa4\x05\xce\x98\xe7\xb1\xef\xb5X\a\x87\xf6\xe53\x8d{\x7f\x18@\xb4\xaa3\x80\xb6P\x1e\xf2\xf1+\x0e{|\xde\x80\x1b^\xca\xcf\xbc,\xb3\v\x82\xc2g\xeePF\x85\xb3\xa9\x9e\xf5\x1a,\xe9O`\x8e\xf2\xd5\xd1g\x9f.\x00\x00\x00\x00\x98\xbe\x13/_\xca\xe0\x16CO\xa3oy\xd1\xacs\x95\x87\x8a\xceQ_\x81\xb2\xb5][\xb9T\x8c|\x82\xa9\t+\xee\xda\xa3di\x1c\x17\xf6\xebm_\xf6\x04\x8d\xec\x8f\x17o\x89E\b\x17\xf8\v\xdf\x95X7a<\x86w\xb6\xd9\xd6D\xb6\x7f\x84W'}, 0x167) 1m20.423588514s ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m20.365032718s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001a0011002ac270000400000002002a"], 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m19.01437789s ago: executing program 2 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m18.972900681s ago: executing program 32 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m8.147985045s ago: executing program 4 (id=547): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m8.072135094s ago: executing program 4 (id=549): bind(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, '\x00', 0x14}, 0x10001}}}, 0x80) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x8}) 1m8.070521741s ago: executing program 4 (id=552): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00', 0x19}) 1m8.012176578s ago: executing program 4 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m7.970131011s ago: executing program 4 (id=559): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.645478081s ago: executing program 4 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060100000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001300010062726f6164e1fae5dc636173742d6c69"], 0x40}}, 0x20000080) 1m7.572295332s ago: executing program 33 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060100000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001300010062726f6164e1fae5dc636173742d6c69"], 0x40}}, 0x20000080) 55.695161201s ago: executing program 3 (id=1022): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x9e7a, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) 55.440999218s ago: executing program 3 (id=1027): mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) 55.388175133s ago: executing program 3 (id=1028): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 55.313732973s ago: executing program 3 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 55.313329605s ago: executing program 3 (id=1034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r1, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) 54.996382486s ago: executing program 3 (id=1040): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x0, 0x22}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x4, 0x2, {0x77359400}, {0x1, 0x8, 0x8, 0x6, 0x6, 0x6, "4164aec3"}, 0xe, 0x2, {0x0}, 0x401}) 54.889171645s ago: executing program 34 (id=1040): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x0, 0x22}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x4, 0x2, {0x77359400}, {0x1, 0x8, 0x8, 0x6, 0x6, 0x6, "4164aec3"}, 0xe, 0x2, {0x0}, 0x401}) 42.359649324s ago: executing program 5 (id=1408): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r0) 42.358793404s ago: executing program 5 (id=1410): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000300)="189a55d9", 0x4}], 0x1}}], 0x2, 0x20040040) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 42.308695198s ago: executing program 5 (id=1413): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x15, &(0x7f0000000a40)=[{&(0x7f0000001c00)=""/4079, 0xfef}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000002c00)=""/4096, 0xff3}, {&(0x7f0000000180)=""/83, 0x55}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/110}], 0x9}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 42.180397136s ago: executing program 5 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 42.1126093s ago: executing program 5 (id=1421): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000001140)={0x0}) 41.826295279s ago: executing program 5 (id=1432): r0 = syz_io_uring_setup(0x4f3b, &(0x7f0000000400)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000000)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) 41.775467465s ago: executing program 35 (id=1432): r0 = syz_io_uring_setup(0x4f3b, &(0x7f0000000400)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000000)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) 29.426696277s ago: executing program 1 (id=1887): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev, 0x4}, {@empty}, {@dev}, {@broadcast}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 29.375590036s ago: executing program 1 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1c4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x810) 29.375313574s ago: executing program 1 (id=1891): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x19, r0) 29.297025646s ago: executing program 1 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffd99}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 29.234966862s ago: executing program 1 (id=1897): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 29.234187267s ago: executing program 1 (id=1901): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x3, 0x4) 13.58627218s ago: executing program 36 (id=1901): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x3, 0x4) 12.581607531s ago: executing program 6 (id=2131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.388414822s ago: executing program 6 (id=2141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) 12.238355626s ago: executing program 6 (id=2144): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) 12.125257888s ago: executing program 6 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 12.044207589s ago: executing program 6 (id=2140): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 11.766753881s ago: executing program 6 (id=2143): r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000001}) 11.723921551s ago: executing program 37 (id=2143): r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000001}) 1.305053232s ago: executing program 0 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) 1.216400242s ago: executing program 0 (id=2383): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x430e, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) 793.004211ms ago: executing program 8 (id=2397): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 701.057157ms ago: executing program 7 (id=2399): r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 692.739702ms ago: executing program 0 (id=2407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x1e1fa3de}) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xf58}) 619.142728ms ago: executing program 7 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x0, 0x3, 0x0, 0x400, 0x0, [{0x0, 0x7b, 0x0, '\x00', 0x3}, {}, {}, {0x7f}, {}, {0x0, 0x81, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {}, {}, {0x23}, {}, {0x0, 0x0, 0x0, '\x00', 0x23}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) 618.974389ms ago: executing program 0 (id=2402): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c98000", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, [], "027fd52b8848cdbe"}}}}}}}, 0x0) 565.808477ms ago: executing program 0 (id=2403): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x6, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xbe, 0xea, 0xf4, 0x40, 0xdc4, 0x73, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x78, 0x20, 0xff}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 490.904472ms ago: executing program 7 (id=2405): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 488.206541ms ago: executing program 9 (id=2406): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x430e, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) 415.008276ms ago: executing program 7 (id=2408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x14, r1, 0x21, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 412.665152ms ago: executing program 7 (id=2416): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 396.473814ms ago: executing program 8 (id=2409): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 389.339292ms ago: executing program 9 (id=2418): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 254.540475ms ago: executing program 8 (id=2410): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x3d9a, &(0x7f0000002dc0)={0x0, 0x9b8b, 0x80, 0x1, 0xc}, &(0x7f0000002e40), &(0x7f0000002e80), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0xffffffffffffffff, 0x0) 254.437541ms ago: executing program 9 (id=2411): r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 188.208326ms ago: executing program 9 (id=2412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x2e, 0x2, @in={0x2, 0x0, @multicast2=0xe000002f}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x0, 0x2, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}}]}]}, 0x54}}, 0x0) 186.804177ms ago: executing program 8 (id=2413): unshare(0x22020600) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 141.018583ms ago: executing program 8 (id=2414): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 134.354554ms ago: executing program 7 (id=2424): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x430e, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) 76.568236ms ago: executing program 8 (id=2415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x0, 0x3, 0x0, 0x400, 0x0, [{0x0, 0x7b, 0x0, '\x00', 0x3}, {}, {}, {0x7f}, {}, {0x0, 0x81, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {}, {}, {0x23}, {}, {0x0, 0x0, 0x0, '\x00', 0x23}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) 76.445862ms ago: executing program 9 (id=2417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 76.181444ms ago: executing program 9 (id=2419): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) stat(0x0, 0x0) 0s ago: executing program 0 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) kernel console output (not intermixed with test programs): andle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.326592][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.332596][ T5961] team0: Port device team_slave_1 added [ 54.336404][ T5964] team0: Port device team_slave_0 added [ 54.340058][ T5964] team0: Port device team_slave_1 added [ 54.347906][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.350133][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.358289][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.374921][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.377772][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.387094][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.407905][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.410273][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.418662][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.422987][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.425969][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.436280][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.441189][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.443491][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.452279][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.475165][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.477414][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.485559][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.489429][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.491619][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.499600][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.519458][ T5954] hsr_slave_0: entered promiscuous mode [ 54.522028][ T5954] hsr_slave_1: entered promiscuous mode [ 54.579122][ T5953] hsr_slave_0: entered promiscuous mode [ 54.582250][ T5953] hsr_slave_1: entered promiscuous mode [ 54.585699][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 54.588118][ T5953] Cannot create hsr debugfs directory [ 54.599267][ T5964] hsr_slave_0: entered promiscuous mode [ 54.602421][ T5964] hsr_slave_1: entered promiscuous mode [ 54.606307][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 54.608677][ T5964] Cannot create hsr debugfs directory [ 54.619938][ T5961] hsr_slave_0: entered promiscuous mode [ 54.622220][ T5961] hsr_slave_1: entered promiscuous mode [ 54.624462][ T5961] debugfs: 'hsr0' already exists in 'hsr' [ 54.626337][ T5961] Cannot create hsr debugfs directory [ 54.973217][ T5954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.983111][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.986894][ T5954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.995269][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.998730][ T5954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.006215][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.012544][ T5954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.020570][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.090445][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.095672][ T5961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.099039][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.103149][ T5961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.108148][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.114671][ T5961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.118527][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.124975][ T5961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.179985][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.185502][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.188305][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.193194][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.213611][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.219106][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.222318][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.227945][ T5964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.285534][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.290005][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.299846][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.302915][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.308028][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.310723][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.315238][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.318083][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.321927][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.375933][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.403794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.404720][ T5313] Bluetooth: hci1: command tx timeout [ 55.407164][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.415428][ T5313] Bluetooth: hci0: command tx timeout [ 55.415944][ T63] Bluetooth: hci2: command tx timeout [ 55.416769][ T5958] Bluetooth: hci3: command tx timeout [ 