last executing test programs: 6m11.600689243s ago: executing program 1 (id=9027): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/214, &(0x7f0000000180)=0xd6) 6m11.543941998s ago: executing program 1 (id=9029): iopl(0x3) ioperm(0x0, 0x8001, 0x9) iopl(0x0) 6m11.50385174s ago: executing program 1 (id=9032): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) 6m11.448525911s ago: executing program 1 (id=9036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 6m11.443625266s ago: executing program 1 (id=9038): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 6m11.378029366s ago: executing program 1 (id=9040): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 5m56.357981353s ago: executing program 32 (id=9040): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 5m38.54005631s ago: executing program 0 (id=10082): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x7d0a, &(0x7f0000000080)={0x0, 0x11fb, 0x2, 0x2, 0x8b}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000001880)={0x0, 0x0, 0x1}, 0x1) 5m38.490815204s ago: executing program 0 (id=10086): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) 5m38.432021278s ago: executing program 0 (id=10090): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) 5m38.431590272s ago: executing program 0 (id=10094): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 5m38.382576394s ago: executing program 0 (id=10097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) 5m37.514071877s ago: executing program 0 (id=10120): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x766}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0xb1bbf2d6b755cdf8, 0xe, 0x0, 0x3, [0x7f, 0x0, 0x0, 0x1, 0x6, 0x200, 0x5]}}]}}}], 0x60}, 0x0) 5m37.485636661s ago: executing program 33 (id=10120): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x766}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0xb1bbf2d6b755cdf8, 0xe, 0x0, 0x3, [0x7f, 0x0, 0x0, 0x1, 0x6, 0x200, 0x5]}}]}}}], 0x60}, 0x0) 1m14.31842347s ago: executing program 3 (id=15479): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000080000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1m14.255028129s ago: executing program 3 (id=15483): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m14.100356394s ago: executing program 3 (id=15487): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m12.834965842s ago: executing program 3 (id=15511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m11.884857713s ago: executing program 3 (id=15517): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m11.818707865s ago: executing program 3 (id=15519): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x1f, 0x0}) 1m11.689732167s ago: executing program 2 (id=15524): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) 1m11.68783456s ago: executing program 2 (id=15527): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m11.599153426s ago: executing program 2 (id=15528): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={r2}) 1m11.598838925s ago: executing program 2 (id=15530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m11.540119455s ago: executing program 2 (id=15531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000103}]}) 1m10.948445015s ago: executing program 2 (id=15543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x2000000000000000, 0x1, 0xe59d, 0xf, 0x1a}) 1m10.911466021s ago: executing program 34 (id=15543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x2000000000000000, 0x1, 0xe59d, 0xf, 0x1a}) 56.561083634s ago: executing program 35 (id=15519): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x1f, 0x0}) 2.219829685s ago: executing program 5 (id=17116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) writev(r0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 1.969172408s ago: executing program 5 (id=17120): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYBLOB="1000000000000000240012800b0001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.915355834s ago: executing program 5 (id=17123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 1.838764823s ago: executing program 5 (id=17124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) 1.727787019s ago: executing program 5 (id=17134): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 1.518280387s ago: executing program 5 (id=17130): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.438408381s ago: executing program 4 (id=17131): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.438031171s ago: executing program 4 (id=17133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) 943.306361ms ago: executing program 4 (id=17141): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 846.469188ms ago: executing program 7 (id=17142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 843.227931ms ago: executing program 4 (id=17143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x20000000) 797.721852ms ago: executing program 7 (id=17144): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 557.845776ms ago: executing program 7 (id=17146): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 519.220255ms ago: executing program 7 (id=17147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 488.985019ms ago: executing program 4 (id=17148): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) 443.283623ms ago: executing program 4 (id=17150): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) 359.042629ms ago: executing program 6 (id=17154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 259.076734ms ago: executing program 6 (id=17155): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) 198.548952ms ago: executing program 6 (id=17156): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 198.269902ms ago: executing program 6 (id=17157): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000700fc00000000000000000000000000000108000200"], 0x44}}, 0x0) 119.1219ms ago: executing program 6 (id=17158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 28.222169ms ago: executing program 7 (id=17159): bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) 1.260093ms ago: executing program 7 (id=17160): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 0s ago: executing program 6 (id=17161): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000400)={{@my=0x1}, 0xfff, 0xfffffffffffffffd, 0x0, 0x8, 0x80000, 0x2, 0x1000000000ff7}) kernel console output (not intermixed with test programs): onnections per device. [ 476.124646][T11671] block nbd1: shutting down sockets [ 476.389589][ T843] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 476.559137][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 476.563380][ T843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 476.568004][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 476.575362][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.579694][ T843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.585127][ T843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.588862][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.800525][ T843] usb 8-1: GET_CAPABILITIES returned 0 [ 476.802263][ T843] usbtmc 8-1:16.0: can't read capabilities [ 477.002665][ T9] usb 8-1: USB disconnect, device number 18 [ 478.310099][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 479.109174][ T5761] Bluetooth: hci1: command 0x0406 tx timeout [ 494.200527][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14130'. [ 494.203699][T11801] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14130'. [ 494.206506][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14130'. [ 494.240363][ T5762] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 494.243865][ T5762] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 494.252394][ T5762] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 494.294065][T11827] fido_id[11827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.569127][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 494.611334][ T5762] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 494.750588][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.753735][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.757614][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.759476][ T5762] usb 8-1: Using ep0 maxpacket: 32 [ 494.761184][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.763601][ T5762] usb 8-1: config 0 has no interfaces? [ 494.768200][ T9] usb 9-1: config 0 descriptor?? [ 494.770381][ T5762] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 494.770395][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 494.770406][ T5762] usb 8-1: Product: syz [ 494.770413][ T5762] usb 8-1: Manufacturer: syz [ 494.770420][ T5762] usb 8-1: SerialNumber: syz [ 494.773833][ T5762] usb 8-1: config 0 descriptor?? [ 494.778814][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 494.984221][ T34] usb 9-1: USB disconnect, device number 10 [ 494.997248][ T5762] usb 8-1: USB disconnect, device number 19 [ 496.601311][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14164'. [ 496.682209][T11989] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14167'. [ 496.828551][T11997] input: syz1 as /devices/virtual/input/input62 [ 497.818569][ T40] kauditd_printk_skb: 896 callbacks suppressed [ 497.818585][ T40] audit: type=1326 audit(2000000283.643:30528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12064 comm="syz.5.14191" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef7c code=0x0 [ 497.864140][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x7 [ 497.866548][ T34] hid-generic 0000:0000:0000.0010: ignoring exceeding usage max [ 497.869764][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.871109][T12074] trusted_key: encrypted_key: keyword 'upGh'fault' not recognized [ 497.871929][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.876644][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.878853][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.881268][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.883730][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.886067][ T34] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 497.891410][ T34] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz0 [ 497.924017][T12080] fido_id[12080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.243578][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14248'. [ 499.278845][T12256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14250'. [ 499.282289][T12256] netlink: 220 bytes leftover after parsing attributes in process `syz.2.14250'. [ 499.293129][T12260] input: syz1 as /devices/virtual/input/input63 [ 499.445283][T12287] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 499.633859][T12307] pimreg: tun_chr_ioctl cmd 2147767507 [ 500.190036][T12340] kvm: apic: phys broadcast and lowest prio [ 500.562600][T12378] netem: incorrect gi model size [ 500.566130][T12378] netem: change failed [ 500.826779][T12405] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 500.942027][T12412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.944529][T12412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.443740][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14315'. [ 501.446372][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14315'. [ 501.477022][T12470] loop8: detected capacity change from 0 to 7 [ 501.487676][T12470] loop8: [POWERTEC] [ 501.517732][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14320'. [ 501.575936][ T5836] kernel write not supported for file [eventfd] (pid: 5836 comm: kworker/1:4) [ 501.781495][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14328'. [ 502.790036][T12509] kthread_run failed with err -4 [ 502.949350][ T5761] Bluetooth: hci1: command 0x0406 tx timeout [ 502.951878][ T5761] Bluetooth: hci4: command 0x2016 tx timeout [ 503.499204][T12612] Bluetooth: hci3: Frame reassembly failed (-84) [ 503.889287][ T843] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 503.989409][T12627] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 504.040402][ T843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.043947][ T843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.047028][ T843] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.051841][ T843] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.054661][ T843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.058409][ T843] usb 10-1: config 0 descriptor?? [ 504.224626][T12636] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 504.227766][T12636] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 504.315771][T12639] netlink: 'syz.4.14365': attribute type 4 has an invalid length. [ 504.373394][T12646] block nbd1: Unsupported socket: should be TCP or UNIX. [ 504.437697][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14369'. [ 504.443222][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14369'. [ 504.474422][ T843] hid_parser_main: 14 callbacks suppressed [ 504.474436][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.480384][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.482678][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.484949][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.487093][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.489578][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.491867][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.494080][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.496259][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.498458][ T843] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 504.518469][ T843] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 504.732125][T24834] usb 10-1: USB disconnect, device number 11 [ 504.979083][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 505.029271][ T5761] Bluetooth: hci1: command 0x0406 tx timeout [ 505.129557][ T9] usb 9-1: too many configurations: 98, using maximum allowed: 8 [ 505.132768][ T9] usb 9-1: config index 0 descriptor too short (expected 64915, got 45) [ 505.136031][ T9] usb 9-1: config index 1 descriptor too short (expected 64915, got 45) [ 505.139956][ T9] usb 9-1: config index 2 descriptor too short (expected 64915, got 45) [ 505.143254][ T9] usb 9-1: config index 3 descriptor too short (expected 64915, got 45) [ 505.146815][ T9] usb 9-1: config index 4 descriptor too short (expected 64915, got 45) [ 505.150815][ T9] usb 9-1: config index 5 descriptor too short (expected 64915, got 45) [ 505.154468][ T9] usb 9-1: config index 6 descriptor too short (expected 64915, got 45) [ 505.158168][ T9] usb 9-1: config index 7 descriptor too short (expected 64915, got 45) [ 505.162930][ T9] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 505.165709][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.168203][ T9] usb 9-1: Product: syz [ 505.169729][ T9] usb 9-1: Manufacturer: syz [ 505.171255][ T9] usb 9-1: SerialNumber: syz [ 505.201412][T12707] netlink: 'syz.3.14383': attribute type 14 has an invalid length. [ 505.406138][ T9] rtl8150 9-1:1.0: couldn't reset the device [ 505.408323][ T9] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 505.414782][ T9] usb 9-1: USB disconnect, device number 11 [ 505.483567][T12722] macsec0: left promiscuous mode [ 505.485705][T12722] macsec0: entered allmulticast mode [ 505.520641][ T5761] Bluetooth: hci3: command 0xfc11 tx timeout [ 505.522234][ T62] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 505.889114][T12738] net_ratelimit: 49 callbacks suppressed [ 505.889127][T12738] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 505.920173][T12744] support for the xor transformation has been removed. [ 505.958855][T12747] binder: 12746:12747 ioctl 541b 0 returned -22 [ 506.069984][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.080959][T12758] netlink: 'syz.4.14397': attribute type 9 has an invalid length. [ 506.368691][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14405'. [ 506.724652][T12834] input: syz1 as /devices/virtual/input/input64 [ 507.454658][T12866] tmpfs: Cannot retroactively limit size [ 507.643735][T12890] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 508.699850][ T5762] e1000 0000:00:06.0 eth0: Reset adapter [ 510.870760][ T5762] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 526.139426][ T843] e1000 0000:00:06.0 eth0: Reset adapter [ 528.310416][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 543.759978][ T29] kernel read not supported for file /dsp (pid: 29 comm: kworker/1:0) [ 543.798130][ T29] kernel write not supported for file /input/event2 (pid: 29 comm: kworker/1:0) [ 543.931863][T13135] o2cb: This node has not been configured. [ 543.934964][T13135] o2cb: Cluster check failed. Fix errors before retrying. [ 543.937018][T13135] (syz.4.14495,13135,1):user_dlm_register:674 ERROR: status = -22 [ 543.943810][T13135] (syz.4.14495,13135,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 544.038590][ T29] kernel write not supported for file /uinput (pid: 29 comm: kworker/1:0) [ 544.412316][T13203] binder: 13202:13203 ioctl c0306201 80000640 returned -22 [ 544.721237][T13239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14535'. [ 544.724187][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14535'. [ 545.102854][ T9] kernel read not supported for file /binder/state (pid: 9 comm: kworker/0:0) [ 545.979122][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 546.125713][T13391] hugetlbfs: syz.5.14582 (13391): Using mlock ulimits for SHM_HUGETLB is obsolete [ 546.139106][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 546.142038][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.145197][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.147940][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 546.153387][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 546.157017][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 546.160313][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.166399][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 546.168823][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 546.174118][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 546.175784][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 546.179712][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 546.181648][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 546.521007][ T40] audit: type=1326 audit(2000000588.348:30529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.527814][ T40] audit: type=1326 audit(2000000588.348:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.535314][ T40] audit: type=1326 audit(2000000588.348:30531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.542310][ T40] audit: type=1326 audit(2000000588.348:30532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 546.549208][ T40] audit: type=1326 audit(2000000588.348:30533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.555682][ T40] audit: type=1326 audit(2000000588.348:30534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 546.562327][ T40] audit: type=1326 audit(2000000588.348:30535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.569117][ T40] audit: type=1326 audit(2000000588.348:30536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 546.575699][ T40] audit: type=1326 audit(2000000588.348:30537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 546.582479][ T40] audit: type=1326 audit(2000000588.348:30538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.2.14588" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 546.720644][ T5762] usb 9-1: USB disconnect, device number 12 [ 546.739354][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 546.807065][T13449] can0: slcan on ttyS3. [ 546.903709][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.909713][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.915015][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.928256][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.932833][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.935602][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.938028][ T9] usb 8-1: Product: syz [ 546.939550][ T9] usb 8-1: Manufacturer: syz [ 546.952894][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 546.957474][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 546.965339][T13449] can0 (unregistered): slcan off ttyS3. [ 546.969232][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 546.972970][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 547.158229][ T29] usb 8-1: USB disconnect, device number 20 [ 547.272213][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14608'. [ 547.521312][T13542] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 547.859462][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14626'. [ 548.106788][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14625'. [ 548.214205][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14636'. [ 548.318159][T13617] Failed to get privilege flags for destination (handle=0x2:0x0) [ 548.500799][T13628] lo speed is unknown, defaulting to 1000 [ 548.506508][T13628] lo speed is unknown, defaulting to 1000 [ 548.544155][T13638] bond2: entered promiscuous mode [ 548.545869][T13628] lo speed is unknown, defaulting to 1000 [ 548.680286][T13628] infiniband sz1: set down [ 548.680682][ T54] lo speed is unknown, defaulting to 1000 [ 548.684388][T13628] infiniband sz1: added lo [ 548.709762][T13628] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 548.714751][T13628] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 548.721596][T13628] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 548.752381][T13628] RDS/IB: sz1: added [ 548.754623][T13628] smc: adding ib device sz1 with port count 1 [ 548.756677][T13628] smc: ib device sz1 port 1 has no pnetid [ 548.760383][ T54] lo speed is unknown, defaulting to 1000 [ 548.764150][T13628] lo speed is unknown, defaulting to 1000 [ 548.797891][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14659'. [ 548.802320][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14659'. [ 548.891566][T13628] lo speed is unknown, defaulting to 1000 [ 548.933103][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14664'. [ 549.005244][T13628] lo speed is unknown, defaulting to 1000 [ 549.103315][T13628] lo speed is unknown, defaulting to 1000 [ 549.222771][T13628] lo speed is unknown, defaulting to 1000 [ 550.326732][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14702'. [ 550.484242][ T62] Bluetooth: hci4: unexpected event for opcode 0x203c [ 550.493646][T13841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14707'. [ 550.625540][T13858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14714'. [ 550.817835][T13907] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.823647][T13911] netlink: 'syz.4.14721': attribute type 4 has an invalid length. [ 550.826145][T13911] netlink: 240 bytes leftover after parsing attributes in process `syz.4.14721'. [ 551.190547][T13962] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14742'. [ 551.193442][T13962] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14742'. [ 551.311148][T13981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14747'. [ 551.315011][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14747'. [ 551.590084][T13991] lo speed is unknown, defaulting to 1000 [ 551.795513][T14019] lo speed is unknown, defaulting to 1000 [ 551.866530][T14030] loop6: detected capacity change from 0 to 2640 [ 551.868893][T14030] buffer_io_error: 40 callbacks suppressed [ 551.868901][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.874287][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.876784][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.879253][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.881671][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.884107][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.886621][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.890429][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.893299][T14030] ldm_validate_partition_table(): Disk read failed. [ 551.895507][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.897959][T14030] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.899889][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14758'. [ 551.900515][T14030] Dev loop6: unable to read RDB block 0 [ 551.905364][T14030] loop6: unable to read partition table [ 551.907207][T14030] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 552.420145][ T62] Bluetooth: hci4: unexpected event for opcode 0x040d [ 552.468786][T14080] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 552.471100][T14080] binder: 14076:14080 ioctl 4018620d 80004a80 returned -1 [ 552.500115][T14082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14765'. [ 552.503032][T14082] netem: change failed [ 553.175131][ T5762] kernel read not supported for file /dsp1 (pid: 5762 comm: kworker/2:3) [ 553.495424][T14167] kvm: kvm [14165]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 553.709158][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 553.889069][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 553.894320][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 553.897130][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.900175][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.903145][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.906143][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.910701][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 553.913524][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.122783][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 554.124566][ T9] usbtmc 9-1:16.0: can't read capabilities [ 554.324378][ T29] usb 9-1: USB disconnect, device number 13 [ 555.513984][T14255] __nla_validate_parse: 1 callbacks suppressed [ 555.513996][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14819'. [ 555.673114][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14824'. [ 556.005867][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14842'. [ 556.085394][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 556.085404][ T40] audit: type=1326 audit(2000000597.908:30661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.094576][ T40] audit: type=1326 audit(2000000597.908:30662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.101856][ T40] audit: type=1326 audit(2000000597.908:30663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.108753][ T40] audit: type=1326 audit(2000000597.908:30664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.115616][ T40] audit: type=1326 audit(2000000597.908:30665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.122507][ T40] audit: type=1326 audit(2000000597.908:30666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 556.129301][ T40] audit: type=1326 audit(2000000597.908:30667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef98 code=0x7ffc0000 [ 556.136186][ T40] audit: type=1326 audit(2000000597.908:30668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef98 code=0x7ffc0000 [ 556.143610][ T40] audit: type=1326 audit(2000000597.908:30669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef98 code=0x7ffc0000 [ 556.151674][ T40] audit: type=1326 audit(2000000597.908:30670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.14844" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef98 code=0x7ffc0000 [ 556.188467][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14846'. [ 556.272125][T14345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 556.420534][T14361] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14855'. [ 557.495137][T14392] blkio.reset_stats is deprecated [ 557.645088][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14870'. [ 557.909165][ T29] kernel read not supported for file /dsp1 (pid: 29 comm: kworker/1:0) [ 559.236091][T14491] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 559.357107][T14509] overlayfs: invalid origin (0000) [ 560.589747][T14598] bond2 (unregistering): Released all slaves [ 560.620592][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 560.681242][T14666] program syz.2.14942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.769140][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 560.772613][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 560.776260][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 560.779986][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.783591][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.796925][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.799621][T14670] rdma_rxe: rxe_newlink: failed to add lo [ 560.799796][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.012436][ T29] usb 10-1: GET_CAPABILITIES returned 0 [ 561.014225][ T29] usbtmc 10-1:16.0: can't read capabilities [ 561.132200][T14703] evm: overlay not supported [ 561.217176][ T9] usb 10-1: USB disconnect, device number 12 [ 561.500140][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14962'. [ 562.309365][T14798] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 562.323761][T26771] Bluetooth: hci3: Frame reassembly failed (-84) [ 562.772493][T14812] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.974172][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14996'. [ 563.637979][T14884] macsec0: entered promiscuous mode [ 563.641621][T14884] macsec0: left promiscuous mode [ 563.678864][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15012'. [ 563.710700][T14894] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15014'. [ 564.389491][ T62] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 564.389500][ T5761] Bluetooth: hci3: command 0x1003 tx timeout [ 564.969561][T14993] dummy0: entered allmulticast mode [ 564.973438][T14992] dummy0: left allmulticast mode [ 565.372879][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15053'. [ 565.442367][T15042] binder: 15040:15042 ioctl c0306201 800001c0 returned -14 [ 565.778731][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15074'. [ 565.928721][T15099] macvlan0: entered promiscuous mode [ 565.932270][T15099] netlink: 'syz.5.15078': attribute type 2 has an invalid length. [ 565.960578][T15102] loop8: detected capacity change from 0 to 7 [ 565.965663][T15102] Dev loop8: unable to read RDB block 7 [ 565.967520][T15102] loop8: unable to read partition table [ 565.969589][T15102] loop8: partition table beyond EOD, truncated [ 565.971512][T15102] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 566.021977][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15082'. [ 566.025449][T15109] netlink: 220 bytes leftover after parsing attributes in process `syz.5.15082'. [ 566.028297][T15109] netlink: 220 bytes leftover after parsing attributes in process `syz.5.15082'. [ 567.021827][T15168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15104'. [ 567.127143][T15174] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 567.135657][ T174] Bluetooth: hci3: Frame reassembly failed (-84) [ 567.520007][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.209492][ T843] e1000 0000:00:06.0 eth0: Reset adapter [ 569.189286][ T5761] Bluetooth: hci3: command 0x1003 tx timeout [ 569.192831][ T62] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 570.390766][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 585.479191][T15256] netlink: 284 bytes leftover after parsing attributes in process `syz.3.15124'. [ 585.603071][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15128'. [ 585.715890][T15302] bond4: ARP target 9.0.0.0 is already present [ 585.717832][T15302] bond4: option arp_ip_target: invalid value (9) [ 585.752884][T15302] bond4 (unregistering): Released all slaves [ 586.550330][T15476] lo speed is unknown, defaulting to 1000 [ 587.409233][T15631] netlink: 'syz.2.15190': attribute type 8 has an invalid length. [ 587.495904][T15672] loop9: detected capacity change from 0 to 8 [ 587.499835][T15672] Dev loop9: unable to read RDB block 8 [ 587.501613][T15672] loop9: unable to read partition table [ 587.503459][T15672] loop9: partition table beyond EOD, truncated [ 587.505359][T15672] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 588.079212][T15763] geneve4: entered promiscuous mode [ 588.231853][T15781] program syz.3.15218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.709135][ T62] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 588.709705][ T5761] Bluetooth: hci3: command 0xfc11 tx timeout [ 589.179494][T15833] loop4: detected capacity change from 0 to 524287936 [ 589.640607][ T54] kernel read not supported for file /vcs (pid: 54 comm: kworker/3:1) [ 