last executing test programs: 4m40.876742429s ago: executing program 3 (id=16011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x3, 0x2}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x4000000}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 4m40.736988563s ago: executing program 3 (id=16014): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$addseals(r0, 0x409, 0xa) 4m40.735117521s ago: executing program 3 (id=16023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 4m40.66969999s ago: executing program 3 (id=16027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) 4m40.122378499s ago: executing program 3 (id=16020): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5608, 0x0) 4m39.952009489s ago: executing program 3 (id=16028): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002180), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 4m24.491830837s ago: executing program 32 (id=16028): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002180), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 2m7.75929774s ago: executing program 0 (id=21524): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) listen(r0, 0x0) 2m7.70000609s ago: executing program 0 (id=21529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee6888847", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 2m7.559823944s ago: executing program 0 (id=21536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x7, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 2m7.517920432s ago: executing program 0 (id=21538): r0 = add_key$user(&(0x7f0000000340), &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000440)="28302d78540021019411ec4b58893bd96c61968d7a12a7a31e1fda6bdbebdea5372a1a20781860b79d77e299a40375bfc7d171c836268b7ab56753e2cc336775cfdb46a63ca4879770a68d155a2fa269c15305ac8deb2e7c308fdb76fdf8f1aeab4aaed6af22ec144397d0c664b3e96a7d38c2edf69139dedb56b371744a9c9c61", 0x81, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000380)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) 2m7.294427134s ago: executing program 0 (id=21550): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 2m7.240021451s ago: executing program 0 (id=21552): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 1m51.828020157s ago: executing program 33 (id=21552): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 15.124288446s ago: executing program 5 (id=24369): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$loop(&(0x7f0000005600), 0x5, 0x20000) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 15.124107809s ago: executing program 5 (id=24370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 15.071452953s ago: executing program 5 (id=24371): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xcb, &(0x7f0000000100)=0xfffffffffffff001, &(0x7f00000000c0)=0x2) 14.93368425s ago: executing program 5 (id=24377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 14.878295707s ago: executing program 5 (id=24379): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='source8/\x06\xe8r\xba\x92\xa9\x89\x1b.\xa7\xbcn<\xfc\xca\x97\xcae\xebrq\x12+\xf7\x1esK\x1e\x95c7[\xa1\xc6.\x85>\x1c!\xb1\x9e\xd3\xfa/\a\v\x85\xb2\xef\xcc\x997\x05\xecC\xc4/drgg.\x8b\x13\xfc/\x9c\xf6\xb6\x00\xd8\xbd\xd8\xbd\xd6w\xcc\xc9\x8a\x9a\xef\xc4\x8c\xba\xb6L\xa5\x1e\xe6\x83\v\xc7q\xf0h\x01,\xb9;,\xa1)\xb07\xf2\x88\xb3\xdf\x86H&^\"Kp\x05\x8e\xa7c\x0f\x16\xa0\x1f\xff\xadV\xfb@\xaeD:\xb98\xcd\xd2\x8f\xc2hd\xdf\xd9\xba:\xba\xda\x98\xb8\xf9\xf5\xbf(\xd4sW\xcb\x97\x19\xf1C\t\x8a\xa2\xb5\xc0\a\xb0\xe80\xc96\x89~\xe49\xb4\xa4|\f\x00\x89\xc5\xc3M\x99\xff\r\xb76\xdb\fR\xda\xca\x13\x13\xd9\x14\x12\b[u\x1b\xc1\xe3\xa6\xd3,\xdcA\xce\xa5\x95\xb2\x13>\xd5\x91\x9a\xe4\xc6\x86\xa5\x81\xae\xf5\xcb\xae\xd7\x00Uu\x02\xdb\xaaBU\\\xb0b\xda 5;\x9b\xb8JB\xc9=_\xa0\xa7\xe3\x81\xbc1t\r\xe92\xb1\xceo\x8d\xd4)+\xc5\'y\x13\xd5\xb7Z\x92\xa5\xf1\xca\r\x8e\xaf$\x85\xbe\x01\x04V]\xb4\x17~\x06-\xc5\x9c\xf9R\xa2\xdc\x83~E\x87\xef\x96+0\xc5\xec\xfaQ\xf6\xf1\x9a\x82\xc9\xe6d\xddj\x1b\xfbb(\xa1\xd5Yn\x06\x95G\xd6\xc1\x06\xb3\xacz\x00y\x13rZ\x8dw\xfb\xd7\xa2\xebI\x1b\xe1W\x81,\xfe\xbd*m\xda\xcc\xac\xc2\xef/C\x12\x03\xd2^\x9e\x1eL\x8ac\xa7\xc6\xb5?\xb0\xc8\xd8\xddv\xd3\x14C(U\x8c\xbcQ\xe7\xc7\x87\x85\xf8\xe8\x06`\x8f\xa0\xcap4\xa8\x9a\x82T\xe4\x13\xb4\xf8\x9eT\xf1\x83p\xf6,\xe2\x18{\x01\xef\xc5\tw\x00'/447, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x88000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0xe, 0x6, 'syz0\x00', 0x73}, 0x0, [0xfffffd5f, 0xfffffffe, 0x5, 0x687, 0x74859516, 0x6, 0x40000002, 0x4, 0x6, 0x2, 0x8000, 0xc59, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0xc, 0x7ff, 0x9, 0xc, 0x7, 0x10000, 0xacb, 0x10000, 0x3, 0x81, 0xffffff7e, 0x3, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x10000, 0x4, 0x8, 0x7, 0xfffffff7, 0x200, 0x1, 0x1, 0x5, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xb, 0x4, 0xfff, 0x2, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0xa, 0x7, 0x4, 0x5, 0xc, 0x81, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x2020000, 0x2, 0xfffffffa, 0x6, 0x3, 0xffffffc0, 0x800, 0x800002, 0x3ff, 0x0, 0x275, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3ff, 0x81, 0x6, 0x8, 0x893a, 0x3, 0x800, 0xf38f, 0xd926, 0x200002, 0x1, 0x80000002, 0x3, 0x9, 0x3, 0x3, 0x4, 0x6, 0x10000, 0x200, 0x32284b62, 0x5, 0x48f, 0xdd00, 0xb, 0xfffff801, 0x7bd5, 0x7, 0xfffffbff, 0x6, 0x2, 0x10000, 0x1, 0x1, 0x549ac63b, 0x800, 0x4, 0x8001, 0x2]}) 14.483813919s ago: executing program 5 (id=24388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x981, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x400c810}, 0x100) 14.42234121s ago: executing program 34 (id=24388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x981, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x400c810}, 0x100) 7.246736044s ago: executing program 1 (id=24614): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) 7.172426763s ago: executing program 1 (id=24616): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 6.559805304s ago: executing program 1 (id=24639): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 6.480497991s ago: executing program 1 (id=24642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 6.429469755s ago: executing program 1 (id=24644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x50044}, 0x8000) 6.124307024s ago: executing program 1 (id=24647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x10401f, 0x0) 6.088018222s ago: executing program 35 (id=24647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x10401f, 0x0) 1.30868642s ago: executing program 6 (id=24685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x2008040) 1.229156991s ago: executing program 6 (id=24687): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 1.146441769s ago: executing program 2 (id=24690): r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 1.021008188s ago: executing program 2 (id=24692): madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 894.883558ms ago: executing program 6 (id=24694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 833.74927ms ago: executing program 6 (id=24696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 737.70945ms ago: executing program 4 (id=24697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) utime(&(0x7f0000000000)='./file0\x00', 0x0) 516.731886ms ago: executing program 6 (id=24698): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) 516.6062ms ago: executing program 4 (id=24699): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x0) 389.534844ms ago: executing program 6 (id=24700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 234.411551ms ago: executing program 2 (id=24701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 234.295121ms ago: executing program 4 (id=24702): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 185.703595ms ago: executing program 2 (id=24703): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\/\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 152.851471ms ago: executing program 2 (id=24704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) 138.515437ms ago: executing program 4 (id=24705): setns(0xc9, 0x0) r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479", 0x2}], 0x1}}], 0x1, 0x24044015) 108.616353ms ago: executing program 2 (id=24706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1000000000004) 57.292855ms ago: executing program 4 (id=24707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=24708): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): board names for comedi_bond driver are: [ 458.020253][T17437] comedi_bond [ 458.115307][T17468] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 458.336414][T17489] use of bytesused == 0 is deprecated and will be removed in the future, [ 458.339256][T17489] use the actual size instead. [ 458.463930][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21143'. [ 458.662717][ T848] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 458.669100][ T848] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 458.676009][ T848] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 458.696601][ T848] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 458.699684][ T848] rtc rtc0: __rtc_set_alarm: err=-22 [ 458.870407][T17547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.876967][T17547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.880484][T17547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 458.995654][T17547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.998952][T17547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.002077][T17547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.076130][T17547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.079482][T17547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.083217][T17547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.214639][ T6007] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.217855][ T6007] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.222550][ T6007] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 459.225484][ T6007] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.228285][ T6007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.231228][ T6007] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 459.255542][ T6007] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.258368][ T6007] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.261676][ T6007] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 459.267189][ T6007] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.272530][ T6007] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.280388][ T6007] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 459.394319][T14572] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 459.549530][T14572] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 459.555383][T14572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 459.558193][T14572] usb 9-1: Product: syz [ 459.559587][T14572] usb 9-1: Manufacturer: syz [ 459.561526][T14572] usb 9-1: SerialNumber: syz [ 459.564711][T14572] usb 9-1: config 0 descriptor?? [ 459.568738][T14572] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 459.571176][T14572] dvb-usb: bulk message failed: -22 (2/0) [ 459.574421][T14572] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.577695][T14572] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 459.580272][T14572] usb 9-1: media controller created [ 459.587251][T14572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.779163][T17583] dvb-usb: bulk message failed: -22 (3/0) [ 459.787140][T14572] cxusb: set interface failed [ 459.788706][T14572] dvb-usb: bulk message failed: -22 (1/0) [ 459.809479][T14572] DVB: Unable to find symbol mt352_attach() [ 459.811511][T14572] dvb-usb: bulk message failed: -22 (5/0) [ 459.813607][T14572] zl10353_read_register: readreg error (reg=127, ret==-121) [ 459.816783][T14572] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 459.874355][T14572] rc_core: IR keymap rc-dvico-mce not found [ 459.876853][T14572] Registered IR keymap rc-empty [ 459.882106][T14572] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 459.888518][T14572] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input58 [ 459.897583][T14572] dvb-usb: schedule remote query interval to 100 msecs. [ 459.900081][T14572] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 459.907142][T14572] usb 9-1: USB disconnect, device number 5 [ 459.956716][T14572] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 460.189676][T17658] sctp: [Deprecated]: syz.0.21212 (pid 17658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.189676][T17658] Use struct sctp_sack_info instead [ 460.196452][T17658] sctp: [Deprecated]: syz.0.21212 (pid 17658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.196452][T17658] Use struct sctp_sack_info instead [ 460.278089][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21216'. [ 462.373046][T17762] netlink: 'syz.4.21261': attribute type 1 has an invalid length. [ 462.380776][T17762] netlink: 232 bytes leftover after parsing attributes in process `syz.4.21261'. [ 462.384749][T17762] netlink: 'syz.4.21261': attribute type 1 has an invalid length. [ 462.539801][T17788] IPv6: addrconf: prefix option has invalid lifetime [ 462.685193][T17809] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 462.963262][T17844] comedi comedi3: aio_aio12_8: I/O port conflict (0x100,32) [ 463.107931][T17860] netlink: 'syz.2.21308': attribute type 10 has an invalid length. [ 463.111719][T17860] netlink: 'syz.2.21308': attribute type 10 has an invalid length. [ 463.115854][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21309'. [ 463.931134][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21343'. [ 464.020394][T17939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.026979][T17939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.032320][T17939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 464.169133][T17939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.172458][T17939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.177920][T17939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 464.302915][T17939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.308448][T17939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.312608][T17939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 464.417089][T17939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.421130][T17939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 