last executing test programs: 6m1.473197164s ago: executing program 3 (id=10740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000280)={0xc1, 0x0, 0x70ffcbf93721e193}) 6m1.407686884s ago: executing program 3 (id=10744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f1", 0x1) 6m1.30093827s ago: executing program 3 (id=10749): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x19}) 6m1.234497903s ago: executing program 3 (id=10752): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 6m1.168297131s ago: executing program 3 (id=10754): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x2e6, 0xc9dc6e, 0xfffffffffffffffe, 0x7, 0x8, 0x1000000002, 0x400, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffefffffe}, 0x20}, {{@in=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe4) close(r0) 6m0.817316225s ago: executing program 3 (id=10764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 6m0.749438243s ago: executing program 32 (id=10764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 5m28.420702737s ago: executing program 4 (id=11796): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 5m28.343183026s ago: executing program 4 (id=11799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 5m28.302072056s ago: executing program 4 (id=11802): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m28.21064587s ago: executing program 4 (id=11808): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m28.120558718s ago: executing program 4 (id=11810): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 5m27.697134452s ago: executing program 4 (id=11815): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 5m12.239028192s ago: executing program 33 (id=11815): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3m19.052596557s ago: executing program 0 (id=14672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYRES8], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 3m15.98500371s ago: executing program 0 (id=14725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) 3m15.905874714s ago: executing program 0 (id=14726): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000840)={0x7, 0x0, [{0x80000000, 0x4, 0x3, 0x10, 0x8000027, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffff7f, 0x5, 0x2}, {0xb, 0x12, 0x1, 0x7, 0xdf4, 0x401, 0x80000001}, {0x0, 0x2bb, 0x0, 0xa, 0x3, 0x400002, 0x400}, {0x40000001, 0xa, 0x0, 0x5, 0x10000, 0x8, 0xf34f}, {0x80000007, 0x9, 0x9, 0x80000000, 0x9, 0x3, 0x7}, {0xd, 0x451, 0x1, 0x7ffe, 0xffffffff, 0xfffffffc, 0x4}]}) 3m15.775054685s ago: executing program 0 (id=14727): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m15.774083543s ago: executing program 0 (id=14728): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_overlay={0x400, 0x1, 0x4, 0x0, 0x9, {}, {0x2, 0x0, 0x59, 0x80, 0x0, 0xfd, "ee78598f"}, 0x9, 0x3, {0x0}}) 3m15.496145783s ago: executing program 0 (id=14730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m15.428119752s ago: executing program 34 (id=14730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.641149653s ago: executing program 1 (id=18503): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 4.553528103s ago: executing program 1 (id=18506): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 4.549501372s ago: executing program 1 (id=18508): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 4.525139272s ago: executing program 1 (id=18511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4.470340385s ago: executing program 1 (id=18514): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsmount(r0, 0x1, 0x0) 4.19296369s ago: executing program 1 (id=18521): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x2, 0x1, 0x6, 0xbc, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 4.110121068s ago: executing program 35 (id=18521): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x2, 0x1, 0x6, 0xbc, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.071529877s ago: executing program 6 (id=18543): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x2a, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x20000000) 2.05525157s ago: executing program 5 (id=18545): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x47bce17c}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000029000000370000000a0b"], 0x18}, 0x404c0c1) 2.04884892s ago: executing program 5 (id=18547): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_disconnect(r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, 0x0) 2.026763074s ago: executing program 6 (id=18549): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.929318746s ago: executing program 2 (id=18551): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f", 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 1.298227738s ago: executing program 5 (id=18552): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202069"], 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 1.295025003s ago: executing program 6 (id=18559): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 188.607662ms ago: executing program 5 (id=18553): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x200002ab, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb, r1, &(0x7f0000000080)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x8000000000000005, 0x0, 0x2, r1}]) 179.654453ms ago: executing program 6 (id=18554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b44001280200001800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e7465720004f9c429d2d21860b20001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 179.520742ms ago: executing program 2 (id=18555): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x7, @remote, 0x8}, r1, 0x10007}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 178.899934ms ago: executing program 2 (id=18556): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x2a, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x20000000) 167.51975ms ago: executing program 5 (id=18557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xffffffff, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x4, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0x2, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x1000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) 167.399068ms ago: executing program 6 (id=18558): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(r0, &(0x7f0000019180)=""/102370, 0x18fe2, 0x200) 143.727726ms ago: executing program 2 (id=18560): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r1, &(0x7f00000001c0), 0x8) 128.854968ms ago: executing program 7 (id=18527): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) close(r0) 123.419542ms ago: executing program 6 (id=18561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x400000f4, 0x0, 0x2b34988d}, {0x40000071, 0x0, 0x893}]}) 123.27832ms ago: executing program 7 (id=18562): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202069"], 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 123.186498ms ago: executing program 2 (id=18563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8) 123.13109ms ago: executing program 5 (id=18564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f1, 0x0, 0x4}]}) 0s ago: executing program 2 (id=18565): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): 08 code=0x7ffc0000 [ 538.541333][ T42] audit: type=1326 audit(2000000415.655:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 538.548355][ T42] audit: type=1326 audit(2000000415.655:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 538.555354][ T42] audit: type=1326 audit(2000000415.655:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 538.562327][ T42] audit: type=1326 audit(2000000415.655:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 538.571799][ T42] audit: type=1326 audit(2000000415.655:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 538.581267][ T42] audit: type=1326 audit(2000000415.655:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.15503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 538.737737][ T7251] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15505'. [ 539.073186][ T7282] netlink: 'syz.5.15521': attribute type 3 has an invalid length. [ 539.075853][ T7282] netlink: 'syz.5.15521': attribute type 1 has an invalid length. [ 539.078496][ T7282] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15521'. [ 539.444202][ T7306] kvm: kvm [7305]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 540.261458][ T7358] kvm_intel: kvm [7355]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xcd [ 540.678885][ T7385] bridge0: port 3(syz_tun) entered blocking state [ 540.681493][ T7385] bridge0: port 3(syz_tun) entered disabled state [ 540.683788][ T7385] syz_tun: entered allmulticast mode [ 540.686794][ T7385] syz_tun: entered promiscuous mode [ 542.317841][ T7442] Attempt to restore checkpoint with obsolete wellknown handles [ 542.396279][ T7447] bridge0: port 3(syz_tun) entered blocking state [ 542.399216][ T7447] bridge0: port 3(syz_tun) entered disabled state [ 542.403033][ T7447] syz_tun: entered allmulticast mode [ 542.409510][ T7447] syz_tun: entered promiscuous mode [ 542.517935][ T7451] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 543.267281][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15613'. [ 543.271658][ T7482] netlink: 'syz.6.15613': attribute type 21 has an invalid length. [ 544.532110][ T5748] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 544.538183][ T7561] overlay: filesystem on ./file0 is read-only [ 544.690952][ T5748] usb 6-1: Using ep0 maxpacket: 8 [ 544.696601][ T5748] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 544.700281][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.714961][ T5748] pvrusb2: Hardware description: Terratec Grabster AV400 [ 544.717369][ T5748] pvrusb2: ********** [ 544.718855][ T5748] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 544.726728][ T5748] pvrusb2: Important functionality might not be entirely working. [ 544.733778][ T5748] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 544.741102][ T5748] pvrusb2: ********** [ 544.881895][ T7580] vivid-000: disconnect [ 544.887044][ T7576] vivid-000: reconnect [ 544.919046][ T2513] pvrusb2: Invalid write control endpoint [ 544.990040][ T2513] pvrusb2: Invalid write control endpoint [ 544.996175][ T2513] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 545.003580][ T2513] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 545.007254][ T2513] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 545.011521][ T2513] pvrusb2: Device being rendered inoperable [ 545.030968][ T2513] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 545.034318][ T2513] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 545.052609][ T2513] pvrusb2: Attached sub-driver cx25840 [ 545.056511][ T2513] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 545.060398][ T2513] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 545.119638][ T7546] pvrusb2: Attempted to execute control transfer when device not ok [ 545.123883][T30289] usb 6-1: USB disconnect, device number 37 [ 546.342107][T30289] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 546.510914][T30289] usb 11-1: Using ep0 maxpacket: 16 [ 546.519345][T30289] usb 11-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 546.530754][T30289] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.534255][T30289] usb 11-1: Product: syz [ 546.536117][T30289] usb 11-1: Manufacturer: syz [ 546.538034][T30289] usb 11-1: SerialNumber: syz [ 546.542155][T30289] usb 11-1: config 0 descriptor?? [ 546.769588][T30289] dvb_usb_dtv5100 11-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 546.775183][T30289] usb 11-1: USB disconnect, device number 4 [ 547.020931][ T5838] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 547.038414][ T42] kauditd_printk_skb: 675 callbacks suppressed [ 547.038433][ T42] audit: type=1800 audit(2000000424.175:10463): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15707" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 547.181588][ T5838] usb 6-1: too many configurations: 23, using maximum allowed: 8 [ 547.195847][ T5838] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 547.199813][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.205206][ T5838] usb 6-1: Product: syz [ 547.207045][ T5838] usb 6-1: Manufacturer: syz [ 547.209008][ T5838] usb 6-1: SerialNumber: syz [ 547.480008][ T5838] rtl8150 6-1:1.0: couldn't reset the device [ 547.489729][ T5838] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 547.501706][ T5838] usb 6-1: USB disconnect, device number 38 [ 548.135336][ T7737] input: syz1 as /devices/virtual/input/input63 [ 548.208041][ T7744] binder: 7742:7744 ioctl c0306201 80000000 returned -14 [ 548.423992][ T7756] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 548.446131][ T7756] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 548.711031][ T5748] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 548.861860][ T5748] usb 11-1: too many configurations: 23, using maximum allowed: 8 [ 548.873357][ T5748] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 548.876406][ T5748] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.879378][ T5748] usb 11-1: Product: syz [ 548.881358][ T5748] usb 11-1: Manufacturer: syz [ 548.883315][ T5748] usb 11-1: SerialNumber: syz [ 549.130091][ T5748] rtl8150 11-1:1.0: couldn't reset the device [ 549.132558][ T5748] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 549.144891][ T5748] usb 11-1: USB disconnect, device number 5 [ 549.201335][T30289] kernel read not supported for file /dsp1 (pid: 30289 comm: kworker/0:4) [ 549.325918][ T7782] binder: 7781:7782 ioctl 541b 0 returned -22 [ 550.944658][ T7848] ALSA: mixer_oss: invalid OSS volume '' [ 550.947689][ T7848] ALSA: mixer_oss: invalid OSS volume '6;Z' [ 550.975990][ T7851] netlink: 'syz.5.15780': attribute type 2 has an invalid length. [ 550.979484][ T7851] netlink: 'syz.5.15780': attribute type 11 has an invalid length. [ 550.982573][ T7851] netlink: 88 bytes leftover after parsing attributes in process `syz.5.15780'. [ 551.867937][ T5838] hid_parser_main: 68 callbacks suppressed [ 551.867958][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.873709][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.876223][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.879064][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.882280][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.884755][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.887108][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.889670][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.892244][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.894599][ T5838] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 551.902665][ T5838] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 551.902665][ T5838] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 551.944216][ T7920] fido_id[7920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 552.047696][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15811'. [ 552.389004][ T7945] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 553.552319][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15848'. [ 553.618564][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15851'. [ 553.623371][ T8017] netlink: 'syz.1.15851': attribute type 30 has an invalid length. [ 553.630437][T30815] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.634514][T30815] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.637399][T30815] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.644834][T30815] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.468342][ T8090] ubi1: attaching mtd0 [ 554.469880][ T8090] ubi1 error: ubi_attach_mtd_dev: bad VID header (1073742086) or data offsets (1073742150) [ 554.608098][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15887'. [ 554.691361][ T5748] kernel write not supported for file /ppp (pid: 5748 comm: kworker/3:3) [ 554.719127][ T8110] netlink: 'syz.5.15891': attribute type 8 has an invalid length. [ 554.822774][ T8115] dummy0: entered allmulticast mode [ 554.833074][ T8113] dummy0: left allmulticast mode [ 555.081101][ T1478] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 555.234413][ T1478] usb 6-1: config 2 has an invalid interface number: 79 but max is 0 [ 555.237614][ T1478] usb 6-1: config 2 has no interface number 0 [ 555.240037][ T1478] usb 6-1: config 2 interface 79 has no altsetting 0 [ 555.245958][ T1478] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 555.249783][ T1478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.252951][ T1478] usb 6-1: Product: syz [ 555.254898][ T1478] usb 6-1: Manufacturer: syz [ 555.256680][ T1478] usb 6-1: SerialNumber: syz [ 555.485284][ T1478] usb 6-1: USB disconnect, device number 39 [ 556.785851][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15931'. [ 556.930354][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.508727][ T846] kernel read not supported for file /dsp (pid: 846 comm: kworker/3:2) [ 558.427782][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15972'. [ 558.881614][ T8315] netlink: 'syz.5.15979': attribute type 11 has an invalid length. [ 559.683819][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16004'. [ 559.736468][ T8366] openvswitch: netlink: IP tunnel TTL not specified. [ 559.738924][ T8366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.798234][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16009'. [ 560.420968][ T29] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 560.570889][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 560.575124][ T29] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 560.578724][ T29] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.583178][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.587285][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.591627][ T29] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.597008][ T29] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.601157][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.690877][ T1346] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 560.811226][ T29] usb 11-1: GET_CAPABILITIES returned 0 [ 560.813614][ T29] usbtmc 11-1:16.0: can't read capabilities [ 560.842985][ T1346] usb 10-1: config 2 has an invalid interface number: 79 but max is 0 [ 560.846449][ T1346] usb 10-1: config 2 has no interface number 0 [ 560.849060][ T1346] usb 10-1: config 2 interface 79 has no altsetting 0 [ 560.855207][ T1346] usb 10-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 560.859172][ T1346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.862859][ T1346] usb 10-1: Product: syz [ 560.864761][ T1346] usb 10-1: Manufacturer: syz [ 560.866850][ T1346] usb 10-1: SerialNumber: syz [ 561.016629][ T24] usb 11-1: USB disconnect, device number 6 [ 561.099216][ T1346] usb 10-1: USB disconnect, device number 21 [ 562.706403][ T8466] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.766786][ T8470] input: syz0 as /devices/virtual/input/input65 [ 562.769227][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16052'. [ 563.110899][ T5748] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 563.228102][ T8491] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 563.260899][ T5748] usb 10-1: Using ep0 maxpacket: 8 [ 563.263752][ T5748] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.266269][ T5748] usb 10-1: config 0 has no interface number 0 [ 563.268197][ T5748] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.272493][ T5748] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 563.276040][ T5748] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.282574][ T5748] usb 10-1: config 0 descriptor?? [ 563.299933][ T5748] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 563.497601][ T1346] usb 10-1: USB disconnect, device number 22 [ 563.615878][ T8505] Cache volume key already in use (9p,syz,) [ 563.939898][ T8516] overlayfs: invalid origin (0000) [ 563.999812][ T8520] pimreg: tun_chr_ioctl cmd 1074025675 [ 564.002420][ T8520] pimreg: persist disabled [ 564.436351][ T8546] veth0: entered promiscuous mode [ 564.444963][ T8545] veth0: left promiscuous mode [ 564.735973][ T8558] input: syz0 as /devices/virtual/input/input66 [ 565.307465][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16110'. [ 565.312874][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16110'. [ 565.432596][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16115'. [ 566.176468][ T8655] netlink: 72 bytes leftover after parsing attributes in process `syz.6.16134'. [ 566.528174][ T8671] program syz.5.16140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.533850][ T8671] ata1.00: invalid service action 31 [ 566.926535][ T8699] program syz.1.16151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 567.907015][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16164'. [ 568.171609][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16172'. [ 568.176671][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16172'. [ 568.180675][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16172'. [ 568.451112][ T846] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 568.506038][ T8768] trusted_key: encrypted_key: keyword 'upGh'fault' not recognized [ 568.613789][ T846] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 568.617132][ T846] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 568.619783][ T846] usb 11-1: Product: syz [ 568.621453][ T846] usb 11-1: Manufacturer: syz [ 568.623239][ T846] usb 11-1: SerialNumber: syz [ 568.626895][ T846] usb 11-1: config 0 descriptor?? [ 568.816866][ T8782] kvm: kvm [8781]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 568.843502][ T40] usb 11-1: USB disconnect, device number 7 [ 569.146347][ T4256] Bluetooth: hci3: command 0x1003 tx timeout [ 569.150291][ T3283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 569.751403][ T1346] kernel read not supported for file /binder/state (pid: 1346 comm: kworker/2:2) [ 569.761824][ T846] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 569.793680][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16217'. [ 569.837669][ T8842] bridge_slave_1: left allmulticast mode [ 569.840184][ T8842] bridge_slave_1: left promiscuous mode [ 569.843782][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.922557][ T846] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 569.926401][ T846] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.930685][ T846] usb 10-1: config 0 interface 0 has no altsetting 0 [ 569.936479][ T846] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.940597][ T846] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.944858][ T846] usb 10-1: Product: syz [ 569.946777][ T846] usb 10-1: Manufacturer: syz [ 569.948841][ T846] usb 10-1: SerialNumber: syz [ 569.955655][ T846] usb 10-1: config 0 descriptor?? [ 569.961554][ T846] hub 10-1:0.0: bad descriptor, ignoring hub [ 569.964330][ T846] hub 10-1:0.0: probe with driver hub failed with error -5 [ 569.973646][ T846] usb 10-1: selecting invalid altsetting 0 [ 570.570999][ T8816] usb 10-1: reset high-speed USB device number 23 using dummy_hcd [ 570.745124][ T8816] usb 10-1: device firmware changed [ 570.750763][ T5838] usb 10-1: USB disconnect, device number 23 [ 570.901385][ T5838] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 571.062647][ T5838] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 571.066470][ T5838] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 571.070709][ T5838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 571.076896][ T5838] usb 10-1: string descriptor 0 read error: -22 [ 571.079751][ T5838] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 571.084062][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 571.089693][ T5838] usb 10-1: config 0 descriptor?? [ 571.095100][ T5838] hub 10-1:0.0: bad descriptor, ignoring hub [ 571.097814][ T5838] hub 10-1:0.0: probe with driver hub failed with error -5 [ 571.103839][ T5838] usb 10-1: selecting invalid altsetting 0 [ 571.411150][ T5838] usb 10-1: USB disconnect, device number 24 [ 571.675603][ T8883] input: syz1 as /devices/virtual/input/input67 [ 572.076001][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16240'. [ 572.259109][T30289] kernel write not supported for file /snd/seq (pid: 30289 comm: kworker/0:4) [ 572.343158][ T8929] warn_alloc: 1 callbacks suppressed [ 572.343169][ T8929] syz.1.16253: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 572.349519][ T8929] CPU: 3 UID: 0 PID: 8929 Comm: syz.1.16253 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.349548][ T8929] Tainted: [L]=SOFTLOCKUP [ 572.349555][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.349566][ T8929] Call Trace: [ 572.349575][ T8929] [ 572.349584][ T8929] dump_stack_lvl+0x100/0x190 [ 572.349616][ T8929] warn_alloc.cold+0x94/0xa8 [ 572.349639][ T8929] ? __pfx_warn_alloc+0x10/0x10 [ 572.349660][ T8929] ? __lock_acquire+0x49f/0x1a40 [ 572.349708][ T8929] __vmalloc_node_range_noprof+0x136c/0x1630 [ 572.349743][ T8929] ? lock_acquire+0x1b9/0x370 [ 572.349771][ T8929] ? ip_set_sockfn_get+0x18e/0xd20 [ 572.349792][ T8929] ? __lock_acquire+0x49f/0x1a40 [ 572.349816][ T8929] ? trace_contention_end+0x126/0x160 [ 572.349845][ T8929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.349871][ T8929] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 572.349895][ T8929] ? rcu_is_watching+0x12/0xc0 [ 572.349917][ T8929] ? ip_set_sockfn_get+0x18e/0xd20 [ 572.349939][ T8929] __vmalloc_node_noprof+0xad/0xf0 [ 572.349965][ T8929] ? ip_set_sockfn_get+0x18e/0xd20 [ 572.349989][ T8929] ip_set_sockfn_get+0x18e/0xd20 [ 572.350013][ T8929] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 572.350037][ T8929] ? nf_sockopt_find.isra.0+0x222/0x290 [ 572.350054][ T8929] nf_getsockopt+0x7c/0xe0 [ 572.350071][ T8929] ip_getsockopt+0x192/0x1e0 [ 572.350093][ T8929] ? __pfx_ip_getsockopt+0x10/0x10 [ 572.350112][ T8929] ? __pfx_futex_hash+0x10/0x10 [ 572.350151][ T8929] raw_getsockopt+0x4d/0x1f0 [ 572.350175][ T8929] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 572.350198][ T8929] do_sock_getsockopt+0x50a/0x6e0 [ 572.350223][ T8929] ? __lock_acquire+0x49f/0x1a40 [ 572.350254][ T8929] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 572.350279][ T8929] ? percpu_counter_add_batch+0xb9/0x230 [ 572.350314][ T8929] ? find_held_lock+0x2b/0x80 [ 572.350346][ T8929] ? __fget_files+0x21f/0x3d0 [ 572.350383][ T8929] __sys_getsockopt+0x133/0x1d0 [ 572.350413][ T8929] ? __ia32_sys_getsockopt+0xbc/0x160 [ 572.350434][ T8929] __ia32_sys_getsockopt+0xbc/0x160 [ 572.350450][ T8929] ? __do_fast_syscall_32+0x98/0x970 [ 572.350466][ T8929] ? lockdep_hardirqs_on+0x78/0x100 [ 572.350494][ T8929] __do_fast_syscall_32+0xe7/0x970 [ 572.350515][ T8929] do_fast_syscall_32+0x32/0x70 [ 572.350537][ T8929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.350562][ T8929] RIP: 0023:0xf709efec [ 572.350584][ T8929] Code: Unable to access opcode bytes at 0xf709efc2. [ 572.350591][ T8929] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 572.350609][ T8929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 572.350623][ T8929] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000080 [ 572.350635][ T8929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.350646][ T8929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 572.350657][ T8929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.350682][ T8929] [ 572.350689][ T8929] Mem-Info: [ 572.434774][ T8929] active_anon:4648 inactive_anon:957 isolated_anon:0 [ 572.434774][ T8929] active_file:6649 inactive_file:12600 isolated_file:0 [ 572.434774][ T8929] unevictable:1768 dirty:334 writeback:0 [ 572.434774][ T8929] slab_reclaimable:6815 slab_unreclaimable:71254 [ 572.434774][ T8929] mapped:25016 shmem:3632 pagetables:1627 [ 572.434774][ T8929] sec_pagetables:314 bounce:0 [ 572.434774][ T8929] kernel_misc_reclaimable:0 [ 572.434774][ T8929] free:41581 free_pcp:12904 free_cma:0 [ 572.493843][ T8929] Node 0 active_anon:148kB inactive_anon:132kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1484kB sec_pagetables:1104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.507496][ T8929] Node 1 active_anon:17724kB inactive_anon:3700kB active_file:26596kB inactive_file:50392kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97948kB dirty:1336kB writeback:0kB shmem:10016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6752kB pagetables:5176kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.522657][ T8929] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:620kB local_pcp:196kB free_cma:0kB [ 572.535383][ T8929] lowmem_reserve[]: 0 280 280 280 280 [ 572.537678][ T8929] Node 0 DMA32 free:16116kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:2048KB free_highatomic:192KB active_anon:112kB inactive_anon:116kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:824kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:10824kB local_pcp:3184kB free_cma:0kB [ 572.550749][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 572.553034][ T8929] Node 1 DMA32 free:146904kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16616kB inactive_anon:3700kB active_file:26596kB inactive_file:50392kB unevictable:3536kB writepending:1408kB zspages:3980kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:43396kB local_pcp:6316kB free_cma:0kB [ 572.566265][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 572.568233][ T8929] Node 0 DMA: 148*4kB (UM) 11*8kB (UM) 5*16kB (UM) 6*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2040kB [ 572.574037][ T8929] Node 0 DMA32: 517*4kB (UMEH) 243*8kB (UMEH) 14*16kB (UME) 76*32kB (UME) 25*64kB (UMEH) 1*128kB (E) 6*256kB (UME) 4*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 16076kB [ 572.581010][ T8929] Node 1 DMA32: 1006*4kB (UME) 653*8kB (UME) 330*16kB (UE) 387*32kB (UME) 160*64kB (UME) 91*128kB (UME) 115*256kB (UME) 48*512kB (UM) 29*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 146848kB [ 572.588292][ T8929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.592332][ T8929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 572.596166][ T8929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.599945][ T8929] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 572.603748][ T8929] 22449 total pagecache pages [ 572.605662][ T8929] 514 pages in swap cache [ 572.607500][ T8929] Free swap = 108128kB [ 572.609213][ T8929] Total swap = 124996kB [ 572.611150][ T8929] 524155 pages RAM [ 572.612790][ T8929] 0 pages HighMem/MovableOnly [ 572.614917][ T8929] 211474 pages reserved [ 572.617211][ T8929] 0 pages cma reserved [ 572.799199][ T8951] [U] [ 572.800527][ T8951] [U] [ 572.801725][ T8951] [U] [ 572.802919][ T8951] [U] [ 572.804158][ T8951] [U] [ 572.805472][ T8951] [U] [ 572.806696][ T8951] [U] [ 572.807888][ T8951] [U] [ 572.810081][ T8951] [U] [ 572.811327][ T8951] [U] [ 572.812547][ T8951] [U] [ 572.813790][ T8951] [U] [ 572.814988][ T8951] [U] [ 572.816205][ T8951] [U] [ 572.817392][ T8951] [U] [ 572.818580][ T8951] [U] [ 572.820101][ T8951] [U] [ 572.821353][ T8951] [U] [ 572.822536][ T8951] [U] [ 572.823768][ T8951] [U] [ 572.824965][ T8951] [U] [ 572.826165][ T8951] [U] [ 572.827363][ T8951] [U] [ 572.828568][ T8951] [U] [ 572.830480][ T8951] [U] [ 572.831741][ T8951] [U] [ 572.832943][ T8951] [U] [ 572.834209][ T8951] [U] [ 572.835409][ T8951] [U] [ 572.836611][ T8951] [U] [ 572.837807][ T8951] [U] [ 572.838999][ T8951] [U] [ 572.840903][ T8951] [U] [ 572.842113][ T8951] [U] [ 572.843317][ T8951] [U] [ 572.844477][ T8951] [U] [ 572.845609][ T8951] [U] [ 572.846800][ T8951] [U] [ 572.848012][ T8951] [U] [ 572.849194][ T8951] [U] [ 572.850547][ T8951] [U] [ 572.851760][ T8951] [U] [ 572.852906][ T8951] [U] [ 572.854089][ T8951] [U] [ 572.855278][ T8951] [U] [ 572.856513][ T8951] [U] [ 572.857831][ T8951] [U] [ 572.859023][ T8951] [U] [ 572.861215][ T8951] [U] [ 572.862427][ T8951] [U] [ 572.863641][ T8951] [U] [ 572.864835][ T8951] [U] [ 572.866027][ T8951] [U] [ 572.867232][ T8951] [U] [ 572.868451][ T8951] [U] [ 572.869642][ T8951] [U] [ 572.871143][ T8951] [U] [ 572.872340][ T8951] [U] [ 572.873538][ T8951] [U] [ 572.874733][ T8951] [U] [ 572.875915][ T8951] [U] [ 572.877128][ T8951] [U] [ 572.878322][ T8951] [U] [ 572.879526][ T8951] [U] [ 572.880790][ T8951] [U] [ 572.882008][ T8951] [U] [ 572.883207][ T8951] [U] [ 572.884418][ T8951] [U] [ 572.885608][ T8951] [U] [ 572.886800][ T8951] [U] [ 572.888003][ T8951] [U] [ 572.889194][ T8951] [U] [ 572.892929][ T8951] [U] [ 572.894275][ T8951] [U] [ 572.895464][ T8951] [U] [ 572.896660][ T8951] [U] [ 572.897843][ T8951] [U] [ 572.899029][ T8951] [U] [ 572.900233][ T8951] [U] [ 572.901436][ T8951] [U] [ 572.903010][ T8951] [U] [ 572.904251][ T8951] [U] [ 572.905453][ T8951] [U] [ 572.906629][ T8951] [U] [ 572.907827][ T8951] [U] [ 572.909003][ T8951] [U] [ 572.910189][ T8951] [U] [ 572.911380][ T8951] [U] [ 572.912691][ T8951] [U] [ 572.913909][ T8951] [U] [ 572.915096][ T8951] [U] [ 572.916300][ T8951] [U] [ 572.917478][ T8951] [U] [ 572.918661][ T8951] [U] [ 572.919854][ T8951] [U] [ 572.921047][ T8951] [U] [ 572.922460][ T8951] [U] [ 572.923697][ T8951] [U] [ 572.924888][ T8951] [U] [ 572.926077][ T8951] [U] [ 572.927265][ T8951] [U] [ 572.928460][ T8951] [U] [ 572.929643][ T8951] [U] [ 572.930814][ T8951] [U] [ 572.932197][ T8951] [U] [ 572.933431][ T8951] [U] [ 572.934616][ T8951] [U] [ 572.935813][ T8951] [U] [ 572.936993][ T8951] [U] [ 572.938180][ T8951] [U] [ 572.939363][ T8951] [U] [ 572.940564][ T8951] [U] [ 572.942327][ T8951] [U] [ 572.943546][ T8951] [U] [ 572.944737][ T8951] [U] [ 572.945912][ T8951] [U] [ 572.947090][ T8951] [U] [ 572.948282][ T8951] [U] [ 572.949461][ T8951] [U] [ 572.950641][ T8951] [U] [ 572.952133][ T8951] [U] [ 572.953355][ T8951] [U] [ 572.954525][ T8951] [U] [ 572.955710][ T8951] [U] [ 572.956887][ T8951] [U] [ 572.958061][ T8951] [U] [ 572.959228][ T8951] [U] [ 572.993200][ T8950] [U] [ 573.511131][ T5838] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 573.682976][ T5838] usb 11-1: unable to get BOS descriptor or descriptor too short [ 573.686158][ T5838] usb 11-1: no configurations [ 573.688113][ T5838] usb 11-1: can't read configurations, error -22 [ 573.734654][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16284'. [ 573.930965][ T40] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 574.082521][ T40] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 574.087331][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.100244][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.103089][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16289'. [ 574.110186][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.117438][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.123389][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.128054][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.132477][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.136675][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.141671][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.145605][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.152285][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.157176][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.166211][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.170311][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.176141][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.180538][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.188410][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.193581][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.197795][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.202168][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.206914][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.211768][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.215861][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.220604][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.226369][ T40] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 574.230307][ T40] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 574.236700][ T40] usb 6-1: Product: syz [ 574.238587][ T40] usb 6-1: Manufacturer: syz [ 574.241120][ T40] usb 6-1: SerialNumber: syz [ 574.245947][ T40] usb 6-1: config 0 descriptor?? [ 574.277769][ T40] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 574.465834][T30289] usb 6-1: USB disconnect, device number 40 [ 574.470996][ T9001] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 574.475321][T30289] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 575.637561][ T9126] PID 9126 killed due to inadequate hugepage pool [ 575.647537][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16342'. [ 575.651516][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16342'. [ 575.792196][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16347'. [ 575.837413][ T9146] netlink: 'syz.6.16348': attribute type 32 has an invalid length. [ 575.841030][ T9146] netlink: 220 bytes leftover after parsing attributes in process `syz.6.16348'. [ 575.844899][ T9146] netlink: 'syz.6.16348': attribute type 32 has an invalid length. [ 575.848205][ T9146] netlink: 220 bytes leftover after parsing attributes in process `syz.6.16348'. [ 578.607475][ T9243] : renamed from vlan0 [ 578.824369][ T9255] netlink: 'syz.2.16394': attribute type 1 has an invalid length. [ 578.901200][ T3283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 579.010397][ T5748] kernel write not supported for file /uinput (pid: 5748 comm: kworker/3:3) [ 579.127733][ T5838] Process accounting resumed [ 579.432528][ T9296] netlink: 'syz.1.16414': attribute type 4 has an invalid length. [ 579.435906][ T9296] netlink: 240 bytes leftover after parsing attributes in process `syz.1.16414'. [ 579.534271][ T9305] loop7: detected capacity change from 0 to 7 [ 579.548584][ C3] blk_print_req_error: 11 callbacks suppressed [ 579.548604][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.555117][ C3] buffer_io_error: 10 callbacks suppressed [ 579.555131][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.564191][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.568188][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.572720][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.576574][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.579870][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.583572][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.587040][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.590858][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.594386][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.598428][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.603680][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.607658][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.611095][ T9305] ldm_validate_partition_table(): Disk read failed. [ 579.613436][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.616720][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.619786][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.623010][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.625755][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.629005][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.632515][ T9305] Dev loop7: unable to read RDB block 0 [ 579.636969][ T9305] loop7: unable to read partition table [ 579.640970][ T9305] loop7: partition table beyond EOD, truncated [ 579.643264][ T9305] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 579.661994][ T9309] ldm_validate_partition_table(): Disk read failed. [ 579.664564][ T9309] Dev loop7: unable to read RDB block 0 [ 579.666616][ T9309] loop7: unable to read partition table [ 579.668582][ T9309] loop7: partition table beyond EOD, truncated [ 579.828395][ T9205] NFSD: Failed to start, no listeners configured. [ 581.622867][ T9362] misc userio: Can't change port type on an already running userio instance [ 582.538334][ T9409] batman_adv: batadv0: Adding interface: vlan2 [ 582.540707][ T9409] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.550944][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.555636][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.559760][ T9409] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 582.585479][ T3283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 583.500903][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16497'. [ 583.512326][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16497'. [ 583.749719][ T9506] Failed to get privilege flags for destination (handle=0x2:0x0) [ 583.766110][ T9508] netlink: 120 bytes leftover after parsing attributes in process `syz.5.16511'. [ 584.361945][ T9552] fuse: Invalid rootmode [ 584.463605][ T40] kernel write not supported for file /bluetooth/6lowpan_control (pid: 40 comm: kworker/2:1) [ 584.524194][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16534'. [ 584.684566][ T9570] dummy0: entered promiscuous mode [ 584.687330][ T9569] dummy0: left promiscuous mode [ 585.219526][ T9621] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 585.222279][ T9621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.226267][ T9621] vhci_hcd vhci_hcd.0: Device attached [ 585.241711][ T9621] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 585.244456][ T9621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.247768][ T9621] vhci_hcd vhci_hcd.0: Device attached [ 585.253159][ T9621] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 585.255831][ T9621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.258964][ T9621] vhci_hcd vhci_hcd.0: Device attached [ 585.263735][ T9621] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 585.266426][ T9621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.271754][ T9621] vhci_hcd vhci_hcd.0: Device attached [ 585.284545][ T9630] vhci_hcd: connection closed [ 585.284827][ T9628] vhci_hcd: connection closed [ 585.285144][T30815] vhci_hcd vhci_hcd.2: stop threads [ 585.285254][ T9622] vhci_hcd: connection closed [ 585.287021][ T9624] vhci_hcd: connection closed [ 585.292690][T30815] vhci_hcd vhci_hcd.2: release socket [ 585.301136][T30815] vhci_hcd vhci_hcd.2: disconnect device [ 585.305728][T30815] vhci_hcd vhci_hcd.2: stop threads [ 585.307376][T30815] vhci_hcd vhci_hcd.2: release socket [ 585.310874][T30815] vhci_hcd vhci_hcd.2: disconnect device [ 585.315535][T30815] vhci_hcd vhci_hcd.2: stop threads [ 585.319437][T30815] vhci_hcd vhci_hcd.2: release socket [ 585.323288][T30815] vhci_hcd vhci_hcd.2: disconnect device [ 585.329784][T30815] vhci_hcd vhci_hcd.2: stop threads [ 585.331665][T30815] vhci_hcd vhci_hcd.2: release socket [ 585.336284][T30815] vhci_hcd vhci_hcd.2: disconnect device [ 585.340914][ T860] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 585.478544][ T9643] (syz.5.16567,9643,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 585.493345][ T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.501208][ T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.505370][ T860] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.511754][ T860] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.516537][ T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.528229][ T860] usb 6-1: config 0 descriptor?? [ 585.956984][ T860] hid_parser_main: 6 callbacks suppressed [ 