55.418740][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.426981][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.493040][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.538113][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.548122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.551286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.560245][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.575643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.578166][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.601514][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.617462][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.628167][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.631092][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.646690][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.649045][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.665868][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.687836][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.690136][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.707763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.710587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.810103][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.820543][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.897991][ T5954] veth0_vlan: entered promiscuous mode [ 55.902823][ T5961] veth0_vlan: entered promiscuous mode [ 55.919957][ T5961] veth1_vlan: entered promiscuous mode [ 55.926343][ T5954] veth1_vlan: entered promiscuous mode [ 55.931632][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.985092][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.009396][ T5954] veth0_macvtap: entered promiscuous mode [ 56.021238][ T5961] veth0_macvtap: entered promiscuous mode [ 56.028192][ T5954] veth1_macvtap: entered promiscuous mode [ 56.040980][ T5961] veth1_macvtap: entered promiscuous mode [ 56.071783][ T5964] veth0_vlan: entered promiscuous mode [ 56.095036][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.100116][ T5964] veth1_vlan: entered promiscuous mode [ 56.112771][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.129239][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.145008][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.154650][ T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.165182][ T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.168280][ T168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.171364][ T5953] veth0_vlan: entered promiscuous mode [ 56.178346][ T168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.190041][ T168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.209216][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.213079][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.222276][ T5953] veth1_vlan: entered promiscuous mode [ 56.235459][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.280583][ T5964] veth0_macvtap: entered promiscuous mode [ 56.291819][ T5964] veth1_macvtap: entered promiscuous mode [ 56.325824][ T5953] veth0_macvtap: entered promiscuous mode [ 56.337857][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.338133][ T5953] veth1_macvtap: entered promiscuous mode [ 56.341193][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.370987][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.386095][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.390287][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.392807][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.399057][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.423004][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.426780][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.430497][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442532][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.446883][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.462162][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.475300][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.482334][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.486602][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.504929][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.508764][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.531691][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.536930][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.556150][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.616803][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.620292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.707331][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.714810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.746949][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.752289][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.811038][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.816978][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.864941][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.235281][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 57.238609][ T6071] tc_dump_action: action bad kind [ 57.357860][ T6080] ======================================================= [ 57.357860][ T6080] WARNING: The mand mount option has been deprecated and [ 57.357860][ T6080] and is ignored by this kernel. Remove the mand [ 57.357860][ T6080] option from the mount to silence this warning. [ 57.357860][ T6080] ======================================================= [ 57.484467][ T63] Bluetooth: hci2: command tx timeout [ 57.484628][ T5313] Bluetooth: hci0: command tx timeout [ 57.485571][ T5958] Bluetooth: hci3: command tx timeout [ 57.615470][ T6092] netlink: 136 bytes leftover after parsing attributes in process `syz.3.26'. [ 57.618953][ T6092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.713246][ T6096] process 'syz.3.28' launched './file2' with NULL argv: empty string added [ 57.819663][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.827934][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.899840][ T6106] sch_tbf: peakrate 1 is lower than or equals to rate 16149960914006595198 ! [ 58.111895][ T6122] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 58.224969][ T5911] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.386886][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 58.391313][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.395249][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 58.398544][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 58.402575][ T6141] capability: warning: `syz.1.50' uses deprecated v2 capabilities in a way that may be insecure [ 58.408865][ T5911] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 58.412298][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.418817][ T5911] usb 5-1: Product: syz [ 58.420539][ T5911] usb 5-1: Manufacturer: syz [ 58.422555][ T5911] usb 5-1: SerialNumber: syz [ 58.424132][ T6143] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 58.427462][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.429035][ T5911] usb 5-1: config 0 descriptor?? [ 58.433137][ T6143] vhci_hcd vhci_hcd.0: Device attached [ 58.443660][ T6144] vhci_hcd: connection closed [ 58.448383][ T360] vhci_hcd vhci_hcd.3: stop threads [ 58.451750][ T360] vhci_hcd vhci_hcd.3: release socket [ 58.453588][ T360] vhci_hcd vhci_hcd.3: disconnect device [ 58.557933][ T6149] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 58.655997][ T5911] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 58.730282][ T353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.858660][ T29] usb 5-1: USB disconnect, device number 2 [ 58.898313][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.902647][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.906619][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.910708][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.914344][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.970465][ T6170] Bluetooth: MGMT ver 1.23 [ 59.075963][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 59.202008][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.207535][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.210285][ T6163] bridge_slave_0: entered allmulticast mode [ 59.213720][ T6163] bridge_slave_0: entered promiscuous mode [ 59.236502][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.238867][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.241090][ T6163] bridge_slave_1: entered allmulticast mode [ 59.243790][ T6163] bridge_slave_1: entered promiscuous mode [ 59.268426][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.274609][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.291042][ T6163] team0: Port device team_slave_0 added [ 59.297642][ T6163] team0: Port device team_slave_1 added [ 59.319779][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.326388][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.334886][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.340608][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.344238][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.352591][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.389146][ T6163] hsr_slave_0: entered promiscuous mode [ 59.391817][ T6163] hsr_slave_1: entered promiscuous mode [ 59.399317][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 59.401181][ T6163] Cannot create hsr debugfs directory [ 59.495720][ T6224] mmap: syz.3.87 (6224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.557974][ T6163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.564148][ T5313] Bluetooth: hci2: command tx timeout [ 59.568420][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.571235][ T6163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.577032][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.577958][ T5313] Bluetooth: hci0: command tx timeout [ 59.578004][ T63] Bluetooth: hci3: command tx timeout [ 59.580474][ T6163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.596202][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.599135][ T6163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.605065][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.638500][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.641056][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.644323][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.647466][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.682872][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.692610][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.695747][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.706923][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.714861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.717577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.727224][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.729810][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.839460][ T353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.908275][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.928850][ T353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.007088][ T6282] warning: `syz.0.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.050033][ T353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.094816][ T6163] veth0_vlan: entered promiscuous mode [ 60.106731][ T6163] veth1_vlan: entered promiscuous mode [ 60.122907][ T6163] veth0_macvtap: entered promiscuous mode [ 60.127549][ T6163] veth1_macvtap: entered promiscuous mode [ 60.137950][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.153106][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.160366][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.163168][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.167211][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.173400][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.347557][ T353] bridge_slave_1: left allmulticast mode [ 60.355905][ T353] bridge_slave_1: left promiscuous mode [ 60.359011][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.380170][ T353] bridge_slave_0: left allmulticast mode [ 60.382965][ T353] bridge_slave_0: left promiscuous mode [ 60.385114][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.643253][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.652943][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.658979][ T353] bond0 (unregistering): Released all slaves [ 60.674291][ T5666] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.674663][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.688051][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.724667][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.731841][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.915632][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 60.930666][ T5666] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.996143][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 61.014660][ T5313] Bluetooth: hci1: command tx timeout [ 61.074099][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.166937][ T5666] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.199023][ T353] hsr_slave_0: left promiscuous mode [ 61.202906][ T353] hsr_slave_1: left promiscuous mode [ 61.209089][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.211568][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.216542][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.219007][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.233080][ T353] veth1_macvtap: left promiscuous mode [ 61.234250][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 61.235914][ T353] veth0_macvtap: left promiscuous mode [ 61.239119][ T353] veth1_vlan: left promiscuous mode [ 61.240857][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 61.240909][ T353] veth0_vlan: left promiscuous mode [ 61.243583][ T9] usb 5-1: config 0 has no interface number 0 [ 61.252505][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.256753][ T6402] capability: warning: `syz.3.154' uses 32-bit capabilities (legacy support in use) [ 61.257482][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 61.269409][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 61.274999][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 61.279413][ T9] usb 5-1: Product: syz [ 61.280906][ T9] usb 5-1: SerialNumber: syz [ 61.290757][ T9] usb 5-1: config 0 descriptor?? [ 61.301404][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 61.310161][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input7 [ 61.521036][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.526837][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.530300][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.533668][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.537142][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.540453][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.543722][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.548006][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.550782][ T353] team0 (unregistering): Port device team_slave_1 removed [ 61.551407][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.556334][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.560510][ T353] team0 (unregistering): Port device team_slave_0 removed [ 61.561127][ T9] usb 5-1: USB disconnect, device number 3 [ 61.565774][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 61.590558][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 61.644397][ T5958] Bluetooth: hci0: command tx timeout [ 61.646180][ T5958] Bluetooth: hci2: command tx timeout [ 61.648638][ T63] Bluetooth: hci3: command tx timeout [ 61.674006][ T6426] netlink: 96 bytes leftover after parsing attributes in process `syz.4.166'. [ 61.697210][ T6426] netlink: 128 bytes leftover after parsing attributes in process `syz.4.166'. [ 61.702235][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.166'. [ 61.864782][ T5666] 8021q: adding VLAN 0 to HW filter