464.424656][T17939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 464.584235][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.586967][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 464.589537][ T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 464.592205][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.596353][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 464.599183][ T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 464.601715][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.601731][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 464.601745][ T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 464.601768][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.601782][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 464.616904][ T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 466.934433][ T1484] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 467.088435][ T1484] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 467.091639][ T1484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 467.094324][ T1484] usb 7-1: Product: syz [ 467.095651][ T1484] usb 7-1: Manufacturer: syz [ 467.097552][ T1484] usb 7-1: SerialNumber: syz [ 467.101191][ T1484] usb 7-1: config 0 descriptor?? [ 467.105788][ T1484] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 467.108251][ T1484] dvb-usb: bulk message failed: -22 (2/0) [ 467.116392][ T1484] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.119764][ T1484] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 467.122824][ T1484] usb 7-1: media controller created [ 467.131341][ T1484] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.316694][T18055] dvb-usb: bulk message failed: -22 (3/0) [ 467.321180][ T1484] cxusb: set interface failed [ 467.323147][ T1484] dvb-usb: bulk message failed: -22 (1/0) [ 467.342106][ T1484] DVB: Unable to find symbol mt352_attach() [ 467.344859][ T1484] dvb-usb: bulk message failed: -22 (5/0) [ 467.347173][ T1484] zl10353_read_register: readreg error (reg=127, ret==-121) [ 467.349950][ T1484] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 467.416096][ T1484] rc_core: IR keymap rc-dvico-mce not found [ 467.418049][ T1484] Registered IR keymap rc-empty [ 467.420363][ T1484] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 467.425569][ T1484] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input59 [ 467.433083][ T1484] dvb-usb: schedule remote query interval to 100 msecs. [ 467.435477][ T1484] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 467.440149][ T1484] usb 7-1: USB disconnect, device number 21 [ 467.481995][ T1484] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 469.060186][T18109] Bluetooth: MGMT ver 1.23 [ 469.146570][T17807] hid-generic 0001:0000:10001.0005: item fetching failed at offset 0/4 [ 469.153070][T17807] hid-generic 0001:0000:10001.0005: probe with driver hid-generic failed with error -22 [ 470.537943][T18201] IPVS: stopping backup sync thread 14787 ... [ 471.367594][T18264] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 471.370488][T18261] IPVS: stopping backup sync thread 18264 ... [ 471.463622][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 471.463639][ T42] audit: type=1326 audit(2000000055.960:19837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.477022][ T42] audit: type=1326 audit(2000000055.960:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.504120][ T42] audit: type=1326 audit(2000000055.970:19839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.522381][ T42] audit: type=1326 audit(2000000055.970:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.532140][ T42] audit: type=1326 audit(2000000055.980:19841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.540698][ T42] audit: type=1326 audit(2000000055.980:19842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.553281][ T42] audit: type=1326 audit(2000000055.980:19843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.564239][ T42] audit: type=1326 audit(2000000055.980:19844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.572113][ T42] audit: type=1326 audit(2000000055.980:19845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.581904][ T42] audit: type=1326 audit(2000000055.980:19846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.2.21500" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 471.641406][T18292] IPVS: Unknown mcast interface: ip6gretap0 [ 472.045771][ T5531] kernel read not supported for file /vga_arbiter (pid: 5531 comm: kworker/1:3) [ 472.206163][T18349] netlink: 'syz.0.21536': attribute type 5 has an invalid length. [ 472.256344][T18353] usb usb9: usbfs: process 18353 (syz.4.21539) did not claim interface 20 before use [ 472.279925][T18357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21540'. [ 472.332414][T18363] max out of range [ 472.621315][T18390] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.21557'. [ 472.625108][T18390] netlink: 'syz.4.21557': attribute type 1 has an invalid length. [ 473.172388][T18446] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 474.294182][ T5531] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 474.455642][ T5531] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.459815][ T5531] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.464161][ T5531] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.468079][ T5531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.482302][T18463] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.494071][ T5531] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.698508][ T5531] usb 7-1: USB disconnect, device number 22 [ 475.378608][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.956486][T18480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.071647][T11342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.078162][T11342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.083106][T11342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.087091][T11342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.106847][T11342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.178219][T17383] bond0: (slave syz_tun): Releasing backup interface [ 488.348658][ T6007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.386723][T18490] lo speed is unknown, defaulting to 1000 [ 488.450582][T18539] usb usb9: usbfs: process 18539 (syz.1.21622) did not claim interface 1 before use [ 488.472176][ T6007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.484730][T18490] wg2 speed is unknown, defaulting to 1000 [ 488.623704][T18557] netlink: 'syz.4.21631': attribute type 11 has an invalid length. [ 488.678196][ T6007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.730012][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21636'. [ 488.771818][T18490] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.774204][T18490] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.776593][T18490] bridge_slave_0: entered allmulticast mode [ 488.779232][T18490] bridge_slave_0: entered promiscuous mode [ 488.783025][T18490] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.785430][T18490] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.787802][T18490] bridge_slave_1: entered allmulticast mode [ 488.790548][T18490] bridge_slave_1: entered promiscuous mode [ 488.842459][ T6007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.867618][T18490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.872484][T18490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.891527][T18490] team0: Port device team_slave_0 added [ 488.895819][T18490] team0: Port device team_slave_1 added [ 488.911103][T18490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.913867][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.923231][T18490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.928280][T18490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.930511][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.938799][T18490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.974975][T18490] hsr_slave_0: entered promiscuous mode [ 488.977605][T18490] hsr_slave_1: entered promiscuous mode [ 488.979989][T18490] debugfs: 'hsr0' already exists in 'hsr' [ 488.982259][T18490] Cannot create hsr debugfs directory [ 489.107391][ T5531] hid_parser_main: 7 callbacks suppressed [ 489.107407][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.121222][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.125471][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.134090][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.142468][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.147266][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.149561][ T6007] dvmrp9: left allmulticast mode [ 489.150533][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.156202][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.159248][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.162246][ T5531] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 489.212816][ T5531] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 489.331074][T18620] fido_id[18620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 489.389327][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21657'. [ 489.543920][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21664'. [ 489.548065][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21664'. [ 489.609713][ T6007] bond0 (unregistering): Released all slaves [ 489.621921][ T6007] bond1 (unregistering): Released all slaves [ 489.631706][ T6007] bond2 (unregistering): Released all slaves [ 489.645577][ T6007] bond3 (unregistering): Released all slaves [ 489.653263][ T6007] bond4 (unregistering): Released all slaves [ 489.660971][ T6007] bond5 (unregistering): Released all slaves [ 489.671279][ T6007] bond6 (unregistering): Released all slaves [ 489.678374][ T6007] bond7 (unregistering): Released all slaves [ 489.689352][ T6007] bond8 (unregistering): Released all slaves [ 489.697283][ T6007] bond9 (unregistering): Released all slaves [ 489.704694][ T6007] bond10 (unregistering): Released all slaves [ 489.711752][ T6007] bond11 (unregistering): Released all slaves [ 489.741092][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 489.824217][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 489.824229][ T42] audit: type=1326 audit(2000000074.319:19850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18602 comm="syz.4.21650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 489.868651][ T42] audit: type=1326 audit(2000000074.339:19851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18650 comm="syz.1.21667" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87fec code=0x0 [ 489.989006][T18661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.993087][ T6007] : left promiscuous mode [ 490.086860][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 490.114261][T18490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.128851][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.132985][T18490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.168315][T11342] Bluetooth: hci3: command tx timeout [ 490.168584][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.180632][T18490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.227349][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.272951][ T42] audit: type=1326 audit(2000000074.769:19852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.282203][ T42] audit: type=1326 audit(2000000074.769:19853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.291343][ T42] audit: type=1326 audit(2000000074.769:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.301641][ T42] audit: type=1326 audit(2000000074.769:19855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.310192][ T42] audit: type=1326 audit(2000000074.769:19856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.318896][ T42] audit: type=1326 audit(2000000074.769:19857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.319380][T18490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.326070][ T42] audit: type=1326 audit(2000000074.769:19858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.337967][ T42] audit: type=1326 audit(2000000074.769:19859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.2.21674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 490.345385][T18490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.441043][T18490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.446850][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 490.481118][T18490] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.491320][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.493735][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.504998][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.507878][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.728171][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 490.980841][T18490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.069281][T18740] overlay: Unknown parameter '/v98PIx@Q3}g{.