589.767865][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15257'. [ 589.924166][T15932] dvmrp8: entered allmulticast mode [ 590.235173][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 590.235186][ T40] audit: type=1326 audit(2000000632.058:30826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.3.15277" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700ef7c code=0x0 [ 590.885324][ T46] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 591.630525][T16072] tap0: tun_chr_ioctl cmd 1074025672 [ 591.632215][T16072] tap0: ignored: set checksum disabled [ 591.707437][T16077] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15308'. [ 591.803973][T16081] netem: change failed [ 592.629521][T16128] netlink: 7 bytes leftover after parsing attributes in process `syz.5.15325'. [ 592.709434][T16134] loop4: detected capacity change from 0 to 7 [ 592.712698][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.715551][ C1] buffer_io_error: 11 callbacks suppressed [ 592.715560][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.723038][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.725999][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.728579][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.731750][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.737301][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.740209][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.742868][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.745909][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.748413][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.751389][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.753934][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.756822][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.759470][T16134] ldm_validate_partition_table(): Disk read failed. [ 592.762648][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.765560][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.768162][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.771083][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.773847][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.776648][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.779380][T16134] Dev loop4: unable to read RDB block 0 [ 592.781809][T16134] loop4: unable to read partition table [ 592.783716][T16134] loop4: partition table beyond EOD, truncated [ 592.785691][T16134] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 592.949181][ T62] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 592.951178][ T5761] Bluetooth: hci3: command 0x1003 tx timeout [ 593.826939][T16246] misc userio: Can't change port type on an already running userio instance [ 594.221211][T16290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 594.223476][T16290] IPv6: NLM_F_CREATE should be set when creating new route [ 594.225674][T16290] IPv6: NLM_F_CREATE should be set when creating new route [ 594.228722][T16290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 594.267143][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15377'. [ 594.360405][T16305] netlink: 'syz.2.15381': attribute type 11 has an invalid length. [ 594.362998][T16305] netlink: 'syz.2.15381': attribute type 11 has an invalid length. [ 594.365843][T16305] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15381'. [ 594.399358][ T843] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 594.433603][T16311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15383'. [ 594.503839][T16317] ALSA: mixer_oss: invalid OSS volume '' [ 594.505929][T16317] ALSA: mixer_oss: invalid OSS volume '6;Z' [ 594.506264][T16319] loop8: detected capacity change from 0 to 7 [ 594.516264][T16319] ldm_validate_partition_table(): Disk read failed. [ 594.519715][T16319] Dev loop8: unable to read RDB block 0 [ 594.521911][T16319] loop8: unable to read partition table [ 594.523841][T16319] loop8: partition table beyond EOD, truncated [ 594.525788][T16319] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 594.549176][ T843] usb 9-1: Using ep0 maxpacket: 16 [ 594.553486][ T843] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 594.556373][ T843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.558844][ T843] usb 9-1: Product: syz [ 594.561049][ T843] usb 9-1: Manufacturer: syz [ 594.562652][ T843] usb 9-1: SerialNumber: syz [ 594.596285][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15389'. [ 594.599179][T16330] netlink: 212 bytes leftover after parsing attributes in process `syz.5.15389'. [ 594.602066][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15389'. [ 594.753744][T16337] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 594.784482][ T843] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 594.798998][ T843] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 594.803196][ T843] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 594.805919][ T843] usb 9-1: media controller created [ 594.815039][ T843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.029981][ T843] zl10353_read_register: readreg error (reg=127, ret==-110) [ 595.064049][ T843] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 595.067891][ T843] usb 9-1: USB disconnect, device number 14 [ 595.463635][T16333] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 595.591324][T16407] kvm: kvm [16406]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 595.907318][T16439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15419'. [ 596.112119][T16452] sch_fq: defrate 0 ignored. [ 596.291802][T16463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15427'. [ 596.755558][T16496] overlay: filesystem on ./file0 is read-only [ 597.178008][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15456'. [ 597.662205][T16579] netlink: 'syz.5.15469': attribute type 2 has an invalid length. [ 597.664757][T16579] netlink: 'syz.5.15469': attribute type 11 has an invalid length. [ 597.667328][T16579] netlink: 88 bytes leftover after parsing attributes in process `syz.5.15469'. [ 597.671544][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15470'. [ 598.389727][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 600.960967][T16803] random: crng reseeded on system resumption [ 601.000593][ T4798] syz_tun (unregistering): left allmulticast mode [ 601.003086][ T4798] syz_tun (unregistering): left promiscuous mode [ 601.005231][ T4798] bridge0: port 3(syz_tun) entered disabled state [ 601.352493][T16822] program syz.4.15545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.358346][T16822] ata1.00: invalid service action 31 [ 601.401613][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 601.404649][T16829] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 601.413285][ T5761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 601.421136][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.427398][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.430222][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.632609][T16824] lo speed is unknown, defaulting to 1000 [ 601.898330][T16824] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.902229][T16824] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.904614][T16824] bridge_slave_0: entered allmulticast mode [ 601.907245][T16824] bridge_slave_0: entered promiscuous mode [ 601.910855][T16824] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.913134][T16824] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.915467][T16824] bridge_slave_1: entered allmulticast mode [ 601.918035][T16824] bridge_slave_1: entered promiscuous mode [ 601.934020][T16824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.938381][T16824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.951713][ T40] audit: type=1326 audit(2000000643.768:30827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 601.954133][T16824] team0: Port device team_slave_0 added [ 601.962629][T16824] team0: Port device team_slave_1 added [ 601.972351][ T40] audit: type=1326 audit(2000000643.788:30828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 601.976045][T16824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.983864][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.987374][ T40] audit: type=1326 audit(2000000643.788:30829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 601.992386][T16824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.003616][T16824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.005801][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.013656][T16824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.016347][ T40] audit: type=1326 audit(2000000643.788:30830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 602.031037][ T40] audit: type=1326 audit(2000000643.788:30831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 602.037681][T16824] hsr_slave_0: entered promiscuous mode [ 602.040279][T16824] hsr_slave_1: entered promiscuous mode [ 602.042702][T16824] debugfs: 'hsr0' already exists in 'hsr' [ 602.044519][T16824] Cannot create hsr debugfs directory [ 602.046844][ T40] audit: type=1326 audit(2000000643.788:30832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 602.062683][ T40] audit: type=1326 audit(2000000643.788:30833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16988 comm="syz.5.15556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 602.160160][T16824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 602.200938][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.203860][T16824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 602.250529][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.553018][T16824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 602.726456][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.866409][T16824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.913267][T16824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.045186][T16824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.086598][T16824] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.093339][T26771] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.095593][T26771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.105556][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.107881][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.459757][T16824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.519301][ T5761] Bluetooth: hci2: command tx timeout [ 603.610510][T16824] veth0_vlan: entered promiscuous mode [ 603.616978][T16824] veth1_vlan: entered promiscuous mode [ 603.642626][T16824] veth0_macvtap: entered promiscuous mode [ 603.648935][T16824] veth1_macvtap: entered promiscuous mode [ 603.659776][T16824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.666475][T16824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.679888][T26769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.682539][T26769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.685468][T26769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.688090][T26769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.825406][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.827853][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.846454][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.853123][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.044904][T17248] netlink: 'syz.5.15587': attribute type 1 has an invalid length. [ 604.484813][ T40] audit: type=1326 audit(2000000646.308:30834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.5.15594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 604.495810][ T40] audit: type=1326 audit(2000000646.308:30835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.5.15594" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef98 code=0x7ffc0000 [ 604.502677][ T40] audit: type=1326 audit(2000000646.308:30836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.5.15594" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef98 code=0x7ffc0000 [ 604.909213][ T5851] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 605.062577][ T5851] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.069152][ T5851] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.072272][ T5851] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.075040][ T5851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.080413][T17297] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 605.086711][ T5851] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.304653][T24834] usb 11-1: USB disconnect, device number 2 [ 605.448737][T17362] loop4: detected capacity change from 0 to 7 [ 605.452537][ C2] blk_print_req_error: 30 callbacks suppressed [ 605.452547][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.457262][ C2] buffer_io_error: 31 callbacks suppressed [ 605.457269][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.461595][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.464446][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.466944][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.469820][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.472399][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.475234][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.477925][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.480797][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.483332][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.486148][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.488648][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.491485][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.493880][T17362] ldm_validate_partition_table(): Disk read failed. [ 605.496101][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.498960][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.501516][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.504378][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.506942][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.509995][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.512732][T17362] Dev loop4: unable to read RDB block 0 [ 605.515001][T17362] loop4: unable to read partition table [ 605.516822][T17362] loop4: partition table beyond EOD, truncated [ 605.519356][T17362] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 605.589189][ T5761] Bluetooth: hci2: command tx timeout [ 605.649410][ T5851] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 605.799190][ T5851] usb 10-1: Using ep0 maxpacket: 8 [ 605.803448][ T5851] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 605.807329][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.818751][ T5851] pvrusb2: Hardware description: Terratec Grabster AV400 [ 605.823115][ T5851] pvrusb2: ********** [ 605.825054][ T5851] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 605.829622][ T5851] pvrusb2: Important functionality might not be entirely working. [ 605.832454][ T5851] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 605.836297][ T5851] pvrusb2: ********** [ 606.024966][ T2511] pvrusb2: Invalid write control endpoint [ 606.051396][T17397] sctp: [Deprecated]: syz.4.15623 (pid 17397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.051396][T17397] Use struct sctp_sack_info instead [ 606.065709][ T2511] pvrusb2: Invalid write control endpoint [ 606.068306][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 606.082924][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 606.086875][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 606.090004][ T2511] pvrusb2: Device being rendered inoperable [ 606.091945][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 606.094206][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 606.102845][ T2511] pvrusb2: Attached sub-driver cx25840 [ 606.104657][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 606.107740][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 606.227003][ T34] usb 10-1: USB disconnect, device number 13 [ 607.100037][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15646'. [ 607.146870][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15647'. [ 607.178619][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 607.178630][ T40] audit: type=1326 audit(2000000648.998:30963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.4.15650" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef7c