585.957002][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.962135][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.964309][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.966610][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.968972][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.971419][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.973590][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.976823][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.979564][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 585.982559][ T860] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 586.010226][ T860] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 586.022359][ T40] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 586.163653][ T9676] netlink: 'syz.5.16582': attribute type 3 has an invalid length. [ 586.197116][ T40] usb 11-1: config 0 has no interfaces? [ 586.208275][ T40] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 586.212121][ T40] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.217977][ T40] usb 11-1: config 0 descriptor?? [ 586.231954][ T860] usb 6-1: USB disconnect, device number 41 [ 586.283675][ T9686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.286868][ T9686] bond0: (slave bond1): Enslaving as an active interface with a down link [ 586.425996][ T40] usb 11-1: USB disconnect, device number 10 [ 586.522295][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16591'. [ 586.574470][ T9705] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 586.627215][ T5748] kernel write not supported for file /sequencer (pid: 5748 comm: kworker/3:3) [ 586.894784][ T4256] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 587.640330][ T9769] netlink: 27 bytes leftover after parsing attributes in process `syz.1.16621'. [ 587.775099][ T9777] loop5: detected capacity change from 0 to 7 [ 587.788097][ T9777] Dev loop5: unable to read RDB block 7 [ 587.790588][ T9777] loop5: unable to read partition table [ 587.793727][ T9777] loop5: partition table beyond EOD, truncated [ 587.796456][ T9777] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 588.177895][ T9794] tipc: New replicast peer: 172.30.0.6 [ 588.180672][ T9794] tipc: Enabled bearer , priority 4 [ 588.189352][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16633'. [ 588.193498][ T9794] tipc: Disabling bearer [ 588.212291][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16635'. [ 588.585790][ T3283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 589.220090][ T9824] block nbd0: Unsupported socket: should be TCP or UNIX. [ 589.650474][ T9851] binder: 9849:9851 ioctl c018620c 80000140 returned -1 [ 589.690307][ T65] block nbd0: Receive control failed (result -32) [ 590.342065][ T4256] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 590.342468][ T3283] Bluetooth: hci5: command 0xfc11 tx timeout [ 590.703350][ T9868] team0: No ports can be present during mode change [ 590.799115][ T1478] kernel write not supported for file /sequencer (pid: 1478 comm: kworker/0:2) [ 590.864953][ T9879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.868607][ T9879] bond0: (slave bond1): Enslaving as an active interface with an up link [ 591.060001][ T9904] openvswitch: netlink: IP tunnel dst address not specified [ 591.063522][ T9904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.423718][ T9938] netlink: 'syz.6.16696': attribute type 3 has an invalid length. [ 591.760920][ T9972] nbd1: detected capacity change from 0 to 63 [ 591.768580][ T5685] udevd[5685]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 591.769992][ T65] block nbd1: Receive control failed (result -32) [ 591.896389][ T42] audit: type=1326 audit(2000000469.035:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.913912][ T42] audit: type=1326 audit(2000000469.035:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.925506][ T42] audit: type=1326 audit(2000000469.035:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.942090][ T42] audit: type=1326 audit(2000000469.035:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.952318][ T42] audit: type=1326 audit(2000000469.035:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.968854][ T42] audit: type=1326 audit(2000000469.035:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 591.993655][ T42] audit: type=1326 audit(2000000469.045:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 592.003107][ T42] audit: type=1326 audit(2000000469.045:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 592.012204][ T42] audit: type=1326 audit(2000000469.045:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 592.021384][ T42] audit: type=1326 audit(2000000469.045:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.16714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88fec code=0x7ffc0000 [ 592.206564][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16724'. [ 592.516631][T10020] netlink: 'syz.1.16733': attribute type 5 has an invalid length. [ 592.519782][T10020] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.16733'. [ 592.562189][T10022] kvm_intel: kvm [10021]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 593.464610][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16751'. [ 593.468506][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16751'. [ 593.959912][T10083] netlink: 100 bytes leftover after parsing attributes in process `syz.5.16756'. [ 594.345030][T10105] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 596.421175][ T3283] Bluetooth: hci3: command 0x1003 tx timeout [ 596.431876][ T4256] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 596.552747][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16810'. [ 596.616117][T10206] blkio.reset_stats is deprecated [ 596.661913][ T3283] Bluetooth: hci3: sending frame failed (-49) [ 596.666554][ T4256] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 596.899319][T10237] binder: BINDER_SET_CONTEXT_MGR already set [ 596.905967][T10237] binder: 10235:10237 ioctl 4018620d 80004a80 returned -16 [ 597.040038][ T4256] Bluetooth: hci1: Malformed LE Event: 0x1b [ 597.420936][ T860] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 597.582986][ T860] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 597.586229][ T860] usb 10-1: config 0 interface 0 has no altsetting 0 [ 597.590105][ T860] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 597.593382][ T860] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 597.596169][ T860] usb 10-1: Product: syz [ 597.597686][ T860] usb 10-1: Manufacturer: syz [ 597.599669][ T860] usb 10-1: SerialNumber: syz [ 597.604408][ T860] usb 10-1: config 0 descriptor?? [ 597.609896][ T860] usb 10-1: selecting invalid altsetting 0 [ 597.812421][ T24] usb 10-1: USB disconnect, device number 25 [ 597.935445][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16865'. [ 598.393453][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16872'. [ 598.576863][ T1346] kernel write not supported for file /uinput (pid: 1346 comm: kworker/2:2) [ 599.401722][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16892'. [ 599.431197][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16892'. [ 599.908156][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16906'. [ 599.912328][T10413] netlink: 'syz.2.16906': attribute type 30 has an invalid length. [ 599.933230][T30815] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.939940][T30815] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.947791][T30815] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.954378][T30815] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.958009][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16906'. [ 599.962105][T10413] netlink: 'syz.2.16906': attribute type 30 has an invalid length. [ 599.968415][ T1346] kernel write not supported for file /sg0 (pid: 1346 comm: kworker/2:2) [ 600.150692][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16916'. [ 600.452910][T10467] netlink: 'syz.5.16932': attribute type 5 has an invalid length. [ 600.629708][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16937'. [ 600.698803][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16941'. [ 600.707211][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16941'. [ 600.834211][ T4256] Bluetooth: hci4: unexpected event for opcode 0x200a [ 602.709234][T10602] geneve4: entered promiscuous mode [ 602.836226][T10614] loop4: detected capacity change from 0 to 524287936 [ 602.957574][T10623] sctp: [Deprecated]: syz.5.16996 (pid 10623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.957574][T10623] Use struct sctp_sack_info instead [ 603.297758][ T860] hid_parser_main: 28 callbacks suppressed [ 603.297773][ T860] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 603.324561][ T860] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 603.552922][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 603.737081][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17013'. [ 603.859702][T10672] netlink: 52 bytes leftover after parsing attributes in process `syz.6.17017'. [ 604.012850][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.077868][T10682] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 604.096638][T10684] overlayfs: missing 'workdir' [ 604.234672][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17028'. [ 604.239548][T10700] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17028'. [ 604.327221][T10712] netlink: 'syz.2.17034': attribute type 3 has an invalid length. [ 604.330950][T10712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17034'. [ 604.383394][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17038'. [ 604.390115][T10719] veth0_macvtap: left promiscuous mode [ 604.396991][ T42] audit: type=1400 audit(2000000481.535:10474): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F [ 604.523315][T10732] kvm: kvm [10731]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 604.561702][ T42] audit: type=1326 audit(2000000481.705:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10737 comm="syz.6.17047" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f73fec code=0x0 [ 604.687692][T10750] netlink: 'syz.5.17052': attribute type 14 has an invalid length. [ 606.701760][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17097'. [ 606.954303][T10868] input: syz0 as /devices/virtual/input/input74 [ 607.631403][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17130'. [ 608.263226][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 608.422869][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 608.433100][ T24] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 618.542060][T11022] batman_adv: batadv0: Interface deactivated: macvlan2 [ 618.911963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.388575][T11022] batadv_slave_1: left allmulticast mode [ 619.409635][T30814] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.417948][T30814] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 43662 - 0 [ 619.423525][T30814] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.432603][T30814] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 43662 - 0 [ 619.502364][T30814] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.505244][T30814] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 43662 - 0 [ 619.580340][T30814] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.587176][T30814] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 43662 - 0 [ 619.654027][T11039] macvlan0: entered promiscuous mode [ 619.656732][T11039] netlink: 'syz.2.17163': attribute type 2 has an invalid length. [ 619.820960][T11050] netlink: 'syz.5.17167': attribute type 3 has an invalid length. [ 619.900066][ T5451] veth0_macvtap: left promiscuous mode [ 620.229009][T11091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17179'. [ 620.524356][T11109] block device autoloading is deprecated and will be removed. [ 620.918507][T11145] loop9: detected capacity change from 0 to 7 [ 620.928797][T11145] Dev loop9: unable to read RDB block 7 [ 620.930377][T11145] loop9: unable to read partition table [ 620.934174][T11145] loop9: partition table beyond EOD, truncated [ 620.936062][T11145] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 621.240400][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17217'. [ 621.286901][T11178] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17218'. [ 621.290964][T11178] netlink: 'syz.1.17218': attribute type 2 has an invalid length. [ 621.293665][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17218'. [ 621.567526][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17228'. [ 621.716592][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17232'. [ 621.748272][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17232'. [ 621.865777][T11218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.870544][T11218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.876797][T11218] bond0 (unregistering): (slave bond1): Releasing backup interface [ 621.880923][T11218] bond0 (unregistering): Released all slaves [ 621.892318][ T42] audit: type=1326 audit(2000000500.041:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.901143][ T42] audit: type=1326 audit(2000000500.041:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.909919][ T42] audit: type=1326 audit(2000000500.041:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.920722][ T42] audit: type=1326 audit(2000000500.041:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.931117][ T42] audit: type=1326 audit(2000000500.041:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.946604][ T42] audit: type=1326 audit(2000000500.041:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.953587][ T42] audit: type=1326 audit(2000000500.041:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f74008 code=0x7ffc0000 [ 621.960528][ T42] audit: type=1326 audit(2000000500.041:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f74008 code=0x7ffc0000 [ 621.968048][ T42] audit: type=1326 audit(2000000500.041:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 621.976265][ T42] audit: type=1326 audit(2000000500.041:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.6.17237" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f74008 code=0x7ffc0000 [ 622.208384][T11235] pimreg: tun_chr_ioctl cmd 1074025684 [ 623.616742][ T9] kernel read not supported for file /swradio3 (pid: 9 comm: kworker/0:0) [ 623.661789][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17277'. [ 623.799052][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17280'. [ 624.088606][T11352] GUP no longer grows the stack in syz.1.17297 (11352): 80009000-8000a000 (80005000) [ 624.093131][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.1.17297 