last executing test programs: 4m58.951526951s ago: executing program 0 (id=14722): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x2, 0x0, 0xc, 0x2}, 0x20) 4m58.900635006s ago: executing program 0 (id=14724): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) 4m58.899385802s ago: executing program 0 (id=14726): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4m58.832983563s ago: executing program 0 (id=14727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 4m58.762624947s ago: executing program 0 (id=14730): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 4m58.762067143s ago: executing program 0 (id=14735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x9}) 4m43.710123113s ago: executing program 32 (id=14735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x9}) 4m13.013214588s ago: executing program 2 (id=16345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xc00, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m12.963458443s ago: executing program 2 (id=16347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007800c000300030000000000000008000200"], 0x38}}, 0x0) 4m12.963238657s ago: executing program 2 (id=16349): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 4m12.883459084s ago: executing program 2 (id=16352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 4m12.802208175s ago: executing program 2 (id=16355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 4m12.513608526s ago: executing program 2 (id=16361): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) 4m12.465426506s ago: executing program 33 (id=16361): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) 3m28.766761193s ago: executing program 1 (id=17851): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3m28.300972021s ago: executing program 1 (id=17858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x2000000}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 3m27.746248454s ago: executing program 1 (id=17864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 3m27.652324931s ago: executing program 1 (id=17869): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 3m27.592684101s ago: executing program 1 (id=17871): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3m27.301003494s ago: executing program 1 (id=17877): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 3m27.264846148s ago: executing program 34 (id=17877): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 43.930855787s ago: executing program 5 (id=20918): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 43.678155786s ago: executing program 5 (id=20920): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 43.617124678s ago: executing program 5 (id=20922): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) 43.385754549s ago: executing program 5 (id=20927): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.338835423s ago: executing program 5 (id=20929): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 42.988684934s ago: executing program 5 (id=20933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.921800459s ago: executing program 35 (id=20933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.79630074s ago: executing program 4 (id=21649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 3.640267489s ago: executing program 4 (id=21650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r0) 2.799577498s ago: executing program 4 (id=21662): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1}) 2.59404073s ago: executing program 4 (id=21666): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2.5857516s ago: executing program 4 (id=21668): syz_open_dev$vim2m(&(0x7f0000000200), 0x4000004, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.349557664s ago: executing program 4 (id=21674): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000004}) ioctl$TCXONC(r0, 0x540a, 0x2) 2.256596705s ago: executing program 36 (id=21674): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000004}) ioctl$TCXONC(r0, 0x540a, 0x2) 1.959798288s ago: executing program 3 (id=21681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x4}) r1 = getpid() fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x113, 0x1, r1}) 1.959525706s ago: executing program 3 (id=21682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x60}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.839420752s ago: executing program 3 (id=21685): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1.8374946s ago: executing program 3 (id=21686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000006c0)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) 1.803401179s ago: executing program 3 (id=21687): r0 = io_uring_setup(0xf09, &(0x7f0000000600)={0x0, 0xfb6e, 0x3890, 0x84, 0x363}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40000020) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) 889.768927ms ago: executing program 3 (id=21689): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f00000015c0)=[{&(0x7f0000000240)='R', 0x1}], 0x1) 601.712444ms ago: executing program 7 (id=21691): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1) 430.116118ms ago: executing program 6 (id=21692): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) 368.169281ms ago: executing program 6 (id=21693): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0xffffb453) ptrace$pokeuser(0x6, r0, 0x102, 0x5) 367.952132ms ago: executing program 7 (id=21694): io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000580)={r1, 0x0, 0x0}) 306.807418ms ago: executing program 7 (id=21695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) 294.177011ms ago: executing program 7 (id=21696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 210.370579ms ago: executing program 6 (id=21697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x94f, 0x0, 0xfffffffffffffffe}, {0x65a}]}) 149.26023ms ago: executing program 7 (id=21698): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x2275}}]}}]}, 0x58}}, 0x44080) 148.997204ms ago: executing program 7 (id=21699): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 58.196354ms ago: executing program 6 (id=21700): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x70bd2f, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 