code=0x0 [ 607.679215][ T5761] Bluetooth: hci2: command tx timeout [ 607.830389][T17560] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 608.052397][ T54] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 608.138524][T17584] netlink: 'syz.4.15671': attribute type 10 has an invalid length. [ 608.210283][ T54] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 608.216016][ T54] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 608.222255][ T54] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.225491][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.231416][T17551] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 608.236001][ T54] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.281571][T17598] tipc: Started in network mode [ 608.283123][T17598] tipc: Node identity ac14140f, cluster identity 4711 [ 608.286872][T17598] tipc: New replicast peer: 255.255.255.255 [ 608.292211][T17598] tipc: Enabled bearer , priority 5 [ 608.443089][ T54] usb 10-1: USB disconnect, device number 14 [ 608.718957][T17646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15681'. [ 608.721906][T17646] netlink: 212 bytes leftover after parsing attributes in process `syz.4.15681'. [ 608.724764][T17646] netlink: 'syz.4.15681': attribute type 1 has an invalid length. [ 608.847463][ T5762] kernel read not supported for file /dsp (pid: 5762 comm: kworker/2:3) [ 609.097939][T17663] binder: 17662:17663 ioctl c0306201 80000000 returned -14 [ 609.196462][T17671] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 609.311932][ T5864] tipc: Node number set to 2886997007 [ 609.389169][ T54] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 609.484272][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15697'. [ 609.552316][ T54] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 609.555124][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.557558][ T54] usb 11-1: Product: syz [ 609.558868][ T54] usb 11-1: Manufacturer: syz [ 609.560755][ T54] usb 11-1: SerialNumber: syz [ 609.749122][ T5761] Bluetooth: hci2: command tx timeout [ 609.825476][ T54] rtl8150 11-1:1.0: couldn't reset the device [ 609.827536][ T54] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 609.834879][ T54] usb 11-1: USB disconnect, device number 3 [ 610.350599][T17763] Set syz1 is full, maxelem 65536 reached [ 610.449250][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15718'. [ 610.651519][T17791] netlink: 'syz.6.15721': attribute type 10 has an invalid length. [ 610.660239][T17791] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 611.720229][ T5762] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 611.859120][ T1349] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 611.869506][ T5762] usb 10-1: Using ep0 maxpacket: 8 [ 611.872308][ T5762] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 611.875733][ T5762] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 611.878739][ T5762] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 611.883179][ T5762] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 611.887111][ T5762] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.893783][ T5762] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.896621][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.902983][ T5762] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 612.019298][ T1349] usb 11-1: Using ep0 maxpacket: 8 [ 612.022757][ T1349] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 612.026226][ T1349] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 612.029491][ T1349] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 612.033051][ T1349] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.037229][ T1349] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.041316][ T1349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.248445][ T1349] usb 11-1: GET_CAPABILITIES returned 0 [ 612.250306][ T1349] usbtmc 11-1:16.0: can't read capabilities [ 612.450723][ T1349] usb 11-1: USB disconnect, device number 4 [ 613.259448][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15761'. [ 613.422176][ T40] audit: type=1400 audit(2000000655.248:30964): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F [ 613.695559][T17970] (syz.6.15770,17970,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 613.885706][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15778'. [ 614.155308][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15786'. [ 614.503163][ T843] usb 10-1: USB disconnect, device number 15 [ 614.779117][ T1349] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 614.940050][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15803'. [ 614.940516][ T1349] usb 11-1: config 0 has no interfaces? [ 614.944783][ T1349] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 614.947885][ T1349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.952211][ T1349] usb 11-1: config 0 descriptor?? [ 615.162115][ T843] usb 11-1: USB disconnect, device number 5 [ 615.922561][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.928154][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.931361][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.934257][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.937139][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.454201][T18123] lo speed is unknown, defaulting to 1000 [ 616.688030][T18123] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.690883][T18123] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.693254][T18123] bridge_slave_0: entered allmulticast mode [ 616.695840][T18123] bridge_slave_0: entered promiscuous mode [ 616.699906][T18123] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.702216][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.704508][T18123] bridge_slave_1: entered allmulticast mode [ 616.707118][T18123] bridge_slave_1: entered promiscuous mode [ 616.727610][T18123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.734239][T18123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.750951][T18123] team0: Port device team_slave_0 added [ 616.754354][T18123] team0: Port device team_slave_1 added [ 616.780434][T18123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.782673][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.791461][T18123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.798128][T18123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.806424][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.816763][T18123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.848735][T18123] hsr_slave_0: entered promiscuous mode [ 616.851145][T18123] hsr_slave_1: entered promiscuous mode [ 616.853151][T18123] debugfs: 'hsr0' already exists in 'hsr' [ 616.854821][T18123] Cannot create hsr debugfs directory [ 617.342626][ T62] block nbd1: Receive control failed (result -32) [ 617.346536][ T5761] block nbd1: Receive control failed (result -32) [ 617.361335][T18123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 617.401060][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.404928][T18123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.443030][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.446807][T18123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.480986][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.483764][T18123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 617.514177][T18123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.563927][T18123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.574499][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.582744][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.584894][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.593280][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.595514][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.615692][T18123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.618923][T18123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.694496][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15861'. [ 617.722278][T18558] lo speed is unknown, defaulting to 1000 [ 617.767361][T18573] loop5: detected capacity change from 0 to 7 [ 617.820047][ T5163] blk_print_req_error: 10 callbacks suppressed [ 617.820059][ T5163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.825903][ T5163] buffer_io_error: 10 callbacks suppressed [ 617.825912][ T5163] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.834279][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.845165][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.848503][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.851855][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.854362][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.857257][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.858558][T18123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.859834][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.865103][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.867655][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.870683][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.875324][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.885951][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.890982][T18573] ldm_validate_partition_table(): Disk read failed. [ 617.893076][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.901360][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.906816][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.910968][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.913389][T18573] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.916217][T18573] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.918707][T18573] Dev loop5: unable to read RDB block 0 [ 617.922662][T18573] loop5: unable to read partition table [ 617.924635][T18573] loop5: partition table beyond EOD, truncated [ 617.926756][T18573] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 617.989860][ T62] Bluetooth: hci3: command tx timeout [ 618.066047][T18123] veth0_vlan: entered promiscuous mode [ 618.073416][T18123] veth1_vlan: entered promiscuous mode [ 618.091757][T18123] veth0_macvtap: entered promiscuous mode [ 618.096115][T18123] veth1_macvtap: entered promiscuous mode [ 618.104612][T18123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.113276][T18123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.119140][ T1164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.121924][ T1164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.124952][ T1164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.127619][ T1164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.295479][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.298735][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.336104][T18646] lo speed is unknown, defaulting to 1000 [ 618.370810][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.374419][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.605108][ T29] kernel read not supported for file /dsp (pid: 29 comm: kworker/1:0) [ 619.106845][T18764] lo speed is unknown, defaulting to 1000 [ 619.310354][T18808] Falling back ldisc for ttyS3. [ 619.377382][ T54] kernel read not supported for file /rfkill (pid: 54 comm: kworker/3:1) [ 619.504466][T18839] netlink: 'syz.4.15916': attribute type 9 has an invalid length. [ 619.512887][T18839] macvlan3: entered promiscuous mode [ 619.518164][T18839] macvlan3: entered allmulticast mode [ 620.079453][ T62] Bluetooth: hci3: command tx timeout [ 620.093811][T18917] netlink: 'syz.6.15936': attribute type 9 has an invalid length. [ 620.102118][T18917] macvlan2: entered promiscuous mode [ 620.103895][T18917] macvlan2: entered allmulticast mode [ 620.686218][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15959'. [ 620.767298][ T5761] block nbd2: Receive control failed (result -32) [ 620.769592][ T62] block nbd2: Receive control failed (result -32) [ 621.096577][T19049] netlink: 'syz.5.15977': attribute type 8 has an invalid length. [ 621.498854][ T34] kernel write not supported for file /sg0 (pid: 34 comm: kworker/3:0) [ 621.729808][T19108] dummy0: entered promiscuous mode [ 621.732701][T19108] dummy0: left promiscuous mode [ 621.829769][T19129] dummy0: entered promiscuous mode [ 621.831844][T19129] batadv0: entered promiscuous mode [ 621.833811][T19129] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 621.836533][T19129] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 622.149470][ T62] Bluetooth: hci3: command tx timeout [ 622.412918][T19210] serio: Serial port ttynull [ 622.626110][T19237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16028'. [ 622.674075][T19247] vivid-007: disconnect [ 622.678170][T19245] vivid-007: reconnect [ 622.752876][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16033'. [ 623.106637][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16037'. [ 623.110586][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16037'. [ 623.127539][ T5761] block nbd3: Receive control failed (result -32) [ 623.128267][ T62] block nbd3: Receive control failed (result -32) [ 623.154924][T15569] udevd[15569]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 623.299683][T19307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 623.302981][T19307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 623.502709][T19335] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 623.554333][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.614849][ T5762] kernel read not supported for file /comedi4 (pid: 5762 comm: kworker/2:3) [ 623.807668][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16068'. [ 624.239095][ T5761] Bluetooth: hci3: command tx timeout [ 625.115698][ T34] hid_parser_main: 28 callbacks suppressed [ 625.115712][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x1 [ 625.120044][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.122526][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.124925][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.127266][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.129821][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.132148][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.134441][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.136703][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.138975][ T34] hid-generic 0080:0008:0000.0012: unknown main item tag 0x0 [ 625.147147][ T34] hid-generic 0080:0008:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz0 [ 625.180706][T19478] fido_id[19478]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.331709][T19565] ptrace attach of "/syz-executor exec"[28671] was attempted by "/syz-executor exec"[19565] [ 626.334648][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.341679][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.346290][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.350053][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.353410][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.540373][T19560] lo speed is unknown, defaulting to 1000 [ 626.661552][ T5761] block nbd4: Receive control failed (result -32) [ 626.663336][ T62] block nbd4: Receive control failed (result -32) [ 626.811330][T19560] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.813656][T19560] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.815956][T19560] bridge_slave_0: entered allmulticast mode [ 626.818630][T19560] bridge_slave_0: entered promiscuous mode [ 626.823068][T19560] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.825449][T19560] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.827679][T19560] bridge_slave_1: entered allmulticast mode [ 626.830508][T19560] bridge_slave_1: entered promiscuous mode [ 626.853737][T19560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.858190][T19560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.875773][T19560] team0: Port device team_slave_0 added [ 626.878832][T19560] team0: Port device team_slave_1 added [ 626.897052][T19560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.899818][T19560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.907350][T19560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.911580][T19560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.913710][T19560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.921388][T19560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.943586][T19560] hsr_slave_0: entered promiscuous mode [ 626.945732][T19560] hsr_slave_1: entered promiscuous mode [ 626.947772][T19560] debugfs: 'hsr0' already exists in 'hsr' [ 626.949957][T19560] Cannot create hsr debugfs directory [ 627.568665][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16130'. [ 627.595406][T19560] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.800321][T19560] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.240829][T19560] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.469174][ T62] Bluetooth: hci0: command tx timeout [ 628.475655][T19560] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.844903][T19560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 628.864332][ T40] audit: type=1800 audit(2000000670.688:30965): pid=20003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16164" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 628.883853][T19560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.894699][T19560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 628.922652][T19560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.922956][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16173'. [ 628.929947][T19560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 628.931518][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16173'. [ 628.934919][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16173'. [ 628.961980][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.967513][T19560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.972424][T19560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 629.004477][T19560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.042886][T19560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.056949][T19560] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.063895][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.066125][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.069470][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.071652][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.259862][T20044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 629.451030][T19560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.519106][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 629.596632][T19560] veth0_vlan: entered promiscuous mode [ 629.605471][T19560] veth1_vlan: entered promiscuous mode [ 629.625530][T19560] veth0_macvtap: entered promiscuous mode [ 629.630961][T19560] veth1_macvtap: entered promiscuous mode [ 629.639488][T19560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.648901][T19560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.655692][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.658363][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.663883][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.666543][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.669739][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 629.674767][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 629.680557][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 629.684789][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.687842][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.692419][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.695233][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.804919][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16192'. [ 629.847972][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.851152][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.866072][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16194'. [ 629.908292][T26769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.913207][T26769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.913373][ T24] usb 12-1: GET_CAPABILITIES returned 0 [ 629.922013][ T24] usbtmc 12-1:16.0: can't read capabilities [ 629.967489][T20146] can0: slcan on ttyS3. [ 630.043615][ T62] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 630.046842][ T62] CPU: 2 UID: 0 PID: 62 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.046861][ T62] Tainted: [L]=SOFTLOCKUP [ 630.046866][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.046874][ T62] Workqueue: hci0 hci_rx_work [ 630.046895][ T62] Call Trace: [ 630.046899][ T62] [ 630.046904][ T62] dump_stack_lvl+0x100/0x190 [ 630.046924][ T62] sysfs_warn_dup.cold+0x1c/0x28 [ 630.046943][ T62] sysfs_create_dir_ns+0x24b/0x2b0 [ 630.046957][ T62] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 630.046970][ T62] ? find_held_lock+0x2b/0x80 [ 630.046983][ T62] ? kobject_add_internal+0x25f/0x930 [ 630.046996][ T62] ? kobject_add_internal+0x25f/0x930 [ 630.047010][ T62] ? do_raw_spin_unlock+0x145/0x1e0 [ 630.047024][ T62] kobject_add_internal+0x2c8/0x930 [ 630.047040][ T62] kobject_add+0x16a/0x1e0 [ 630.047054][ T62] ? __pfx_kobject_add+0x10/0x10 [ 630.047067][ T62] ? class_to_subsys+0x10f/0x150 [ 630.047084][ T62] ? kobject_put+0xb9/0x640 [ 630.047095][ T62] ? _raw_spin_unlock+0x28/0x50 [ 630.047114][ T62] device_add+0x294/0x1950 [ 630.047128][ T62] ? __pfx_dev_set_name+0x10/0x10 [ 630.047144][ T62] ? __pfx_device_add+0x10/0x10 [ 630.047157][ T62] ? mgmt_send_event_skb+0x2fb/0x460 [ 630.047178][ T62] hci_conn_add_sysfs+0x1a3/0x260 [ 630.047190][ T62] le_conn_complete_evt+0x11eb/0x1f60 [ 630.047211][ T62] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 630.047232][ T62] hci_le_conn_complete_evt+0x23c/0x3a0 [ 630.047249][ T62] ? skb_pull_data+0x15f/0x1e0 [ 630.047267][ T62] hci_le_meta_evt+0x34a/0x5f0 [ 630.047277][ T62] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 630.047295][ T62] hci_event_packet+0x51c/0xcd0 [ 630.047310][ T62] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 630.047321][ T62] ? __pfx_hci_event_packet+0x10/0x10 [ 630.047338][ T62] ? kcov_remote_start+0x374/0x660 [ 630.047353][ T62] ? lockdep_hardirqs_on+0x78/0x100 [ 630.047366][ T62] hci_rx_work+0x451/0xfc0 [ 630.047384][ T62] process_one_work+0xa0e/0x1980 [ 630.047401][ T62] ? __pfx_process_one_work+0x10/0x10 [ 630.047417][ T62] ? __pfx_hci_rx_work+0x10/0x10 [ 630.047433][ T62] worker_thread+0x5ef/0xe50 [ 630.047449][ T62] ? kthread+0x13a/0x450 [ 630.047457][ T62] ? __pfx_worker_thread+0x10/0x10 [ 630.047467][ T62] kthread+0x370/0x450 [ 630.047475][ T62] ? __pfx_kthread+0x10/0x10 [ 630.047485][ T62] ret_from_fork+0x72b/0xd50 [ 630.047497][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 630.047509][ T62] ? __switch_to+0x800/0x1100 [ 630.047523][ T62] ? __pfx_kthread+0x10/0x10 [ 630.047533][ T62] ret_from_fork_asm+0x1a/0x30 [ 630.047553][ T62] [ 630.047568][ T62] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 630.124435][ T29] usb 12-1: USB disconnect, device number 2 [ 630.125571][ T62] Bluetooth: hci0: failed to register connection device [ 630.160375][T20146] can0 (unregistered): slcan off ttyS3. [ 630.550034][ T5761] Bluetooth: hci0: command tx timeout [ 630.707808][T20212] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 630.967063][T20227] loop5: detected capacity change from 0 to 7 [ 631.129458][T20227] Dev loop5: unable to read RDB block 7 [ 631.131023][T20229] Invalid logical block size (-1) [ 631.133240][T20227] loop5: unable to read partition table [ 631.133460][T20227] loop5: partition table beyond EOD, truncated [ 631.133910][T20227] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 631.462198][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16219'. [ 631.465287][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16219'. [ 631.499789][T20255] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 632.232287][ T62] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 632.598088][T20341] batman_adv: batadv0: Adding interface: ipvlan2 [ 632.600778][T20341] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.608449][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.611758][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.614735][T20341] batman_adv: batadv0: Interface activated: ipvlan2 [ 632.629898][ T62] Bluetooth: hci0: command tx timeout [ 632.660933][ T34] libceph: connect (1)[c::]:6789 error -101 [ 632.667970][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 632.720597][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16250'. [ 632.887574][T20375] ip6erspan0: entered allmulticast mode [ 632.929392][ T54] libceph: connect (1)[c::]:6789 error -101 [ 632.931808][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 633.049204][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 633.199157][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 633.202493][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 633.205135][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.208072][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.212708][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.216751][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.221071][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.224038][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.438849][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 633.439843][ T54] libceph: connect (1)[c::]:6789 error -101 [ 633.443106][ T29] usbtmc 9-1:16.0: can't read capabilities [ 633.443939][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 633.484059][T20346] ceph: No mds server is up or the cluster is laggy [ 633.649830][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.653661][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.656429][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.659148][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.661867][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.664631][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.667359][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.670149][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.672994][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.676524][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.679265][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.681984][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.684759][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.687534][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.690269][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.693000][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 633.700567][ T54] usb 9-1: USB disconnect, device number 15 [ 634.715231][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16276'. [ 634.719600][ T62] Bluetooth: hci0: command tx timeout [ 635.739887][ T40] audit: type=1326 audit(2000000677.568:30966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.6.16285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f7c code=0x7fc00000 [ 636.126021][T20580] overlayfs: upper fs does not support file handles, falling back to index=off. [ 636.140388][T20580] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 636.147242][T20580] overlayfs: conflicting lowerdir path [ 636.212155][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16304'. [ 636.217283][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16304'. [ 636.379499][ T843] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 636.425549][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16312'. [ 636.534021][ T843] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 636.536677][ T843] usb 10-1: config 0 has no interface number 0 [ 636.538792][ T843] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.546354][ T843] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 636.551005][ T843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.554298][ T843] usb 10-1: Product: syz [ 636.555901][ T843] usb 10-1: Manufacturer: syz [ 636.557775][ T843] usb 10-1: SerialNumber: syz [ 636.562711][ T843] usb 10-1: config 0 descriptor?? [ 636.567984][ T843] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 636.614201][T20620] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16311'. [ 638.556288][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16342'. [ 638.794221][ T5762] usb 10-1: USB disconnect, device number 16 [ 638.799513][ T5762] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 638.959656][T24834] IPVS: starting estimator thread 0... [ 639.069118][T20789] IPVS: using max 43 ests per chain, 103200 per kthread [ 639.956593][T20894] macsec2: entered promiscuous mode [ 639.959128][T20894] dummy0: entered promiscuous mode [ 639.966007][T20894] macsec2: entered allmulticast mode [ 639.967834][T20894] dummy0: entered allmulticast mode [ 639.999743][T20894] dummy0: left allmulticast mode [ 640.001413][T20894] dummy0: left promiscuous mode [ 640.662514][T20971] loop6: detected capacity change from 0 to 2640 [ 640.666847][T20971] buffer_io_error: 5 callbacks suppressed [ 640.666857][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.673516][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.676011][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.678407][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.682511][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.685011][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.687655][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.690452][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.692883][T20971] ldm_validate_partition_table(): Disk read failed. [ 640.694929][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.697296][T20971] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.701462][T20971] Dev loop6: unable to read RDB block 0 [ 640.703428][T20971] loop6: unable to read partition table [ 640.705285][T20971] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 640.760737][T20978] loop6: detected capacity change from 2640 to 524288000 [ 641.022243][T21022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16418'. [ 641.046108][T21029] CUSE: info not properly terminated [ 641.269234][T24834] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 641.350714][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16432'. [ 641.354320][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16432'. [ 641.439496][T24834] usb 11-1: Using ep0 maxpacket: 8 [ 641.446194][T24834] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 641.451062][T24834] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.456373][T24834] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.462838][T24834] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.468074][T24834] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.474301][T24834] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.477073][T24834] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.689559][T24834] usb 11-1: GET_CAPABILITIES returned 0 [ 641.691814][T24834] usbtmc 11-1:16.0: can't read capabilities [ 641.797821][ T34] kernel write not supported for file /uinput (pid: 34 comm: kworker/3:0) [ 641.894172][T21025] usb 11-1: usbtmc_ioctl_clear_out_halt returned -32 [ 641.902969][ T5851] usb 11-1: USB disconnect, device number 6 [ 642.025638][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16433'. [ 642.032144][T21095] macvlan4: entered allmulticast mode [ 642.033843][T21095] hsr0: entered allmulticast mode [ 642.035440][T21095] hsr_slave_0: entered allmulticast mode [ 642.037126][T21095] hsr_slave_1: entered allmulticast mode [ 642.600897][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16445'. [ 642.630953][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16445'. [ 643.893328][T21175] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 644.478113][T21241] tipc: Started in network mode [ 644.481304][T21241] tipc: Node identity ac14140f, cluster identity 4711 [ 644.484364][T21241] tipc: New replicast peer: 172.30.0.8 [ 644.486796][T21241] tipc: Enabled bearer , priority 5 [ 644.490435][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16471'. [ 644.493221][T21241] tipc: Disabling bearer [ 644.817242][T21335] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 644.825869][T21335] overlayfs: overlapping lowerdir path [ 644.918960][T21351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16485'. [ 644.999222][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16484'. [ 645.002114][T21386] netlink: 'syz.5.16484': attribute