$߂ ugG1e rejected, failed to enable media [ 491.304635][T18490] veth0_vlan: entered promiscuous mode [ 491.313183][T18490] veth1_vlan: entered promiscuous mode [ 491.367020][T18490] veth0_macvtap: entered promiscuous mode [ 491.408008][T18490] veth1_macvtap: entered promiscuous mode [ 491.425615][T18490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.437028][T18490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.445532][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21706'. [ 491.460668][ T5894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.468312][ T5894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.494349][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.501125][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.506855][T18782] netlink: 'syz.4.21708': attribute type 4 has an invalid length. [ 491.511509][T18782] netlink: 17 bytes leftover after parsing attributes in process `syz.4.21708'. [ 491.570529][T18784] netlink: 'syz.2.21710': attribute type 1 has an invalid length. [ 491.594878][ T6007] hsr_slave_0: left promiscuous mode [ 491.606055][ T6007] hsr_slave_1: left promiscuous mode [ 491.666180][T18795] netlink: 'syz.4.21714': attribute type 21 has an invalid length. [ 491.668968][T18795] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.671784][T18795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.674283][T18795] IPv6: NLM_F_CREATE should be set when creating new route [ 491.676544][T18795] IPv6: NLM_F_CREATE should be set when creating new route [ 491.678945][T18795] IPv6: NLM_F_CREATE should be set when creating new route [ 491.683708][T18795] netlink: 'syz.4.21714': attribute type 21 has an invalid length. [ 491.687732][T18795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.728443][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21719'. [ 491.732095][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21719'. [ 491.735461][T18805] netlink: 'syz.1.21719': attribute type 13 has an invalid length. [ 491.880133][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.883230][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.898374][T18820] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 491.901331][T18820] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 491.975574][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.979233][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.120464][T18832] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 492.129518][T18830] IPVS: stopping backup sync thread 18832 ... [ 492.143542][T18828] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 492.245032][T11342] Bluetooth: hci3: command tx timeout [ 492.487791][ T6007] IPVS: stop unused estimator thread 0... [ 492.981807][T18933] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 492.984357][T18932] IPVS: stopping backup sync thread 18933 ... [ 493.591397][T18976] netlink: 'syz.4.21794': attribute type 1 has an invalid length. [ 493.675551][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21800'. [ 493.748395][T18997] openvswitch: netlink: Missing key (keys=40, expected=100) [ 493.933834][T19013] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 494.324589][T11342] Bluetooth: hci3: command tx timeout [ 496.289499][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 496.289512][ T42] audit: type=1326 audit(2000000080.789:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19182 comm="syz.5.21889" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 496.338309][T19190] gre1: entered promiscuous mode [ 496.404478][T11342] Bluetooth: hci3: command tx timeout [ 497.279154][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21920'. [ 497.285416][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21920'. [ 497.294113][T19249] netlink: 'syz.2.21920': attribute type 7 has an invalid length. [ 497.388800][T19261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21926'. [ 497.395305][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21926'. [ 497.431427][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21930'. [ 497.620279][T19294] netlink: 264 bytes leftover after parsing attributes in process `syz.4.21942'. [ 497.673280][T19302] netlink: 'syz.2.21946': attribute type 1 has an invalid length. [ 497.677861][T19302] netlink: 244 bytes leftover after parsing attributes in process `syz.2.21946'. [ 497.705862][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21947'. [ 497.973710][T19330] netlink: 108 bytes leftover after parsing attributes in process `syz.4.21961'. [ 498.665362][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21987'. [ 498.892161][T19417] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 499.027206][ C2] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 499.030462][ C2] sr 2:0:0:0: [sr0] tag#16 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 499.080854][T19441] netlink: 'syz.1.22010': attribute type 1 has an invalid length. [ 499.348077][ T42] audit: type=1326 audit(2000000083.849:19879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.358205][ T42] audit: type=1326 audit(2000000083.849:19880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.365626][ T42] audit: type=1326 audit(2000000083.859:19881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.372741][ T42] audit: type=1326 audit(2000000083.869:19882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.381197][ T42] audit: type=1326 audit(2000000083.869:19883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19477 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71773eb code=0x7ffc0000 [ 499.389360][ T42] audit: type=1326 audit(2000000083.869:19884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.411349][ T42] audit: type=1326 audit(2000000083.909:19885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.520271][ T42] audit: type=1326 audit(2000000084.019:19886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19477 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf703efec code=0x7ffc0000 [ 499.529040][ T42] audit: type=1326 audit(2000000084.029:19887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.22028" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 500.808793][T19604] gre2: entered promiscuous mode [ 501.103549][T19623] netlink: 'syz.2.22088': attribute type 2 has an invalid length. [ 502.007062][T19669] nbd: illegal input index -855506932 [ 502.576540][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 502.576558][ T42] audit: type=1326 audit(2000000087.079:19890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.592041][ T42] audit: type=1326 audit(2000000087.089:19891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.601376][ T42] audit: type=1326 audit(2000000087.089:19892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.609131][ T42] audit: type=1326 audit(2000000087.089:19893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.616046][ T42] audit: type=1326 audit(2000000087.089:19894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.623282][ T42] audit: type=1326 audit(2000000087.089:19895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.631349][ T42] audit: type=1326 audit(2000000087.089:19896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.638712][ T42] audit: type=1326 audit(2000000087.089:19897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19738 comm="syz.2.22138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 502.778073][T19766] sctp: [Deprecated]: syz.4.22147 (pid 19766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.778073][T19766] Use struct sctp_sack_info instead [ 502.793056][T19768] __nla_validate_parse: 6 callbacks suppressed [ 502.793076][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22148'. [ 502.869492][ T42] audit: type=1800 audit(2000000087.369:19898): pid=19776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.22152" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 502.915409][T19774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.058221][T19774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.188652][T19774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.259057][T19802] option changes via remount are deprecated (pid=19801 comm=syz.2.22165) [ 503.294694][T19774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.474529][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.477438][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.480391][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.484756][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.802382][T19832] netlink: 128 bytes leftover after parsing attributes in process `syz.4.22179'. [ 504.176089][T19856] [U]  [ 504.177383][T19856] [U] K{ [ 504.178735][T19856] [U] t 1ŠFfˊ`GJgo/mC [ 504.181875][T19856] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 504.188646][T19856] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 504.193152][T19856] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 504.212104][T19856] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 504.222952][T19856] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 504.228045][T19856] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 504.232913][T19856] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 504.272482][T19856] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 504.276653][T19856] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 504.282321][T19856] [U] 22Ʃx?0;3u [ 504.284783][T19856] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 504.295228][T19856] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 504.299097][T19856] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 504.302686][T19856] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 504.306253][T19856] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 504.311200][T19856] [U] ec [ 504.312255][T19856] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 504.316758][T19856] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 504.335597][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22193'. [ 504.338643][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22193'. [ 504.341847][T19862] netlink: 'syz.2.22193': attribute type 11 has an invalid length. [ 504.710064][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22209'. [ 504.718363][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22209'. [ 504.759579][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22213'. [ 504.964257][T19916] raw_sendmsg: syz.4.22218 forgot to set AF_INET. Fix it! [ 505.006692][ T42] audit: type=1326 audit(2000000089.509:19899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.5.22221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 506.607243][ T222] Bluetooth: hci0: Frame reassembly failed (-84) [ 506.750746][T19953] tipc: Enabling of bearer rejected, failed to enable media [ 506.829642][T19960] tipc: Enabling of bearer rejected, failed to enable media [ 506.885419][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22242'. [ 507.110496][T19981] netlink: 35 bytes leftover after parsing attributes in process `syz.4.22249'. [ 507.244412][T19995] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 508.564249][T11342] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 508.911309][T20019] netlink: 56 bytes leftover after parsing attributes in process `syz.4.22268'. [ 509.126387][T20046] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 509.158947][T20050] syz.4.22283 (20050): drop_caches: 2 [ 509.335957][T20063] can0: slcan on ttyprintk. [ 509.457920][T20062] can0 (unregistered): slcan off ttyprintk. [ 509.462434][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 509.462454][ T42] audit: type=1326 audit(2000000093.959:19905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.487066][ T42] audit: type=1326 audit(2000000093.959:19906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.497436][ T42] audit: type=1326 audit(2000000093.969:19907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.506191][ T42] audit: type=1326 audit(2000000093.969:19908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.514715][ T42] audit: type=1326 audit(2000000093.969:19909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.523437][ T42] audit: type=1326 audit(2000000093.969:19910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.549932][ T42] audit: type=1326 audit(2000000093.969:19911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.560639][ T42] audit: type=1326 audit(2000000093.969:19912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.570164][ T42] audit: type=1326 audit(2000000093.969:19913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.578334][ T42] audit: type=1326 audit(2000000093.969:19914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20067 comm="syz.4.22291" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 509.738032][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22300'. [ 510.743408][T20154] netlink: 100 bytes leftover after parsing attributes in process `syz.2.22334'. [ 510.747830][T20154] netlink: 100 bytes leftover after parsing attributes in process `syz.2.22334'. [ 511.011747][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22342'. [ 511.026519][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22342'. [ 511.079885][T20175] tipc: Enabled bearer , priority 10 [ 511.425073][T20217] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 512.472353][T20264] Cannot find set identified by id 0 to match [ 512.583397][T20274] UHID_CREATE from different security context by process 347 (syz.5.22386), this is not allowed. [ 512.635237][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22391'. [ 512.638741][T20283] netlink: 'syz.2.22391': attribute type 14 has an invalid length. [ 512.776199][T20297] veth0_to_bond: entered allmulticast mode [ 512.842847][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22398'. [ 513.147459][T20323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.282865][T20323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.444475][T20323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.494324][T20285] ceph: No mds server is up or the cluster is laggy [ 513.573464][T20323] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.844192][T11602] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.866652][T11602] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.869308][T11602] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.871984][T11602] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.878353][T17807] libceph: connect (1)[c::]:6789 error -101 [ 513.886888][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 513.931550][T20385] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 514.128408][T20403] warn_alloc: 1 callbacks suppressed [ 514.128424][T20403] syz.5.22446: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 514.135633][T20403] CPU: 0 UID: 0 PID: 20403 Comm: syz.5.22446 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.135654][T20403] Tainted: [L]=SOFTLOCKUP [ 514.135659][T20403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.135666][T20403] Call Trace: [ 514.135673][T20403] [ 514.135678][T20403] dump_stack_lvl+0x100/0x190 [ 514.135701][T20403] warn_alloc.cold+0x94/0xa8 [ 514.135715][T20403] ? __pfx_warn_alloc+0x10/0x10 [ 514.135731][T20403] ? find_held_lock+0x2b/0x80 [ 514.135746][T20403] ? psi_memstall_leave+0x19c/0x360 [ 514.135765][T20403] ? psi_memstall_leave+0x1e6/0x360 [ 514.135809][T20403] ? psi_memstall_leave+0x1eb/0x360 [ 514.135826][T20403] ? lockdep_hardirqs_on+0x78/0x100 [ 514.135847][T20403] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 514.135864][T20403] ? __lock_acquire+0x3d0/0x1a40 [ 514.135888][T20403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 514.135904][T20403] ? __lock_acquire+0x49f/0x1a40 [ 514.135923][T20403] ? find_held_lock+0x2b/0x80 [ 514.135941][T20403] ? find_held_lock+0x2b/0x80 [ 