263.282µs ago: executing program 6 (id=21701): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x7}, 0x8) 0s ago: executing program 6 (id=21702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): vice=61.23 [ 499.905305][ T8826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.116758][ T8826] usb 10-1: GET_CAPABILITIES returned 0 [ 500.120023][ T8826] usbtmc 10-1:16.0: can't read capabilities [ 500.327588][T27747] usbtmc 10-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 500.332127][ T5826] usb 10-1: USB disconnect, device number 11 [ 501.602667][T27839] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.833045][T27867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18944'. [ 501.901834][T27875] netlink: 36 bytes leftover after parsing attributes in process `syz.6.18949'. [ 501.995920][T27882] tun0: tun_chr_ioctl cmd 1074025676 [ 501.998208][T27882] tun0: owner set to 0 [ 502.634127][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18972'. [ 502.842614][T27973] GUP no longer grows the stack in syz.5.18979 (27973): 80009000-8000a000 (80005000) [ 502.853271][T27973] CPU: 0 UID: 0 PID: 27973 Comm: syz.5.18979 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.853297][T27973] Tainted: [L]=SOFTLOCKUP [ 502.853302][T27973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.853310][T27973] Call Trace: [ 502.853316][T27973] [ 502.853323][T27973] dump_stack_lvl+0x100/0x190 [ 502.853352][T27973] gup_vma_lookup.cold+0x83/0x96 [ 502.853374][T27973] __get_user_pages+0x241/0x32a0 [ 502.853397][T27973] ? down_read_killable+0x35e/0x520 [ 502.853413][T27973] ? __pfx___get_user_pages+0x10/0x10 [ 502.853434][T27973] __gup_longterm_locked+0x87d/0x16f0 [ 502.853454][T27973] ? __pfx___gup_longterm_locked+0x10/0x10 [ 502.853471][T27973] ? lock_acquire+0x1b9/0x370 [ 502.853495][T27973] gup_fast_fallback+0x16dc/0x2790 [ 502.853520][T27973] ? __pfx_gup_fast_fallback+0x10/0x10 [ 502.853537][T27973] ? find_held_lock+0x2b/0x80 [ 502.853553][T27973] ? __lock_acquire+0x49f/0x1a40 [ 502.853573][T27973] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 502.853586][T27973] ? lockdep_hardirqs_on+0x78/0x100 [ 502.853605][T27973] get_user_pages_fast+0xa7/0xf0 [ 502.853621][T27973] ? __pfx_get_user_pages_fast+0x10/0x10 [ 502.853638][T27973] ? iov_iter_advance+0xac/0x6d0 [ 502.853666][T27973] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 502.853690][T27973] ? pipe_lock+0x69/0x80 [ 502.853709][T27973] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 502.853726][T27973] ? __pfx___mutex_lock+0x10/0x10 [ 502.853738][T27973] ? iovec_from_user+0xda/0x140 [ 502.853767][T27973] iov_iter_get_pages2+0xa3/0x100 [ 502.853790][T27973] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 502.853806][T27973] ? wait_for_space+0x2ca/0x3b0 [ 502.853828][T27973] __do_sys_vmsplice+0x7dd/0x13c0 [ 502.853848][T27973] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 502.853872][T27973] ? __pfx_futex_wait+0x10/0x10 [ 502.853918][T27973] ? __do_fast_syscall_32+0xe7/0x970 [ 502.853930][T27973] __do_fast_syscall_32+0xe7/0x970 [ 502.853950][T27973] do_fast_syscall_32+0x32/0x70 [ 502.853967][T27973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.853990][T27973] RIP: 0023:0xf701efec [ 502.854012][T27973] Code: Unable to access opcode bytes at 0xf701efc2. [ 502.854019][T27973] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 502.854031][T27973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 502.854040][T27973] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.854049][T27973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.854059][T27973] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 502.854071][T27973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.854097][T27973] [ 503.120280][T27988] bond0: entered promiscuous mode [ 503.121996][T27988] bond_slave_0: entered promiscuous mode [ 503.124486][T27988] bond_slave_1: entered promiscuous mode [ 503.131721][T27988] batadv0: entered promiscuous mode [ 503.136572][T27988] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 503.148369][T27988] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 503.443548][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18999'. [ 503.938705][T28066] block nbd0: Unsupported socket: should be TCP or UNIX. [ 503.981535][T28071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19011'. [ 504.495804][T28113] tipc: Started in network mode [ 504.497452][T28113] tipc: Node identity 7f000001, cluster identity 4711 [ 504.506779][T28113] tipc: Enabled bearer , priority 4 [ 504.752846][T28138] netlink: 766 bytes leftover after parsing attributes in process `syz.3.19033'. [ 504.822175][ T846] hid_parser_main: 106 callbacks suppressed [ 504.822192][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.827881][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.831378][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.834092][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.836981][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.839906][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.842570][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.845009][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.847454][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.850776][ T846] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 504.854775][ T846] hid-generic 0004:FFFFFFFF:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 504.913068][T28152] fido_id[28152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 505.111274][ T8826] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 505.163380][T28178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19045'. [ 505.174047][T28178] geneve0: entered promiscuous mode [ 505.259056][ T8826] usb 10-1: Using ep0 maxpacket: 8 [ 505.285133][ T8826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 505.289943][ T8826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 505.294437][ T8826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.299617][ T8826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.305436][ T8826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.314629][ T8826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.504398][T15463] tipc: Node number set to 2130706433 [ 505.544457][ T8826] usb 10-1: GET_CAPABILITIES returned 0 [ 505.546443][ T8826] usbtmc 10-1:16.0: can't read capabilities [ 505.746825][T15463] usb 10-1: USB disconnect, device number 12 [ 506.464695][T28262] input: syz0 as /devices/virtual/input/input86 [ 506.797642][T28281] netlink: 'syz.3.19066': attribute type 10 has an invalid length. [ 508.096459][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19095'. [ 508.152405][T28372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19097'. [ 509.073918][ T846] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 509.073918][ T846] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 509.113052][T28466] fido_id[28466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 509.193564][T28481] program syz.5.19130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.252537][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19132'. [ 509.294251][T28492] binder: 28491:28492 ioctl c018620c 80000140 returned -1 [ 509.570895][T28490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19133'. [ 509.577230][T28490] geneve2: entered promiscuous mode [ 509.722654][T28556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19144'. [ 509.784208][T28559] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 509.786502][T28559] dvmrp1: linktype set to 804 [ 510.210198][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19154'. [ 510.270975][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19157'. [ 510.602339][T28656] netlink: 'syz.3.19166': attribute type 4 has an invalid length. [ 510.868140][T28686] openvswitch: netlink: IPv4 tunnel dst address is zero [ 510.872196][T28686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.238421][T28775] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 511.696274][T28869] input: syz0 as /devices/virtual/input/input87 [ 512.357802][T28961] binder: 28960:28961 ioctl c0306201 80000040 returned -22 [ 514.069606][ T8826] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 514.097831][T29088] openvswitch: netlink: IP tunnel dst address not specified [ 514.100548][T29088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.241756][ T8826] usb 11-1: too many configurations: 98, using maximum allowed: 8 [ 514.246324][ T8826] usb 11-1: config index 0 descriptor too short (expected 64915, got 45) [ 514.251580][ T8826] usb 11-1: config index 1 descriptor too short (expected 64915, got 45) [ 514.257452][ T8826] usb 11-1: config index 2 descriptor too short (expected 64915, got 45) [ 514.262826][ T8826] usb 11-1: config index 3 descriptor too short (expected 64915, got 45) [ 514.267563][ T8826] usb 11-1: config index 4 descriptor too short (expected 64915, got 45) [ 514.272725][ T8826] usb 11-1: config index 5 descriptor too short (expected 64915, got 45) [ 514.277353][ T8826] usb 11-1: config index 6 descriptor too short (expected 64915, got 45) [ 514.282175][ T8826] usb 11-1: config index 7 descriptor too short (expected 64915, got 45) [ 514.287961][ T8826] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 514.292304][ T8826] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.295667][ T8826] usb 11-1: Product: syz [ 514.297430][ T8826] usb 11-1: Manufacturer: syz [ 514.299829][ T8826] usb 11-1: SerialNumber: syz [ 514.566226][ T8826] rtl8150 11-1:1.0: couldn't reset the device [ 514.571404][ T8826] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 514.590966][ T8826] usb 11-1: USB disconnect, device number 4 [ 514.626130][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19263'. [ 514.635716][T29100] geneve2: entered promiscuous mode [ 514.753474][T29149] vxcan0: tx address claim with dest, not broadcast [ 515.318482][T29184] o2cb: This node has not been configured. [ 515.326545][T29184] o2cb: Cluster check failed. Fix errors before retrying. [ 515.329803][T29184] (syz.6.19281,29184,3):user_dlm_register:674 ERROR: status = -22 [ 515.333163][T29184] (syz.6.19281,29184,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 515.402264][T15463] hid_parser_main: 38 callbacks suppressed [ 515.402280][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x7 [ 515.410266][T15463] hid-generic 0000:0000:0000.000E: ignoring exceeding usage max [ 515.412481][T29193] Invalid option length (1003308) for dns_resolver key [ 515.415576][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.418596][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.421906][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.425104][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.427490][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.430667][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.434816][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.438146][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.441858][T15463] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.451102][T15463] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 515.497000][T29204] fido_id[29204]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 515.726021][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19291'. [ 515.738087][T29216] geneve0: entered promiscuous mode [ 516.089650][T29287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19307'. [ 516.125239][T29289] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 516.153245][ T228] Bluetooth: hci3: Frame reassembly failed (-84) [ 516.157167][ T228] Bluetooth: hci3: Frame reassembly failed (-84) [ 516.829808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.232376][T29348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19325'. [ 517.238301][T29348] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.464187][T29372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19332'. [ 517.599235][T19954] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 517.757614][T19954] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.761671][T19954] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.766404][T19954] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 517.771025][T19954] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.776594][T19954] usb 11-1: config 