type 5 has an invalid length. [ 645.475530][T21473] Invalid ELF header magic: != ELF [ 645.613419][T21487] lo speed is unknown, defaulting to 1000 [ 645.916347][T21487] dvmrp0: entered allmulticast mode [ 646.069141][T24834] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 646.239595][T24834] usb 12-1: Using ep0 maxpacket: 8 [ 646.243099][T24834] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 646.246060][T24834] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.255620][T24834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 646.257705][T21555] overlayfs: missing 'workdir' [ 646.258716][T24834] pvrusb2: ********** [ 646.261009][T24834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 646.264158][T24834] pvrusb2: Important functionality might not be entirely working. [ 646.266558][T24834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 646.273693][T24834] pvrusb2: ********** [ 646.359512][T21564] loop9: detected capacity change from 0 to 7 [ 646.362143][T21564] Dev loop9: unable to read RDB block 7 [ 646.363795][T21564] loop9: unable to read partition table [ 646.365559][T21564] loop9: partition table beyond EOD, truncated [ 646.367603][T21564] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 646.469741][ T2511] pvrusb2: Invalid write control endpoint [ 646.471523][ T46] dvmrp0: left allmulticast mode [ 646.562409][ T2511] pvrusb2: Invalid write control endpoint [ 646.569794][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 646.573024][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 646.575917][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 646.583242][ T2511] pvrusb2: Device being rendered inoperable [ 646.589689][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 646.596901][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 646.608263][ T2511] pvrusb2: Attached sub-driver cx25840 [ 646.611024][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 646.614205][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 646.662913][T21649] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 646.676081][T21526] pvrusb2: Attempted to execute control transfer when device not ok [ 646.683253][T24834] usb 12-1: USB disconnect, device number 3 [ 646.751784][T21671] binder: BINDER_SET_CONTEXT_MGR already set [ 646.761388][T21671] binder: 21668:21671 ioctl 4018620d 80004a80 returned -16 [ 647.253853][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16532'. [ 647.842280][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16546'. [ 647.844981][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16546'. [ 647.912364][T21813] pimreg: tun_chr_ioctl cmd 1074025678 [ 647.914607][T21813] pimreg: group set to 768 [ 648.126392][T21839] netlink: 27 bytes leftover after parsing attributes in process `syz.5.16554'. [ 648.152662][T21845] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16555'. [ 648.159192][T21845] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16555'. [ 648.440066][ T843] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 648.591137][ T843] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.594299][ T843] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 648.597145][ T843] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 648.600133][ T843] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.605451][ T843] usb 12-1: config 0 descriptor?? [ 648.612542][ T843] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 648.614637][ T843] dvb-usb: bulk message failed: -22 (3/0) [ 648.620536][ T843] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 648.623728][ T843] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 648.626284][ T843] usb 12-1: media controller created [ 648.628748][ T843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.635944][ T843] dvb-usb: bulk message failed: -22 (6/0) [ 648.637808][ T843] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 648.642253][ T843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input71 [ 648.648642][ T843] dvb-usb: schedule remote query interval to 150 msecs. [ 648.651421][ T843] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 648.814352][ T843] dvb-usb: bulk message failed: -22 (1/0) [ 648.816209][ T843] dvb-usb: error while querying for an remote control event. [ 648.821784][T21854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.830562][T21854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.860109][ T34] usb 12-1: USB disconnect, device number 4 [ 648.950674][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 648.995604][T24834] kernel write not supported for file /vcs (pid: 24834 comm: kworker/1:5) [ 649.604563][T21981] batadv_slave_1: entered promiscuous mode [ 649.609254][T21981] batadv_slave_1: left promiscuous mode [ 649.698526][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16591'. [ 649.868317][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16600'. [ 649.872521][T22033] netlink: 72 bytes leftover after parsing attributes in process `syz.7.16600'. [ 649.902596][T22041] openvswitch: netlink: IPv4 tun info is not correct [ 649.956970][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16606'. [ 650.092495][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16613'. [ 650.096390][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16613'. [ 650.232290][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16620'. [ 650.292792][T22112] macvlan2: entered promiscuous mode [ 650.294469][T22112] bridge0: entered promiscuous mode [ 650.845943][ T5851] kernel read not supported for file /dsp (pid: 5851 comm: kworker/0:4) [ 651.954803][T22199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16647'. [ 652.639151][ T62] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 652.639681][ T5761] Bluetooth: hci1: command 0x1003 tx timeout [ 652.919341][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 653.079539][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 653.085511][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 653.090815][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 653.099660][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 653.106421][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.112704][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.123505][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 653.139281][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 653.144646][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 653.147944][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 653.150334][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 653.154641][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 653.158430][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.162128][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.165697][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 653.170074][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 653.174239][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 653.177750][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 653.180168][ T34] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 653.183468][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 653.185212][T22329] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.16681'. [ 653.186943][ T34] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.193971][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.197459][T22329] openvswitch: netlink: Message has 5 unknown bytes. [ 653.198494][ T34] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 653.205097][ T34] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 653.209354][ T34] usb 9-1: config 168 interface 0 has no altsetting 0 [ 653.214838][ T34] usb 9-1: string descriptor 0 read error: -22 [ 653.217241][ T34] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 653.220855][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.226461][T22335] input: syz1 as /devices/virtual/input/input72 [ 653.250475][ T34] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 653.438939][ T34] usb 9-1: USB disconnect, device number 16 [ 653.473549][T22373] tun0: tun_chr_ioctl cmd 1074025676 [ 653.475656][T22373] tun0: owner set to 0 [ 653.641163][T22255] adutux: No device or device unplugged -19 [ 653.741912][T22404] warn_alloc: 2 callbacks suppressed [ 653.741924][T22404] syz.7.16696: vmalloc error: size 1986356271, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 653.748099][T22404] CPU: 0 UID: 0 PID: 22404 Comm: syz.7.16696 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.748118][T22404] Tainted: [L]=SOFTLOCKUP [ 653.748122][T22404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 653.748129][T22404] Call Trace: [ 653.748133][T22404] [ 653.748138][T22404] dump_stack_lvl+0x100/0x190 [ 653.748161][T22404] warn_alloc.cold+0x95/0x1c1 [ 653.748175][T22404] ? __pfx_warn_alloc+0x10/0x10 [ 653.748192][T22404] ? reacquire_held_locks+0xce/0x1e0 [ 653.748208][T22404] __vmalloc_node_range_noprof+0x136c/0x1630 [ 653.748226][T22404] ? lock_acquire+0x1b1/0x370 [ 653.748236][T22404] ? ip_set_sockfn_get+0x18e/0xd20 [ 653.748252][T22404] ? __lock_acquire+0x4a5/0x2630 [ 653.748263][T22404] ? trace_contention_end+0x122/0x170 [ 653.748276][T22404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 653.748292][T22404] ? find_held_lock+0x2b/0x80 [ 653.748305][T22404] ? nf_sockopt_find.isra.0+0x222/0x290 [ 653.748319][T22404] ? rcu_is_watching+0x12/0xc0 [ 653.748333][T22404] ? ip_set_sockfn_get+0x18e/0xd20 [ 653.748346][T22404] __vmalloc_node_noprof+0xad/0xf0 [ 653.748361][T22404] ? ip_set_sockfn_get+0x18e/0xd20 [ 653.748375][T22404] ip_set_sockfn_get+0x18e/0xd20 [ 653.748389][T22404] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 653.748404][T22404] ? nf_sockopt_find.isra.0+0x222/0x290 [ 653.748416][T22404] nf_getsockopt+0x7c/0xe0 [ 653.748428][T22404] ip_getsockopt+0x192/0x1e0 [ 653.748441][T22404] ? __pfx_ip_getsockopt+0x10/0x10 [ 653.748463][T22404] tcp_getsockopt+0xa1/0x110 [ 653.748479][T22404] smc_getsockopt+0x165/0x390 [ 653.748495][T22404] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 653.748511][T22404] ? __pfx_smc_getsockopt+0x10/0x10 [ 653.748525][T22404] ? aa_sock_opt_perm+0xfe/0x1b0 [ 653.748538][T22404] ? __pfx_smc_getsockopt+0x10/0x10 [ 653.748553][T22404] do_sock_getsockopt+0x50a/0x6e0 [ 653.748569][T22404] ? __lock_acquire+0x4a5/0x2630 [ 653.748580][T22404] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 653.748600][T22404] ? find_held_lock+0x2b/0x80 [ 653.748617][T22404] ? __fget_files+0x21f/0x3d0 [ 653.748634][T22404] __sys_getsockopt+0x133/0x1d0 [ 653.748651][T22404] ? __ia32_sys_getsockopt+0xbc/0x160 [ 653.748664][T22404] __ia32_sys_getsockopt+0xbc/0x160 [ 653.748678][T22404] ? __do_fast_syscall_32+0x98/0x970 [ 653.748689][T22404] ? lockdep_hardirqs_on+0x78/0x100 [ 653.748699][T22404] __do_fast_syscall_32+0xe7/0x970 [ 653.748712][T22404] do_fast_syscall_32+0x32/0x70 [ 653.748724][T22404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.748738][T22404] RIP: 0023:0xf702ef7c [ 653.748748][T22404] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 653.748758][T22404] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 653.748769][T22404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 653.748776][T22404] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000040 [ 653.748782][T22404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.748788][T22404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 653.748794][T22404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.748808][T22404] [ 653.748812][T22404] Mem-Info: [ 653.851354][T22404] active_anon:1245 inactive_anon:73 isolated_anon:0 [ 653.851354][T22404] active_file:2387 inactive_file:6787 isolated_file:0 [ 653.851354][T22404] unevictable:1768 dirty:189 writeback:0 [ 653.851354][T22404] slab_reclaimable:7204 slab_unreclaimable:78384 [ 653.851354][T22404] mapped:22013 shmem:1804 pagetables:1595 [ 653.851354][T22404] sec_pagetables:338 bounce:0 [ 653.851354][T22404] kernel_misc_reclaimable:0 [ 653.851354][T22404] free:36797 free_pcp:2104 free_cma:0 [ 653.864868][T22404] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1336kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1192kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 653.874868][T22404] Node 1 active_anon:4980kB inactive_anon:280kB active_file:9548kB inactive_file:27148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:86716kB dirty:756kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7484kB pagetables:5188kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 653.889585][T22404] Node 0 DMA free:2876kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.898623][T22404] lowmem_reserve[]: 0 285 285 285 285 [ 653.900516][T22404] Node 0 DMA32 free:31504kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:2964kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.910814][T22404] lowmem_reserve[]: 0 0 0 0 0 [ 653.912349][T22404] Node 1 DMA32 free:112696kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4980kB inactive_anon:280kB active_file:9548kB inactive_file:27148kB unevictable:3536kB writepending:756kB zspages:3852kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:8688kB local_pcp:6304kB free_cma:0kB [ 653.922306][T22404] lowmem_reserve[]: 0 0 0 0 0 [ 653.923757][T22404] Node 0 DMA: 103*4kB (UM) 24*8kB (UM) 10*16kB (UM) 16*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2876kB [ 653.928054][T22404] Node 0 DMA32: 1160*4kB (UME) 424*8kB (UME) 192*16kB (UME) 212*32kB (UME) 75*64kB (UME) 31*128kB (UME) 7*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 31520kB [ 653.933059][T22404] Node 1 DMA32: 1884*4kB (UME) 4816*8kB (UME) 3762*16kB (UME) 127*32kB (UME) 34*64kB (UME) 2*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 112752kB [ 653.937778][T22404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.940641][T22404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 653.943488][T22404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.946344][T22404] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 653.949179][T22404] 11359 total pagecache pages [ 653.950597][T22404] 395 pages in swap cache [ 653.951921][T22404] Free swap = 32296kB [ 653.953204][T22404] Total swap = 124996kB [ 653.954655][T22404] 524155 pages RAM [ 653.955800][T22404] 0 pages HighMem/MovableOnly [ 653.957253][T22404] 210104 pages reserved [ 653.958486][T22404] 0 pages cma reserved [ 654.708453][T22439] input: syz1 as /devices/virtual/input/input73 [ 654.727116][T22443] netlink: 72 bytes leftover after parsing attributes in process `syz.5.16708'. [ 655.068791][ T5851] kernel read not supported for file /dsp (pid: 5851 comm: kworker/0:4) [ 655.137640][T22484] input: syz0 as /devices/virtual/input/input74 [ 655.199846][ T5762] hid_parser_main: 28 callbacks suppressed [ 655.199860][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.204219][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.206464][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.208732][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.211377][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.213631][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.215814][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.217989][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.220680][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.222966][ T5762] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.227918][ T5762] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 655.227918][ T5762] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 655.274320][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16721'. [ 655.312024][T22499] fido_id[22499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 655.979138][T24834] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 656.131823][T24834] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 656.131841][T24834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.131852][T24834] usb 9-1: Product: syz [ 656.131859][T24834] usb 9-1: Manufacturer: syz [ 656.131867][T24834] usb 9-1: SerialNumber: syz [ 656.372003][T24834] rtl8150 9-1:1.0: couldn't reset the device [ 656.374123][T24834] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 656.379197][T24834] usb 9-1: USB disconnect, device number 17 [ 656.427640][T22593] netlink: 