on device eth5 [ 62.051146][ T6464] Bluetooth: MGMT ver 1.23 [ 62.142104][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 62.172841][ T6478] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 62.204557][ T6482] netlink: 'syz.4.189': attribute type 25 has an invalid length. [ 62.437822][ T6515] xt_l2tp: unknown flags: 51 [ 62.612560][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 62.901275][ T6569] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.908376][ T6569] @0Ù: renamed from bond_slave_1 (while UP) [ 63.059804][ T6584] trusted_key: encrypted_key: key trusted:syz not found [ 63.094092][ T63] Bluetooth: hci1: command tx timeout [ 63.334055][ T3260] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.494120][ T3260] usb 9-1: Using ep0 maxpacket: 32 [ 63.497590][ T3260] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 63.500515][ T3260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.504588][ T3260] usb 9-1: config 0 descriptor?? [ 63.514766][ T3260] as10x_usb: device has been detected [ 63.517170][ T3260] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 63.528043][ T3260] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 63.540792][ T3260] as10x_usb: error during firmware upload part1 [ 63.543103][ T3260] Registered device nBox DVB-T Dongle [ 63.720134][ T858] usb 9-1: USB disconnect, device number 2 [ 63.733403][ T858] Unregistered device nBox DVB-T Dongle [ 63.736038][ T858] as10x_usb: device has been disconnected [ 64.386183][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 64.428094][ T6675] veth3: entered promiscuous mode [ 64.430043][ T6687] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 64.619375][ T6708] mkiss: ax0: crc mode is auto. [ 64.626915][ T6710] bridge_slave_0: default FDB implementation only supports local addresses [ 64.699368][ T6714] IPVS: Scheduler module ip_vs_sip not found [ 64.713300][ T6717] sp0: Synchronizing with TNC [ 64.911083][ T6738] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 64.951098][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 65.124331][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 65.129666][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 65.166000][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 65.625216][ T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 65.712995][ T6844] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 65.800354][ T58] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 65.806922][ T58] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 65.810589][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.818538][ T58] usb 9-1: Product: syz [ 65.819857][ T58] usb 9-1: Manufacturer: syz [ 65.821654][ T58] usb 9-1: SerialNumber: syz [ 65.841067][ T58] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 65.871419][ T6864] netlink: 100 bytes leftover after parsing attributes in process `syz.0.367'. [ 66.047680][ T58] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 66.051061][ T58] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 66.054660][ T58] usb 9-1: media controller created [ 66.067180][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.138859][ T58] usb 9-1: USB disconnect, device number 3 [ 66.244148][ T40] audit: type=1326 audit(1776692991.496:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.0.380" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4fcc code=0x0 [ 66.550553][ T6900] tipc: Started in network mode [ 66.552401][ T6900] tipc: Node identity ac14142f, cluster identity 4711 [ 66.557709][ T6900] tipc: New replicast peer: 0.0.0.0 [ 66.560561][ T6900] tipc: Enabled bearer , priority 10 [ 66.573669][ T6848] orangefs_mount: mount request failed with -4 [ 66.904917][ T6931] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 66.909331][ T6931] netlink: 216 bytes leftover after parsing attributes in process `syz.3.390'. [ 67.132102][ T6952] netlink: 'syz.0.405': attribute type 2 has an invalid length. [ 67.247693][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 67.288290][ T6970] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 67.331527][ T6974] pim6reg99999999: entered allmulticast mode [ 67.565136][ T844] tipc: Node number set to 2886997039 [ 67.868848][ T7029] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 67.886314][ T63] Bluetooth: hci0: command 0x2016 tx timeout [ 67.890930][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 67.893811][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 67.897931][ T7033] netlink: 'syz.0.446': attribute type 14 has an invalid length. [ 68.016520][ T7049] tipc: Enabling of bearer rejected, failed to enable media [ 68.050367][ T7057] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 68.129975][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 68.228128][ T7085] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 68.360580][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 68.543265][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 68.548720][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 68.553841][ T7127] Zero length message leads to an empty skb [ 68.661641][ T7140] netlink: 100 bytes leftover after parsing attributes in process `syz.4.497'. [ 68.728298][ T7146] netlink: 810 bytes leftover after parsing attributes in process `syz.3.500'. [ 69.324057][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 69.382694][ T7207] netlink: 136 bytes leftover after parsing attributes in process `syz.0.528'. [ 69.385506][ T7207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.433723][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 69.438388][ T7217] tc_dump_action: action bad kind [ 69.774512][ T7258] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 69.872033][ T7273] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 69.965693][ T5313] Bluetooth: hci0: command 0x2016 tx timeout [ 70.146322][ T7306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.148535][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 70.154976][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 70.165249][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.168063][ T7307] vhci_hcd: connection closed [ 70.171878][ T13] vhci_hcd vhci_hcd.1: stop threads [ 70.176715][ T13] vhci_hcd vhci_hcd.1: release socket [ 70.178479][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 70.261047][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.298394][ T5313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.303721][ T5313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.308421][ T5313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.314259][ T5313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.323120][ T5313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.325122][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.414293][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.416674][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.451113][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 70.502401][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.504842][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.507211][ T7317] bridge_slave_0: entered allmulticast mode [ 70.509952][ T7317] bridge_slave_0: entered promiscuous mode [ 70.513326][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.516192][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.518944][ T7317] bridge_slave_1: entered allmulticast mode [ 70.522234][ T7317] bridge_slave_1: entered promiscuous mode [ 70.560879][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.576136][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 70.579598][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 70.582391][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.582686][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 70.588893][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 70.595280][ T58] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 70.598184][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.598915][ T7317] team0: Port device team_slave_0 added [ 70.600665][ T58] usb 8-1: Product: syz [ 70.603877][ T58] usb 8-1: Manufacturer: syz [ 70.605768][ T58] usb 8-1: SerialNumber: syz [ 70.609103][ T12] bridge_slave_1: left allmulticast mode [ 70.610264][ T58] usb 8-1: config 0 descriptor?? [ 70.611094][ T12] bridge_slave_1: left promiscuous mode [ 70.616227][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.620174][ T12] bridge_slave_0: left allmulticast mode [ 70.622161][ T12] bridge_slave_0: left promiscuous mode [ 70.625334][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.821075][ T58] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 70.858065][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.863795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.869962][ T12] bond0 (unregistering): Released all slaves [ 70.876699][ T7317] team0: Port device team_slave_1 added [ 70.905596][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.907953][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.917023][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.923789][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.926558][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.935085][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.944307][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.970265][ T7317] hsr_slave_0: entered promiscuous mode [ 70.972526][ T7317] hsr_slave_1: entered promiscuous mode [ 70.977278][ T7317] debugfs: 'hsr0' already exists in 'hsr' [ 70.982999][ T7317] Cannot create hsr debugfs directory [ 70.988216][ T10] libceph: connect (1)[c::]:6789 error -101 [ 70.994705][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.027513][ T10] usb 8-1: USB disconnect, device number 2 [ 71.105755][ T34] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 71.112095][ T34] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 71.115363][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.118432][ T34] usb 5-1: Product: syz [ 71.120040][ T34] usb 5-1: Manufacturer: syz [ 71.120837][ T5666] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.121795][ T34] usb 5-1: SerialNumber: syz [ 71.132390][ T34] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 71.163481][ T7317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.169200][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.177175][ T7317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.187482][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.191644][ T7317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.197937][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.206331][ T12] hsr_slave_0: left promiscuous mode [ 71.209308][ T12] hsr_slave_1: left promiscuous mode [ 71.211841][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.215030][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.217805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.220202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.225639][ T12] veth1_macvtap: left promiscuous mode [ 71.227485][ T12] veth0_macvtap: left promiscuous mode [ 71.229279][ T12] veth1_vlan: left promiscuous mode [ 71.230972][ T12] veth0_vlan: left promiscuous mode [ 71.256023][ T10] libceph: connect (1)[c::]:6789 error -101 [ 71.258946][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.348865][ T34] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 71.354883][ T34] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 71.357880][ T34] usb 5-1: media controller created [ 71.364193][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.371024][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.386911][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.411241][ T34] usb 5-1: USB disconnect, device number 4 [ 71.480307][ T7317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.484623][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.489717][ T5666] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.577594][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.595844][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.601833][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.605015][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.620108][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.622834][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.650026][ T5666] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.752466][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.766212][ T10] libceph: connect (1)[c::]:6789 error -101 [ 71.769905][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.778764][ T7334] ceph: No mds server is up or the cluster is laggy [ 71.800411][ T5666] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.918950][ T7317] veth0_vlan: entered promiscuous mode [ 71.924668][ T7317] veth1_vlan: entered promiscuous mode [ 71.940530][ T7317] veth0_macvtap: entered promiscuous mode [ 71.960590][ T7317] veth1_macvtap: entered promiscuous mode [ 71.987540][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.996572][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.006239][ T168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.011169][ T168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.015124][ T168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.022723][ T168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.033563][ T1338] libceph: connect (1)[c::]:6789 error -101 [ 72.038854][ T1338] libceph: mon0 (1)[c::]:6789 connect error [ 72.100107][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.103517][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.130481][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.133797][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.315236][ T58] libceph: connect (1)[c::]:6789 error -101 [ 72.317284][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 72.364156][ T5313] Bluetooth: hci1: command tx timeout [ 72.405431][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.557042][ T10] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 72.565238][ T10] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 72.569240][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.572504][ T10] usb 6-1: Product: syz [ 72.574443][ T10] usb 6-1: Manufacturer: syz [ 72.576327][ T10] usb 6-1: SerialNumber: syz [ 72.589284][ T10] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 72.803764][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 72.808261][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 72.811283][ T10] usb 6-1: media controller created [ 72.823181][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.833365][ T7407] ceph: No mds server is up or the cluster is laggy [ 72.836566][ T58] libceph: connect (1)[c::]:6789 error -101 [ 72.838600][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 72.894980][ T10] usb 6-1: USB disconnect, device number 2 [ 73.452066][ T7483] tipc: Started in network mode [ 73.454299][ T7483] tipc: Node identity ac14142f, cluster identity 4711 [ 73.457257][ T7483] tipc: New replicast peer: 0.0.0.0 [ 73.460004][ T7483] tipc: Enabled bearer , priority 10 [ 73.761717][ T7523] tipc: Started in network mode [ 73.763478][ T7523] tipc: Node identity ac14142f, cluster identity 4711 [ 73.768933][ T7523] tipc: New replicast peer: 0.0.0.0 [ 73.773922][ T7523] tipc: Enabled bearer , priority 10 [ 73.834524][ T7535] xt_l2tp: missing protocol rule (udp|l2tpip) [ 73.968694][ T7558] tipc: Started in network mode [ 73.970236][ T7558] tipc: Node identity ac14142f, cluster identity 4711 [ 73.972392][ T7558] tipc: New replicast peer: 0.0.0.0 [ 73.974887][ T7558] tipc: Enabled bearer , priority 10 [ 73.992235][ T7561] xt_l2tp: missing protocol rule (udp|l2tpip) [ 74.110636][ T7578] sg_write: data in/out 1943752830/4056 bytes for SCSI command 0xda-- guessing data in; [ 74.110636][ T7578] program syz.5.663 not setting count and/or reply_len properly [ 74.154613][ T7584] tipc: Enabling of bearer rejected, already enabled [ 74.179420][ T7591] __nla_validate_parse: 4 callbacks suppressed [ 74.179433][ T7591] netlink: 96 bytes leftover after parsing attributes in process `syz.3.668'. [ 74.199175][ T7591] netlink: 128 bytes leftover after parsing attributes in process `syz.3.668'. [ 74.201921][ T7591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.668'. [ 74.351720][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 74.387367][ T7619] tipc: Enabling of bearer rejected, already enabled [ 74.444150][ T63] Bluetooth: hci1: command tx timeout [ 74.449190][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.452676][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.455188][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.457583][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.459988][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.462382][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.464864][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.467293][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.467381][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 74.469698][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.476160][ T7629] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 74.599810][ T29] tipc: Node number set to 2886997039 [ 74.604085][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'. [ 74.607167][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'. [ 74.614801][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'. [ 74.618007][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'. [ 74.821963][ T7668] xt_l2tp: v2 tid > 0xffff: 37482740 [ 74.885478][ T10] tipc: Node number set to 2886997039 [ 74.968132][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 74.985750][ T6021] tipc: Node number set to 2886997039 [ 75.174822][ T7711] trusted_key: encrypted_key: key trusted:syz not found [ 75.560815][ T7760] trusted_key: encrypted_key: key trusted:syz not found [ 75.848482][ T7793] xt_l2tp: v2 tid > 0xffff: 37482740 [ 76.451973][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.456025][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.524167][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 76.854090][ T6038] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.014259][ T6038] usb 6-1: Using ep0 maxpacket: 32 [ 77.017351][ T6038] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 77.020282][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.025776][ T6038] usb 6-1: config 0 descriptor?? [ 77.032574][ T6038] as10x_usb: device has been detected [ 77.034778][ T6038] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 77.043191][ T6038] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 77.049122][ T6038] as10x_usb: error during firmware upload part1 [ 77.051337][ T6038] Registered device nBox DVB-T Dongle [ 77.235019][ T29] usb 6-1: USB disconnect, device number 3 [ 77.249661][ T29] Unregistered device nBox DVB-T Dongle [ 77.251262][ T29] as10x_usb: device has been disconnected [ 77.993043][ T7880] veth3: entered promiscuous mode [ 78.003369][ T40] audit: type=1326 audit(1776693003.256:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.813" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f72fcc code=0x0 [ 78.604049][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 79.013317][ T7956] mkiss: ax0: crc mode is auto. [ 79.698158][ T8029] __nla_validate_parse: 3 callbacks suppressed [ 79.698172][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 79.801170][ T6038] kernel write not supported for file /radio5 (pid: 6038 comm: kworker/1:4) [ 79.913020][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 79.976416][ T6038] kernel write not supported for file /radio3 (pid: 6038 comm: kworker/1:4) [ 80.077440][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 80.083280][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 80.252870][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'. [ 80.258476][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'. [ 80.684100][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 81.381724][ T8232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.385434][ T8232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.433380][ T8232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.448289][ T8232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.455395][ T8232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.467073][ T8232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.490821][ T8232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.503104][ T8232] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.522771][ T8232] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.541880][ T8232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.559172][ T8232] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.578383][ T8232] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.886931][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 81.889802][ T8315] tc_dump_action: action bad kind [ 81.931262][ T8301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.936780][ T8301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.939481][ T8301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.941569][ T8301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.011152][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 82.063861][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 82.317404][ T8346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.320295][ T8346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.323058][ T8346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.325276][ T8346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.361999][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 82.803907][ T168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.905155][ T168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.958939][ T6021] IPVS: starting estimator thread 0... [ 82.980482][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.990546][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.995759][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.000891][ T168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.012242][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.015458][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.052000][ T8402] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.054610][ T8394] IPVS: using max 44 ests per chain, 105600 per kthread [ 83.132681][ T168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.173452][ T58] IPVS: starting estimator thread 0... [ 83.212285][ T8395] chnl_net:caif_netlink_parms(): no params data found [ 83.250629][ T8407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.252739][ T8407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.255922][ T8407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.257923][ T8407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.259819][ T8407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.264542][ T8407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.284043][ T8422] IPVS: using max 44 ests per chain, 105600 per kthread [ 83.347599][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.349996][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.352474][ T8395] bridge_slave_0: entered allmulticast mode [ 83.355770][ T8395] bridge_slave_0: entered promiscuous mode [ 83.365321][ T168] bridge_slave_1: left allmulticast mode [ 83.367379][ T168] bridge_slave_1: left promiscuous mode [ 83.369676][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.373417][ T168] bridge_slave_0: left allmulticast mode [ 83.375402][ T168] bridge_slave_0: left promiscuous mode [ 83.377337][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.519782][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.526607][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.530776][ T168] bond0 (unregistering): Released all slaves [ 83.536928][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.539186][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.541482][ T8395] bridge_slave_1: entered allmulticast mode [ 83.549146][ T8395] bridge_slave_1: entered promiscuous mode [ 83.583132][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.588353][ T168] tipc: Disabling bearer [ 83.595775][ T168] tipc: Left network mode [ 83.601648][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.630953][ T8395] team0: Port device team_slave_0 added [ 83.635132][ T8395] team0: Port device team_slave_1 added [ 83.665145][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.668406][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.679316][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.684813][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.687520][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.695640][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.718557][ T8395] hsr_slave_0: entered promiscuous mode [ 83.720833][ T8395] hsr_slave_1: entered promiscuous mode [ 83.722949][ T8395] debugfs: 'hsr0' already exists in 'hsr' [ 83.724918][ T8395] Cannot create hsr debugfs directory [ 83.754527][ T5666] 8021q: adding VLAN 0 to HW filter on device eth10 [ 83.836514][ T168] hsr_slave_0: left promiscuous mode [ 83.839553][ T168] hsr_slave_1: left promiscuous mode [ 83.842517][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.847564][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.850965][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.853609][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.863367][ T168] veth1_macvtap: left promiscuous mode [ 83.865367][ T168] veth0_macvtap: left promiscuous mode [ 83.867192][ T168] veth1_vlan: left promiscuous mode [ 83.868944][ T168] veth0_vlan: left promiscuous mode [ 84.010761][ T8456] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 84.020569][ T168] team0 (unregistering): Port device team_slave_1 removed [ 84.040077][ T168] team0 (unregistering): Port device team_slave_0 removed [ 84.133682][ T5666] 8021q: adding VLAN 0 to HW filter on device eth11 [ 84.157953][ T8463] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 84.160047][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.163155][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 84.169350][ T8464] vhci_hcd: connection closed [ 84.170742][ T353] vhci_hcd vhci_hcd.5: stop threads [ 84.175327][ T353] vhci_hcd vhci_hcd.5: release socket [ 84.180023][ T353] vhci_hcd vhci_hcd.5: disconnect device [ 84.199195][ T8395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.207599][ T8395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.210437][ T8395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.217976][ T8395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.220648][ T8395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.232475][ T8395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.236831][ T8395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.243162][ T8395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.339763][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.362495][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.373214][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.375578][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.387678][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.390128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.396498][ T5666] 8021q: adding VLAN 0 to HW filter on device eth12 [ 84.537180][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.609270][ T5666] 8021q: adding VLAN 0 to HW filter on device eth13 [ 84.687898][ T8395] veth0_vlan: entered promiscuous mode [ 84.702226][ T8395] veth1_vlan: entered promiscuous mode [ 84.717531][ T8395] veth0_macvtap: entered promiscuous mode [ 84.718954][ T6021] IPVS: starting estimator thread 0... [ 84.726867][ T8395] veth1_macvtap: entered promiscuous mode [ 84.746542][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.752620][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.760876][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.769270][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.775839][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.804137][ T8501] IPVS: using max 44 ests per chain, 105600 per kthread [ 84.811850][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852653][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.856004][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.893397][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.900908][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.057290][ T10] IPVS: starting estimator thread 0... [ 85.154626][ T8526] IPVS: using max 44 ests per chain, 105600 per kthread [ 85.266582][ T8530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.268957][ T8530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.271465][ T8530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.273909][ T8530] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.499632][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 86.615001][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1140'. [ 86.691925][ T24] cfg80211: failed to load regulatory.db [ 86.789622][ T8670] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 86.870159][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1146'. [ 86.962617][ T8696] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 87.065825][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'. [ 87.074088][ T8713] netlink: 'syz.5.1161': attribute type 1 has an invalid length. [ 87.244136][ T63] Bluetooth: hci0: command 0x2016 tx timeout [ 87.305311][ T8746] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 87.326352][ T63] Bluetooth: hci2: command 0x041b tx timeout [ 87.326587][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.331629][ T5958] Bluetooth: hci1: command 0x040f tx timeout [ 87.534860][ T8772] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 87.620733][ T8782] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1200'. [ 87.625193][ T8782] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1200'. [ 87.628221][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1200'. [ 87.936360][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1207'. [ 87.941523][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'. [ 87.947450][ T8814] netlink: 'syz.5.1207': attribute type 14 has an invalid length. [ 88.169372][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1223'. [ 88.172326][ T8839] netlink: 'syz.6.1223': attribute type 14 has an invalid length. [ 88.476703][ T8875] netlink: 'syz.1.1236': attribute type 14 has an invalid length. [ 88.974152][ T8927] pim6reg99999999: entered allmulticast mode [ 89.023303][ T8937] xt_l2tp: unknown flags: 51 [ 89.324066][ T5959] Bluetooth: hci0: command 0x2016 tx timeout [ 89.404587][ T5959] Bluetooth: hci2: command 0x041b tx timeout [ 89.404640][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 89.408457][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.512719][ T8989] 9pnet_virtio: no channels available for device syz [ 89.585853][ T8995] pim6reg99999999: entered allmulticast mode [ 89.709763][ T9003] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.715250][ T9003] @0Ù: renamed from bond_slave_1 (while UP) [ 91.357835][ T9045] netlink: 'syz.1.1318': attribute type 2 has an invalid length. [ 91.404174][ T5313] Bluetooth: hci0: command 0x2016 tx timeout [ 91.484051][ T5313] Bluetooth: hci1: command 0x040f tx timeout [ 91.494159][ T5313] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.494177][ T5959] Bluetooth: hci2: command 0x041b tx timeout [ 91.650405][ T9075] netlink: 'syz.5.1332': attribute type 2 has an invalid length. [ 91.700357][ T9086] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 91.703291][ T9086] __nla_validate_parse: 5 callbacks suppressed [ 91.703300][ T9086] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1337'. [ 91.969170][ T9120] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1356'. [ 91.985550][ T9124] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 91.988158][ T9124] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1357'. [ 92.180920][ T9148] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1367'. [ 92.217521][ T9152] netlink: 'syz.6.1369': attribute type 2 has an invalid length. [ 93.574355][ T5958] Bluetooth: hci2: command 0x041b tx timeout [ 95.153356][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 95.160064][ T9198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1393'. [ 95.162949][ T9198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1393'. [ 95.267717][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.381199][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 95.644206][ T5958] Bluetooth: hci2: command 0x041b tx timeout [ 95.819979][ T9284] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.1426'. [ 95.924341][ T9293] can0: slcan on ptm0. [ 95.968151][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.029322][ T9299] sch_fq: defrate 4294967295 ignored. [ 96.079683][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.108366][ T9292] can0 (unregistered): slcan off ptm0. [ 96.123570][ T5313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.131523][ T5313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.136732][ T5313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.148428][ T5313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.152616][ T5313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.248388][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.280976][ T9320] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 96.284278][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'. [ 96.363588][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.532900][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 96.625661][ T13] bridge_slave_1: left allmulticast mode [ 96.627578][ T13] bridge_slave_1: left promiscuous mode [ 96.631163][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.646756][ T13] bridge_slave_0: left allmulticast mode [ 96.650139][ T13] bridge_slave_0: left promiscuous mode [ 96.655361][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.906057][ T9373] loop6: detected capacity change from 0 to 8 [ 96.935647][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.946484][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.950516][ T13] bond0 (unregistering): Released all slaves [ 96.968616][ T9371] team0: Cannot enslave team device to itself [ 97.032594][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.036301][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.039541][ T9306] bridge_slave_0: entered allmulticast mode [ 97.059113][ T9306] bridge_slave_0: entered promiscuous mode [ 97.063261][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.066255][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.070998][ T9306] bridge_slave_1: entered allmulticast mode [ 97.078906][ T9306] bridge_slave_1: entered promiscuous mode [ 97.086514][ T13] tipc: Disabling bearer [ 97.088548][ T13] tipc: Left network mode [ 97.092593][ T9373] Dev loop6: unable to read RDB block 8 [ 97.095441][ T9373] loop6: unable to read partition table [ 97.099895][ T9373] loop6: partition table beyond EOD, truncated [ 97.102605][ T9373] loop_reread_partitions: partition scan of loop6 (ÄNÒ*h‘…ÿìýo§æ?îŠöÙXDˆÚbÔÌp0ìO{²¸›>.J) failed (rc=-5) [ 97.209625][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.218690][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.276814][ T9306] team0: Port device team_slave_0 added [ 97.295285][ T9306] team0: Port device team_slave_1 added [ 97.364764][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.367978][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.377915][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.382957][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.389377][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.401897][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.431942][ T13] hsr_slave_0: left promiscuous mode [ 97.439572][ T13] hsr_slave_1: left promiscuous mode [ 97.441853][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.447582][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.451275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.458262][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.475235][ T13] veth1_macvtap: left promiscuous mode [ 97.477277][ T13] veth0_macvtap: left promiscuous mode [ 97.479113][ T13] veth1_vlan: left promiscuous mode [ 97.480887][ T13] veth0_vlan: left promiscuous mode [ 97.558296][ T13] pim6reg99999999 (unregistering): left allmulticast mode [ 97.682482][ T13] team0 (unregistering): Port device team_slave_1 removed [ 97.701442][ T13] team0 (unregistering): Port device team_slave_0 removed [ 97.724460][ T5959] Bluetooth: hci2: command 0x041b tx timeout [ 97.853809][ T9306] hsr_slave_0: entered promiscuous mode [ 97.858166][ T9306] hsr_slave_1: entered promiscuous mode [ 97.859905][ T6021] Process accounting resumed [ 97.860471][ T9306] debugfs: 'hsr0' already exists in 'hsr' [ 97.865168][ T9306] Cannot create hsr debugfs directory [ 97.879157][ T9448] Process accounting resumed [ 98.081022][ T9467] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 98.094665][ T9467] [U] J"—E:ÀÆ" [ 98.190996][ T5666] 8021q: adding VLAN 0 to HW filter on device eth14 [ 98.207914][ T5958] Bluetooth: hci1: command tx timeout [ 98.227610][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1503'. [ 98.260068][ T9306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.273280][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.278997][ T9306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.285979][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.297648][ T9306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.319380][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.331775][ T9306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.338484][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.349644][ T13] IPVS: stop unused estimator thread 0... [ 98.379238][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 98.383084][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'. [ 98.387998][ T9513] netlink: 'syz.0.1511': attribute type 11 has an invalid length. [ 98.418947][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.422700][ T5666] 8021q: adding VLAN 0 to HW filter on device eth15 [ 98.451625][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.467292][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.469635][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.483450][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.485829][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.713401][ T5666] 8021q: adding VLAN 0 to HW filter on device eth16 [ 98.735321][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.807832][ T9568] devpts: Bad value for 'max' [ 98.956154][ T5666] 8021q: adding VLAN 0 to HW filter on device eth17 [ 98.961359][ T9306] veth0_vlan: entered promiscuous mode [ 98.971179][ T9306] veth1_vlan: entered promiscuous mode [ 98.993414][ T9306] veth0_macvtap: entered promiscuous mode [ 99.006161][ T9306] veth1_macvtap: entered promiscuous mode [ 99.022703][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.038677][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.048802][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 99.062349][ T353] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.068329][ T353] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.074622][ T353] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.077920][ T353] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.166866][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.169606][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.199430][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.202616][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.368697][ T9627] netlink: 'syz.6.1550': attribute type 3 has an invalid length. [ 99.371222][ T9627] netlink: 766 bytes leftover after parsing attributes in process `syz.6.1550'. [ 99.788979][ T9665] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 99.791557][ T9665] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1567'. [ 99.814683][ T5958] Bluetooth: hci2: command 0x041b tx timeout [ 100.094116][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 100.274146][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 100.286295][ T5958] Bluetooth: hci1: command tx timeout [ 100.287985][ T9] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 100.292775][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.298755][ T9] usb 12-1: Product: syz [ 100.300856][ T9] usb 12-1: Manufacturer: syz [ 100.303363][ T9] usb 12-1: SerialNumber: syz [ 100.308863][ T9] usb 12-1: config 0 descriptor?? [ 100.324508][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 100.328042][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 100.330150][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.333670][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 100.337531][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.342904][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.346647][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 100.349610][ T9] usb 12-1: media controller created [ 100.359091][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.372036][ T9] usb 12-1: selecting invalid altsetting 3 [ 100.374958][ T9] ttusb2: set interface to alts=3 failed [ 100.406300][ T9] DVB: Unable to find symbol tda10086_attach() [ 100.410588][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 100.416020][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 100.420670][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.429188][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 100.431815][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.436647][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 100.521455][ T9672] ttusb2: i2c rd len=58 too high [ 100.532523][ T9] usb 12-1: USB disconnect, device number 2 [ 100.580273][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 100.670774][ T9701] tmpfs: Cannot change global quota limit on remount [ 100.924111][ T9680] comedi comedi2: reset error (fatal) [ 100.928094][ T9682] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 101.369021][ T9767] net_ratelimit: 98 callbacks suppressed [ 101.369041][ T9767] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 101.894068][ T5958] Bluetooth: hci2: command 0x041b tx timeout [ 102.085918][ T9854] veth0_macvtap: left promiscuous mode [ 102.238498][ T40] audit: type=1326 audit(1776693027.496:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.1.1662" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cefcc code=0x0 [ 102.371829][ T5666] veth0_macvtap: entered promiscuous mode [ 102.374775][ T5958] Bluetooth: hci1: command tx timeout [ 102.492476][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1671'. [ 102.499684][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'. [ 102.503626][ T9898] netlink: 'syz.6.1671': attribute type 7 has an invalid length. [ 102.507340][ T9898] netlink: 'syz.6.1671': attribute type 13 has an invalid length. [ 102.783871][ T9931] syz.7.1682 (9931): /proc/9928/oom_adj is deprecated, please use /proc/9928/oom_score_adj instead. [ 103.461570][ T9969] program syz.1.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.468030][ T40] audit: type=1326 audit(2000000000.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.6.1677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7fc00000 [ 103.964213][ T5958] Bluetooth: hci2: command 0x041b tx timeout [ 104.032184][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 104.305128][T10063] netlink: 26 bytes leftover after parsing attributes in process `syz.7.1744'. [ 104.335379][T10067] netlink: 'syz.7.1746': attribute type 11 has an invalid length. [ 104.337970][T10067] netlink: 'syz.7.1746': attribute type 4 has an invalid length. [ 104.340430][T10067] netlink: 199768 bytes leftover after parsing attributes in process `syz.7.1746'. [ 104.444239][ T5958] Bluetooth: hci1: command tx timeout [ 104.467098][T10078] binder: 10077:10078 ioctl 541b 0 returned -22 [ 104.621296][ T5958] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 105.049582][T10115] tipc: Started in network mode [ 105.052759][T10115] tipc: Node identity , cluster identity 4711 [ 105.056110][T10115] tipc: Failed to obtain node identity [ 105.058723][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 105.305301][T10142] syz.0.1777 uses obsolete (PF_INET,SOCK_PACKET) [ 105.434488][T10158] tipc: Started in network mode [ 105.436610][T10158] tipc: Node identity , cluster identity 4711 [ 105.439440][T10158] tipc: Failed to obtain node identity [ 105.441483][T10158] tipc: Enabling of bearer rejected, failed to enable media [ 105.527398][ T40] audit: type=1326 audit(2000000002.