514.135954][T20403] ? aa_file_perm+0x7e4/0x14d0 [ 514.135973][T20403] ? aa_file_perm+0x7e4/0x14d0 [ 514.135989][T20403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.136008][T20403] ? policy_nodemask+0xed/0x4f0 [ 514.136026][T20403] alloc_pages_mpol+0x1fb/0x540 [ 514.136043][T20403] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 514.136060][T20403] ? __pfx_aa_file_perm+0x10/0x10 [ 514.136081][T20403] ___kmalloc_large_node+0xe5/0x120 [ 514.136107][T20403] __kmalloc_large_node_noprof+0x1c/0x70 [ 514.136126][T20403] __kmalloc_noprof+0x5a1/0x820 [ 514.136142][T20403] ? apparmor_file_permission+0x13f/0x1c0 [ 514.136156][T20403] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 514.136171][T20403] qrtr_tun_write_iter+0xc1/0x1b0 [ 514.136185][T20403] aio_write+0x3ba/0x920 [ 514.136200][T20403] ? __pfx_aio_write+0x10/0x10 [ 514.136212][T20403] ? __lock_acquire+0x49f/0x1a40 [ 514.136236][T20403] ? __might_fault+0xc5/0x140 [ 514.136252][T20403] ? io_submit_one+0x1142/0x1fb0 [ 514.136264][T20403] io_submit_one+0x1142/0x1fb0 [ 514.136278][T20403] ? __lock_acquire+0x49f/0x1a40 [ 514.136297][T20403] ? __pfx_io_submit_one+0x10/0x10 [ 514.136314][T20403] ? __might_fault+0xc5/0x140 [ 514.136329][T20403] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 514.136343][T20403] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 514.136360][T20403] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 514.136381][T20403] __do_fast_syscall_32+0xe7/0x970 [ 514.136399][T20403] do_fast_syscall_32+0x32/0x70 [ 514.136414][T20403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.136428][T20403] RIP: 0023:0xf703efec [ 514.136445][T20403] Code: Unable to access opcode bytes at 0xf703efc2. [ 514.136450][T20403] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 514.136462][T20403] RAX: ffffffffffffffda RBX: 00000000f7f71000 RCX: 0000000000000001 [ 514.136469][T20403] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.136475][T20403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.136481][T20403] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.136488][T20403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.136501][T20403] [ 514.136507][T20403] Mem-Info: [ 514.159367][T17807] libceph: connect (1)[c::]:6789 error -101 [ 514.162934][T20403] active_anon:1668 inactive_anon:109 isolated_anon:25 [ 514.162934][T20403] active_file:432 inactive_file:12363 isolated_file:25 [ 514.162934][T20403] unevictable:1775 dirty:301 writeback:0 [ 514.162934][T20403] slab_reclaimable:7575 slab_unreclaimable:92359 [ 514.162934][T20403] mapped:22048 shmem:1771 pagetables:1813 [ 514.162934][T20403] sec_pagetables:346 bounce:0 [ 514.162934][T20403] kernel_misc_reclaimable:0 [ 514.162934][T20403] free:38990 free_pcp:2549 free_cma:0 [ 514.178326][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 514.180094][T20403] Node 0 active_anon:4kB inactive_anon:220kB active_file:8kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:1200kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 514.276073][T20403] Node 1 active_anon:6200kB inactive_anon:140kB active_file:1736kB inactive_file:49324kB unevictable:3480kB isolated(anon):100kB isolated(file):100kB mapped:88496kB dirty:1300kB writeback:0kB shmem:3552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6380kB pagetables:6272kB sec_pagetables:228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 514.286838][T20403] Node 0 DMA free:3412kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.288144][T20409] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.296488][T20403] lowmem_reserve[]: 0 280 280 280 280 [ 514.301550][T20403] Node 0 DMA32 free:22076kB boost:6144kB min:18916kB low:22108kB high:25300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:220kB active_file:4kB inactive_file:36kB unevictable:3520kB writepending:0kB zspages:1992kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:1060kB local_pcp:0kB free_cma:0kB [ 514.301777][T20409] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.311685][T20403] lowmem_reserve[]: 0 0 0 0 0 [ 514.311715][T20403] Node 1 DMA32 free:130180kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6200kB inactive_anon:140kB active_file:1736kB inactive_file:49324kB unevictable:3480kB writepending:1300kB zspages:2956kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:9700kB local_pcp:524kB free_cma:0kB [ 514.317615][T20409] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.327312][T20403] lowmem_reserve[]: 0 0 0 0 0 [ 514.332398][T20403] Node 0 DMA: 167*4kB (UE) 67*8kB (UE) 14*16kB (UE) 24*32kB (UE) 11*64kB (UE) 4*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3412kB [ 514.336916][T20403] Node 0 DMA32: 298*4kB (UME) 198*8kB (UME) 92*16kB (UME) 218*32kB (UME) 59*64kB (UME) 29*128kB (UME) 7*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 22040kB [ 514.342100][T20403] Node 1 DMA32: 1096*4kB (UE) 636*8kB (UME) 230*16kB (UME) 649*32kB (UME) 262*64kB (UME) 147*128kB (UM) 69*256kB (UM) 50*512kB (UM) 17*1024kB (UM) 0*2048kB 0*4096kB = 130176kB [ 514.347699][T20403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.350921][T20403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 514.353821][T20403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.357010][T20403] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 514.359961][T20403] 16055 total pagecache pages [ 514.361444][T20403] 1449 pages in swap cache [ 514.362883][T20403] Free swap = 81484kB [ 514.364356][T20403] Total swap = 124996kB [ 514.365679][T20403] 524155 pages RAM [ 514.366938][T20403] 0 pages HighMem/MovableOnly [ 514.368486][T20403] 211537 pages reserved [ 514.369819][T20403] 0 pages cma reserved [ 514.421117][T20409] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.424354][T20409] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.427672][T20409] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.517376][T20409] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.522019][T20409] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.528858][T20409] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.629283][T20409] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.632523][T20409] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.635776][T20409] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.687289][T17807] libceph: connect (1)[c::]:6789 error -101 [ 514.689528][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 514.702848][T20380] ceph: No mds server is up or the cluster is laggy [ 514.845739][ T5894] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.848487][ T5894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.851182][ T5894] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 514.853925][ T5894] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.861510][ T5894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.864671][ T5894] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 514.867471][ T5894] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.870528][ T5894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.873434][ T5894] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 514.877126][ T5894] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.879934][ T5894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.882785][ T5894] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.820029][T20470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.823263][T20470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.827543][T20470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 515.844138][T11342] Bluetooth: hci3: command tx timeout [ 515.900626][T20476] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 516.375763][T20520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22498'. [ 516.846221][T20470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.850484][T20470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 516.860755][T20470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 516.980704][T20470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.983958][T20470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 516.988180][T20470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 517.036147][T20540] macsec1: entered promiscuous mode [ 517.038554][T20540] vlan1: entered promiscuous mode [ 517.050187][T20540] vlan1: left promiscuous mode [ 517.075033][T20470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.079311][T20470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 517.084475][T20470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 517.364502][ T6007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.372979][ T6007] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 517.377308][ T6007] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 517.380903][ T6007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.385424][ T6007] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 517.388798][ T6007] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 517.392193][ T6007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.398583][ T6007] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 517.403256][ T6007] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 517.407418][ T6007] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.417008][ T6007] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 517.420365][ T6007] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 517.435867][T20567] macsec3: entered promiscuous mode [ 517.438620][T20567] vlan1: entered promiscuous mode [ 517.443456][T20567] vlan1: left promiscuous mode [ 517.491968][T20575] program syz.1.22525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.826038][T20612] netlink: 'syz.4.22542': attribute type 10 has an invalid length. [ 517.828773][T20612] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22542'. [ 518.235475][T20658] bridge0: Device is already in use. [ 518.403757][T17807] libceph: connect (1)[c::]:6789 error -101 [ 518.407940][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 518.500707][T20694] rdma_rxe: rxe_newlink: failed to add veth0 [ 518.566967][T20700] netlink: 'syz.1.22580': attribute type 5 has an invalid length. [ 518.675915][T17807] libceph: connect (1)[c::]:6789 error -101 [ 518.678768][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 519.184885][T17807] libceph: connect (1)[c::]:6789 error -101 [ 519.188384][T17807] libceph: mon0 (1)[c::]:6789 connect error [ 519.221918][T20678] ceph: No mds server is up or the cluster is laggy [ 520.457660][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22652'. [ 520.568910][T20874] comedi comedi3: pcl730: I/O port conflict (0x100,4) [ 520.628677][T20877] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.651481][T20879] ptrace attach of "/syz-executor exec"[18490] was attempted by " [ 520.715407][T20877] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.829913][T20877] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.908155][T20877] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.065471][T11602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.068150][T11602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.071039][T11602] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.074370][T11602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.174438][T14570] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 521.259863][T20909] netlink: 'syz.1.22675': attribute type 2 has an invalid length. [ 521.333388][T14570] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 521.337992][T14570] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 521.341188][T14570] usb 10-1: Product: syz [ 521.342590][T14570] usb 10-1: Manufacturer: syz [ 521.344527][T14570] usb 10-1: SerialNumber: syz [ 521.353664][T14570] usb 10-1: config 0 descriptor?? [ 521.367716][T14570] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 521.371703][T14570] dvb-usb: bulk message failed: -22 (2/0) [ 521.376481][T14570] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.390008][T14570] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 521.393376][T14570] usb 10-1: media controller created [ 521.402200][T14570] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.574999][T20891] dvb-usb: bulk message failed: -22 (4/0) [ 521.576814][T20891] cxusb: i2c read failed [ 521.580685][T14570] cxusb: set interface failed [ 521.582285][T14570] dvb-usb: bulk message failed: -22 (1/0) [ 521.617700][T14570] DVB: Unable to find symbol mt352_attach() [ 521.624680][T14570] dvb-usb: bulk message failed: -22 (5/0) [ 521.629423][T14570] zl10353_read_register: readreg error (reg=127, ret==-121) [ 521.636100][T14570] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 521.684150][T14570] rc_core: IR keymap rc-dvico-mce not found [ 521.686527][T14570] Registered IR keymap rc-empty [ 521.697099][T14570] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 521.710134][T14570] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input62 [ 521.718849][T14570] dvb-usb: schedule remote query interval to 100 msecs. [ 521.723104][T14570] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 521.729084][T14570] usb 10-1: USB disconnect, device number 2 [ 521.795583][T14570] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 521.957521][T20983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22696'. [ 522.032188][T20990] netlink: 'syz.4.22701': attribute type 4 has an invalid length. [ 522.036040][T20990] netlink: 17 bytes leftover after parsing attributes in process `syz.4.22701'. [ 522.528661][T21041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22723'. [ 522.539256][T21041] netlink: 277 bytes leftover after parsing attributes in process `syz.1.22723'. [ 522.542857][T21041] netlink: 277 bytes leftover after parsing attributes in process `syz.1.22723'. [ 522.601021][T21050] tipc: Enabling of bearer rejected, failed to enable media [ 522.752889][T21066] netlink: 'syz.1.22734': attribute type 4 has an invalid length. [ 522.757039][T21066] netlink: 17 bytes leftover after parsing attributes in process `syz.1.22734'. [ 522.811845][T21073] tipc: Enabling of bearer rejected, failed to enable media [ 523.019922][T21095] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 523.357306][T21124] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 523.360891][T21124] ALSA: mixer_oss: invalid index 137438 [ 523.553358][T21148] IPVS: ip_vs_add_dest(): server weight less than zero [ 523.556986][ T24] IPVS: starting estimator thread 0... [ 523.644822][T21149] IPVS: using max 45 ests per chain, 108000 per kthread [ 523.647124][T21074] ceph: No mds server is up or the cluster is laggy [ 524.817400][ T5531] IPVS: starting estimator thread 0... [ 524.819274][T21224] IPVS: ip_vs_add_dest(): server weight less than zero [ 524.858953][T21186] ceph: No mds server is up or the cluster is laggy [ 524.904526][T21226] IPVS: using max 45 ests per chain, 108000 per kthread [ 525.481334][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 525.481354][ T42] audit: type=1326 audit(2000000109.979:19920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.497802][ T42] audit: type=1326 audit(2000000109.979:19921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.5.22835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.509079][ T42] audit: type=1326 audit(2000000109.979:19922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.5.22835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.519865][ T42] audit: type=1326 audit(2000000109.979:19923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.531115][ T42] audit: type=1326 audit(2000000109.979:19924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.543651][ T42] audit: type=1326 audit(2000000109.979:19925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.5.22835" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.552626][ T42] audit: type=1326 audit(2000000109.979:19926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.5.22835" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 525.680528][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22843'. [ 525.682652][T21320] tipc: Enabling of bearer rejected, failed to enable media [ 526.033671][T21356] netlink: 'syz.2.22861': attribute type 11 has an invalid length. [ 526.053937][T21358] netlink: 48 bytes leftover after parsing attributes in process `syz.5.22863'. [ 526.315504][T21388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22876'. [ 527.123361][T21407] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 527.210014][T21413] netlink: 'syz.5.22888': attribute type 1 has an invalid length. [ 527.212929][T21413] netlink: 240 bytes leftover after parsing attributes in process `syz.5.22888'. [ 527.216794][T21413] netlink: 'syz.5.22888': attribute type 1 has an invalid length. [ 527.445323][T21442] netlink: 64 bytes leftover after parsing attributes in process `syz.5.22900'. [ 527.970068][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22926'. [ 527.973267][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22926'. [ 527.979085][T21495] netlink: 'syz.1.22926': attribute type 14 has an invalid length. [ 527.990061][T21495] netlink: 'syz.1.22926': attribute type 12 has an invalid length. [ 528.870526][T21570] tipc: Enabling of bearer rejected, failed to enable media [ 529.000302][T21588] Invalid logical block size (73728) [ 529.092507][T21596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 529.207343][T21613] ALSA: mixer_oss: invalid OSS volume '' [ 529.225389][T21616] netlink: 220 bytes leftover after parsing attributes in process `syz.1.22986'. [ 529.263369][T21622] netlink: 810 bytes leftover after parsing attributes in process `syz.4.22988'. [ 529.279397][T21624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22990'. [ 529.283218][T21624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22990'. [ 529.555095][T21662] geneve1: entered promiscuous mode [ 529.774475][ T12] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.779549][ T12] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.789888][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.794826][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.901853][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23018'. [ 529.986481][T21702] netlink: 'syz.1.23022': attribute type 3 has an invalid length. [ 529.989059][T21702] netlink: 'syz.1.23022': attribute type 1 has an invalid length. [ 529.991746][T21702] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23022'. [ 530.255307][ T1484] kernel write not supported for file /3861/net/ip_vs_stats (pid: 1484 comm: kworker/1:2) [ 530.520241][T21751] devpts: Bad value for 'max' [ 530.774663][T21784] netlink: 'syz.2.23060': attribute type 2 has an invalid length. [ 531.195667][T21808] netlink: 'syz.5.23079': attribute type 5 has an invalid length. [ 532.296869][T21881] __nla_validate_parse: 4 callbacks suppressed [ 532.296890][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23103'. [ 532.342841][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23105'. [ 532.349839][T21885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.357487][T17807] lo speed is unknown, defaulting to 1000 [ 532.359808][T17807] syz1: Port: 1 Link ACTIVE [ 532.361806][T17807] lo speed is unknown, defaulting to 1000 [ 532.444906][T21896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23110'. [ 532.470802][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23111'. [ 532.477775][T21898] bridge0: port 2(macvlan2) entered blocking state [ 532.480068][T21898] bridge0: port 2(macvlan2) entered disabled state [ 532.482335][T21898] macvlan2: entered allmulticast mode [ 532.488794][T21898] macvlan2: left allmulticast mode [ 532.872203][T21913] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 533.231403][T21933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.526391][T11342] Bluetooth: hci3: Malformed LE Event: 0x0d [ 533.820986][T21965] tmpfs: Cannot disable swap on remount [ 534.350910][T21991] random: crng reseeded on system resumption [ 534.511360][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23159'. [ 534.516403][T22005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23160'. [ 534.868977][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23180'. [ 534.880443][T22046] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 535.931609][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23194'. [ 535.936800][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23194'. [ 536.291912][T22123] xt_l2tp: missing protocol rule (udp|l2tpip) [ 536.450088][T22143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23225'. [ 536.692064][T22173] usb usb8: usbfs: process 22173 (syz.5.23239) did not claim interface 0 before use [ 537.218861][ T42] audit: type=1326 audit(2000000350.719:19927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22232 comm="syz.4.23268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 537.233978][ T42] audit: type=1326 audit(2000000350.729:19928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22232 comm="syz.4.23268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 537.248391][ T42] audit: type=1326 audit(2000000350.729:19929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22232 comm="syz.4.23268" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf708efec code=0x7ffc0000 [ 537.259399][ T42] audit: type=1326 audit(2000000350.739:19930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22232 comm="syz.4.23268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 537.269115][ T42] audit: type=1326 audit(2000000350.739:19931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22232 comm="syz.4.23268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 537.350748][T22247] __nla_validate_parse: 2 callbacks suppressed [ 537.350773][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23274'. [ 537.359033][T22247] nbd: illegal input index 131084 [ 537.412108][T22252] CIFS: Attempting to mount //127.0.0.1/share [ 537.438860][T22252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 537.447906][T22252] CIFS: VFS: cifs_mount failed w/return code = -111 [ 537.497906][T22256] netlink: 348 bytes leftover after parsing attributes in process `syz.4.23278'. [ 537.549230][T22258] random: crng reseeded on system resumption [ 537.557798][T22258] Restarting kernel threads ... [ 537.561286][T22258] Done restarting kernel threads. [ 538.322425][T22323] netlink: 'syz.1.23312': attribute type 2 has an invalid length. [ 538.326656][T22323] netlink: 'syz.1.23312': attribute type 2 has an invalid length. [ 538.428411][T22333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23317'. [ 538.458290][T22336] comedi comedi3: dac02: I/O base address or length out of range [ 538.533954][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23322'. [ 538.879791][T22397] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 539.168350][T22419] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 539.204681][T22424] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 539.569024][T22440] binder: 22439:22440 ioctl c0306201 0 returned -14 [ 539.756271][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23378'. [ 539.832659][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23382'. [ 539.838417][T22467] netlink: 173 bytes leftover after parsing attributes in process `syz.2.23382'. [ 541.658793][ T42] audit: type=1326 audit(2000000355.159:19932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22565 comm="syz.5.23420" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 541.896319][T22583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 541.899135][T22583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 541.903769][T22583] vhci_hcd vhci_hcd.0: Device attached [ 542.144564][T13547] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 542.147378][T22586] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 542.152730][ T13] vhci_hcd vhci_hcd.2: stop threads [ 542.155193][ T13] vhci_hcd vhci_hcd.2: release socket [ 542.157627][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 542.679605][T22624] random: crng reseeded on system resumption [ 542.692948][T22626] CIFS mount error: No usable UNC path provided in device string! [ 542.692948][T22626] [ 542.706561][T22626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 542.736241][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23449'. [ 543.369793][T22691] tipc: Enabling of bearer rejected, media not registered [ 544.036784][T22777] bridge_slave_1: entered promiscuous mode [ 544.068378][T22779] tmpfs: Cannot change global quota limit on remount [ 544.145124][T22789] IPVS: Error connecting to the multicast addr [ 544.309215][T22811] binder: 22808:22811 unknown command 71 [ 544.311216][T22811] binder: 22808:22811 ioctl c0306201 80000080 returned -22 [ 544.448170][T22831] netlink: 'syz.1.23545': attribute type 3 has an invalid length. [ 544.531273][T22841] block nbd1: not configured, cannot reconfigure [ 544.914259][ T6058] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 544.916460][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23569'. [ 544.921229][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23569'. [ 544.925517][T22878] netlink: 'syz.2.23569': attribute type 18 has an invalid length. [ 544.978999][ T6008] kernel read not supported for file /vcs (pid: 6008 comm: kworker/3:2) [ 545.064626][ T6058] usb 10-1: Using ep0 maxpacket: 32 [ 545.069325][ T6058] usb 10-1: unable to get BOS descriptor or descriptor too short [ 545.081408][ T6058] usb 10-1: string descriptor 0 read error: -22 [ 545.081530][ T6058] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 545.081562][ T6058] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 545.090211][ T6058] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 545.097071][ T6058] dw2102: su3000_power_ctrl: 1, initialized 0 [ 545.099620][ T6058] dvb-usb: bulk message failed: -22 (2/0) [ 545.104597][ T6058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 545.110050][ T6058] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 545.113517][ T6058] usb 10-1: media controller created [ 545.115975][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.118508][ T6058] dw2102: i2c transfer failed. [ 545.120513][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.122903][ T6058] dw2102: i2c transfer failed. [ 545.126778][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.128546][ T6058] dw2102: i2c transfer failed. [ 545.130202][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.132028][ T6058] dw2102: i2c transfer failed. [ 545.134326][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.136366][ T6058] dw2102: i2c transfer failed. [ 545.138224][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 545.140110][ T6058] dw2102: i2c transfer failed. [ 545.141990][ T6058] dvb-usb: MAC address: 02:02:02:02:02:02 [ 545.153853][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.169837][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 545.172581][ T6058] dw2102: command 0x0e transfer failed. [ 545.175383][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 545.177980][ T6058] dw2102: command 0x0e transfer failed. [ 545.408853][T22917] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 545.411210][T22917] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.415726][T22917] vhci_hcd vhci_hcd.0: Device attached [ 545.420781][T22918] vhci_hcd: connection closed [ 545.420830][T11342] Bluetooth: hci4: unexpected cc 0x080f length: 90 > 1 [ 545.421165][ T6007] vhci_hcd vhci_hcd.4: stop threads [ 545.426898][ T6007] vhci_hcd vhci_hcd.4: release socket [ 545.428633][ T6007] vhci_hcd vhci_hcd.4: disconnect device [ 545.431454][T11342] Bluetooth: hci4: unexpected event for opcode 0x080f [ 545.484424][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 545.495384][ T6058] dw2102: command 0x0e transfer failed. [ 545.505268][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 545.507114][ T6058] dw2102: command 0x0e transfer failed. [ 545.511295][ T6058] dvb-usb: bulk message failed: -22 (1/0) [ 545.515593][ T6058] dw2102: command 0x51 transfer failed. [ 545.523679][T22861] dvb-usb: bulk message failed: -22 (5/0) [ 545.525985][T22861] dw2102: i2c transfer failed. [ 545.552379][ T6058] DVB: Unable to find symbol ds3000_attach() [ 545.554659][ T6058] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 545.624253][ T6058] rc_core: IR keymap rc-su3000 not found [ 545.626142][ T6058] Registered IR keymap rc-empty [ 545.628292][ T6058] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 545.635197][ T6058] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input64 [ 545.644940][ T6058] dvb-usb: schedule remote query interval to 150 msecs. [ 545.649076][ T6058] dw2102: su3000_power_ctrl: 0, initialized 1 [ 545.651068][ T6058] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 545.660194][ T6058] usb 10-1: USB disconnect, device number 3 [ 546.216703][T22941] tmpfs: Cannot enable quota on remount [ 546.899317][ T6058] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 547.037599][T22959] netlink: 'syz.2.23607': attribute type 11 has an invalid length. [ 547.274517][T13547] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 547.387380][T23005] overlayfs: conflicting lowerdir path [ 547.688179][T23047] vlan2: entered allmulticast mode [ 547.690460][T23047] bond0: entered allmulticast mode [ 547.887802][T23077] random: crng reseeded on system resumption [ 547.919127][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23666'. [ 548.003327][T23091] pimreg3: entered allmulticast mode [ 548.141843][T23113] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 548.391280][T23146] sg_write: process 12148 (syz.2.23699) changed security contexts after opening file descriptor, this is not allowed. [ 548.457839][T23152] vlan2: entered allmulticast mode [ 548.628088][T23184] program syz.4.23717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.773646][T23194] netlink: 'syz.5.23721': attribute type 1 has an invalid length. [ 548.776619][T23194] netlink: 220 bytes leftover after parsing attributes in process `syz.5.23721'. [ 548.982666][T23220] vlan7: entered allmulticast mode [ 548.985009][T23220] bond0: entered allmulticast mode [ 548.987065][T23220] bond_slave_0: entered allmulticast mode [ 548.989231][T23220] bond_slave_1: entered allmulticast mode [ 549.436084][T23242] smc: net device vlan1 applied user defined pnetid SYZ2 [ 549.452395][T11342] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 549.457401][T11342] Bluetooth: hci4: Injecting HCI hardware error event [ 549.474999][ T64] Bluetooth: hci4: hardware error 0x00 [ 549.667097][T23262] netlink: 56 bytes leftover after parsing attributes in process `syz.4.23753'. [ 549.858644][T23285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.313163][T23336] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 550.423304][T23345] CIFS mount error: No usable UNC path provided in device string! [ 550.423304][T23345] [ 550.426891][T23345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 550.801063][T23361] [U] V3Fپ"S/4:XTZWTLW= [ 550.803829][T23361] [U] J"E:" [ 551.359762][ T6058] kernel write not supported for file /amidi2 (pid: 6058 comm: kworker/0:3) [ 551.477607][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23819'. [ 551.611688][ T64] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 551.621452][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23821'. [ 551.645187][T23401] veth3: entered promiscuous mode [ 551.692846][T23412] random: crng reseeded on system resumption [ 551.899284][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23833'. [ 551.912704][T23431] binder: 23430:23431 ioctl c0306201 80000080 returned -22 [ 551.922635][T23433] comedi comedi3: pcl724: I/O base address or length out of range [ 551.953013][T23435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23837'. [ 552.131004][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23847'. [ 552.217204][T23472] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 552.233690][T23471] lo speed is unknown, defaulting to 1000 [ 552.266716][T23477] IPVS: Unknown mcast interface: lo [ 552.368252][T23471] wg2 speed is unknown, defaulting to 1000 [ 552.463367][T23497] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 552.612036][T23509] lo: entered promiscuous mode [ 552.616334][T23509] bond0: entered promiscuous mode [ 552.619781][T23509] dummy0: entered promiscuous mode [ 552.623253][T23509] eql: entered promiscuous mode [ 552.626754][T23509] ifb0: entered promiscuous mode [ 552.628883][T23509] ifb1: entered promiscuous mode [ 552.640233][T23513] CUSE: DEVNAME unspecified [ 552.682455][T23517] netlink: 'syz.4.23876': attribute type 1 has an invalid length. [ 552.733104][T23509] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 552.747100][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 552.934519][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 555.125139][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 570.257288][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23887'. [ 570.262280][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23887'. [ 570.362943][T23584] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 570.490182][T23595] lo speed is unknown, defaulting to 1000 [ 570.621784][T23595] wg2 speed is unknown, defaulting to 1000 [ 570.718377][T23621] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 570.765324][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23911'. [ 570.922738][T23645] netlink: 284 bytes leftover after parsing attributes in process `syz.5.23919'. [ 571.141601][T23658] netlink: 'syz.5.23925': attribute type 2 has an invalid length. [ 571.373248][T23678] ip6gretap0: entered promiscuous mode [ 571.582526][T23700] xt_l2tp: invalid flags combination: 0 [ 571.786137][T23713] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 571.797993][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23948'. [ 572.090438][T23735] vlan3: entered promiscuous mode [ 572.257788][T23752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.23965'. [ 572.326813][T23761] comedi comedi3: pcmda12: I/O base address not correctly aligned [ 573.005081][T23828] lo speed is unknown, defaulting to 1000 [ 573.115320][T23828] wg2 speed is unknown, defaulting to 1000 [ 573.895376][T23865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.24016'. [ 574.216768][ T5531] Process accounting resumed [ 574.236770][T23875] Process accounting resumed [ 574.363026][T23895] vivid-000: disconnect [ 574.366792][T23893] vivid-000: reconnect [ 574.518150][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24039'. [ 574.918984][T23952] netlink: 'syz.2.24058': attribute type 10 has an invalid length. [ 574.925950][ T5531] hid_parser_main: 73 callbacks suppressed [ 574.925970][ T5531] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 574.932537][T23954] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 574.938559][ T5531] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 575.083578][T23957] fido_id[23957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 575.086611][T23964] xt_l2tp: unknown flags: 51 [ 575.193150][T23975] netlink: 504 bytes leftover after parsing attributes in process `syz.5.24069'. [ 575.540461][T23996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24079'. [ 575.798850][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24084'. [ 575.802529][T24009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24084'. [ 575.834732][ T5894] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.837701][ T5894] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.842738][ T5894] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.854545][ T5894] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.859033][T24013] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 575.930826][T24022] No buffer was provided with the request [ 576.077309][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24095'. [ 576.238711][T24047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.381370][T24065] program syz.5.24110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.437147][ T6008] kernel write not supported for file /input/mouse0 (pid: 6008 comm: kworker/3:2) [ 576.622489][T24097] comedi comedi3: adq12b: I/O base address or length out of range [ 576.652731][T24101] syz.4.24129: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 576.657168][T24101] CPU: 2 UID: 0 PID: 24101 Comm: syz.4.24129 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.657188][T24101] Tainted: [L]=SOFTLOCKUP [ 576.657193][T24101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.657205][T24101] Call Trace: [ 576.657210][T24101] [ 576.657216][T24101] dump_stack_lvl+0x100/0x190 [ 576.657235][T24101] warn_alloc.cold+0x94/0xa8 [ 576.657249][T24101] ? __pfx_warn_alloc+0x10/0x10 [ 576.657265][T24101] ? find_held_lock+0x2b/0x80 [ 576.657280][T24101] ? psi_memstall_leave+0x19c/0x360 [ 576.657302][T24101] ? psi_memstall_leave+0x1eb/0x360 [ 576.657317][T24101] ? lockdep_hardirqs_on+0x78/0x100 [ 576.657337][T24101] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 576.657360][T24101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.657378][T24101] ? lock_acquire+0x1b9/0x370 [ 576.657396][T24101] ? find_held_lock+0x2b/0x80 [ 576.657409][T24101] ? page_table_check_set+0x48f/0x930 [ 576.657424][T24101] ? page_table_check_set+0x48f/0x930 [ 576.657441][T24101] ? page_table_check_set+0x4f7/0x930 [ 576.657456][T24101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.657474][T24101] ? keyring_get_key_chunk+0x139/0x2b0 [ 576.657490][T24101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.657508][T24101] ? policy_nodemask+0xed/0x4f0 [ 576.657525][T24101] alloc_pages_mpol+0x1fb/0x540 [ 576.657542][T24101] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 576.657562][T24101] ___kmalloc_large_node+0xe5/0x120 [ 576.657577][T24101] ? key_task_permission+0x2c7/0x3c0 [ 576.657593][T24101] __kmalloc_large_node_noprof+0x1c/0x70 [ 576.657612][T24101] __kmalloc_noprof+0x5a1/0x820 [ 576.657626][T24101] ? __lock_acquire+0x49f/0x1a40 [ 576.657643][T24101] ? dns_resolver_preparse+0x662/0xa60 [ 576.657663][T24101] dns_resolver_preparse+0x662/0xa60 [ 576.657682][T24101] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 576.657699][T24101] ? __pfx___might_resched+0x10/0x10 [ 576.657719][T24101] ? down_read+0x13b/0x4c0 [ 576.657734][T24101] ? find_held_lock+0x2b/0x80 [ 576.657747][T24101] ? __pfx_down_read+0x10/0x10 [ 576.657764][T24101] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 576.657782][T24101] __key_create_or_update+0x463/0xe30 [ 576.657800][T24101] ? __pfx___key_create_or_update+0x10/0x10 [ 576.657817][T24101] ? lookup_user_key+0x3f3/0x1300 [ 576.657832][T24101] ? lockdep_hardirqs_on+0x78/0x100 [ 576.657846][T24101] ? irqentry_exit+0x24d/0xa00 [ 576.657863][T24101] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 576.657877][T24101] ? __pfx_keyring_search_iterator+0x10/0x10 [ 576.657896][T24101] key_create_or_update+0x42/0x60 [ 576.657913][T24101] __do_sys_add_key+0x2e8/0x460 [ 576.657926][T24101] ? __pfx___do_sys_add_key+0x10/0x10 [ 576.657942][T24101] __do_fast_syscall_32+0xe7/0x970 [ 576.657960][T24101] do_fast_syscall_32+0x32/0x70 [ 576.657975][T24101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.657990][T24101] RIP: 0023:0xf708efec [ 576.658007][T24101] Code: Unable to access opcode bytes at 0xf708efc2. [ 576.658012][T24101] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 576.658024][T24101] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000400 [ 576.658031][T24101] RDX: 0000000080000080 RSI: 00000000000fffff RDI: 000000003730245b [ 576.658038][T24101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.658044][T24101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 576.658051][T24101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.658066][T24101] [ 576.658071][T24101] Mem-Info: [ 576.773628][T24115] netlink: 436 bytes leftover after parsing attributes in process `syz.5.24136'. [ 576.774814][T24101] active_anon:706 inactive_anon:1106 isolated_anon:0 [ 576.774814][T24101] active_file:6830 inactive_file:3474 isolated_file:0 [ 576.774814][T24101] unevictable:1781 dirty:240 writeback:0 [ 576.774814][T24101] slab_reclaimable:7641 slab_unreclaimable:93943 [ 576.774814][T24101] mapped:22098 shmem:1771 pagetables:2086 [ 576.774814][T24101] sec_pagetables:352 bounce:0 [ 576.774814][T24101] kernel_misc_reclaimable:0 [ 576.774814][T24101] free:39453 free_pcp:616 free_cma:0 [ 576.816072][T24101] Node 0 active_anon:0kB inactive_anon:192kB active_file:976kB inactive_file:316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1156kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 576.827831][T24101] Node 1 active_anon:2724kB inactive_anon:4232kB active_file:26344kB inactive_file:13580kB unevictable:3588kB isolated(anon):0kB isolated(file):0kB mapped:88364kB dirty:956kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6844kB pagetables:7188kB sec_pagetables:248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 576.840039][T24101] Node 0 DMA free:3484kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.851435][T24101] lowmem_reserve[]: 0 280 280 280 280 [ 576.853420][T24101] Node 0 DMA32 free:21436kB boost:8192kB min:20964kB low:24156kB high:27348kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:192kB active_file:972kB inactive_file:316kB unevictable:3536kB writepending:0kB zspages:1984kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 576.868361][T24101] lowmem_reserve[]: 0 0 0 0 0 [ 576.870013][T24101] Node 1 DMA32 free:134528kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2724kB inactive_anon:4232kB active_file:26344kB inactive_file:13580kB unevictable:3588kB writepending:956kB zspages:3344kB present:1048432kB managed:948212kB mlocked:52kB bounce:0kB free_pcp:4464kB local_pcp:972kB free_cma:0kB [ 576.886009][T24101] lowmem_reserve[]: 0 0 0 0 0 [ 576.887628][T24101] Node 0 DMA: 165*4kB (UE) 69*8kB (UE) 16*16kB (UE) 25*32kB (UE) 11*64kB (UE) 4*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3484kB [ 576.892801][T24101] Node 0 DMA32: 375*4kB (UME) 185*8kB (UME) 60*16kB (UME) 214*32kB (UME) 59*64kB (UME) 26*128kB (UME) 8*256kB (UME) 3*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 21476kB [ 576.899421][T24101] Node 1 DMA32: 746*4kB (UME) 1082*8kB (UME) 453*16kB (UME) 388*32kB (UM) 238*64kB (UME) 162*128kB (UME) 79*256kB (UME) 53*512kB (UM) 19*1024kB (UME) 0*2048kB 0*4096kB = 134088kB [ 576.906834][T24101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.910768][T24101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 576.913763][T24101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.919748][T24101] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 576.929823][T24101] 13389 total pagecache pages [ 576.931930][T24101] 1309 pages in swap cache [ 576.938009][T24101] Free swap = 81512kB [ 576.939460][T24101] Total swap = 124996kB [ 576.940892][T24101] 524155 pages RAM [ 576.941835][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24141'. [ 576.942044][T24101] 0 pages HighMem/MovableOnly [ 576.942052][T24101] 211537 pages reserved [ 576.948610][T24101] 0 pages cma reserved [ 577.551534][T24186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24171'. [ 577.563187][T24186] netlink: 'syz.1.24171': attribute type 8 has an invalid length. [ 577.567656][T24186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24171'. [ 