'syz.7.16739': attribute type 1 has an invalid length. [ 656.430809][T22593] netlink: 96 bytes leftover after parsing attributes in process `syz.7.16739'. [ 656.433602][T22593] netlink: 'syz.7.16739': attribute type 1 has an invalid length. [ 656.435961][T22593] netlink: 'syz.7.16739': attribute type 8 has an invalid length. [ 656.438339][T22593] netlink: 582 bytes leftover after parsing attributes in process `syz.7.16739'. [ 656.441455][T22593] netlink: 1 bytes leftover after parsing attributes in process `syz.7.16739'. [ 656.533771][T22605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16743'. [ 656.559250][ T843] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 656.711730][ T843] usb 10-1: Using ep0 maxpacket: 8 [ 656.717104][ T843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.722404][ T843] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 656.725190][ T843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.728815][ T843] usb 10-1: config 0 descriptor?? [ 656.938962][ T843] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 657.149900][ T843] usb 10-1: USB disconnect, device number 17 [ 657.284300][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16756'. [ 657.305903][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16756'. [ 657.308645][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16756'. [ 657.551635][T22691] block nbd4: Cannot use ioctl interface on a netlink controlled device. [ 657.559065][T22691] block nbd4: Cannot use ioctl interface on a netlink controlled device. [ 657.739468][T22717] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.793276][T22724] bond0: entered promiscuous mode [ 657.794920][T22724] bond_slave_0: entered promiscuous mode [ 657.796712][T22724] bond_slave_1: entered promiscuous mode [ 657.805677][T22724] batadv0: entered promiscuous mode [ 657.810940][T22724] debugfs: 'hsr1' already exists in 'hsr' [ 657.813642][T22724] Cannot create hsr debugfs directory [ 657.819777][T22724] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 658.102838][T22775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16787'. [ 658.279541][ T5762] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 658.429986][ T5762] usb 12-1: Using ep0 maxpacket: 32 [ 658.434192][ T5762] usb 12-1: config 0 has no interfaces? [ 658.436510][ T5762] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 658.456812][ T5762] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.477044][ T5762] usb 12-1: config 0 descriptor?? [ 658.687879][ T5762] usb 12-1: USB disconnect, device number 5 [ 659.760538][T22889] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 659.771317][ T59] Bluetooth: hci1: Frame reassembly failed (-84) [ 660.101118][T22942] __nla_validate_parse: 1 callbacks suppressed [ 660.101130][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16835'. [ 660.869906][T23021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.872182][T23021] IPv6: NLM_F_CREATE should be set when creating new route [ 660.874534][T23021] IPv6: NLM_F_CREATE should be set when creating new route [ 660.876744][T23021] IPv6: NLM_F_CREATE should be set when creating new route [ 661.299137][T24834] kernel read not supported for file /dsp1 (pid: 24834 comm: kworker/1:5) [ 661.829238][ T5761] Bluetooth: hci1: command 0x1003 tx timeout [ 661.829756][ T62] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 661.927150][T24834] kernel write not supported for file /snd/midiC2D0 (pid: 24834 comm: kworker/1:5) [ 662.369100][ T5851] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 662.529228][ T5851] usb 9-1: Using ep0 maxpacket: 32 [ 662.534634][ T5851] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 662.540935][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.548801][ T5851] usb 9-1: Product: syz [ 662.550468][ T5851] usb 9-1: Manufacturer: syz [ 662.552532][ T5851] usb 9-1: SerialNumber: syz [ 662.558445][ T5851] usb 9-1: config 0 descriptor?? [ 662.634435][ T5851] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 662.641824][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 662.643634][ T5851] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.658205][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 662.660159][ T5851] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.665903][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 662.683169][ T5851] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 662.685629][ T5851] usb 9-1: media controller created [ 662.811830][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.844139][ T5851] usb 9-1: selecting invalid altsetting 3 [ 662.848181][ T5851] ttusb2: set interface to alts=3 failed [ 662.961719][ T5851] DVB: Unable to find symbol tda10086_attach() [ 662.963582][ T5851] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 662.966828][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 662.968518][ T5851] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.972907][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 662.974602][ T5851] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 662.977513][ T5851] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 663.138575][T23147] dvb-usb: bulk message failed: -22 (7/0) [ 663.140460][T23147] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 663.143446][T23147] ttusb2: i2c transfer failed. [ 663.145843][ T5851] usb 9-1: USB disconnect, device number 18 [ 663.208160][ T5851] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 664.249427][ T1349] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 664.348565][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16947'. [ 664.357191][ T9] kernel read not supported for file /adsp1 (pid: 9 comm: kworker/0:0) [ 664.419213][ T1349] usb 12-1: Using ep0 maxpacket: 32 [ 664.435091][ T1349] usb 12-1: unable to get BOS descriptor or descriptor too short [ 664.442628][ T1349] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 664.449115][ T1349] usb 12-1: can't read configurations, error -71 [ 665.300320][ T1349] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 665.459415][ T1349] usb 12-1: Using ep0 maxpacket: 32 [ 665.464192][ T1349] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 665.468811][ T1349] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 665.472352][ T1349] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 665.474977][ T1349] usb 12-1: Product: syz [ 665.476285][ T1349] usb 12-1: Manufacturer: syz [ 665.477763][ T1349] usb 12-1: SerialNumber: syz [ 665.480672][ T1349] usb 12-1: config 0 descriptor?? [ 665.482688][T23448] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 665.485941][ T1349] hub 12-1:0.0: bad descriptor, ignoring hub [ 665.487844][ T1349] hub 12-1:0.0: probe with driver hub failed with error -5 [ 665.829262][ T1349] usb 12-1: USB disconnect, device number 7 [ 665.837510][T23565] netlink: 120 bytes leftover after parsing attributes in process `syz.4.17003'. [ 665.840748][T23565] netlink: 'syz.4.17003': attribute type 1 has an invalid length. [ 666.489935][T23672] kvm: kvm [23671]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 666.543860][T23678] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17032'. [ 667.820577][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17066'. [ 668.020088][T23812] random: crng reseeded on system resumption [ 668.031953][T23812] Restarting kernel threads ... [ 668.033848][T23812] Done restarting kernel threads. [ 668.090300][T23819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 668.277731][T23832] netlink: 'syz.5.17078': attribute type 1 has an invalid length. [ 668.280282][T23832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17078'. [ 668.921380][T23875] nbd: socks must be embedded in a SOCK_ITEM attr [ 668.923938][T23875] block nbd5: shutting down sockets [ 668.988293][T23884] bpf: Bad value for 'uid' [ 669.033075][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17093'. [ 669.673817][ T5761] Bluetooth: hci1: command 0x1003 tx timeout [ 669.673871][ T62] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 670.287702][T23993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17120'. [ 670.636106][T24023] block nbd4: NBD_DISCONNECT [ 670.637639][T24023] block nbd4: Send disconnect failed -32 [ 670.645058][T24023] block nbd4: Send disconnect failed -32 [ 670.646814][T24023] block nbd4: shutting down sockets [ 670.842710][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17133'. [ 670.845393][T24039] netlink: 'syz.4.17133': attribute type 5 has an invalid length. [ 670.847732][T24039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17133'. [ 670.955085][T24027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.109975][T24037] geneve2: left promiscuous mode [ 671.123960][ T5851] kernel read not supported for file /dsp (pid: 5851 comm: kworker/0:4) [ 671.155386][T24037] macvlan3: left promiscuous mode [ 671.157733][T24037] macvlan3: left allmulticast mode [ 671.191356][T24037] hsr0: left allmulticast mode [ 671.192865][T24037] hsr_slave_0: left allmulticast mode [ 671.194603][T24037] hsr_slave_1: left allmulticast mode [ 671.229226][T24037] macvlan4: left allmulticast mode [ 671.240959][T24039] geneve3: entered promiscuous mode [ 671.242779][T24039] geneve3: entered allmulticast mode [ 671.250161][T26769] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.254164][T26769] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 42565 - 0 [ 671.257164][T26769] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.260435][T26769] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 42565 - 0 [ 671.341358][T26769] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.344888][T26769] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 42565 - 0 [ 671.349201][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 671.493039][T24027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.529391][T26769] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.532045][T26769] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 42565 - 0 [ 671.711978][T24073] nbd4: detected capacity change from 0 to 63 [ 671.726223][ T62] block nbd4: Receive control failed (result -104) [ 671.755888][T24097] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 671.767711][T24100] loop8: detected capacity change from 0 to 524287999 [ 671.846997][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17153'. [ 671.851782][T24027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.854006][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17153'. [ 671.885870][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17154'. [ 672.038370][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17157'. [ 672.272840][T24027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.278519][T24027] [ 672.279313][T24027] ====================================================== [ 672.281433][T24027] WARNING: possible circular locking dependency detected [ 672.283570][T24027] syzkaller #0 Tainted: G L [ 672.285474][T24027] ------------------------------------------------------ [ 672.287596][T24027] syz.5.17130/24027 is trying to acquire lock: [ 672.289546][T24027] ffff88801ce9faa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x3b/0x70 [ 672.292646][T24027] [ 672.292646][T24027] but task is already holding lock: [ 672.294874][T24027] ffffffff8f777780 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 672.297532][T24027] [ 672.297532][T24027] which lock already depends on the new lock. [ 672.297532][T24027] [ 672.300708][T24027] [ 672.300708][T24027] the existing dependency chain (in reverse order) is: [ 672.303636][T24027] [ 672.303636][T24027] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 672.305838][T24027] __mutex_lock+0x1a4/0x1b10 [ 672.307459][T24027] get_device_parent+0xff/0x4c0 SYZFAIL: failed to recv rpc [ 672.309097][T24027] device_add+0xc36/0x1950 [ 672.310847][T24027] device_create_groups_vargs+0x1f8/0x270 [ 672.313126][T24027] device_create+0xed/0x130 [ 672.314851][T24027] msr_device_create+0x31/0x70 [ 672.316471][T24027] cpuhp_invoke_callback+0x3ab/0x9a0 [ 672.318273][T24027] cpuhp_thread_fun+0x3e9/0x7c0 [ 672.320430][T24027] smpboot_thread_fn+0x3d3/0xaa0 [ 672.322113][T24027] kthread+0x370/0x450 [ 672.323541][T24027] ret_from_fork+0x72b/0xd50 [ 672.325106][T24027] ret_from_fork_asm+0x1a/0x30 [ 672.326726][T24027] [ 672.326726][T24027] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 672.329036][T24027] cpuhp_thread_fun+0x146/0x7c0 [ 672.330749][T24027] smpboot_thread_fn+0x3d3/0xaa0 [ 672.332427][T24027] kthread+0x370/0x450 [ 672.333835][T24027] ret_from_fork+0x72b/0xd50 [ 672.335400][T24027] ret_from_fork_asm+0x1a/0x30 [ 672.337010][T24027] [ 672.337010][T24027] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 672.339343][T24027] cpus_read_lock+0x42/0x170 [ 672.340905][T24027] static_key_disable+0x12/0x20 [ 672.342545][T24027] __inet_hash_connect+0x143e/0x2000 [ 672.344333][T24027] tcp_v4_connect+0xeb3/0x1b40 [ 672.345951][T24027] __inet_stream_connect+0x208/0xfa0 [ 672.347741][T24027] inet_stream_connect+0x57/0xa0 [ 672.349348][T24027] __sys_connect_file+0x141/0x1a0 [ 672.351063][T24027] __sys_connect+0x141/0x170 [ 672.352614][T24027] __ia32_compat_sys_socketcall+0x45e/0x770 [ 672.354568][T24027] __do_fast_syscall_32+0xe7/0x970 [ 672.356268][T24027] do_fast_syscall_32+0x32/0x70 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 672.357896][T24027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.360073][T24027] [ 672.360073][T24027] -> #8 (sk_lock-AF_INET){+.+.}-{0:0}: [ 672.362385][T24027] lock_sock_nested+0x41/0xf0 [ 672.363978][T24027] inet_shutdown+0x67/0x410 [ 672.365507][T24027] nbd_mark_nsock_dead+0xae/0x5c0 [ 672.367193][T24027] sock_shutdown+0x16b/0x200 [ 672.368702][T24027] nbd_config_put+0x1eb/0x750 [ 672.370308][T24027] nbd_release+0xb7/0x190 [ 672.371815][T24027] blkdev_put_whole+0xb0/0xf0 [ 672.373359][T24027] bdev_release+0x47f/0x6d0 [ 672.374903][T24027] blkdev_release+0x15/0x20 [ 672.376439][T24027] __fput+0x3ff/0xb50 [ 672.377839][T24027] task_work_run+0x150/0x240 [ 672.379472][T24027] exit_to_user_mode_loop+0x157/0x670 [ 672.381470][T24027] __do_fast_syscall_32+0x701/0x970 [ 672.383250][T24027] do_fast_syscall_32+0x32/0x70 [ 672.384906][T24027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.386986][T24027] [ 672.386986][T24027] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 672.389294][T24027] __mutex_lock+0x1a4/0x1b10 [ 672.390863][T24027] nbd_queue_rq+0x428/0x1080 [ 672.392429][T24027] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 672.394292][T24027] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 672.396356][T24027] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 672.398325][T24027] blk_mq_run_hw_queue+0x23c/0x670 [ 672.400052][T24027] blk_mq_dispatch_list+0x51d/0x1360 [ 672.401846][T24027] blk_mq_flush_plug_list+0x130/0x600 [ 672.403662][T24027] __blk_flush_plug+0x2c4/0x4b0 [ 672.405302][T24027] __submit_bio+0x584/0x6c0 [ 672.406845][T24027] submit_bio_noacct_nocheck+0x543/0xbf0 [ 672.408713][T24027] submit_bio_noacct+0xd18/0x2000 [ 672.410394][T24027] __bh_submit+0x658/0x850 [ 672.411947][T24027] block_read_full_folio+0x1f7/0x8c0 [ 672.413719][T24027] filemap_read_folio+0xfc/0x3b0 [ 672.415379][T24027] do_read_cache_folio+0x2d7/0x6b0 [ 672.417068][T24027] read_part_sector+0xd1/0x370 [ 672.418694][T24027] adfspart_check_ICS+0x91/0x7d0 [ 672.420390][T24027] bdev_disk_changed+0x7a3/0x1250 [ 672.422145][T24027] blkdev_get_whole+0x187/0x290 [ 672.423802][T24027] bdev_open+0x2c7/0xe40 [ 672.425268][T24027] blkdev_open+0x34e/0x4f0 [ 672.426738][T24027] do_dentry_open+0x6ab/0x14d0 [ 672.428354][T24027] vfs_open+0x82/0x3f0 [ 672.429779][T24027] path_openat+0x2873/0x4280 [ 672.431374][T24027] do_file_open+0x20e/0x430 [ 672.432918][T24027] do_sys_openat2+0x10f/0x1e0 [ 672.434512][T24027] __x64_sys_openat+0x12d/0x210 [ 672.436150][T24027] do_syscall_64+0x115/0x840 [ 672.437709][T24027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.439669][T24027] [ 672.439669][T24027] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 672.441876][T24027] __mutex_lock+0x1a4/0x1b10 [ 672.443460][T24027] nbd_queue_rq+0xba/0x1080 [ 672.445004][T24027] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 672.446862][T24027] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 672.448938][T24027] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 672.450918][T24027] blk_mq_run_hw_queue+0x23c/0x670 [ 672.452640][T24027] blk_mq_dispatch_list+0x51d/0x1360 [ 672.454427][T24027] blk_mq_flush_plug_list+0x130/0x600 [ 672.456236][T24027] __blk_flush_plug+0x2c4/0x4b0 [ 672.457879][T24027] __submit_bio+0x584/0x6c0 [ 672.459422][T24027] submit_bio_noacct_nocheck+0x543/0xbf0 [ 672.461309][T24027] submit_bio_noacct+0xd18/0x2000 [ 672.463022][T24027] __bh_submit+0x658/0x850 [ 672.464563][T24027] block_read_full_folio+0x1f7/0x8c0 [ 672.466343][T24027] filemap_read_folio+0xfc/0x3b0 [ 672.468000][T24027] do_read_cache_folio+0x2d7/0x6b0 [ 672.469701][T24027] read_part_sector+0xd1/0x370 [ 672.471297][T24027] adfspart_check_ICS+0x91/0x7d0 [ 672.472964][T24027] bdev_disk_changed+0x7a3/0x1250 [ 672.474668][T24027] blkdev_get_whole+0x187/0x290 [ 672.476320][T24027] bdev_open+0x2c7/0xe40 [ 672.477795][T24027] blkdev_open+0x34e/0x4f0 [ 672.479319][T24027] do_dentry_open+0x6ab/0x14d0 [ 672.480939][T24027] vfs_open+0x82/0x3f0 [ 672.482405][T24027] path_openat+0x2873/0x4280 [ 672.483984][T24027] do_file_open+0x20e/0x430 [ 672.485486][T24027] do_sys_openat2+0x10f/0x1e0 [ 672.487039][T24027] __x64_sys_openat+0x12d/0x210 [ 672.488655][T24027] do_syscall_64+0x115/0x840 [ 672.490188][T24027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.492136][T24027] [ 672.492136][T24027] -> #5 (set->srcu){.