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.093152][T11352] Tainted: [L]=SOFTLOCKUP [ 624.093157][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 624.093165][T11352] Call Trace: [ 624.093170][T11352] [ 624.093176][T11352] dump_stack_lvl+0x100/0x190 [ 624.093407][T11352] gup_vma_lookup.cold+0x83/0x96 [ 624.093484][T11352] __get_user_pages+0x241/0x32a0 [ 624.093558][T11352] ? down_read_killable+0x35e/0x520 [ 624.093595][T11352] ? __pfx___get_user_pages+0x10/0x10 [ 624.093616][T11352] __gup_longterm_locked+0x87d/0x16f0 [ 624.093631][T11352] ? do_raw_spin_lock+0x128/0x260 [ 624.093695][T11352] ? __pfx___gup_longterm_locked+0x10/0x10 [ 624.093710][T11352] ? lock_acquire+0x1b9/0x370 [ 624.093733][T11352] gup_fast_fallback+0x16dc/0x2790 [ 624.093760][T11352] ? __pfx_gup_fast_fallback+0x10/0x10 [ 624.093777][T11352] ? __lock_acquire+0x49f/0x1a40 [ 624.093793][T11352] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 624.093833][T11352] get_user_pages_fast+0xa7/0xf0 [ 624.093850][T11352] ? __pfx_get_user_pages_fast+0x10/0x10 [ 624.093867][T11352] ? iov_iter_advance+0xac/0x6d0 [ 624.094000][T11352] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 624.094020][T11352] ? pipe_lock+0x69/0x80 [ 624.094058][T11352] ? __resched_curr+0x42e/0x500 [ 624.094076][T11352] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 624.094094][T11352] ? __pfx___mutex_lock+0x10/0x10 [ 624.094114][T11352] ? iovec_from_user+0xda/0x140 [ 624.094135][T11352] iov_iter_get_pages2+0xa3/0x100 [ 624.094150][T11352] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 624.094166][T11352] ? wait_for_space+0x2ca/0x3b0 [ 624.094204][T11352] __do_sys_vmsplice+0x7dd/0x13c0 [ 624.094230][T11352] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 624.094249][T11352] ? futex_private_hash_put+0x115/0x1c0 [ 624.094335][T11352] ? __do_fast_syscall_32+0xe7/0x970 [ 624.094347][T11352] __do_fast_syscall_32+0xe7/0x970 [ 624.094362][T11352] do_fast_syscall_32+0x32/0x70 [ 624.094374][T11352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.094392][T11352] RIP: 0023:0xf709efec [ 624.094411][T11352] Code: Unable to access opcode bytes at 0xf709efc2. [ 624.094439][T11352] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 624.094459][T11352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 624.094472][T11352] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.094484][T11352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.094495][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.094508][T11352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.094534][T11352] [ 624.369089][T11369] ptrace attach of "/syz-executor exec"[2761] was attempted by "/syz-executor exec"[11369] [ 625.440905][ T1346] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 625.591736][ T1346] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 625.595265][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.598275][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.601864][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.605022][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.607962][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.611542][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.614689][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.617567][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.622288][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.628891][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.632506][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.635954][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.638960][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.642106][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.645743][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.648953][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.651968][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.655398][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.658597][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.661619][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.665067][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.670046][ T1346] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 625.675155][ T1346] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 625.679106][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.683324][ T1346] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 625.686235][ T1346] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 625.688986][ T1346] usb 6-1: Product: syz [ 625.690429][ T1346] usb 6-1: Manufacturer: syz [ 625.691975][ T1346] usb 6-1: SerialNumber: syz [ 625.698984][ T1346] usb 6-1: config 0 descriptor?? [ 625.705072][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17346'. [ 625.708417][ T1346] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 625.914788][ T5748] usb 6-1: USB disconnect, device number 42 [ 625.925259][ T5748] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 626.211039][ T1346] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 626.364707][ T1346] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 626.368899][ T1346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.372578][ T1346] usb 10-1: Product: syz [ 626.374478][ T1346] usb 10-1: Manufacturer: syz [ 626.376611][ T1346] usb 10-1: SerialNumber: syz [ 626.563234][T11511] pimreg: entered allmulticast mode [ 626.569731][T11511] pimreg: left allmulticast mode [ 626.624347][ T1346] rtl8150 10-1:1.0: couldn't reset the device [ 626.626655][ T1346] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 626.635052][ T1346] usb 10-1: USB disconnect, device number 26 [ 626.791164][T11525] netlink: 'syz.2.17374': attribute type 9 has an invalid length. [ 627.247782][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17380'. [ 627.590457][T10702] kernel write not supported for file /uinput (pid: 10702 comm: kworker/1:5) [ 627.870939][ T9] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 628.023305][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 628.026632][ T9] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 628.029674][ T9] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 628.033664][ T9] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 628.037262][ T9] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 628.042049][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 628.046071][ T9] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 628.049574][ T9] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 628.053168][ T9] usb 11-1: Product: syz [ 628.054840][ T9] usb 11-1: Manufacturer: syz [ 628.056534][ T9] usb 11-1: SerialNumber: syz [ 628.061669][ T9] usb 11-1: config 0 descriptor?? [ 628.065320][ T9] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 628.069740][ T9] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 628.113429][T11584] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.17402'. [ 628.322917][T11557] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 628.323006][ C1] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 628.323009][ T5748] usb 11-1: USB disconnect, device number 11 [ 628.339206][ T5748] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 628.657644][T11634] netlink: 'syz.2.17424': attribute type 4 has an invalid length. [ 628.820306][T11639] bond2: entered promiscuous mode [ 629.025933][ T42] kauditd_printk_skb: 305 callbacks suppressed [ 629.025945][ T42] audit: type=1326 audit(2000000507.171:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.1.17434" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 629.661002][ T1478] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 629.810907][ T1478] usb 11-1: Using ep0 maxpacket: 8 [ 629.815194][ T1478] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 629.818633][ T1478] usb 11-1: config 0 has no interface number 0 [ 629.821688][ T1478] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.825645][ T1478] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 629.829461][ T1478] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 629.834317][ T1478] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 629.838724][ T1478] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.846070][ T1478] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 629.849838][ T1478] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.853506][ T1478] usb 11-1: Product: syz [ 629.855310][ T1478] usb 11-1: Manufacturer: syz [ 629.857207][ T1478] usb 11-1: SerialNumber: syz [ 629.861793][ T1478] usb 11-1: config 0 descriptor?? [ 630.017115][T11700] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 630.075214][ T1478] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 630.293194][ T1478] usb 11-1: USB disconnect, device number 12 [ 632.100951][ T4256] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 632.279168][ T5748] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 632.287911][ T5748] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 632.341932][ T5748] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz0] on syz0 [ 632.411523][T11750] can0: slcan on ttyS3. [ 632.412761][T11748] fido_id[11748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 632.511125][T11750] can0 (unregistered): slcan off ttyS3. [ 632.814306][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17485'. [ 632.959233][T11809] input: syz0 as /devices/virtual/input/input75 [ 633.250890][ T3008] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 633.274439][T11830] ata1.00: invalid multi_count 1 ignored [ 633.400932][ T3008] usb 6-1: Using ep0 maxpacket: 32 [ 633.406255][ T3008] usb 6-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 633.409497][ T3008] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.414154][ T3008] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 633.417088][ T3008] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 633.419667][ T3008] usb 6-1: Product: syz [ 633.421360][ T3008] usb 6-1: Manufacturer: syz [ 633.422918][ T3008] usb 6-1: SerialNumber: syz [ 633.428502][ T3008] usb 6-1: config 0 descriptor?? [ 633.653491][ T40] usb 6-1: USB disconnect, device number 43 [ 634.000324][T11870] sch_fq: defrate 0 ignored. [ 634.090035][T11875] input: syz0 as /devices/virtual/input/input76 [ 634.150957][ T58] kernel read not supported for file /dsp1 (pid: 58 comm: kworker/3:1) [ 634.178595][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17525'. [ 634.185483][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17525'. [ 634.241921][T11887] can0: slcan on ptm0. [ 634.557784][T11915] pimreg: tun_chr_ioctl cmd 2147767507 [ 634.570693][T11916] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 634.617851][ C3] ata1: illegal qc_active transition (00000000->00002000) [ 634.823394][ T42] audit: type=1800 audit(2000000512.971:10792): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17544" name="cgroup.controllers" dev="tmpfs" ino=6740 res=0 errno=0 [ 634.941373][ T1133] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 634.948471][ T1133] ata1.00: configured for UDMA/100 [ 635.182410][T11886] can0 (unregistered): slcan off ptm0. [ 636.060576][T12025] nbd: nbd1 already in use [ 636.586705][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17589'. [ 636.590567][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17589'. [ 636.805140][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17602'. [ 636.810312][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17602'. [ 636.815197][T12073] netlink: 'syz.1.17602': attribute type 18 has an invalid length. [ 636.817952][T12073] netlink: 'syz.1.17602': attribute type 15 has an invalid length. [ 637.214057][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17617'. [ 637.346662][T12116] netlink: 'syz.6.17622': attribute type 12 has an invalid length. [ 637.350410][T12116] netlink: 'syz.6.17622': attribute type 29 has an invalid length. [ 637.356874][T12116] netlink: 148 bytes leftover after parsing attributes in process `syz.6.17622'. [ 637.361466][T12116] netlink: 'syz.6.17622': attribute type 3 has an invalid length. [ 637.364965][T12116] netlink: 'syz.6.17622': attribute type 2 has an invalid length. [ 637.371572][T12116] netlink: 35 bytes leftover after parsing attributes in process `syz.6.17622'. [ 637.435065][T12122] pimreg: tun_chr_ioctl cmd 2147767507 [ 637.473388][T12130] ip6erspan0: entered allmulticast mode [ 638.441374][ T42] audit: type=1800 audit(2000000516.591:10793): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17656" name="cgroup.controllers" dev="tmpfs" ino=5412 res=0 errno=0 [ 638.517992][T12207] __nla_validate_parse: 2 callbacks suppressed [ 638.518007][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17661'. [ 638.532947][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17661'. [ 638.961558][ T3008] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 638.963823][ T3008] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 638.963863][T12224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17667'. [ 638.971894][ T3008] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz0 [ 638.972141][T12224] netlink: 'syz.2.17667': attribute type 12 has an invalid length. [ 638.977296][T12224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17667'. [ 639.076797][T12226] fido_id[12226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 639.547144][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 639.549802][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 639.562105][ T58] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz0 [ 639.841898][T12271] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 639.864854][T12273] netlink: 7 bytes leftover after parsing attributes in process `syz.5.17687'. [ 639.883822][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17688'. [ 640.011239][ T860] kernel read not supported for file /dsp1 (pid: 860 comm: kworker/1:2) [ 640.022683][ T42] audit: type=1326 audit(2000000518.171:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.036768][ T42] audit: type=1326 audit(2000000518.181:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.052607][ T42] audit: type=1326 audit(2000000518.181:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.061641][ T42] audit: type=1326 audit(2000000518.211:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.069539][ T42] audit: type=1326 audit(2000000518.211:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.076458][ T42] audit: type=1326 audit(2000000518.211:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12286 