577.926926][T24233] devpts: Bad value for 'max' [ 578.378040][T24258] tipc: Enabling of bearer rejected, failed to enable media [ 578.419812][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24208'. [ 578.427603][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24208'. [ 579.417531][T24298] openvswitch: netlink: Missing key (keys=40, expected=100) [ 579.767962][T24326] trusted_key: encrypted_key: key trusted:syz not found [ 581.271220][T24419] program syz.5.24276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.655238][ T6008] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 581.706607][T24453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.797319][T24457] sg_write: data in/out 20006/1 bytes for SCSI command 0xe-- guessing data in; [ 581.797319][T24457] program syz.2.24296 not setting count and/or reply_len properly [ 581.804326][ T6008] usb 10-1: Using ep0 maxpacket: 32 [ 581.808513][ T6008] usb 10-1: unable to get BOS descriptor or descriptor too short [ 581.814785][ T6008] usb 10-1: string descriptor 0 read error: -22 [ 581.817520][ T6008] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 581.820929][ T6008] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 581.826891][ T6008] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 581.830103][ T6008] dw2102: su3000_power_ctrl: 1, initialized 0 [ 581.832698][ T6008] dvb-usb: bulk message failed: -22 (2/0) [ 581.837076][ T6008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.840493][ T6008] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 581.844254][ T6008] usb 10-1: media controller created [ 581.846196][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.848095][ T6008] dw2102: i2c transfer failed. [ 581.849796][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.852174][ T6008] dw2102: i2c transfer failed. [ 581.853703][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.856052][ T6008] dw2102: i2c transfer failed. [ 581.857611][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.859457][ T6008] dw2102: i2c transfer failed. [ 581.861046][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.862998][ T6008] dw2102: i2c transfer failed. [ 581.872100][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 581.874441][ T6008] dw2102: i2c transfer failed. [ 581.876061][ T6008] dvb-usb: MAC address: 02:02:02:02:02:02 [ 581.883819][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.908238][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 581.911891][ T6008] dw2102: command 0x0e transfer failed. [ 581.915774][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 581.918173][ T6008] dw2102: command 0x0e transfer failed. [ 582.080462][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24303'. [ 582.224201][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 582.233392][ T6008] dw2102: command 0x0e transfer failed. [ 582.240492][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 582.243548][ T6008] dw2102: command 0x0e transfer failed. [ 582.247755][ T6008] dvb-usb: bulk message failed: -22 (1/0) [ 582.250094][ T6008] dw2102: command 0x51 transfer failed. [ 582.266522][T24435] dvb-usb: bulk message failed: -22 (4/0) [ 582.268899][T24435] dw2102: i2c transfer failed. [ 582.288825][ T6008] DVB: Unable to find symbol ds3000_attach() [ 582.291470][ T6008] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 582.344087][ T6008] rc_core: IR keymap rc-su3000 not found [ 582.352632][ T6008] Registered IR keymap rc-empty [ 582.356785][ T6008] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 582.365364][ T6008] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input67 [ 582.375052][ T6008] dvb-usb: schedule remote query interval to 150 msecs. [ 582.385587][ T6008] dw2102: su3000_power_ctrl: 0, initialized 1 [ 582.388399][ T6008] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 582.393840][ T6008] usb 10-1: USB disconnect, device number 4 [ 582.397278][T24509] lo speed is unknown, defaulting to 1000 [ 582.457127][ T6008] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 582.578466][T24509] wg2 speed is unknown, defaulting to 1000 [ 583.230911][T24551] can0: slcan on ptm0. [ 583.254289][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 583.317321][T24550] can0 (unregistered): slcan off ptm0. [ 583.380196][T24566] netlink: 296 bytes leftover after parsing attributes in process `syz.2.24340'. [ 583.404254][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 583.411951][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 583.417261][ T24] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 583.424093][ T24] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 583.427685][ T24] usb 10-1: Product: syz [ 583.429525][ T24] usb 10-1: Manufacturer: syz [ 583.431541][ T24] usb 10-1: SerialNumber: syz [ 583.439504][ T24] usb 10-1: config 0 descriptor?? [ 583.442753][T24536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 583.448629][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 583.451375][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 583.542897][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24343'. [ 583.556722][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24343'. [ 583.562339][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24343'. [ 583.568524][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24343'. [ 583.584400][ T6058] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 583.744528][ T6058] usb 9-1: Using ep0 maxpacket: 32 [ 583.753511][ T6058] usb 9-1: unable to get BOS descriptor or descriptor too short [ 583.761307][ T6058] usb 9-1: string descriptor 0 read error: -22 [ 583.763350][ T6058] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 583.767598][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 583.771059][T13547] usb 10-1: USB disconnect, device number 5 [ 583.774579][ T6058] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 583.777440][ T6058] dw2102: su3000_power_ctrl: 1, initialized 0 [ 583.779363][ T6058] dvb-usb: bulk message failed: -22 (2/0) [ 583.801699][ T6058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.806357][ T6058] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 583.809700][ T6058] usb 9-1: media controller created [ 583.811685][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.812036][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24351'. [ 583.813542][ T6058] dw2102: i2c transfer failed. [ 583.819883][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.821612][ T6058] dw2102: i2c transfer failed. [ 583.826044][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.827909][ T6058] dw2102: i2c transfer failed. [ 583.829451][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.831433][ T6058] dw2102: i2c transfer failed. [ 583.832985][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.835368][ T6058] dw2102: i2c transfer failed. [ 583.836958][ T6058] dvb-usb: bulk message failed: -22 (6/0) [ 583.838855][ T6058] dw2102: i2c transfer failed. [ 583.840375][ T6058] dvb-usb: MAC address: 02:02:02:02:02:02 [ 583.849084][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.858786][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 583.860956][ T6058] dw2102: command 0x0e transfer failed. [ 583.862896][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 583.865559][ T6058] dw2102: command 0x0e transfer failed. [ 584.174499][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 584.177326][ T6058] dw2102: command 0x0e transfer failed. [ 584.181841][ T6058] dvb-usb: bulk message failed: -22 (3/0) [ 584.184464][ T6058] dw2102: command 0x0e transfer failed. [ 584.186340][ T6058] dvb-usb: bulk message failed: -22 (1/0) [ 584.188328][ T6058] dw2102: command 0x51 transfer failed. [ 584.190226][T24563] dvb-usb: bulk message failed: -22 (4/0) [ 584.192367][T24563] dw2102: i2c transfer failed. [ 584.216851][ T6058] DVB: Unable to find symbol ds3000_attach() [ 584.218823][ T6058] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 584.274447][ T6058] rc_core: IR keymap rc-su3000 not found [ 584.276538][ T6058] Registered IR keymap rc-empty [ 584.280942][ T6058] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 584.289111][ T6058] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input68 [ 584.296691][ T6058] dvb-usb: schedule remote query interval to 150 msecs. [ 584.300499][ T6058] dw2102: su3000_power_ctrl: 0, initialized 1 [ 584.302975][ T6058] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 584.310130][ T6058] usb 9-1: USB disconnect, device number 6 [ 584.348147][ T6058] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 585.440175][T11342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.455063][T11342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.459732][T11342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.469069][T11342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.472774][T11342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.746184][T24696] lo speed is unknown, defaulting to 1000 [ 585.766297][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24409'. [ 585.836220][T24696] wg2 speed is unknown, defaulting to 1000 [ 586.129342][T24696] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.132519][T24696] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.135941][T24696] bridge_slave_0: entered allmulticast mode [ 586.139917][T24696] bridge_slave_0: entered promiscuous mode [ 586.145257][T24696] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.148033][T24696] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.150740][T24696] bridge_slave_1: entered allmulticast mode [ 586.153505][T24696] bridge_slave_1: entered promiscuous mode [ 586.171355][T24696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.176442][T24696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.200639][T24696] team0: Port device team_slave_0 added [ 586.205896][T24696] team0: Port device team_slave_1 added [ 586.224998][T24696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.227214][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.235571][T24696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.241303][T24696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.243572][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.252783][T24696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.296995][T24696] hsr_slave_0: entered promiscuous mode [ 586.300343][T24696] hsr_slave_1: entered promiscuous mode [ 586.303383][T24696] debugfs: 'hsr0' already exists in 'hsr' [ 586.306423][T24696] Cannot create hsr debugfs directory [ 586.493863][T24696] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.501175][T24696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.504742][T24696] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 586.509192][T24696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.512376][T24696] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 586.517447][T24696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.520486][T24696] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 586.525086][T24696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.546023][T24696] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.549052][T24696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.552555][T24696] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.555890][T24696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.605676][T24696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.616342][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.619892][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.629458][T24696] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.635800][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.638550][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.648882][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.651503][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.972329][T24696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.157300][T24696] veth0_vlan: entered promiscuous mode [ 587.167282][T24696] veth1_vlan: entered promiscuous mode [ 587.191875][T24696] veth0_macvtap: entered promiscuous mode [ 587.200612][T24696] veth1_macvtap: entered promiscuous mode [ 587.216928][T24696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.224466][T24696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.319220][T24394] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.322824][T24394] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.341101][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.344394][T24387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.346133][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.348224][T24387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.372110][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.375522][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.441326][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24417'. [ 587.513528][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24413'. [ 587.517014][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24413'. [ 587.520661][T24782] netlink: 'syz.1.24413': attribute type 14 has an invalid length. [ 587.524301][T11342] Bluetooth: hci0: command tx timeout [ 587.623122][T24791] vivid-000: ================= START STATUS ================= [ 587.627091][T24791] vivid-000: Test Pattern: 100% Color Squares [ 587.629989][T24791] vivid-000: Fill Percentage of Frame: 5 [ 587.632547][T24791] vivid-000: Horizontal Movement: Move Left Slow [ 587.635747][T24791] vivid-000: Vertical Movement: Move Down Slow [ 587.637935][T24791] vivid-000: OSD Text Mode: Counters Only [ 587.639959][T24791] vivid-000: Show Border: false [ 587.641679][T24791] vivid-000: Show Square: false [ 587.643318][T24791] vivid-000: Sensor Flipped Horizontally: true [ 587.645685][T24791] vivid-000: Sensor Flipped Vertically: true [ 587.647713][T24791] vivid-000: Insert SAV Code in Image: true [ 587.649706][T24791] vivid-000: Insert EAV Code in Image: true [ 587.652033][T24791] vivid-000: Insert Video Guard Band: true [ 587.654273][T24791] vivid-000: Reduced Framerate: true [ 587.656193][T24791] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 587.658585][T24791] vivid-000: S-Video 000-0 Is Connected To: None [ 587.660707][T24791] vivid-000: Enable Capture Cropping: true [ 587.662823][T24791] vivid-000: Enable Capture Composing: false [ 587.665921][T24791] vivid-000: Enable Capture Scaler: false [ 