0 descriptor?? [ 517.781879][T19954] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 517.984638][ T1480] usb 11-1: USB disconnect, device number 5 [ 518.193669][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 518.323392][T29455] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.327853][T29455] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 518.375123][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19355'. [ 518.378771][T29461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19355'. [ 518.382216][T29461] netlink: 'syz.4.19355': attribute type 20 has an invalid length. [ 518.459192][T29466] serio: Serial port ttynull [ 518.469437][ T24] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 518.620583][ T24] usb 11-1: config index 0 descriptor too short (expected 1307, got 36) [ 518.634961][ T24] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 518.638291][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.643515][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 518.647372][ T24] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 518.652720][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 518.663754][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 256, setting to 8 [ 518.667245][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 518.676118][ T24] usb 11-1: string descriptor 0 read error: -22 [ 518.678511][ T24] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 518.682267][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.704817][ T24] usb 11-1: config 0 descriptor?? [ 518.710118][ T24] hub 11-1:0.0: bad descriptor, ignoring hub [ 518.713020][ T24] hub 11-1:0.0: probe with driver hub failed with error -5 [ 518.725524][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input90 [ 518.874365][T29533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19373'. [ 518.880808][T29533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19373'. [ 518.917900][ T5826] usb 11-1: USB disconnect, device number 6 [ 518.920719][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 518.920757][ T42] audit: type=1800 audit(2000000655.423:24425): pid=29543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.19383" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 519.057099][ T24] kernel read not supported for file /rfkill (pid: 24 comm: kworker/2:0) [ 519.231440][T29575] loop8: detected capacity change from 0 to 524287999 [ 519.255847][T25165] buffer_io_error: 32 callbacks suppressed [ 519.255888][T25165] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 519.283890][T29583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19384'. [ 519.291918][T29583] netlink: 'syz.4.19384': attribute type 12 has an invalid length. [ 519.364905][T29590] 8021q: adding VLAN 0 to HW filter on device bond13 [ 519.368388][T29590] bond13: entered promiscuous mode [ 519.372168][T29590] bond0: (slave bond13): Enslaving as an active interface with an up link [ 519.467421][T29632] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 519.580397][ T42] audit: type=1326 audit(2000000656.083:24426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.587390][ T42] audit: type=1326 audit(2000000656.083:24427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.600795][ T42] audit: type=1326 audit(2000000656.083:24428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.609863][ T42] audit: type=1326 audit(2000000656.083:24429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.617138][ T42] audit: type=1326 audit(2000000656.083:24430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.636638][ T42] audit: type=1326 audit(2000000656.083:24431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.642775][T29649] __nla_validate_parse: 1 callbacks suppressed [ 519.642796][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19397'. [ 519.645244][ T42] audit: type=1326 audit(2000000656.083:24432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.663535][ T42] audit: type=1326 audit(2000000656.083:24433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 519.673140][ T42] audit: type=1326 audit(2000000656.083:24434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.3.19396" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 520.069018][T29684] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.459974][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.470209][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.473148][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.475989][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.478803][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.481509][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.483732][T29727] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 520.704034][T19954] kernel read not supported for file /dsp1 (pid: 19954 comm: kworker/0:6) [ 520.776927][T29730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19422'. [ 521.919582][T29774] kvm: kvm [29773]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 522.194597][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.905696][T29893] input: syz0 as /devices/virtual/input/input91 [ 523.029581][ T8826] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 523.954585][ T5756] Bluetooth: hci3: command 0x1003 tx timeout [ 523.954610][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 533.690772][T29961] net_ratelimit: 3323 callbacks suppressed [ 533.690788][T29961] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 533.698557][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.701631][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.320544][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19511'. [ 534.337606][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19511'. [ 534.424996][T30073] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 534.442131][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19516'. [ 534.445226][T30078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19516'. [ 534.719370][T15463] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 534.889102][T15463] usb 10-1: Using ep0 maxpacket: 8 [ 534.893218][T15463] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 534.895931][T15463] usb 