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.6.1791" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94fcc code=0x0 [ 106.094142][ T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 106.244065][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 106.250301][ T9] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 106.253516][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.256581][ T9] usb 12-1: Product: syz [ 106.258792][ T9] usb 12-1: Manufacturer: syz [ 106.260719][ T9] usb 12-1: SerialNumber: syz [ 106.263692][ T9] usb 12-1: config 0 descriptor?? [ 106.268346][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 106.273245][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 106.276623][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.280313][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 106.282752][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.293322][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.297815][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 106.301184][ T9] usb 12-1: media controller created [ 106.311294][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.327595][ T9] usb 12-1: selecting invalid altsetting 3 [ 106.330160][ T9] ttusb2: set interface to alts=3 failed [ 106.354257][ T9] DVB: Unable to find symbol tda10086_attach() [ 106.356867][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 106.364576][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 106.373457][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.384646][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 106.384685][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.384739][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 106.471020][T10205] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 106.481962][T10205] dvb-usb: bulk message failed: -22 (7/0) [ 106.487002][T10205] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 106.491850][T10205] ttusb2: i2c transfer failed. [ 106.495010][ T7488] usb 12-1: USB disconnect, device number 3 [ 106.521045][ T7488] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.524491][ T5958] Bluetooth: hci1: command tx timeout [ 106.622877][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 106.774576][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1830'. [ 106.779099][T10248] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1830'. [ 106.782112][T10248] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1830'. [ 107.375101][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1844'. [ 107.380095][T10283] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1844'. [ 107.383011][T10283] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1844'. [ 107.433265][T10292] netlink: 'syz.7.1851': attribute type 1 has an invalid length. [ 107.451630][T10293] can0: slcan on ptm0. [ 107.545229][T10291] can0 (unregistered): slcan off ptm0. [ 107.894283][T10321] team0: Cannot enslave team device to itself [ 107.911564][T10323] loop6: detected capacity change from 0 to 8 [ 108.036832][T10323] Dev loop6: unable to read RDB block 8 [ 108.041432][T10323] loop6: unable to read partition table [ 108.045190][T10323] loop6: partition table beyond EOD, truncated [ 108.047322][T10323] loop_reread_partitions: partition scan of loop6 (ÄNÒ*h‘…ÿìýo§æ?îŠöÙXDˆÚbÔÌp0ìO{²¸›>.J) failed (rc=-5) [ 108.621688][T10403] EXT4-fs: Conflicting test_dummy_encryption options [ 108.893593][T10436] netlink: 'syz.7.1917': attribute type 2 has an invalid length. [ 109.217880][ T9] Process accounting resumed [ 109.234300][T10468] Process accounting resumed [ 109.574988][ T6039] hid (null): invalid report_size 51505 [ 109.581437][ T6039] hid (null): unknown global tag 0xc [ 109.583243][ T6039] hid (null): unknown global tag 0xc [ 109.592659][ T6039] hid (null): unknown global tag 0x9f [ 109.595179][ T6039] hid (null): unknown global tag 0xc [ 109.596870][ T6039] hid (null): unknown global tag 0x42 [ 109.598637][ T6039] hid (null): unknown global tag 0xd [ 109.600279][ T6039] hid (null): unknown global tag 0xc [ 109.604015][ T6039] hid (null): unknown global tag 0xc [ 109.605790][ T6039] hid (null): report_id 0 is invalid [ 109.607829][ T6039] hid (null): unknown global tag 0xe [ 109.609530][ T6039] hid (null): report_id 16697 is invalid [ 109.611386][ T6039] hid (null): bogus close delimiter [ 109.613054][ T6039] hid (null): unknown global tag 0xc [ 109.619075][ T6039] hid (null): invalid report_size 1234625101 [ 109.621109][ T6039] hid (null): unknown global tag 0xd [ 109.622814][ T6039] hid (null): unknown global tag 0xd [ 109.626337][ T6039] hid (null): invalid report_size -2125375034 [ 109.628479][ T6039] hid (null): report_id 0 is invalid [ 109.630319][ T6039] hid (null): invalid report_count -1724469666 [ 109.632280][ T6039] hid (null): unknown global tag 0xc [ 109.634419][ T6039] hid (null): unknown global tag 0xd [ 109.636069][ T6039] hid (null): global environment stack overflow [ 109.639455][ T6039] hid (null): unknown global tag 0xe [ 109.642881][ T6039] hid (null): unknown global tag 0xc [ 109.647581][ T6039] hid (null): unknown global tag 0xc [ 109.656973][ T6039] hid-generic 0009:0007:0077.0002: unknown main item tag 0x1 [ 109.659840][ T6039] hid-generic 0009:0007:0077.0002: reserved main item tag 0xd [ 109.662237][ T6039] hid-generic 0009:0007:0077.0002: unknown main item tag 0x1 [ 109.666395][ T6039] hid-generic 0009:0007:0077.0002: unexpected long global item [ 109.670152][ T6039] hid-generic 0009:0007:0077.0002: probe with driver hid-generic failed with error -22 [ 110.067817][T10555] mkiss: ax0: crc mode is auto. [ 110.112385][T10559] __nla_validate_parse: 3 callbacks suppressed [ 110.112403][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 110.226279][T10570] batadv_slave_0: entered promiscuous mode [ 110.236708][T10569] batadv_slave_0: left promiscuous mode [ 110.297465][T10575] tipc: Enabling not permitted [ 110.299297][T10575] tipc: Enabling of bearer rejected, failed to enable media [ 110.378845][T10581] gfs2: error -5 reading superblock [ 110.822530][T10626] netlink: 'syz.7.2000': attribute type 3 has an invalid length. [ 110.825236][T10626] netlink: 766 bytes leftover after parsing attributes in process `syz.7.2000'. [ 110.912354][T10636] netlink: 'syz.7.2006': attribute type 1 has an invalid length. [ 110.918719][T10636] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2006'. [ 111.198770][T10665] sch_fq: defrate 4294967295 ignored. [ 111.433508][T10688] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2030'. [ 111.437593][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2030'. [ 111.441932][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2030'. [ 111.483256][T10692] netlink: 'syz.7.2032': attribute type 1 has an invalid length. [ 111.553501][T10698] tmpfs: Cannot change global quota limit on remount [ 111.695639][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2039'. [ 111.819240][T10719] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 111.956086][T10735] random: crng reseeded on system resumption [ 111.992059][T10735] Restarting kernel threads ... [ 112.006735][T10735] Done restarting kernel threads. [ 112.075917][T10749] netlink: 'syz.6.2060': attribute type 3 has an invalid length. [ 113.208583][T10790] tmpfs: Cannot change global quota limit on remount [ 113.324976][T10802] sock: sock_timestamping_bind_phc: sock not bind to device [ 114.871603][T10866] loop6: detected capacity change from 0 to 8 [ 114.997948][T10866] Dev loop6: unable to read RDB block 8 [ 114.999869][T10866] loop6: unable to read partition table [ 115.001908][T10866] loop6: partition table beyond EOD, truncated [ 115.005135][T10866] loop_reread_partitions: partition scan of loop6 (ÄNÒ*h‘…ÿìýo§æ?îŠöÙXDˆÚbÔÌp0ìO{²¸›>.J) failed (rc=-5) [ 115.411863][T10892] program syz.0.2121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.461678][T10896] loop6: detected capacity change from 0 to 8 [ 115.563873][T10900] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.2125'. [ 115.603749][T10896] Dev loop6: unable to read RDB block 8 [ 115.608415][T10896] loop6: unable to read partition table [ 115.610863][T10896] loop6: partition table beyond EOD, truncated [ 115.614897][T10896] loop_reread_partitions: partition scan of loop6 (ÄNÒ*h‘…ÿìýo§æ?îŠöÙXDˆÚbÔÌp0ìO{²¸›>.J) failed (rc=-5) [ 124.291061][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.297572][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.302913][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.308040][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.311662][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.441348][T10911] chnl_net:caif_netlink_parms(): no params data found [ 124.498649][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.501058][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.503431][T10911] bridge_slave_0: entered allmulticast mode [ 124.506317][T10911] bridge_slave_0: entered promiscuous mode [ 124.509663][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.512022][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.514518][T10911] bridge_slave_1: entered allmulticast mode [ 124.518922][T10911] bridge_slave_1: entered promiscuous mode [ 124.542012][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.548470][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.588879][ T353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.614941][T10911] team0: Port device team_slave_0 added [ 124.619005][T10911] team0: Port device team_slave_1 added [ 124.640754][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.643581][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.653808][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.659860][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.662367][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.671381][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.697556][T10911] hsr_slave_0: entered promiscuous mode [ 124.699901][T10911] hsr_slave_1: entered promiscuous mode [ 124.702283][T10911] debugfs: 'hsr0' already exists in 'hsr' [ 124.705021][T10911] Cannot create hsr debugfs directory [ 124.725406][ T353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.808088][ T353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.891449][ T353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.917710][T10911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 124.923665][T10911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.928139][T10911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 124.932744][T10911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.936109][T10911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 124.945325][T10911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.948947][T10911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 124.953882][T10911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.992230][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.995219][T10911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.998510][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.001606][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.048287][ T353] bridge_slave_1: left allmulticast mode [ 125.050611][ T353] bridge_slave_1: left promiscuous mode [ 125.052950][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.060877][ T353] bridge_slave_0: left allmulticast mode [ 125.063068][ T353] bridge_slave_0: left promiscuous mode [ 125.066591][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.262089][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.266445][ T353] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 125.267713][ T353] bond0 (unregistering): Released all slaves [ 125.284098][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.296727][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.339777][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.345849][ T353] tipc: Disabling bearer [ 125.348328][ T353] tipc: Left network mode [ 125.366734][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.403927][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.407017][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.455383][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.458378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.506963][ T5959] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 125.691468][ T5666] 8021q: adding VLAN 0 to HW filter on device eth18 [ 125.903780][ T353] hsr_slave_0: left promiscuous mode [ 125.914020][ T353] hsr_slave_1: left promiscuous mode [ 125.919019][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.921870][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.926751][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.929635][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.937168][ T353] veth1_macvtap: left promiscuous mode [ 125.939377][ T353] veth0_macvtap: left promiscuous mode [ 125.941648][ T353] veth1_vlan: left promiscuous mode [ 125.943617][ T353] veth0_vlan: left promiscuous mode [ 125.964125][ T6038] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 126.016237][ T353] pim6reg99999999 (unregistering): left allmulticast mode [ 126.133554][ T6038] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 126.143229][ T353] team0 (unregistering): Port device team_slave_1 removed [ 126.144083][ T6038] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 126.151238][ T353] team0 (unregistering): Port device team_slave_0 removed [ 126.154126][ T6038] usb 12-1: Product: syz [ 126.155986][ T6038] usb 12-1: Manufacturer: syz [ 126.158143][ T6038] usb 12-1: SerialNumber: syz [ 126.174437][ T6038] usb 12-1: config 0 descriptor?? [ 126.193562][ T6038] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 126.194192][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.197672][ T6038] dvb-usb: bulk message failed: -22 (2/0) [ 126.202524][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.213399][ T6038] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.213467][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.218135][ T6038] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 126.222862][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.223615][ T6038] usb 12-1: media controller created [ 126.229591][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.247041][ T6038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.279721][ T5666] 8021q: adding VLAN 0 to HW filter on device eth19 [ 126.317169][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.364231][ T5959] Bluetooth: hci4: command tx timeout [ 126.409460][T10957] cxusb: i2c rd: len=108 is too big! [ 126.409460][T10957] [ 126.418834][ T6038] cxusb: set interface failed [ 126.420925][ T6038] dvb-usb: bulk message failed: -22 (1/0) [ 126.455039][T10970] chnl_net:caif_netlink_parms(): no params data found [ 126.458537][ T6038] DVB: Unable to find symbol mt352_attach() [ 126.461433][ T6038] dvb-usb: bulk message failed: -22 (5/0) [ 126.468023][ T6038] zl10353_read_register: readreg error (reg=127, ret==-121) [ 126.471445][ T6038] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 126.540251][ T5666] 8021q: adding VLAN 0 to HW filter on device eth20 [ 126.550392][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.553219][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.556082][T10970] bridge_slave_0: entered allmulticast mode [ 126.561003][T10970] bridge_slave_0: entered promiscuous mode [ 126.564207][ T6038] rc_core: IR keymap rc-dvico-mce not found [ 126.566945][ T6038] Registered IR keymap rc-empty [ 126.570647][T10970] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.571971][ T6038] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 126.573500][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.578918][ T6038] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input11 [ 126.580059][T10970] bridge_slave_1: entered allmulticast mode [ 126.587840][T10970] bridge_slave_1: entered promiscuous mode [ 126.593308][ T6038] dvb-usb: schedule remote query interval to 100 msecs. [ 126.596321][ T6038] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 126.605766][ T6038] usb 12-1: USB disconnect, device number 4 [ 126.606236][ T353] IPVS: stop unused estimator thread 0... [ 126.618790][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.626987][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.654423][T10970] team0: Port device team_slave_0 added [ 126.655550][ T6038] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 126.661035][T10970] team0: Port device team_slave_1 added [ 126.718397][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.721427][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.730013][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.744505][T10911] veth0_vlan: entered promiscuous mode [ 126.749189][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.751857][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.761538][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.794676][ T353] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.827022][T10911] veth1_vlan: entered promiscuous mode [ 126.834722][T10970] hsr_slave_0: entered promiscuous mode [ 126.837660][T10970] hsr_slave_1: entered promiscuous mode [ 126.876534][ T353] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.979150][ T5666] 8021q: adding VLAN 0 to HW filter on device eth21 [ 126.999251][ T353] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.026647][T10911] veth0_macvtap: entered promiscuous mode [ 127.031412][T10911] veth1_macvtap: entered promiscuous mode [ 127.068833][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.079585][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.108576][ T353] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.126455][ T224] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.129586][T10970] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 127.135761][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.139082][ T224] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.142033][ T224] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.146422][T10970] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 127.152405][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.155458][T10970] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 127.162556][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.168845][ T224] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.172099][T10970] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 127.179000][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.307621][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.314989][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.347244][ T353] bridge_slave_1: left allmulticast mode [ 127.349742][ T353] bridge_slave_1: left promiscuous mode [ 127.352343][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.361612][ T353] bridge_slave_0: left allmulticast mode [ 127.364428][ T353] bridge_slave_0: left promiscuous mode [ 127.368892][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.579806][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.584652][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.588432][ T353] bond0 (unregistering): Released all slaves [ 127.595530][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.598837][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.629100][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.645522][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.656055][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.659309][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.683132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.685571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.863740][ T5666] 8021q: adding VLAN 0 to HW filter on device eth22 [ 127.993906][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.030628][ T353] hsr_slave_0: left promiscuous mode [ 128.033074][ T353] hsr_slave_1: left promiscuous mode [ 128.035661][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.038305][ T353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.041942][ T353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.046454][ T353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.052476][ T353] veth1_macvtap: left promiscuous mode [ 128.055832][ T353] veth0_macvtap: left promiscuous mode [ 128.057598][ T353] veth1_vlan: left promiscuous mode [ 128.059351][ T353] veth0_vlan: left promiscuous mode [ 128.110746][T11039] Process accounting paused [ 128.284187][ T5959] Bluetooth: hci0: command tx timeout [ 128.367105][ T353] team0 (unregistering): Port device team_slave_1 removed [ 128.381372][ T353] team0 (unregistering): Port device team_slave_0 removed [ 128.444161][ T5959] Bluetooth: hci4: command tx timeout [ 128.485920][ T5666] 8021q: adding VLAN 0 to HW filter on device eth23 [ 128.640701][T11064] sch_fq: defrate 4294967295 ignored. [ 128.670769][T10970] veth0_vlan: entered promiscuous mode [ 128.677979][T10970] veth1_vlan: entered promiscuous mode [ 128.740534][T10970] veth0_macvtap: entered promiscuous mode [ 128.745672][T10970] veth1_macvtap: entered promiscuous mode [ 128.755619][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.778596][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.785861][ T5666] 8021q: adding VLAN 0 to HW filter on device eth24 [ 128.817841][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.821454][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.831709][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.837533][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.866702][ T353] IPVS: stop unused estimator thread 0... [ 128.937346][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.940285][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.980258][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.988505][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.078179][T11036] comedi comedi2: reset error (fatal) [ 129.136355][ T5666] 8021q: adding VLAN 0 to HW filter on device eth25 [ 129.662127][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2169'. [ 129.727935][T11128] EXT4-fs: Conflicting test_dummy_encryption options [ 130.268258][T11182] netlink: 'syz.9.2199': attribute type 2 has an invalid length. [ 130.318631][T11187] Bluetooth: MGMT ver 1.23 [ 130.364174][ T5959] Bluetooth: hci0: command tx timeout [ 130.525153][ T5959] Bluetooth: hci4: command tx timeout [ 130.562545][T11208] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 130.573107][T11208] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 131.121475][T11254] netlink: 'syz.7.2238': attribute type 3 has an invalid length. [ 131.330816][T11278] vlan3: entered allmulticast mode [ 131.333162][T11278] team0: entered allmulticast mode [ 131.335644][T11278] team_slave_0: entered allmulticast mode [ 131.338417][T11278] team_slave_1: entered allmulticast mode [ 131.924353][ T7488] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 132.004340][ T3260] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.024119][T11229] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 132.084893][ T7488] usb 12-1: Using ep0 maxpacket: 32 [ 132.088788][ T7488] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.092373][ T7488] usb 12-1: config 0 has no interface number 0 [ 132.097396][ T7488] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 132.101022][ T7488] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.104666][ T7488] usb 12-1: Product: syz [ 132.106647][ T7488] usb 12-1: Manufacturer: syz [ 132.110851][ T7488] usb 12-1: SerialNumber: syz [ 132.117666][ T7488] usb 12-1: config 0 descriptor?? [ 132.122564][ T7488] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 132.127259][ T7488] usb 12-1: selecting invalid altsetting 1 [ 132.129957][ T7488] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 132.137772][ T7488] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.142045][ T7488] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 132.145627][ T7488] usb 12-1: media controller created [ 132.156785][ T7488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.164265][ T3260] usb 5-1: Using ep0 maxpacket: 32 [ 132.174284][T11229] usb 14-1: Using ep0 maxpacket: 32 [ 132.174584][ T3260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.178556][T11229] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.179438][ T3260] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 132.184884][T11229] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.188020][ T3260] usb 5-1: config 8 has no interface number 0 [ 132.188876][T11229] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.190952][ T3260] usb 5-1: config 8 interface 188 has no altsetting 0 [ 132.194404][T11229] usb 14-1: Product: syz [ 132.198119][T11229] usb 14-1: Manufacturer: syz [ 132.198996][ T3260] usb 5-1: string descriptor 0 read error: -22 [ 132.199997][T11229] usb 14-1: SerialNumber: syz [ 132.202108][T11229] usb 14-1: config 0 descriptor?? [ 132.204211][ T3260] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 132.206292][T11306] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 132.208277][ T3260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.223060][ T3260] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 132.227116][ T3260] dw2102: su3000_power_ctrl: 1, initialized 0 [ 132.230353][ T3260] dvb-usb: bulk message failed: -22 (2/0) [ 132.241660][ T3260] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.247013][ T3260] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 132.250443][ T3260] usb 5-1: media controller created [ 132.253722][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.256144][ T3260] dw2102: i2c transfer failed. [ 132.258629][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.261818][ T3260] dw2102: i2c transfer failed. [ 132.263491][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.265857][ T3260] dw2102: i2c transfer failed. [ 132.268099][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.270499][ T3260] dw2102: i2c transfer failed. [ 132.272193][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.274280][ T3260] dw2102: i2c transfer failed. [ 132.275877][ T3260] dvb-usb: bulk message failed: -22 (6/0) [ 132.277755][ T3260] dw2102: i2c transfer failed. [ 132.279311][ T3260] dvb-usb: MAC address: 02:02:02:02:02:02 [ 132.289297][ T3260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.300338][ T3260] dvb-usb: bulk message failed: -22 (3/0) [ 132.302329][ T3260] dw2102: command 0x0e transfer failed. [ 132.305879][ T3260] dvb-usb: bulk message failed: -22 (3/0) [ 132.307757][ T3260] dw2102: command 0x0e transfer failed. [ 132.427223][ T6038] usb 14-1: USB disconnect, device number 2 [ 132.444127][ T5959] Bluetooth: hci0: command tx timeout [ 132.604046][ T5959] Bluetooth: hci4: command tx timeout [ 132.614070][ T3260] dvb-usb: bulk message failed: -22 (3/0) [ 132.615997][ T3260] dw2102: command 0x0e transfer failed. [ 132.619260][ T3260] dvb-usb: bulk message failed: -22 (3/0) [ 132.621218][ T3260] dw2102: command 0x0e transfer failed. [ 132.623113][ T3260] dvb-usb: bulk message failed: -22 (1/0) [ 132.625120][ T3260] dw2102: command 0x51 transfer failed. [ 132.648965][ T3260] DVB: Unable to find symbol ds3000_attach() [ 132.651504][ T3260] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 132.704144][ T3260] rc_core: IR keymap rc-su3000 not found [ 132.707633][ T3260] Registered IR keymap rc-empty [ 132.711956][ T3260] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 132.719298][ T3260] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input12 [ 132.727322][ T3260] dvb-usb: schedule remote query interval to 150 msecs. [ 132.729519][ T3260] dw2102: su3000_power_ctrl: 0, initialized 1 [ 132.732405][ T3260] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 132.886214][ T3260] dvb-usb: bulk message failed: -22 (1/0) [ 132.888256][ T3260] dw2102: i2c transfer failed. [ 133.044221][T11191] dvb-usb: bulk message failed: -22 (1/0) [ 133.046313][T11191] dw2102: i2c transfer failed. [ 133.186877][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2261'. [ 133.205061][T11191] dvb-usb: bulk message failed: -22 (1/0) [ 133.212016][T11191] dw2102: i2c transfer failed. [ 133.245394][ T7488] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 133.251364][T11301] usb 12-1: dvb_usb_ce6230: I2C read not implemented [ 133.254805][ T7488] zl10353_read_register: readreg error (reg=127, ret==-110) [ 133.275837][T11304] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 133.280683][ T9] usb 5-1: USB disconnect, device number 5 [ 133.322920][ T7488] usb 12-1: USB disconnect, device number 5 [ 133.346536][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 133.433330][T11333] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2268'. [ 133.613113][T11349] xt_bpf: check failed: parse error [ 133.804054][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2282'. [ 133.807485][T11365] tipc: Invalid UDP bearer configuration [ 133.807518][T11365] tipc: Enabling of bearer rejected, failed to enable media [ 133.889576][T11379] overlayfs: conflicting options: nfs_export=on,index=off [ 133.934083][ T7488] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 133.952452][T11387] No buffer was provided with the request [ 133.957412][T11386] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 134.100115][ T7488] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 134.111561][ T7488] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 134.117221][ T7488] usb 13-1: Product: syz [ 134.118626][ T7488] usb 13-1: Manufacturer: syz [ 134.124031][ T7488] usb 13-1: SerialNumber: syz [ 134.129207][ T7488] usb 13-1: config 0 descriptor?? [ 134.136658][ T7488] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 134.140737][ T7488] dvb-usb: bulk message failed: -22 (2/0) [ 134.144767][ T7488] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.147853][T11403] netlink: 'syz.0.2302': attribute type 16 has an invalid length. [ 134.148221][ T7488] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 134.150432][T11403] netlink: 'syz.0.2302': attribute type 2 has an invalid length. [ 134.153036][ T7488] usb 13-1: media controller created [ 134.155911][T11403] netlink: 64102 bytes leftover after parsing attributes in process `syz.0.2302'. [ 134.162407][ T7488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.282268][T11417] block device autoloading is deprecated and will be removed. [ 134.342138][T11359] cxusb: i2c rd: len=108 is too big! [ 134.342138][T11359] [ 134.350410][ T7488] cxusb: set interface failed [ 134.352038][ T7488] dvb-usb: bulk message failed: -22 (1/0) [ 134.384363][ T7488] DVB: Unable to find symbol mt352_attach() [ 134.389000][ T7488] dvb-usb: bulk message failed: -22 (5/0) [ 134.392252][ T7488] zl10353_read_register: readreg error (reg=127, ret==-121) [ 134.395788][ T7488] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 134.444817][ T7488] rc_core: IR keymap rc-dvico-mce not found [ 134.447514][ T7488] Registered IR keymap rc-empty [ 134.451387][ T7488] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 134.456698][ T7488] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input13 [ 134.488198][ T7488] dvb-usb: schedule remote query interval to 100 msecs. [ 134.491543][ T7488] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 134.505945][ T7488] usb 13-1: USB disconnect, device number 2 [ 134.526077][ T5959] Bluetooth: hci0: command tx timeout [ 134.596402][ T7488] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 135.740893][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 135.860873][T11522] vlan2: entered allmulticast mode [ 135.866296][T11522] team0: entered allmulticast mode [ 135.868192][T11522] team_slave_0: entered allmulticast mode [ 135.870237][T11522] team_slave_1: entered allmulticast mode [ 136.237904][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2378'. [ 136.722653][T11603] netlink: 'syz.9.2387': attribute type 1 has an invalid length. [ 137.138161][ T9] hid (null): invalid report_size 51505 [ 137.146419][ T9] hid (null): unknown global tag 0xc [ 137.151000][ T9] hid (null): unknown global tag 0xc [ 137.154473][ T9] hid (null): unknown global tag 0x9f [ 137.158021][ T9] hid (null): unknown global tag 0xc [ 137.160278][ T9] hid (null): unknown global tag 0x42 [ 137.162179][ T9] hid (null): unknown global tag 0xd [ 137.164810][ T9] hid (null): unknown global tag 0xc [ 137.169074][ T9] hid (null): unknown global tag 0xc [ 137.174433][ T9] hid (null): report_id 