587.668344][T24791] vivid-000: Timestamp Source: Start of Exposure [ 587.671019][T24791] vivid-000: Colorspace: Rec. 709 [ 587.672841][T24791] vivid-000: Transfer Function: opRGB [ 587.675095][T24791] vivid-000: Y'CbCr Encoding: xvYCC 709 [ 587.676974][T24791] vivid-000: HSV Encoding: Hue 0-256 [ 587.681032][T24791] vivid-000: Quantization: Default [ 587.682717][T24791] vivid-000: Apply Alpha To Red Only: false [ 587.690135][T24791] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 587.695739][T24791] vivid-000: DV Timings Signal Mode: Current DV Timings [ 587.714221][T24791] vivid-000: DV Timings: 640x480p59 inactive [ 587.716546][T24791] vivid-000: DV Timings Aspect Ratio: 16x9 [ 587.718937][T24791] vivid-000: Maximum EDID Blocks: 7 [ 587.721111][T24791] vivid-000: Limited RGB Range (16-235): true [ 587.723598][T24791] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 587.726946][T24791] vivid-000: Power Present: 0x00000001 [ 587.728362][T24799] netlink: 1 bytes leftover after parsing attributes in process `syz.1.24424'. [ 587.729172][T24791] tpg source WxH: 1280x720 (HSV) [ 587.734163][T24791] tpg field: 1 [ 587.735423][T24791] tpg crop: (0,0)/1280x720 [ 587.737165][T24791] tpg compose: (0,0)/1280x720 [ 587.738935][T24791] tpg colorspace: 3 [ 587.740407][T24791] tpg transfer function: 3/3 [ 587.742108][T24791] tpg HSV encoding: 4/4 [ 587.743718][T24791] tpg quantization: 1/1 [ 587.746857][T24791] tpg RGB range: 2/1 [ 587.748554][T24791] vivid-000: ================== END STATUS ================== [ 587.943627][T24822] tipc: Enabling of bearer rejected, failed to enable media [ 588.148071][T24844] netlink: 96 bytes leftover after parsing attributes in process `syz.2.24445'. [ 588.171122][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24447'. [ 588.366352][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24456'. [ 588.552173][T24871] lo speed is unknown, defaulting to 1000 [ 588.573059][ T42] audit: type=1400 audit(2000000402.069:19933): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24872 comm="syz.1.24459" [ 588.728486][T24871] wg2 speed is unknown, defaulting to 1000 [ 589.027025][T24906] Bluetooth: MGMT ver 1.23 [ 589.386670][T24921] netlink: 'syz.4.24481': attribute type 4 has an invalid length. [ 589.604235][T11342] Bluetooth: hci0: command tx timeout [ 590.056562][T24983] netlink: 'syz.2.24509': attribute type 2 has an invalid length. [ 590.309522][T25012] program syz.4.24523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.848068][T25073] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24553'. [ 591.021998][T25088] lo speed is unknown, defaulting to 1000 [ 591.152433][T25088] wg2 speed is unknown, defaulting to 1000 [ 591.196784][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24570'. [ 591.276031][T25117] netlink: 604 bytes leftover after parsing attributes in process `syz.4.24574'. [ 591.279764][T25117] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 591.482683][T25138] binder: 25137:25138 ioctl 4018620d 0 returned -22 [ 591.644942][T25140] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 591.694172][T11342] Bluetooth: hci0: command tx timeout [ 591.915645][ T848] kernel read not supported for file /82/net/snmp6 (pid: 848 comm: kworker/2:2) [ 592.353868][T25182] pim6reg: entered allmulticast mode [ 592.532844][T25200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24614'. [ 592.931991][T25236] netlink: 'syz.2.24631': attribute type 1 has an invalid length. [ 592.935995][T25236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.104108][T14572] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 593.266091][T14572] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.270369][T14572] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.274151][T14572] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 593.277914][T14572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.283241][T14572] usb 9-1: config 0 descriptor?? [ 593.502100][ T848] usb 9-1: USB disconnect, device number 7 [ 593.596195][T24389] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.600474][T24389] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.606572][T24389] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 593.727213][T24389] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.731225][T24389] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.740618][T24389] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 593.765140][ T5924] Bluetooth: hci0: command tx timeout [ 593.776398][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.782525][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.791288][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.801379][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.806196][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.809970][T24389] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.814121][T24389] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.818059][T24389] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 593.888452][T24389] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.892382][T24389] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.899308][T24389] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 594.117093][T25268] lo speed is unknown, defaulting to 1000 [ 594.394114][ T6008] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 594.557780][ T6008] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 594.561057][ T6008] usb 9-1: config 0 interface 0 has no altsetting 0 [ 594.585115][ T6008] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 594.591088][ T6008] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 594.594753][ T6008] usb 9-1: Product: syz [ 594.596210][ T6008] usb 9-1: Manufacturer: syz [ 594.597787][ T6008] usb 9-1: SerialNumber: syz [ 594.603897][ T6008] usb 9-1: config 0 descriptor?? [ 594.610052][ T6008] usb 9-1: selecting invalid altsetting 0 [ 594.836689][T14572] usb 9-1: USB disconnect, device number 8 [ 594.951386][T25331] xt_socket: unknown flags 0x50 [ 595.853063][ T64] Bluetooth: hci2: command tx timeout [ 597.924378][ T64] Bluetooth: hci2: command tx timeout [ 598.228647][T24389] bond0 (unregistering): Released all slaves [ 598.233834][T24389] bond1 (unregistering): Released all slaves [ 598.250440][T24389] bond2 (unregistering): Released all slaves [ 598.258538][T24389] bond3 (unregistering): Released all slaves [ 598.266101][T24389] bond4 (unregistering): Released all slaves [ 598.273679][T24389] bond5 (unregistering): Released all slaves [ 598.285058][T24389] bond6 (unregistering): Released all slaves [ 598.298762][T25268] wg2 speed is unknown, defaulting to 1000 [ 598.299592][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 598.348213][ T12] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.355346][ T12] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.362326][ T12] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.369633][ T12] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.428805][T24389] tipc: Disabling bearer [ 598.461116][T24389] tipc: Disabling bearer [ 598.482295][T24389] tipc: Left network mode [ 598.553072][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 598.841042][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 598.901059][T25391] lo speed is unknown, defaulting to 1000 [ 598.956074][T25268] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.958481][T25268] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.960920][T25268] bridge_slave_0: entered allmulticast mode [ 598.967673][T25268] bridge_slave_0: entered promiscuous mode [ 599.035480][T25268] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.040708][T25268] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.047697][T25268] bridge_slave_1: entered allmulticast mode [ 599.051260][T25268] bridge_slave_1: entered promiscuous mode [ 599.088120][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 599.100538][T25268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.105321][T25268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.125470][T25391] wg2 speed is unknown, defaulting to 1000 [ 599.150917][T25268] team0: Port device team_slave_0 added [ 599.154819][T25268] team0: Port device team_slave_1 added [ 599.174946][T25268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.177428][T25268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.185734][T25268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.190161][T25268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.192356][T25268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.200523][T25268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.241368][T25268] hsr_slave_0: entered promiscuous mode [ 599.243834][T25268] hsr_slave_1: entered promiscuous mode [ 599.246390][T25268] debugfs: 'hsr0' already exists in 'hsr' [ 599.248295][T25268] Cannot create hsr debugfs directory [ 599.582217][T25438] CIFS: Unable to determine destination address [ 599.748773][T25268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 599.769821][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.778178][T25268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.798875][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.805072][T25268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 599.827284][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.868425][T25268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 599.878846][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.989369][T25268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.001145][T25268] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.014230][ T64] Bluetooth: hci2: command tx timeout [ 600.016780][T21844] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.019165][T21844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.026866][T21844] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.029089][T21844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.455240][T25454] Oops: general protection fault, probably for non-canonical address 0xf129a6c83f43c1fe: 0000 [#1] SMP KASAN NOPTI [ 600.459170][T25454] KASAN: maybe wild-memory-access in range [0x894d5641fa1e0ff0-0x894d5641fa1e0ff7] [ 600.462419][T25454] CPU: 0 UID: 0 PID: 25454 Comm: syz.4.24708 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.466040][T25454] Tainted: [L]=SOFTLOCKUP [ 600.467427][T25454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.470599][T25454] RIP: 0010:try_module_get+0x23/0xd0 [ 600.472326][T25454] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 600.478194][T25454] RSP: 0000:ffffc90002d3f8c0 EFLAGS: 00010a02 [ 600.480136][T25454] RAX: dffffc0000000000 RBX: 894d5641fa1e0ff3 RCX: ffffc9000df67000 [ 600.482657][T25454] RDX: 1129aac83f43c1fe RSI: ffffffff881a9df0 RDI: 894d5641fa1e0ff3 [ 600.485275][T25454] RBP: ffff888000d2c800 R08: 0000000000000001 R09: fffffbfff206e96d [ 600.487749][T25454] R10: ffffffff90374b6f R11: 0000000000000000 R12: ffff88804e40cc40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.490356][T25454] R13: ffffffff81c967d0 R14: ffff88802566d5b8 R15: ffff88804e40cc88 [ 600.493000][T25454] FS: 0000000000000000(0000) GS:ffff888096be1000(0063) knlGS:00000000f547db40 [ 600.496045][T25454] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 600.498154][T25454] CR2: 00005602da443078 CR3: 0000000053207000 CR4: 0000000000352ef0 [ 600.500739][T25454] Call Trace: [ 600.501838][T25454] [ 600.502798][T25454] dvb_device_open+0x124/0x3b0 [ 600.504571][T25454] ? __pfx_dvb_device_open+0x10/0x10 [ 600.506561][T25454] chrdev_open+0x234/0x6a0 [ 600.508315][T25454] ? __pfx_apparmor_file_open+0x10/0x10 [ 600.510247][T25454] ? __pfx_chrdev_open+0x10/0x10 [ 600.511875][T25454] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 600.514044][T25454] do_dentry_open+0x6ab/0x14d0 [ 600.515599][T25454] ? __pfx_chrdev_open+0x10/0x10 [ 600.517157][T25454] vfs_open+0x82/0x3f0 [ 600.518461][T25454] path_openat+0x2873/0x4280 [ 600.519980][T25454] ? __pfx_path_openat+0x10/0x10 [ 600.521589][T25454] do_file_open+0x20e/0x430 [ 600.523374][T25454] ? __lock_acquire+0x49f/0x1a40 [ 600.525017][T25454] ? __pfx_do_file_open+0x10/0x10 [ 600.526661][T25454] ? _raw_spin_unlock+0x28/0x50 [ 600.528215][T25454] ? alloc_fd+0x471/0x7a0 [ 600.529520][T25454] do_sys_openat2+0x10f/0x1e0 [ 600.531028][T25454] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.532664][T25454] ? irqentry_exit+0x24d/0xa00 [ 600.534217][T25454] ? lockdep_hardirqs_on+0x78/0x100 [ 600.535874][T25454] __ia32_compat_sys_openat+0x12d/0x210 [ 600.537616][T25454] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 600.539552][T25454] do_int80_emulation+0x14b/0x720 [ 600.541233][T25454] asm_int80_emulation+0x1a/0x20 [ 600.542829][T25454] RIP: 0023:0xf71c73eb [ 600.544333][T25454] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 600.550418][T25454] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 600.553071][T25454] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100 [ 600.555579][T25454] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.558076][T25454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.560602][T25454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.563064][T25454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.565692][T25454] [ 600.566684][T25454] Modules linked in: [ 600.568289][T25454] ---[ end trace 0000000000000000 ]--- [ 600.570169][T25268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.599458][T25454] RIP: 0010:try_module_get+0x23/0xd0 [ 600.601170][T25454] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 600.634805][T25454] RSP: 0000:ffffc90002d3f8c0 EFLAGS: 00010a02 [ 600.638849][T25454] RAX: dffffc0000000000 RBX: 894d5641fa1e0ff3 RCX: ffffc9000df67000 [ 600.641185][T25454] RDX: 1129aac83f43c1fe RSI: ffffffff881a9df0 RDI: 894d5641fa1e0ff3 [ 600.660554][T25454] RBP: ffff888000d2c800 R08: 0000000000000001 R09: fffffbfff206e96d [ 600.665966][T25454] R10: ffffffff90374b6f R11: 0000000000000000 R12: ffff88804e40cc40 [ 600.668532][T25454] R13: ffffffff81c967d0 R14: ffff88802566d5b8 R15: ffff88804e40cc88 [ 600.671088][T25454] FS: 0000000000000000(0000) GS:ffff888096ce1000(0063) knlGS:00000000f547db40 [ 600.673936][T25454] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 600.682785][T25454] CR2: 000055d2f6db2c70 CR3: 0000000053207000 CR4: 0000000000352ef0 [ 600.687750][T25454] Kernel panic - not syncing: Fatal exception [ 600.690273][T25454] Kernel Offset: disabled [ 600.691648][T25454] Rebooting in 86400 seconds..