10-1: config 0 has no interface number 0 [ 534.897930][T15463] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.901735][T15463] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.904888][T15463] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 534.908589][T15463] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 534.912892][T15463] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.919304][T15463] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 534.922301][T15463] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.924957][T15463] usb 10-1: Product: syz [ 534.926333][T15463] usb 10-1: Manufacturer: syz [ 534.927926][T15463] usb 10-1: SerialNumber: syz [ 534.932528][T15463] usb 10-1: config 0 descriptor?? [ 535.153921][T15463] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 535.363437][ T846] usb 10-1: USB disconnect, device number 13 [ 536.180873][ T42] kauditd_printk_skb: 739 callbacks suppressed [ 536.180893][ T42] audit: type=1326 audit(2000000672.683:25174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.19527" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 536.358654][T15463] kernel write not supported for file /input/event2 (pid: 15463 comm: kworker/0:5) [ 536.429050][ T5756] Bluetooth: hci3: command 0x1003 tx timeout [ 536.435524][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 536.584865][T30149] : renamed from vlan0 (while UP) [ 536.622021][T30153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19534'. [ 536.679108][T30156] Invalid logical block size (4095) [ 537.615659][T30256] loop9: detected capacity change from 0 to 524287998 [ 537.683878][T30261] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19567'. [ 539.329103][ T5847] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 539.491440][ T5847] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 539.496151][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.502444][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.508405][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.514740][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.518857][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.523602][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.527712][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.531725][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.536232][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.540317][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.544152][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.548582][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.552586][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.556789][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.561564][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.565624][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.569713][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.574043][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.577741][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.581760][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.585918][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.592121][ T5847] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.595729][ T5847] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.609056][ T5847] usb 11-1: config 0 interface 0 has no altsetting 0 [ 539.613979][ T5847] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 539.618513][ T5847] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 539.622407][ T5847] usb 11-1: Product: syz [ 539.624271][ T5847] usb 11-1: Manufacturer: syz [ 539.626388][ T5847] usb 11-1: SerialNumber: syz [ 539.631120][ T5847] usb 11-1: config 0 descriptor?? [ 539.639930][ T5847] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 539.896286][ C1] usb 11-1: yurex_control_callback - control failed: -71 [ 539.896470][ T8826] usb 11-1: USB disconnect, device number 7 [ 539.904275][ T8826] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 540.143637][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19614'. [ 540.146537][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19614'. [ 540.343190][T30455] netlink: 'syz.4.19620': attribute type 12 has an invalid length. [ 540.346510][T30455] netlink: 'syz.4.19620': attribute type 29 has an invalid length. [ 540.350239][T30455] netlink: 148 bytes leftover after parsing attributes in process `syz.4.19620'. [ 540.353802][T30455] netlink: 'syz.4.19620': attribute type 1 has an invalid length. [ 540.356791][T30455] netlink: 'syz.4.19620': attribute type 2 has an invalid length. [ 540.408016][T30466] binder: 30464:30466 ioctl c0306201 80000000 returned -14 [ 544.296048][T30664] binder: 30663:30664 ioctl 541b 0 returned -22 [ 544.372878][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19686'. [ 544.515246][T30688] input: syz1 as /devices/virtual/input/input93 [ 544.592453][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19695'. [ 544.606253][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19695'. [ 545.469050][T30779] batadv_slave_1: entered promiscuous mode [ 545.476198][T30778] batadv_slave_1: left promiscuous mode [ 546.152137][T30873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19754'. [ 546.236979][T30885] openvswitch: netlink: IP tunnel TTL not specified. [ 546.239797][T30885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.276726][T30890] netlink: 'syz.4.19760': attribute type 1 has an invalid length. [ 546.279529][T30890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.282389][T30890] IPv6: NLM_F_CREATE should be set when creating new route [ 546.326588][T30897] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 546.329568][T30897] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 547.088584][T30960] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 547.309089][ T41] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 547.370889][T30986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19787'. [ 547.460613][ T41] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.464425][ T41] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 547.467696][ T41] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.471162][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.476351][T30955] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 547.483652][ T41] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.695178][ T41] usb 10-1: USB disconnect, device number 14 [ 547.753640][T31032] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 548.917808][T31085] netlink: 'syz.6.19809': attribute type 1 has an invalid length. [ 549.630017][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19822'. [ 549.644093][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19822'. [ 549.674045][T31133] program syz.5.19823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.686428][T31133] ata1.00: invalid service action 31 [ 549.799899][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 549.825848][ T5756] Bluetooth: hci3: command 0x1003 tx timeout [ 549.930266][T31152] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 549.933573][T31152] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 549.939440][T31152] overlayfs: failed to get uuid (1148/file2, err=-13); falling back to uuid=null. [ 550.020974][T19954] hid_parser_main: 12 callbacks suppressed [ 550.021003][T19954] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 550.038254][T19954] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 550.043074][T19954] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 550.123050][T31165] fido_id[31165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 550.307250][T31195] veth0: entered promiscuous mode [ 550.310412][T31194] veth0: left promiscuous mode [ 550.871092][ T8826] e1000 0000:00:06.0 eth0: Reset adapter [ 551.529098][ T5847] kernel read not supported for file /dsp1 (pid: 5847 comm: kworker/1:4) [ 553.160101][ T8826] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 554.553102][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 561.554292][T31421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.640097][T31436] bond1: ARP target 9.0.0.0 is already present [ 561.642227][T31436] bond1: option arp_ip_target: invalid value (9) [ 561.650591][T31436] bond1 (unregistering): Released all slaves [ 561.819710][T31421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.928350][ T5826] IPVS: starting estimator thread 0... [ 561.992147][T31421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.029217][T31529] IPVS: using max 44 ests per chain, 105600 per kthread [ 562.180135][T31421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.378311][T14203] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.380973][T14203] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.395692][T14203] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.432910][T14203] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.492517][T31585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 562.495350][T31585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 562.910186][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.941620][T31610] kvm_intel: kvm [31609]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 563.063167][T31627] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 563.066315][T31627] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 563.175231][ T42] audit: type=1326 audit(2000000700.670:25175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31634 comm="syz.3.19903" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 564.361532][T31744] [U] [ 564.363489][T31744] [U] [ 564.364407][T31744] [U] [ 564.365298][T31744] [U] [ 564.366178][T31744] [U] [ 564.367061][T31744] [U] [ 564.367940][T31744] [U] [ 564.368819][T31744] [U] [ 564.372479][T31744] [U] [ 564.373406][T31744] [U] [ 564.374307][T31744] [U] [ 564.375202][T31744] [U] [ 564.376081][T31744] [U] [ 564.376960][T31744] [U] [ 564.377840][T31744] [U] [ 564.378723][T31744] [U] [ 564.380178][T31744] [U] [ 564.381188][T31744] [U] [ 564.382077][T31744] [U] [ 564.382983][T31744] [U] [ 564.383876][T31744] [U] [ 564.384897][T31744] [U] [ 564.386035][T31744] [U] [ 564.387230][T31744] [U] [ 564.388741][T31744] [U] [ 564.389727][T31744] [U] [ 564.390617][T31744] [U] [ 564.391622][T31744] [U] [ 564.392655][T31744] [U] [ 564.393533][T31744] [U] [ 564.394432][T31744] [U] [ 564.395327][T31744] [U] [ 564.396881][T31744] [U] [ 564.397792][T31744] [U] [ 564.398687][T31744] [U] [ 564.399678][T31744] [U] [ 564.400570][T31744] [U] [ 564.401447][T31744] [U] [ 564.402546][T31744] [U] [ 564.403423][T31744] [U] [ 564.404673][T31744] [U] [ 564.405523][T31744] [U] [ 564.406896][T31744] [U] [ 564.407777][T31744] [U] [ 564.408688][T31744] [U] [ 564.409680][T31744] [U] [ 564.410709][T31744] [U] [ 564.411598][T31744] [U] [ 564.413389][T31744] [U] [ 564.414301][T31744] [U] [ 564.415206][T31744] [U] [ 564.416100][T31744] [U] [ 564.416985][T31744] [U] [ 564.417867][T31744] [U] [ 564.418754][T31744] [U] [ 564.419592][T31744] [U] [ 564.420740][T31744] [U] [ 564.421661][T31744] [U] [ 564.422545][T31744] [U] [ 564.423629][T31744] [U] [ 564.424569][T31744] [U] [ 564.425449][T31744] [U] [ 564.426377][T31744] [U] [ 564.427268][T31744] [U] [ 564.428161][T31744] [U] [ 564.429053][T31744] [U] [ 564.429923][T31744] [U] [ 564.430840][T31744] [U] [ 564.431726][T31744] [U] [ 564.432601][T31744] [U] [ 564.433474][T31744] [U] [ 564.434262][T31744] [U] [ 564.435488][T31744] [U] [ 564.436449][T31744] [U] [ 564.437373][T31744] [U] [ 564.438257][T31744] [U] [ 564.439141][T31744] [U] [ 564.440007][T31744] [U] [ 564.440910][T31744] [U] [ 564.441785][T31744] [U] [ 564.442770][T31744] [U] [ 564.443619][T31744] [U] [ 564.444506][T31744] [U] [ 564.445373][T31744] [U] [ 564.446395][T31744] [U] [ 564.447304][T31744] [U] [ 564.448455][T31744] [U] [ 564.449527][T31744] [U] [ 564.451207][T31744] [U] [ 564.452787][T31744] [U] [ 564.453886][T31744] [U] [ 564.454980][T31744] [U] [ 564.456270][T31744] [U] [ 564.457459][T31744] [U] [ 564.458551][T31744] [U] [ 564.459450][T31744] [U] [ 564.469763][T31744] [U] [ 564.470840][T31744] [U] [ 564.471718][T31744] [U] [ 564.473050][T31744] [U] [ 564.473954][T31744] [U] [ 564.474872][T31744] [U] [ 564.475861][T31744] [U] [ 564.477206][T31744] [U] [ 564.478149][T31744] [U] [ 564.479072][T31744] [U] [ 564.480107][T31744] [U] [ 564.481038][T31744] [U] [ 564.481978][T31744] [U] [ 