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71771eb code=0x7ffc0000 [ 640.109953][ T42] audit: type=1326 audit(2000000518.251:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.118655][ T42] audit: type=1326 audit(2000000518.251:10801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.135457][ T42] audit: type=1326 audit(2000000518.251:10802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.144216][ T42] audit: type=1326 audit(2000000518.251:10803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.6.17693" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 640.227274][T12298] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 640.231269][T12298] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 640.356667][T12309] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 640.368699][T12309] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.372844][T12309] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 641.720941][ T5748] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 641.872477][ T5748] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 641.875480][ T5748] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 641.878877][ T5748] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 641.882189][ T5748] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 641.885801][ T5748] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 641.890187][ T5748] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 641.893095][ T5748] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 641.895458][ T5748] usb 11-1: Product: syz [ 641.897059][ T5748] usb 11-1: Manufacturer: syz [ 641.903312][ T5748] cdc_wdm 11-1:1.0: skipping garbage [ 641.905087][ T5748] cdc_wdm 11-1:1.0: skipping garbage [ 641.907793][ T5748] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 641.909872][ T5748] cdc_wdm 11-1:1.0: Unknown control protocol [ 642.110938][ T40] usb 11-1: USB disconnect, device number 13 [ 643.201014][ T860] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 643.350904][ T860] usb 6-1: Using ep0 maxpacket: 8 [ 643.355401][ T860] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 643.359011][ T860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 643.364139][ T860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 643.368300][ T860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.372564][ T860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.377886][ T860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 643.383278][ T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.431037][T10702] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 643.598044][ T860] usb 6-1: GET_CAPABILITIES returned 0 [ 643.600757][ T860] usbtmc 6-1:16.0: can't read capabilities [ 643.607855][T10702] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 643.618720][T10702] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 643.628479][T10702] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.634554][T10702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.643957][T12406] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 643.652129][T10702] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.810004][ T1346] usb 6-1: USB disconnect, device number 44 [ 643.877341][T10702] usb 10-1: USB disconnect, device number 27 [ 645.233998][T12486] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17783'. [ 645.297686][T12490] loop9: detected capacity change from 0 to 255852544 [ 645.351015][T12490] loop9: detected capacity change from 255852544 to 524287871 [ 645.549729][T12504] netlink: 'syz.5.17792': attribute type 23 has an invalid length. [ 645.602648][ T5748] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 645.762811][ T5748] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 645.766725][ T5748] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 645.769999][ T5748] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.775252][ T5748] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.779269][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 645.782288][ T5748] usb 6-1: Product: syz [ 645.783639][ T5748] usb 6-1: Manufacturer: syz [ 645.785212][ T5748] usb 6-1: SerialNumber: syz [ 645.792918][ T5748] usb 6-1: config 0 descriptor?? [ 645.797948][ T5748] usb 6-1: selecting invalid altsetting 0 [ 646.001025][ T5748] usb 6-1: USB disconnect, device number 45 [ 646.151246][T12526] dvmrp8: entered allmulticast mode [ 647.183365][T12595] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17832'. [ 647.240336][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17835'. [ 647.271553][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17837'. [ 647.971661][T12623] kvm: kvm [12619]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 648.481049][ T58] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 648.660928][ T58] usb 11-1: Using ep0 maxpacket: 8 [ 648.664381][ T58] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 648.667087][ T58] usb 11-1: config 179 has no interface number 0 [ 648.669157][ T58] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 648.672961][ T58] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 648.676562][ T58] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.680207][ T58] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 648.685088][ T58] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 648.692003][ T58] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 648.695717][ T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.702345][T12643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 648.934391][ T58] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input77 [ 649.113857][ C3] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 649.116547][ C3] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 649.119293][ T58] usb 11-1: USB disconnect, device number 14 [ 649.215283][T12699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17878'. [ 649.222825][T12699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17878'. [ 649.520252][T12714] netlink: 'syz.1.17886': attribute type 16 has an invalid length. [ 649.523303][T12714] netlink: 'syz.1.17886': attribute type 3 has an invalid length. [ 649.525799][T12714] netlink: 'syz.1.17886': attribute type 1 has an invalid length. [ 649.528393][T12714] netlink: 112 bytes leftover after parsing attributes in process `syz.1.17886'. [ 649.704319][T12733] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 649.710872][T12733] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 649.711839][T12737] loop5: detected capacity change from 0 to 7 [ 649.892154][T12737] Dev loop5: unable to read RDB block 7 [ 649.895373][T12737] loop5: unable to read partition table [ 649.898038][T12737] loop5: partition table beyond EOD, truncated [ 649.900222][T12737] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 649.908226][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 649.908279][ T42] audit: type=1326 audit(2000000528.051:10809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.921734][ T42] audit: type=1326 audit(2000000528.051:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.930286][ T42] audit: type=1326 audit(2000000528.051:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.937626][ T42] audit: type=1326 audit(2000000528.051:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.945786][ T42] audit: type=1326 audit(2000000528.051:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.953428][ T42] audit: type=1326 audit(2000000528.051:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.960265][ T42] audit: type=1326 audit(2000000528.051:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.967877][ T42] audit: type=1326 audit(2000000528.051:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.975230][ T42] audit: type=1326 audit(2000000528.051:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf709efec code=0x7ffc0000 [ 649.982878][ T42] audit: type=1326 audit(2000000528.051:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12742 comm="syz.1.17900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 650.137997][T12760] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 650.141203][T12760] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 650.499020][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17913'. [ 650.851062][T10702] kernel read not supported for file /dsp1 (pid: 10702 comm: kworker/1:5) [ 650.932869][T12777] tap0: tun_chr_ioctl cmd 1074025672 [ 650.934615][T12777] tap0: ignored: set checksum disabled [ 652.634678][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17936'. [ 653.111587][T12874] Invalid logical block size (4095) [ 653.164898][T12885] program syz.2.17962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.285066][T12902] netlink: 144 bytes leftover after parsing attributes in process `syz.1.17970'. [ 653.319389][T12904] C: renamed from veth1_to_team [ 653.324028][T12904] netlink: 'syz.5.17971': attribute type 4 has an invalid length. [ 653.326610][T12904] netlink: 116 bytes leftover after parsing attributes in process `syz.5.17971'. [ 653.338615][T12904] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 653.593417][T12937] loop4: detected capacity change from 0 to 7 [ 653.605360][ C1] blk_print_req_error: 26 callbacks suppressed [ 653.605378][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.610367][ C1] buffer_io_error: 25 callbacks suppressed [ 653.610378][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.615215][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.618274][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.624589][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.628310][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.632067][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.636165][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.639176][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.642724][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.646639][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.650051][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.653212][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.656163][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.659342][T12937] ldm_validate_partition_table(): Disk read failed. [ 653.665718][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.669335][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.676568][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.680563][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.686826][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.690858][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.694639][T12937] Dev loop4: unable to read RDB block 0 [ 653.701054][T12937] loop4: unable to read partition table [ 653.703174][T12937] loop4: partition table beyond EOD, truncated [ 653.712265][T12937] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 653.877943][T12961] netlink: 4852 bytes leftover after parsing attributes in process `syz.5.17993'. [ 653.880674][T12961] netlink: 4852 bytes leftover after parsing attributes in process `syz.5.17993'. [ 654.061956][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18000'. [ 654.112946][T12981] sctp: [Deprecated]: syz.5.18001 (pid 12981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.112946][T12981] Use struct sctp_sack_info instead [ 654.455947][T13014] netlink: 'syz.5.18017': attribute type 5 has an invalid length. [ 655.267429][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18043'. [ 655.271927][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18043'. [ 655.389629][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18050'. [ 655.944349][T13125] kvm: apic: phys broadcast and lowest prio [ 656.290280][T13148] Bluetooth: MGMT ver 1.23 [ 656.527398][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18084'. [ 656.546552][T13160] geneve0: entered promiscuous mode [ 656.784368][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18093'. [ 656.911606][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 657.172499][ T65] block nbd2: Receive control failed (result -32) [ 657.177423][ T9850] block nbd2: Receive control failed (result -32) [ 657.431512][ T3008] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 657.461876][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.541006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.580920][ T3008] usb 11-1: Using ep0 maxpacket: 8 [ 657.584643][ T3008] usb 11-1: config 0 has no interfaces? [ 657.589287][ T3008] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 657.593023][ T3008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.596110][ T3008] usb 11-1: Product: syz [ 657.597742][ T3008] usb 11-1: Manufacturer: syz [ 657.599428][ T3008] usb 11-1: SerialNumber: syz [ 657.605040][ T3008] usb 11-1: config 0 descriptor?? [ 657.814576][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18103'. [ 657.816762][T10702] usb 11-1: USB disconnect, device number 15 [ 657.821374][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18103'. [ 658.501553][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.581099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.591534][ T3969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.142953][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 659.541243][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.546581][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.549907][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.581957][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.621300][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.781757][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.581747][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.712689][ T1346] net_ratelimit: 3 callbacks suppressed [ 663.712704][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.870936][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.341764][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.751609][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.911277][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.631591][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.635098][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.791250][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.940950][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.831733][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.190028][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18127'. [ 668.502597][T13317] bond0: entered promiscuous mode [ 668.504329][T13317] bond_slave_0: entered promiscuous mode [ 668.506428][T13317] bond_slave_1: entered promiscuous mode [ 668.508585][T13317] bond1: entered promiscuous mode [ 668.513362][T13317] batadv0: entered promiscuous mode [ 668.516020][T13317] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 668.519282][T13317] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 668.526872][T13317] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 668.533417][T13317] bond0: left promiscuous mode [ 668.535263][T13317] bond_slave_0: left promiscuous mode [ 668.537691][T13317] bond_slave_1: left promiscuous mode [ 668.540112][T13317] bond1: left promiscuous mode [ 668.548002][T13317] batadv0: left promiscuous mode [ 668.822463][T13354] netlink: 68 bytes leftover after parsing attributes in process `syz.6.18157'. [ 668.826373][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18157'. [ 668.873610][T13359] netlink: 156 bytes leftover after parsing attributes in process `syz.6.18160'. [ 668.902013][ T1346] net_ratelimit: 5 callbacks suppressed [ 668.902027][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.937809][T13366] Invalid ELF header magic: != ELF [ 669.060931][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.471685][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.511211][T10702] kernel read not supported for file /dsp1 (pid: 10702 comm: kworker/1:5) [ 669.524323][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18174'. [ 669.567334][T13393] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 669.654387][T13399] loop9: detected capacity change from 0 to 7 [ 669.853051][ C2] blk_print_req_error: 5 callbacks suppressed [ 669.853069][ C2] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 669.859638][ C2] buffer_io_error: 10 callbacks suppressed [ 669.859655][ C2] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 669.941083][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.101332][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.279929][T13443] input: syz0 as /devices/virtual/input/input78 [ 670.419661][T13454] netlink: 'syz.5.18201': attribute type 4 has an invalid length. [ 670.422652][T13454] netlink: 'syz.5.18201': attribute type 8 has an invalid length. [ 670.425122][T13454] netlink: 212 bytes leftover after parsing attributes in process `syz.5.18201'. [ 670.645990][T13468] serio: Serial port ttynull [ 670.661797][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.667587][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.670371][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.673769][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.676545][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.868242][T13481] gfs2: path_lookup on  returned error -2 [ 671.260603][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18225'. [ 671.616766][ T4256] Bluetooth: hci2: link tx timeout [ 671.625472][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 671.660186][ T4256] Bluetooth: hci2: link tx timeout [ 671.664222][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 671.716485][ T4256] Bluetooth: hci2: link tx timeout [ 671.721867][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 671.939542][T13568] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 672.138753][ T4256] Bluetooth: hci2: link tx timeout [ 672.140571][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 672.273976][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18258'. [ 672.277020][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18258'. [ 672.320185][T13600] netlink: 200 bytes leftover after parsing attributes in process `syz.6.18259'. [ 672.380011][ T4256] Bluetooth: hci2: link tx timeout [ 672.382735][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 672.421792][ T4256] Bluetooth: hci2: link tx timeout [ 672.423979][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 672.836920][T13655] kvm: user requested TSC rate below hardware speed [ 673.082774][T13594] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 673.147756][ T4256] Bluetooth: hci2: link tx timeout [ 673.149477][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 673.201579][ T4256] Bluetooth: hci2: link tx timeout [ 673.203754][ T4256] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 673.523932][T13708] Process accounting resumed [ 673.700889][ T4256] Bluetooth: hci2: command 0x0405 tx timeout [ 673.731155][T13735] bridge0: port 2(syz_tun) entered blocking state [ 673.733894][T13735] bridge0: port 2(syz_tun) entered disabled state [ 673.738696][T13735] syz_tun: entered allmulticast mode [ 673.742700][T13735] syz_tun: entered promiscuous mode [ 674.080873][ T29] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 674.110951][ C1] net_ratelimit: 1830 callbacks suppressed [ 674.110996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.116168][ T3969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.252959][ T29] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.257399][ T29] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 674.261740][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 674.266626][ T29] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.270664][ T29] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.274181][ T29] usb 10-1: Product: syz [ 674.275980][ T29] usb 10-1: Manufacturer: syz [ 674.277968][ T29] usb 10-1: SerialNumber: syz [ 674.283364][ T29] usb 10-1: config 0 descriptor?? [ 674.289913][ T29] usb 10-1: selecting invalid altsetting 0 [ 674.497833][ T29] usb 10-1: USB disconnect, device number 28 [ 674.586381][ T3969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.936694][T13805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18343'. [ 674.939861][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18343'. [ 675.141158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.144490][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.147486][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.271181][ T5839] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 675.443798][ T5839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 675.451571][ T5839] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 675.455707][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 675.462925][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.467490][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 675.470897][ T5839] usb 6-1: SerialNumber: syz [ 675.475781][T13811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 675.482636][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18353'. [ 676.090523][T13811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 676.180935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.299655][ T5839] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 676.311103][ T5839] usb 6-1: USB disconnect, device number 46 [ 677.118718][T13920] netlink: 'syz.1.18395': attribute type 1 has an invalid length. [ 677.121608][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18395'. [ 677.211600][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18399'. [ 677.230898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.181694][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.185329][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.301012][ C1] net_ratelimit: 1 callbacks suppressed [ 679.301060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.670892][T10702] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 679.711351][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.715324][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.830900][T10702] usb 11-1: Using ep0 maxpacket: 8 [ 679.837853][T10702] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 679.842558][T10702] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.852995][T10702] pvrusb2: Hardware description: Terratec Grabster AV400 [ 679.856076][T10702] pvrusb2: ********** [ 679.857719][T10702] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 679.863113][T10702] pvrusb2: Important functionality might not be entirely working. [ 679.866399][T10702] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 679.871617][T10702] pvrusb2: ********** [ 680.059388][ T2513] pvrusb2: Invalid write control endpoint [ 680.113018][T14067] bad cache= option: nonenr_mlock 18 [ 680.113018][T14067] nr_zspages 1310 [ 680.113018][T14067] nr_free_cma 0 [ 680.113018][T14067] numa_hit 594514 [ 680.113018][T14067] numa_miss 6947007 [ 680.113018][T14067] numa_foreign 6947007 [ 680.113018][T14067] numa_interleave 19276 [ 680.113018][T14067] numa_local 578066 [ 680.113018][T14067] numa_other 6963455 [ 680.113018][T14067] nr_inactive_anon 1067 [ 680.113018][T14067] nr_active_anon 5461 [ 680.113018][T14067] nr_inactive_file 16063 [ 680.113018][T14067] nr_active_file 6152 [ 680.113018][T14067] nr_unevictable 1786 [ 680.113018][T14067] nr_slab_reclaimable 6887 [ 680.113018][T14067] nr_slab_unreclaimable 85171 [ 680.113018][T14067] nr_isolated_anon 0 [ 680.113018][T14067] nr_isolated_file 0 [ 680.113018][T14067] workingset_nodes 173 [ 680.113018][T14067] workingset_refault_anon 25450 [ 680.113018][T14067] workingset_refault_file 20669 [ 680.113018][T14067] workingset_activate_anon 164 [ 680.113018][T14067] workingset_activate_file 2637 [ 680.113018][T14067] workingset_restore_anon 171 [ 680.113018][T14067] workingset_restore_file 2705 [ 680.113018][T14067] workingset_nodereclaim 539 [ 680.113018][T14067] nr_anon_pages 3439 [ 680.113018][T14067] nr_mapped 25832 [ 680.113018][T14067] nr_file_pages 27457 [ 680.113018][T14067] nr_dirty 530 [ 680.113018][T14067] nr_writeback 0 [ 680.113018][T14067] nr_shmem 4646 [ 680.113018][T14067] nr_shmem_hugepages 0 [ 680.113018][T14067] nr_shmem_pmdmapped 0 [ 680.113018][T14067] nr_file_hugepages 0 [ 680.113018][T14067] nr_file_pmdmapped 0 [ 680.113018][T14067] nr_anon_transparent_hugepages 0 [ 680.113018][T14067] nr_vmscan_write 60830 [ 680.113018][T14067] nr_vmscan_immediate_reclaim 54 [ 680.113018][T14067] nr_dirtied 36965 [ 680.113018][T14067] nr_written 36435 [ 680.113018][T14067] nr_throttled_written 0 [ 680.113018][T14067] nr_kernel_misc_reclaimable 0 [ 680.113018][T14067] nr_foll_pin_acquired 21217 [ 680.113018][T14067] nr_foll_pin_released 21217 [ 680.113526][T14067] CIFS: VFS: bad cache= option: nonenr_mlock 18 [ 680.113526][T14067] nr_zspages 1310 [ 680.113526][T14067] nr_free_cma 0 [ 680.113526][T14067] numa_hit 594514 [ 680.113526][T14067] numa_miss 6947007 [ 680.113526][T14067] numa_foreign 6947007 [ 680.113526][T14067] numa_interleave 19276 [ 680.113526][T14067] numa_local 578066 [ 680.113526][T14067] numa_other 6963455 [ 680.113526][T14067] nr_inactive_anon 1067 [ 680.113526][T14067] nr_active_anon 5461 [ 680.113526][T14067] nr_inactive_file 16063 [ 680.113526][T14067] nr_active_file 6152 [ 680.113526][T14067] nr_unevictable 1786 [ 680.113526][T14067] nr_slab_reclaimable 6887 [ 680.113526][T14067] nr_slab_unreclaimable 85171 [ 680.113526][T14067] nr_isolated_anon 0 [ 680.113526][T14067] nr_isolated_file 0 [ 680.113526][T14067] workingset_nodes 173 [ 680.113526][T14067] workingset_refault_anon 25450 [ 680.113526][T14067] workingset_refault_file 20669 [ 680.113526][T14067] workingset_activate_anon 164 [ 680.113526][T14067] workingset_activate_file 2637 [ 680.113526][T14067] workingset_restore_anon 171 [ 680.113526][T14067] workingset_restore_file 2705 [ 680.113526][T14067] workingset_nodereclaim 539 [ 680.113526][T14067] nr_anon_pages 3439 [ 680.113526][T14067] nr_mapped 25832 [ 680.113526][T14067] nr_file_pages 27457 [ 680.113526][T14067] nr_dirty 530 [ 680.113526][T14067] nr_writeback 0 [ 680.113526][T14067] nr_shmem 4646 [ 680.113526][T14067] nr_shmem_hugepages 0 [ 680.113526][T14067] nr_shmem_pmdmapped 0 [ 680.113526][T14067] nr_file_hugepages 0 [ 680.113526][T14067] nr_file_pmdmapped 0 [ 680.113526][T14067] nr_anon_transparent_hugepages 0 [ 680.113526][T14067] nr_vmscan_write 60830 [ 680.113526][T14067] nr_vmscan_immediate_reclaim 54 [ 680.113526][T14067] nr_dirtied 36965 [ 680.113526][T14067] nr_written 36435 [ 680.113526][T14067] nr_throttled_written 0 [ 680.113526][T14067] nr_kernel_misc_reclaimable 0 [ 680.113526][T14067] nr_foll_pin_acquired 21217 [ 680.114271][ T2513] pvrusb2: Invalid write control endpoint [ 680.272347][ T2513] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 680.275384][ T2513] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 680.278153][ T2513] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 680.282059][ T2513] pvrusb2: Device being rendered inoperable [ 680.303968][ T3008] usb 11-1: USB disconnect, device number 16 [ 680.317274][ T2513] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 680.324646][ T2513] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 680.337441][ T2513] pvrusb2: Attached sub-driver cx25840 [ 680.339771][ T2513] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 680.346015][ T2513] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 680.350882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.571906][T14090] openvswitch: netlink: IPv4 tunnel dst address is zero [ 680.574687][T14090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.224983][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.228296][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.500104][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18501'. [ 681.504769][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18501'. [ 681.821189][T10031] syz_tun (unregistering): left allmulticast mode [ 681.823373][T10031] syz_tun (unregistering): left promiscuous mode [ 681.830620][T10031] bridge0: port 3(syz_tun) entered disabled state [ 681.936540][T30814] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.019747][T30814] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.021227][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.026739][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.105564][T30814] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.195621][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.204344][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.215380][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.221299][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.227682][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.252728][T30814] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.455688][T30814] bridge_slave_1: left allmulticast mode [ 682.457548][T30814] bridge_slave_1: left promiscuous mode [ 682.461569][T30814] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.470599][T30814] bridge_slave_0: left allmulticast mode [ 