+.+}-{0:0}: [ 672.494288][T24027] __synchronize_srcu+0xa2/0x300 [ 672.495943][T24027] blk_mq_quiesce_queue+0x149/0x1c0 [ 672.497675][T24027] elevator_switch+0x17b/0x7e0 [ 672.499304][T24027] elevator_change+0x352/0x530 [ 672.500919][T24027] elevator_set_default+0x29e/0x360 [ 672.502688][T24027] blk_register_queue+0x48e/0x630 [ 672.504384][T24027] __add_disk+0x73f/0xe40 [ 672.505877][T24027] add_disk_fwnode+0x118/0x5c0 [ 672.507498][T24027] nbd_dev_add+0x77a/0xb10 [ 672.509015][T24027] nbd_init+0x291/0x2b0 [ 672.510496][T24027] do_one_initcall+0x121/0x750 [ 672.512110][T24027] kernel_init_freeable+0x6ea/0x7b0 [ 672.513833][T24027] kernel_init+0x1f/0x1e0 [ 672.515324][T24027] ret_from_fork+0x72b/0xd50 [ 672.516846][T24027] ret_from_fork_asm+0x1a/0x30 [ 672.518463][T24027] [ 672.518463][T24027] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 672.520838][T24027] __mutex_lock+0x1a4/0x1b10 [ 672.522538][T24027] elevator_change+0x1bc/0x530 [ 672.524279][T24027] elevator_set_none+0x92/0xf0 [ 672.526048][T24027] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 672.528161][T24027] nbd_start_device+0x1a6/0xbd0 [ 672.529856][T24027] nbd_genl_connect+0xff2/0x1a40 [ 672.531539][T24027] genl_family_rcv_msg_doit+0x214/0x300 [ 672.533359][T24027] genl_rcv_msg+0x560/0x800 [ 672.534880][T24027] netlink_rcv_skb+0x159/0x420 [ 672.536498][T24027] genl_rcv+0x28/0x40 [ 672.537895][T24027] netlink_unicast+0x585/0x850 [ 672.539517][T24027] netlink_sendmsg+0x8b0/0xda0 [ 672.541137][T24027] ____sys_sendmsg+0x9e1/0xb70 [ 672.542741][T24027] ___sys_sendmsg+0x190/0x1e0 [ 672.544329][T24027] __sys_sendmsg+0x170/0x220 [ 672.545906][T24027] __do_fast_syscall_32+0xe7/0x970 [ 672.547626][T24027] do_fast_syscall_32+0x32/0x70 [ 672.549265][T24027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.551367][T24027] [ 672.551367][T24027] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 672.553960][T24027] blk_alloc_queue+0x610/0x790 [ 672.555586][T24027] blk_mq_alloc_queue+0x174/0x290 [ 672.557284][T24027] __blk_mq_alloc_disk+0x29/0x120 [ 672.558968][T24027] nbd_dev_add+0x492/0xb10 [ 672.560630][T24027] nbd_init+0x291/0x2b0 [ 672.562196][T24027] do_one_initcall+0x121/0x750 [ 672.563940][T24027] kernel_init_freeable+0x6ea/0x7b0 [ 672.565704][T24027] kernel_init+0x1f/0x1e0 [ 672.567209][T24027] ret_from_fork+0x72b/0xd50 [ 672.568755][T24027] ret_from_fork_asm+0x1a/0x30 [ 672.570390][T24027] [ 672.570390][T24027] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 672.572582][T24027] fs_reclaim_acquire+0xc4/0x100 [ 672.574254][T24027] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 672.576098][T24027] alloc_inode+0x183/0x250 [ 672.577605][T24027] iget_locked+0x1d9/0x6d0 [ 672.579129][T24027] kernfs_get_inode+0x46/0x470 [ 672.580736][T24027] kernfs_get_tree+0x63e/0xbb0 [ 672.582321][T24027] vfs_get_tree+0x92/0x320 [ 672.583801][T24027] path_mount+0x7d0/0x23d0 [ 672.585295][T24027] __x64_sys_mount+0x293/0x310 [ 672.586919][T24027] do_syscall_64+0x115/0x840 [ 672.588463][T24027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.590400][T24027] [ 672.590400][T24027] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 672.592792][T24027] down_write+0x8b/0x1f0 [ 672.594190][T24027] kernfs_remove_by_name_ns+0x51/0x120 [ 672.595910][T24027] device_links_driver_bound+0xed/0x950 [ 672.597711][T24027] driver_bound+0xf0/0x220 [ 672.599217][T24027] really_probe+0x3d4/0xa60 [ 672.600749][T24027] __driver_probe_device+0x22e/0x480 [ 672.602698][T24027] driver_probe_device+0x4c/0x1b0 [ 672.604445][T24027] __device_attach_driver+0x1df/0x340 [ 672.606377][T24027] bus_for_each_drv+0x159/0x1e0 [ 672.608076][T24027] __device_attach+0x1e4/0x4d0 [ 672.609691][T24027] device_initial_probe+0xaf/0xd0 [ 672.611408][T24027] bus_probe_device+0x64/0x160 [ 672.613132][T24027] device_add+0x1210/0x1950 [ 672.614654][T24027] faux_device_create_with_groups+0x1c6/0x2f0 [ 672.616593][T24027] regulator_dummy_init+0x1e/0x40 [ 672.618290][T24027] regulator_init+0x14e/0x180 [ 672.619880][T24027] do_one_initcall+0x121/0x750 [ 672.621524][T24027] kernel_init_freeable+0x6ea/0x7b0 [ 672.623223][T24027] kernel_init+0x1f/0x1e0 [ 672.624645][T24027] ret_from_fork+0x72b/0xd50 [ 672.626172][T24027] ret_from_fork_asm+0x1a/0x30 [ 672.627736][T24027] [ 672.627736][T24027] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 672.630336][T24027] __lock_acquire+0x14b8/0x2630 [ 672.632008][T24027] lock_acquire+0x1b1/0x370 [ 672.633547][T24027] down_read+0x99/0x450 [ 672.635005][T24027] kernfs_remove+0x3b/0x70 [ 672.636506][T24027] sysfs_remove_dir+0xc8/0x110 [ 672.638089][T24027] __kobject_del+0xe2/0x220 [ 672.639638][T24027] kobject_del+0x3f/0x60 [ 672.641096][T24027] cleanup_glue_dir+0x203/0x260 [ 672.642748][T24027] device_del+0x63b/0x9b0 [ 672.644252][T24027] unregister_netdevice_many_notify+0x179e/0x24f0 [ 672.646341][T24027] unregister_netdevice_queue+0x30b/0x3c0 [ 672.648240][T24027] nsim_destroy+0x236/0x970 [ 672.649771][T24027] __nsim_dev_port_del+0x194/0x2b0 [ 672.651486][T24027] nsim_dev_reload_destroy+0x10a/0x4a0 [ 672.653301][T24027] nsim_dev_reload_down+0x66/0xd0 [ 672.655009][T24027] devlink_reload+0x1ae/0x7a0 [ 672.656595][T24027] devlink_nl_reload_doit+0x52c/0x11c0 [ 672.658426][T24027] genl_family_rcv_msg_doit+0x214/0x300 [ 672.660400][T24027] genl_rcv_msg+0x560/0x800 [ 672.661964][T24027] netlink_rcv_skb+0x159/0x420 [ 672.663720][T24027] genl_rcv+0x28/0x40 [ 672.665259][T24027] netlink_unicast+0x585/0x850 [ 672.666902][T24027] netlink_sendmsg+0x8b0/0xda0 [ 672.668674][T24027] ____sys_sendmsg+0x9e1/0xb70 [ 672.670359][T24027] ___sys_sendmsg+0x190/0x1e0 [ 672.672149][T24027] __sys_sendmsg+0x170/0x220 [ 672.673722][T24027] __do_fast_syscall_32+0xe7/0x970 [ 672.675565][T24027] do_fast_syscall_32+0x32/0x70 [ 672.677274][T24027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.679371][T24027] [ 672.679371][T24027] other info that might help us debug this: [ 672.679371][T24027] [ 672.682479][T24027] Chain exists of: [ 672.682479][T24027] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 672.682479][T24027] [ 672.686530][T24027] Possible unsafe locking scenario: [ 672.686530][T24027] [ 672.688781][T24027] CPU0 CPU1 [ 672.690421][T24027] ---- ---- [ 672.692058][T24027] lock(gdp_mutex); [ 672.693265][T24027] lock(cpuhp_state-up); [ 672.695325][T24027] lock(gdp_mutex); [ 672.697238][T24027] rlock(&root->kernfs_supers_rwsem); [ 672.698882][T24027] [ 672.698882][T24027] *** DEADLOCK *** [ 672.698882][T24027] [ 672.701331][T24027] 5 locks held by syz.5.17130/24027: [ 672.702952][T24027] #0: ffffffff906b97c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 672.705430][T24027] #1: ffff888022502128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x1f5/0x4d0 [ 672.708554][T24027] #2: ffff888027c9f258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x202/0x4d0 [ 672.712085][T24027] #3: ffffffff9060b120 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x19e/0x970 [ 672.714818][T24027] #4: ffffffff8f777780 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 672.717575][T24027] [ 672.717575][T24027] stack backtrace: [ 672.719387][T24027] CPU: 0 UID: 0 PID: 24027 Comm: syz.5.17130 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.719403][T24027] Tainted: [L]=SOFTLOCKUP [ 672.719407][T24027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 672.719414][T24027] Call Trace: [ 672.719418][T24027] [ 672.719423][T24027] dump_stack_lvl+0x100/0x190 [ 672.719441][T24027] print_circular_bug.cold+0x178/0x1c7 [ 672.719459][T24027] check_noncircular+0x146/0x160 [ 672.719477][T24027] __lock_acquire+0x14b8/0x2630 [ 672.719489][T24027] lock_acquire+0x1b1/0x370 [ 672.719497][T24027] ? kernfs_remove+0x3b/0x70 [ 672.719513][T24027] ? __pfx___might_resched+0x10/0x10 [ 672.719526][T24027] down_read+0x99/0x450 [ 672.719538][T24027] ? kernfs_remove+0x3b/0x70 [ 672.719552][T24027] ? find_held_lock+0x2b/0x80 [ 672.719565][T24027] ? __pfx_down_read+0x10/0x10 [ 672.719576][T24027] ? kernfs_root+0xee/0x2a0 [ 672.719590][T24027] kernfs_remove+0x3b/0x70 [ 672.719605][T24027] sysfs_remove_dir+0xc8/0x110 [ 672.719618][T24027] __kobject_del+0xe2/0x220 [ 672.719630][T24027] kobject_del+0x3f/0x60 [ 672.719641][T24027] cleanup_glue_dir+0x203/0x260 [ 672.719657][T24027] device_del+0x63b/0x9b0 [ 672.719668][T24027] ? __pfx_device_del+0x10/0x10 [ 672.719680][T24027] ? netdev_unregister_kobject+0x2da/0x540 [ 672.719696][T24027] unregister_netdevice_many_notify+0x179e/0x24f0 [ 672.719714][T24027] ? nsim_destroy+0x19e/0x970 [ 672.719724][T24027] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 672.719744][T24027] ? __pfx___mutex_lock+0x10/0x10 [ 672.719756][T24027] unregister_netdevice_queue+0x30b/0x3c0 [ 672.719770][T24027] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 672.719786][T24027] nsim_destroy+0x236/0x970 [ 672.719796][T24027] ? nsim_dev_reload_destroy+0xf0/0x4a0 [ 672.719810][T24027] ? nsim_dev_reload_destroy+0x10a/0x4a0 [ 672.719824][T24027] __nsim_dev_port_del+0x194/0x2b0 [ 672.719837][T24027] nsim_dev_reload_destroy+0x10a/0x4a0 [ 672.719852][T24027] nsim_dev_reload_down+0x66/0xd0 [ 672.719865][T24027] devlink_reload+0x1ae/0x7a0 [ 672.719878][T24027] ? __pfx_devlink_reload+0x10/0x10 [ 672.719890][T24027] ? security_capable+0x80/0x260 [ 672.719902][T24027] ? ns_capable+0xd2/0xf0 [ 672.719915][T24027] devlink_nl_reload_doit+0x52c/0x11c0 [ 672.719928][T24027] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 672.719940][T24027] ? __pfx_devlink_get_from_attrs_lock+0x10/0x10 [ 672.719951][T24027] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 672.719963][T24027] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 672.719976][T24027] genl_family_rcv_msg_doit+0x214/0x300 [ 672.719988][T24027] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 672.719998][T24027] ? genl_get_cmd+0x3e7/0x760 [ 672.720009][T24027] ? bpf_lsm_capable+0x9/0x10 [ 672.720022][T24027] ? security_capable+0x80/0x260 [ 672.720035][T24027] genl_rcv_msg+0x560/0x800 [ 672.720046][T24027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.720056][T24027] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 672.720066][T24027] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 672.720078][T24027] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 672.720091][T24027] netlink_rcv_skb+0x159/0x420 [ 672.720107][T24027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.720117][T24027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.720136][T24027] ? netlink_deliver_tap+0x1ae/0xcc0 [ 672.720151][T24027] genl_rcv+0x28/0x40 [ 672.720160][T24027] netlink_unicast+0x585/0x850 [ 672.720176][T24027] ? __pfx_netlink_unicast+0x10/0x10 [ 672.720194][T24027] netlink_sendmsg+0x8b0/0xda0 [ 672.720210][T24027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.720227][T24027] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 672.720241][T24027] ____sys_sendmsg+0x9e1/0xb70 [ 672.720255][T24027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.720271][T24027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.720286][T24027] ? __pfx___futex_wait+0x10/0x10 [ 672.720301][T24027] ? __pfx_futex_wake_mark+0x10/0x10 [ 672.720315][T24027] ___sys_sendmsg+0x190/0x1e0 [ 672.720331][T24027] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.720350][T24027] ? find_held_lock+0x2b/0x80 [ 672.720367][T24027] __sys_sendmsg+0x170/0x220 [ 672.720380][T24027] ? __pfx___sys_sendmsg+0x10/0x10 [ 672.720395][T24027] ? rcu_is_watching+0x12/0xc0 [ 672.720408][T24027] __do_fast_syscall_32+0xe7/0x970 [ 672.720419][T24027] ? lockdep_hardirqs_on+0x78/0x100 [ 672.720429][T24027] do_fast_syscall_32+0x32/0x70 [ 672.720440][T24027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.720453][T24027] RIP: 0023:0xf6feef7c [ 672.720462][T24027] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 672.720472][T24027] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 672.720482][T24027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 672.720489][T24027] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.720495][T24027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.720501][T24027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 672.720507][T24027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.720517][T24027] [ 673.763698][ T122] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.771225][ T122] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.777847][ T122] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.783421][ T59] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.030275][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.529973][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.859766][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.170694][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.839263][ T59] bridge_slave_1: left promiscuous mode [ 675.841126][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.939476][ T59] bridge_slave_0: left allmulticast mode [ 675.941289][ T59] bridge_slave_0: left promiscuous mode [ 675.943134][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.789500][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.850081][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.911049][ T59] bond0 (unregistering): Released all slaves [ 676.929870][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 676.979924][ T59] tipc: Left network mode [ 677.039953][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 677.460152][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 677.580358][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 678.259616][ T59] hsr_slave_0: left promiscuous mode [ 678.299168][ T59] hsr_slave_1: left promiscuous mode [ 678.301995][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.305145][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.319862][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.322120][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.419697][ T59] veth1_macvtap: left promiscuous mode [ 678.421493][ T59] veth0_macvtap: left promiscuous mode [ 678.423283][ T59] veth1_vlan: left promiscuous mode [ 678.425069][ T59] veth0_vlan: left promiscuous mode [ 679.160175][ T59] team0 (unregistering): Port device team_slave_1 removed [ 679.179702][ T59] team0 (unregistering): Port device team_slave_0 removed [ 680.660860][ T59] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.810086][ T59] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.990111][ T59] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.160354][ T59] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.789343][ T59] bridge_slave_1: left allmulticast mode [ 681.791126][ T59] bridge_slave_1: left promiscuous mode [ 681.792908][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.879490][ T59] bridge_slave_0: left allmulticast mode [ 681.881125][ T59] bridge_slave_0: left promiscuous mode [ 681.882954][ T59] bridge0: port 1(bridge_slave_0) entered disabled state