564.483009][T31744] [U] [ 564.484063][T31744] [U] [ 564.485069][T31744] [U] [ 564.504310][T31744] [U] [ 564.505533][T31744] [U] [ 564.506666][T31744] [U] [ 564.507669][T31744] [U] [ 564.508545][T31744] [U] [ 564.509430][T31744] [U] [ 564.510516][T31744] [U] [ 564.511657][T31744] [U] [ 564.513140][T31744] [U] [ 564.514306][T31744] [U] [ 564.515451][T31744] [U] [ 564.516470][T31744] [U] [ 564.517352][T31744] [U] [ 564.518312][T31744] [U] [ 564.519456][T31744] [U] [ 564.553641][T31743] [U] [ 564.783177][ T42] audit: type=1800 audit(2000000702.280:25176): pid=31766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19944" name="cgroup.controllers" dev="tmpfs" ino=6019 res=0 errno=0 [ 564.898435][T31787] Failed to get privilege flags for destination (handle=0x2:0x0) [ 565.004653][T31797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.011652][T31797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.022840][T31797] bond0 (unregistering): Released all slaves [ 565.169521][T31835] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 565.173815][ T8826] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 565.237169][T31846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19962'. [ 565.469600][T31868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.503398][T31868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.509968][T31868] bond0 (unregistering): Released all slaves [ 565.709391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.784546][T31888] bond0 (unregistering): Released all slaves [ 566.120421][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.370121][T31973] netlink: 'syz.4.19989': attribute type 21 has an invalid length. [ 566.373994][T31973] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19989'. [ 566.403533][T31972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.419512][T31972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.427338][T31972] bond0 (unregistering): Released all slaves [ 566.427463][T31974] netlink: 'syz.4.19989': attribute type 21 has an invalid length. [ 566.436653][T31974] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19989'. [ 566.436759][T31973] netlink: 'syz.4.19989': attribute type 5 has an invalid length. [ 566.446950][T31973] netlink: 'syz.4.19989': attribute type 6 has an invalid length. [ 566.451239][T31973] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19989'. [ 566.458115][T31974] netlink: 'syz.4.19989': attribute type 5 has an invalid length. [ 566.468297][T31974] netlink: 'syz.4.19989': attribute type 6 has an invalid length. [ 566.473803][T31974] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19989'. [ 566.749391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.757828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.764770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.963850][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19992'. [ 567.040286][ T8826] kernel write not supported for file /input/event2 (pid: 8826 comm: kworker/2:3) [ 567.056222][T32014] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 567.063332][T32014] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 567.245562][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20003'. [ 567.767654][T32088] batadv_slave_1: entered promiscuous mode [ 567.773000][T32088] batadv_slave_1: left promiscuous mode [ 567.799012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.061988][T32109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20036'. [ 568.084819][T32112] bond0 (unregistering): left promiscuous mode [ 568.087558][T32112] bond_slave_0: left promiscuous mode [ 568.090276][T32112] bond_slave_1: left promiscuous mode [ 568.093125][T32112] bond13: left promiscuous mode [ 568.097465][T32112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.106780][T32112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.122213][T32112] bond0 (unregistering): (slave bond13): Releasing backup interface [ 568.131711][T32112] bond0 (unregistering): Released all slaves [ 568.279550][ T42] audit: type=1326 audit(2000000705.780:25177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32127 comm="syz.4.20032" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 568.339181][ T5847] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 568.509080][ T5847] usb 11-1: Using ep0 maxpacket: 8 [ 568.513206][ T5847] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 568.518019][ T5847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 568.523721][ T5847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.527926][ T5847] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.532958][ T5847] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.536666][ T5847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.753682][ T5847] usb 11-1: GET_CAPABILITIES returned 0 [ 568.756077][ T5847] usbtmc 11-1:16.0: can't read capabilities [ 568.829119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.962018][T32113] usb 11-1: usbtmc_ioctl_clear_in_halt returned -32 [ 568.967590][T19954] usb 11-1: USB disconnect, device number 8 [ 569.041337][T32173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20044'. [ 569.152993][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.716029][T32241] kvm: kvm [32238]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 569.879021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.900222][T32267] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.959508][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.966446][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.978205][T32267] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.045982][T32267] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.120672][T32267] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.221072][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.232814][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.246853][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.264561][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.599745][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.607273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.610948][ T5826] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 