0 is invalid [ 137.176174][ T9] hid (null): unknown global tag 0xe [ 137.180400][ T9] hid (null): report_id 16697 is invalid [ 137.182352][ T9] hid (null): bogus close delimiter [ 137.184798][ T9] hid (null): unknown global tag 0xc [ 137.186636][ T9] hid (null): invalid report_size 1234625101 [ 137.188620][ T9] hid (null): unknown global tag 0xd [ 137.190281][ T9] hid (null): unknown global tag 0xd [ 137.192022][ T9] hid (null): invalid report_size -2125375034 [ 137.194231][ T9] hid (null): report_id 0 is invalid [ 137.198215][ T9] hid (null): invalid report_count -1724469666 [ 137.200150][ T9] hid (null): unknown global tag 0xc [ 137.204651][ T9] hid (null): unknown global tag 0xd [ 137.206391][ T9] hid (null): global environment stack overflow [ 137.208447][ T9] hid (null): unknown global tag 0xe [ 137.210183][ T9] hid (null): unknown global tag 0xc [ 137.211918][ T9] hid (null): unknown global tag 0xc [ 137.217141][ T9] hid-generic 0009:0007:0077.0003: unknown main item tag 0x1 [ 137.219804][ T9] hid-generic 0009:0007:0077.0003: reserved main item tag 0xd [ 137.222233][ T9] hid-generic 0009:0007:0077.0003: unknown main item tag 0x1 [ 137.224868][ T9] hid-generic 0009:0007:0077.0003: unexpected long global item [ 137.228349][ T9] hid-generic 0009:0007:0077.0003: probe with driver hid-generic failed with error -22 [ 137.579076][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2412'. [ 137.582083][T11664] tipc: Invalid UDP bearer configuration [ 137.582116][T11664] tipc: Enabling of bearer rejected, failed to enable media [ 137.727646][T11670] syz.7.2424: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.732550][T11670] CPU: 1 UID: 0 PID: 11670 Comm: syz.7.2424 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.732591][T11670] Tainted: [L]=SOFTLOCKUP [ 137.732598][T11670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.732654][T11670] Call Trace: [ 137.732659][T11670] [ 137.732665][T11670] dump_stack_lvl+0x100/0x190 [ 137.732683][T11670] warn_alloc.cold+0x95/0x1c1 [ 137.732698][T11670] ? __pfx_warn_alloc+0x10/0x10 [ 137.732717][T11670] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 137.732733][T11670] ? _mutex_trylock_nest_lock+0x170/0x310 [ 137.732753][T11670] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 137.732781][T11670] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.732799][T11670] ? comedi_isadma_alloc+0x10c/0x6e0 [ 137.732820][T11670] ? __pfx_stack_trace_save+0x10/0x10 [ 137.732837][T11670] ? stack_depot_save_flags+0x27/0x9d0 [ 137.732857][T11670] ? comedi_isadma_alloc+0x10c/0x6e0 [ 137.732874][T11670] ? kasan_save_stack+0x3f/0x50 [ 137.732885][T11670] ? kasan_save_stack+0x30/0x50 [ 137.732896][T11670] ? kasan_save_track+0x14/0x30 [ 137.732929][T11670] ? __kasan_kmalloc+0xaa/0xb0 [ 137.732951][T11670] ? __do_fast_syscall_32+0xe7/0x950 [ 137.732965][T11670] ? do_fast_syscall_32+0x32/0x70 [ 137.732979][T11670] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.733012][T11670] __alloc_pages_noprof+0xb/0x110 [ 137.733032][T11670] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 137.733052][T11670] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 137.733070][T11670] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 137.733103][T11670] dma_direct_alloc+0x8f/0x590 [ 137.733118][T11670] dma_alloc_attrs+0x185/0x2b0 [ 137.733128][T11670] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 137.733139][T11670] ? dma_direct_supported+0xca/0x220 [ 137.733156][T11670] comedi_isadma_alloc+0x3dc/0x6e0 [ 137.733176][T11670] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 137.733194][T11670] ? request_threaded_irq+0x27b/0x3e0 [ 137.733214][T11670] pcl818_attach+0x1103/0x15b0 [ 137.733233][T11670] comedi_device_attach+0x40e/0x6b0 [ 137.733250][T11670] do_devconfig_ioctl+0x1b3/0x6d0 [ 137.733267][T11670] ? comedi_unlocked_ioctl+0x180/0x3310 [ 137.733279][T11670] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 137.733302][T11670] ? tomoyo_path_number_perm+0x46d/0x580 [ 137.733318][T11670] ? kasan_save_stack+0x3f/0x50 [ 137.733327][T11670] ? kasan_save_stack+0x30/0x50 [ 137.733336][T11670] ? kasan_save_track+0x14/0x30 [ 137.733345][T11670] ? kasan_save_free_info+0x3b/0x70 [ 137.733363][T11670] comedi_unlocked_ioctl+0x860/0x3310 [ 137.733380][T11670] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 137.733402][T11670] ? kasan_quarantine_put+0x104/0x240 [ 137.733419][T11670] ? lockdep_hardirqs_on+0x78/0x100 [ 137.733431][T11670] ? find_held_lock+0x2b/0x80 [ 137.733445][T11670] ? tomoyo_path_number_perm+0x28f/0x580 [ 137.733464][T11670] ? tomoyo_path_number_perm+0x28f/0x580 [ 137.733482][T11670] ? tomoyo_path_number_perm+0x188/0x580 [ 137.733501][T11670] comedi_compat_ioctl+0x438/0xe20 [ 137.733514][T11670] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 137.733525][T11670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.733542][T11670] ? do_vfs_ioctl+0x226/0x13e0 [ 137.733563][T11670] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.733592][T11670] ? find_held_lock+0x2b/0x80 [ 137.733610][T11670] ? __fget_files+0x215/0x3d0 [ 137.733626][T11670] ? hook_file_ioctl_common+0x149/0x410 [ 137.733645][T11670] ? __fget_files+0x21f/0x3d0 [ 137.733660][T11670] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 137.733671][T11670] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 137.733691][T11670] __do_fast_syscall_32+0xe7/0x950 [ 137.733706][T11670] do_fast_syscall_32+0x32/0x70 [ 137.733718][T11670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.733732][T11670] RIP: 0023:0xf7f55fcc [ 137.733742][T11670] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 137.733753][T11670] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 137.733766][T11670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 137.733773][T11670] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.733779][T11670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.733785][T11670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.733791][T11670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.733805][T11670] [ 137.845188][ T9] ------------[ cut here ]------------ [ 137.852840][T11670] Mem-Info: [ 137.854483][ T9] [CRTC:37:crtc-0] vblank wait timed out [ 137.854496][ T9] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#0: kworker/0:0/9 [ 137.856932][T11670] active_anon:8517 inactive_anon:135 isolated_anon:0 [ 137.856932][T11670] active_file:14134 inactive_file:20961 isolated_file:0 [ 137.856932][T11670] unevictable:1768 dirty:15 writeback:2 [ 137.856932][T11670] slab_reclaimable:7676 slab_unreclaimable:56302 [ 137.856932][T11670] mapped:23333 shmem:2356 pagetables:1785 [ 137.856932][T11670] sec_pagetables:300 bounce:0 [ 137.856932][T11670] kernel_misc_reclaimable:0 [ 137.856932][T11670] free:57255 free_pcp:16 free_cma:0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 137.858550][ T9] Modules linked in: [ 137.861065][T11670] Node 0 active_anon:0kB inactive_anon:360kB active_file:0kB inactive_file:160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:1780kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.861120][T11670] Node 0 DMA free:2816kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 137.861175][T11670] lowmem_reserve[]: 0 283 283 283 283 [ 137.861213][T11670] Node 0 DMA: 124*4kB (UM) 60*8kB (UM) 19*16kB (UM) 14*32kB (UM) 3*64kB (M) 5*128kB (M) [ 137.862932][ T9] [ 137.872447][T11670] 1*256kB [ 137.874216][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.877532][T11670] (M) [ 137.880804][ T9] Tainted: [L]=SOFTLOCKUP [ 137.880816][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.880926][ T9] Workqueue: events drm_fb_helper_damage_work [ 137.884557][T11670] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2816kB [ 137.884606][T11670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.884623][T11670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.884637][T11670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.884652][T11670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.884666][T11670] 37770 total pagecache pages [ 137.884674][T11670] 323 pages in swap cache [ 137.884681][T11670] Free swap = 121780kB [ 137.884688][T11670] Total swap = 124996kB [ 137.884696][T11670] 524155 pages RAM [ 137.884703][T11670] 0 pages HighMem/MovableOnly [ 137.884709][T11670] 210566 pages reserved [ 137.884716][T11670] 0 pages cma reserved [ 137.895370][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.897468][ T9] [ 137.897483][ T9] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 137.897524][ T9] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d b8 dd 41 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 03 4e 63 fc e9 7c fe ff ff e8 09 [ 137.897544][ T9] RSP: 0000:ffffc900001b76e8 EFLAGS: 00010246 [ 137.897563][ T9] RAX: 0000000000000000 RBX: ffff8880254c52e0 RCX: 1ffff11004a98a76 [ 137.897576][ T9] RDX: ffff88802631c940 RSI: 0000000000000025 RDI: ffffffff90e75520 [ 137.897590][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 137.897602][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 137.897614][ T9] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027073900 [ 137.897626][ T9] FS: 0000000000000000(0000) GS:ffff8880970ee000(0000) knlGS:0000000000000000 [ 137.897660][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.897675][ T9] CR2: 00000000f7227310 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 137.897688][ T9] Call Trace: [ 137.897696][ T9] [ 137.897712][ T9] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 137.897736][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 137.897766][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 137.897786][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 137.897817][ T9] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 137.897848][ T9] drm_atomic_helper_commit_tail+0xff/0x130 [ 137.897873][ T9] commit_tail+0x338/0x430 [ 137.897901][ T9] drm_atomic_helper_commit+0x303/0x380 [ 137.897926][ T9] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 137.897951][ T9] drm_atomic_commit+0x230/0x300 [ 137.897974][ T9] ? __pfx_drm_atomic_commit+0x10/0x10 [ 137.897995][ T9] ? __pfx___drm_printfn_info+0x10/0x10 [ 137.898024][ T9] ? drm_mode_object_get+0x108/0x170 [ 137.898055][ T9] drm_atomic_helper_dirtyfb+0x603/0x790 [ 137.898088][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 137.898129][ T9] ? do_raw_spin_lock+0x128/0x260 [ 137.898154][ T9] ? find_held_lock+0x2b/0x80 [ 137.898181][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 137.898210][ T9] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 137.898240][ T9] drm_fb_helper_damage_work+0x348/0x640 [ 137.898264][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 137.898287][ T9] ? rcu_is_watching+0x12/0xc0 [ 137.898315][ T9] process_one_work+0xa0e/0x1980 [ 137.898347][ T9] ? __pfx_process_one_work+0x10/0x10 [ 137.900078][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.902058][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 138.119912][ T9] worker_thread+0x5ef/0xe50 [ 138.121721][ T9] ? kthread+0x13a/0x450 [ 138.123497][ T9] ? __pfx_worker_thread+0x10/0x10 [ 138.125391][ T9] kthread+0x370/0x450 [ 138.126688][ T9] ? __pfx_kthread+0x10/0x10 [ 138.128354][ T9] ret_from_fork+0x72b/0xd50 [ 138.130004][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 138.131648][ T9] ? __switch_to+0x800/0x1100 [ 138.133530][ T9] ? __pfx_kthread+0x10/0x10 [ 138.135400][ T9] ret_from_fork_asm+0x1a/0x30 [ 138.136999][ T9] [ 138.138039][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.140552][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.144135][ T9] Tainted: [L]=SOFTLOCKUP [ 138.145710][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.149178][ T9] Workqueue: events drm_fb_helper_damage_work [ 138.151273][ T9] Call Trace: [ 138.152554][ T9] [ 138.153694][ T9] dump_stack_lvl+0x100/0x190 [ 138.155407][ T9] vpanic+0x552/0x970 [ 138.156954][ T9] ? __pfx_vpanic+0x10/0x10 [ 138.158588][ T9] panic+0xd1/0xe0 [ 138.159994][ T9] ? __pfx_panic+0x10/0x10 [ 138.161664][ T9] ? check_panic_on_warn+0x1f/0x90 [ 138.163704][ T9] check_panic_on_warn.cold+0x19/0x34 [ 138.165692][ T9] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 138.168512][ T9] __warn.cold+0x191/0x328 [ 138.170253][ T9] __report_bug+0x296/0x3d0 [ 138.172092][ T9] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 138.174791][ T9] ? __pfx___report_bug+0x10/0x10 [ 138.176491][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 138.178474][ T9] report_bug_entry+0xe1/0x290 [ 138.180336][ T9] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 138.183367][ T9] handle_bug+0x1cd/0x2a0 [ 138.185153][ T9] exc_invalid_op+0x17/0x50 [ 138.186971][ T9] asm_exc_invalid_op+0x1a/0x20 [ 138.188803][ T9] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 138.191993][ T9] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d b8 dd 41 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 03 4e 63 fc e9 7c fe ff ff e8 09 [ 138.199230][ T9] RSP: 0000:ffffc900001b76e8 EFLAGS: 00010246 [ 138.201140][ T9] RAX: 0000000000000000 RBX: ffff8880254c52e0 RCX: 1ffff11004a98a76 [ 138.203538][ T9] RDX: ffff88802631c940 RSI: 0000000000000025 RDI: ffffffff90e75520 [ 138.206344][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 138.209052][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 138.211550][ T9] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027073900 [ 138.214219][ T9] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 138.216820][ T9] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 138.219834][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.222168][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 138.224166][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 138.226269][ T9] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 138.228458][ T9] drm_atomic_helper_commit_tail+0xff/0x130 [ 138.230494][ T9] commit_tail+0x338/0x430 [ 138.232007][ T9] drm_atomic_helper_commit+0x303/0x380 [ 138.234168][ T9] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 138.236771][ T9] drm_atomic_commit+0x230/0x300 [ 138.238931][ T9] ? __pfx_drm_atomic_commit+0x10/0x10 [ 138.241174][ T9] ? __pfx___drm_printfn_info+0x10/0x10 [ 138.243023][ T9] ? drm_mode_object_get+0x108/0x170 [ 138.244735][ T9] drm_atomic_helper_dirtyfb+0x603/0x790 [ 138.246512][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 138.248628][ T9] ? do_raw_spin_lock+0x128/0x260 [ 138.250191][ T9] ? find_held_lock+0x2b/0x80 [ 138.251689][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 138.253688][ T9] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 138.255942][ T9] drm_fb_helper_damage_work+0x348/0x640 [ 138.257844][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 138.259671][ T9] ? rcu_is_watching+0x12/0xc0 [ 138.261213][ T9] process_one_work+0xa0e/0x1980 [ 138.262825][ T9] ? __pfx_process_one_work+0x10/0x10 [ 138.264548][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 138.266498][ T9] worker_thread+0x5ef/0xe50 [ 138.268061][ T9] ? kthread+0x13a/0x450 [ 138.269480][ T9] ? __pfx_worker_thread+0x10/0x10 [ 138.271485][ T9] kthread+0x370/0x450 [ 138.273451][ T9] ? __pfx_kthread+0x10/0x10 [ 138.275016][ T9] ret_from_fork+0x72b/0xd50 [ 138.276738][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 138.278766][ T9] ? __switch_to+0x800/0x1100 [ 138.280425][ T9] ? __pfx_kthread+0x10/0x10 [ 138.282112][ T9] ret_from_fork_asm+0x1a/0x30 [ 138.283840][ T9] [ 138.289661][ T9] Kernel Offset: disabled [ 138.291171][ T9] Rebooting in 86400 seconds..