682.473242][T30814] bridge_slave_0: left promiscuous mode [ 682.475865][T30814] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.974073][T30814] bond1 (unregistering): Released all slaves [ 683.111329][ T1346] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 683.392763][T30814] batman_adv: batadv0: Removing interface: macvtap2 [ 683.443027][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 683.547869][T13768] block nbd4: Receive control failed (result -32) [ 683.547894][T14272] block nbd4: Receive control failed (result -32) [ 683.691093][ T846] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 683.837082][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.841081][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.844126][T14212] bridge_slave_0: entered allmulticast mode [ 683.847337][T14212] bridge_slave_0: entered promiscuous mode [ 683.858023][T30814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.862413][ T846] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 683.862418][T30814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.868413][ T846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 683.872144][ T846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 683.877316][ T846] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 683.880339][ T846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.884233][ T846] usb 10-1: Product: syz [ 683.885790][ T846] usb 10-1: Manufacturer: syz [ 683.887337][ T846] usb 10-1: SerialNumber: syz [ 683.890465][ T846] usb 10-1: config 0 descriptor?? [ 683.892867][T14277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 683.950875][ T846] rc_core: IR keymap rc-streamzap not found [ 683.952696][ T846] Registered IR keymap rc-empty [ 683.955077][ T846] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 683.959968][ T846] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input80 [ 684.127008][ T846] usb 10-1: USB disconnect, device number 29 [ 684.148388][T30814] team0 (unregistering): Port device team_slave_1 removed [ 684.168717][T30814] team0 (unregistering): Port device team_slave_0 removed [ 684.289569][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.292331][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.294848][T14212] bridge_slave_1: entered allmulticast mode [ 684.298950][T14212] bridge_slave_1: entered promiscuous mode [ 684.327696][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.339291][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.343223][ T5099] Bluetooth: hci0: command tx timeout [ 684.393478][T14212] team0: Port device team_slave_0 added [ 684.398272][T14212] team0: Port device team_slave_1 added [ 684.413811][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.416058][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.425091][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.429810][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.432067][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.439988][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.464329][T14212] hsr_slave_0: entered promiscuous mode [ 684.466711][T14212] hsr_slave_1: entered promiscuous mode [ 684.469066][T14212] debugfs: 'hsr0' already exists in 'hsr' [ 684.471355][T14212] Cannot create hsr debugfs directory [ 684.590889][ C1] net_ratelimit: 60 callbacks suppressed [ 684.590904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.624570][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 684.658967][T14212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 684.663541][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.666539][T14212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 684.670660][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.677172][T14212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 684.684745][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.688045][T14212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 684.695720][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.748826][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.764247][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.771261][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.774295][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.782590][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.785684][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.796055][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 684.821603][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.992151][ T1346] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 685.016086][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 685.200548][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.210887][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18554'. [ 685.214428][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18554'. [ 685.374432][T14212] veth0_vlan: entered promiscuous mode [ 685.391520][T14212] veth1_vlan: entered promiscuous mode [ 685.420023][T14212] veth0_macvtap: entered promiscuous mode [ 685.426940][T14212] veth1_macvtap: entered promiscuous mode [ 685.438031][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.446313][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.457242][T30815] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.460098][T30815] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.467378][T30815] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.470262][T30815] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.471759][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.620988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.624934][T14272] block nbd5: Receive control failed (result -32) [ 685.633179][T13768] block nbd5: Receive control failed (result -32) [ 685.641700][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.645078][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.721845][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.728233][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.823065][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.826344][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.829588][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.833646][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.836962][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.840106][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.843503][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.846788][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.850044][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.853321][ T29] hid-generic 0004:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 685.861930][ T29] hid-generic 0004:FFFFFFFF:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz0 [ 685.907199][T14370] fido_id[14370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 686.161397][ T1346] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 686.431153][ T5099] Bluetooth: hci0: command tx timeout [ 686.431635][ T1346] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 686.540997][ T9] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 686.591678][ T1346] usb 12-1: Using ep0 maxpacket: 8 [ 686.596107][ T1346] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 686.599026][ T1346] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.606422][ T1346] pvrusb2: Hardware description: Terratec Grabster AV400 [ 686.608777][ T1346] pvrusb2: ********** [ 686.610092][ T1346] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 686.613839][ T1346] pvrusb2: Important functionality might not be entirely working. [ 686.616386][ T1346] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 686.619987][ T1346] pvrusb2: ********** [ 686.691473][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 686.694895][ T9] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 686.697521][ T9] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 686.701599][ T9] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 686.705113][ T9] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 686.709064][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 686.714023][ T9] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 686.717070][ T9] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 686.719867][ T9] usb 11-1: Product: syz [ 686.721432][ T9] usb 11-1: Manufacturer: syz [ 686.723168][ T36] ------------[ cut here ]------------ [ 686.723384][ T9] usb 11-1: SerialNumber: syz [ 686.725351][ T9] usb 11-1: config 0 descriptor?? [ 686.726938][ T36] time_after(jiffies, timeout) [ 686.731138][ T36] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#3: kworker/u33:0/36 [ 686.732101][ T9] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 686.733349][ T36] Modules linked in: [ 686.740472][ T9] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 686.740997][ T36] [ 686.747347][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.751854][ T36] Tainted: [L]=SOFTLOCKUP [ 686.753669][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.760875][ T36] Workqueue: iou_exit io_ring_exit_work [ 686.763276][ T36] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 686.765853][ T36] Code: 8e e8 5b 5e 43 01 48 8b 05 f4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 62 d9 d3 00 4d 85 ff 79 12 e8 b8 de d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 a6 de d3 00 48 8b 74 24 20 [ 686.773269][ T36] RSP: 0000:ffffc900005f7aa0 EFLAGS: 00010293 [ 686.775226][ T36] RAX: 0000000000000000 RBX: ffff88804ae70710 RCX: ffffffff81354d9e [ 686.777805][ T36] RDX: ffff88801cf3a540 RSI: ffffffff81354da8 RDI: ffff88801cf3a540 [ 686.780942][ T36] RBP: ffffc900005f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 686.784215][ T36] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff88804ae70000 [ 686.787426][ T36] R13: dffffc0000000000 R14: 000000004ae70700 R15: fffffffffffffffd [ 686.790584][ T36] FS: 0000000000000000(0000) GS:ffff888096ef5000(0000) knlGS:0000000000000000 [ 686.794286][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.797038][ T36] CR2: 0000557f419055e0 CR3: 000000006408a000 CR4: 0000000000352ef0 [ 686.800375][ T36] Call Trace: [ 686.801985][ T36] [ 686.803008][ T36] ? do_raw_spin_lock+0x128/0x260 [ 686.804625][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 686.806960][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 686.809463][ T36] ? debug_object_deactivate+0x2e4/0x3b0 [ 686.811422][ T36] ? rcu_is_watching+0x12/0xc0 [ 686.812987][ T36] process_one_work+0xa23/0x1940 [ 686.814596][ T36] ? __pfx_process_one_work+0x10/0x10 [ 686.816458][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 686.818427][ T36] worker_thread+0x5ef/0xe50 [ 686.820448][ T36] ? kthread+0x13a/0x450 [ 686.822597][ T36] ? __pfx_worker_thread+0x10/0x10 [ 686.824717][ T36] kthread+0x370/0x450 [ 686.826418][ T36] ? __pfx_kthread+0x10/0x10 [ 686.828353][ T36] ret_from_fork+0x72b/0xd50 [ 686.829473][ T2513] pvrusb2: Invalid write control endpoint [ 686.830301][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 686.830332][ T36] ? __switch_to+0x800/0x10f0 [ 686.830361][ T36] ? __pfx_kthread+0x10/0x10 [ 686.830387][ T36] ret_from_fork_asm+0x1a/0x30 [ 686.830428][ T36] [ 686.830440][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.830458][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.830484][ T36] Tainted: [L]=SOFTLOCKUP [ 686.830491][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.830504][ T36] Workqueue: iou_exit io_ring_exit_work [ 686.830532][ T36] Call Trace: [ 686.830539][ T36] [ 686.830547][ T36] dump_stack_lvl+0x100/0x190 [ 686.830567][ T36] vpanic+0x552/0x970 [ 686.830587][ T36] ? __pfx_vpanic+0x10/0x10 [ 686.830613][ T36] panic+0xd1/0xe0 [ 686.830629][ T36] ? __pfx_panic+0x10/0x10 [ 686.830655][ T36] ? check_panic_on_warn+0x1f/0x90 [ 686.830712][ T36] check_panic_on_warn.cold+0x19/0x34 [ 686.830732][ T36] ? io_ring_exit_work+0x479/0xd7a [ 686.830753][ T36] __warn.cold+0x191/0x318 [ 686.830792][ T36] __report_bug+0x30f/0x440 [ 686.830819][ T36] ? io_ring_exit_work+0x479/0xd7a [ 686.830846][ T36] ? __pfx___report_bug+0x10/0x10 [ 686.830872][ T36] ? rcu_is_watching+0x12/0xc0 [ 686.830894][ T36] ? trace_contention_end+0x126/0x160 [ 686.830923][ T36] ? __mutex_lock+0x26d/0x1bd0 [ 686.830949][ T36] ? io_ring_exit_work+0x422/0xd7a [ 686.830973][ T36] ? find_held_lock+0x2b/0x80 [ 686.830994][ T36] ? io_ring_exit_work+0x434/0xd7a [ 686.831018][ T36] ? io_ring_exit_work+0x479/0xd7a [ 686.831043][ T36] report_bug+0xb2/0x220 [ 686.831068][ T36] ? io_ring_exit_work+0x479/0xd7a [ 686.831092][ T36] handle_bug+0x16a/0x2a0 [ 686.831112][ T36] exc_invalid_op+0x17/0x50 [ 686.831136][ T36] asm_exc_invalid_op+0x1a/0x20 [ 686.831155][ T36] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 686.831178][ T36] Code: 8e e8 5b 5e 43 01 48 8b 05 f4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 62 d9 d3 00 4d 85 ff 79 12 e8 b8 de d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 a6 de d3 00 48 8b 74 24 20 [ 686.831193][ T36] RSP: 0000:ffffc900005f7aa0 EFLAGS: 00010293 [ 686.831209][ T36] RAX: 0000000000000000 RBX: ffff88804ae70710 RCX: ffffffff81354d9e [ 686.831221][ T36] RDX: ffff88801cf3a540 RSI: ffffffff81354da8 RDI: ffff88801cf3a540 [ 686.831231][ T36] RBP: ffffc900005f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 686.831241][ T36] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff88804ae70000 [ 686.831253][ T36] R13: dffffc0000000000 R14: 000000004ae70700 R15: fffffffffffffffd [ 686.831273][ T36] ? io_ring_exit_work+0x46e/0xd7a [ 686.831297][ T36] ? io_ring_exit_work+0x478/0xd7a [ 686.831324][ T36] ? do_raw_spin_lock+0x128/0x260 [ 686.831349][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 686.831377][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 686.831402][ T36] ? debug_object_deactivate+0x2e4/0x3b0 [ 686.831437][ T36] ? rcu_is_watching+0x12/0xc0 [ 686.831461][ T36] process_one_work+0xa23/0x1940 [ 686.831499][ T36] ? __pfx_process_one_work+0x10/0x10 [ 686.831530][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 686.831558][ T36] worker_thread+0x5ef/0xe50 [ 686.831593][ T36] ? kthread+0x13a/0x450 [ 686.831613][ T36] ? __pfx_worker_thread+0x10/0x10 [ 686.831634][ T36] kthread+0x370/0x450 [ 686.831655][ T36] ? __pfx_kthread+0x10/0x10 [ 686.831678][ T36] ret_from_fork+0x72b/0xd50 [ 686.831700][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 686.831721][ T36] ? __switch_to+0x800/0x10f0 [ 686.831748][ T36] ? __pfx_kthread+0x10/0x10 [ 686.831772][ T36] ret_from_fork_asm+0x1a/0x30 [ 686.831810][ T36] [ 686.833956][ T36] Kernel Offset: disabled