570.780814][ T5826] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 570.785196][T32325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.785850][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 570.790224][T32325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.797411][ T5826] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.802921][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.806322][ T5826] usb 10-1: Product: syz [ 570.808310][ T5826] usb 10-1: Manufacturer: syz [ 570.810439][ T5826] usb 10-1: SerialNumber: syz [ 570.831094][ T5826] usb 10-1: config 0 descriptor?? [ 570.840010][T32297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 570.911331][T32325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.918669][T32325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.919105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.030825][T32325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.035031][T32325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.050884][T32297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.172901][T32325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.181941][T32325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.261626][T32295] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 571.268647][ T5826] usb 10-1: USB disconnect, device number 15 [ 571.344811][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.347591][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.366128][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.369758][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.390955][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.394536][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.412438][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.415202][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.869367][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.022662][T32464] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 572.055750][T32469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20125'. [ 572.773183][T32491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20131'. [ 572.822613][T32493] net_ratelimit: 3 callbacks suppressed [ 572.822635][T32493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.831703][T32493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.842680][T32493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.877191][T32493] syz.4.20132 (32493) used greatest stack depth: 18648 bytes left [ 572.989281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.063334][ T846] kernel write not supported for file /uinput (pid: 846 comm: kworker/3:2) [ 573.303929][T32516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.458119][T32516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.612607][T32516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.662460][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20152'. [ 573.780513][T32516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.869180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.946381][ T5611] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.969858][ T5611] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.995156][ T5611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.015385][ T5611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.029044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.093114][T32592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.101585][T32592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.104566][T32592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.108141][T32592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.379029][T14200] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 574.512689][T32613] netlink: 3 bytes leftover after parsing attributes in process `syz.6.20166'. [ 574.533132][T14200] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.546717][T14200] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 574.550817][T14200] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 574.558176][T14200] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.566283][T14200] usb 10-1: config 0 descriptor?? [ 574.570777][T14200] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 574.572872][T14200] dvb-usb: bulk message failed: -22 (3/0) [ 574.577348][T14200] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 574.581248][T14200] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 574.583456][T14200] usb 10-1: media controller created [ 574.586817][T14200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.607735][T14200] dvb-usb: bulk message failed: -22 (6/0) [ 574.613455][T14200] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 574.618228][T14200] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input95 [ 574.623381][T14200] dvb-usb: schedule remote query interval to 150 msecs. [ 574.625635][T14200] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 574.712899][T32641] loop5: detected capacity change from 0 to 7 [ 574.720528][T32369] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.723756][T32369] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.727275][T32369] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.731953][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.734598][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.737194][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.741330][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.745330][T32369] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.748791][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.752351][T32641] Buffer I/O error on dev loop5, logical block 0, async page read [ 574.754951][T32641] ldm_validate_partition_table(): Disk read failed. [ 574.757265][T32641] Dev loop5: unable to read RDB block 0 [ 574.759813][T32641] loop5: unable to read partition table [ 574.761771][T32641] loop5: partition table beyond EOD, truncated [ 574.767320][T32641] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 574.776025][ T9] usb 10-1: USB disconnect, device number 17 [ 574.823749][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 574.878232][T32667] erspan0: entered promiscuous mode [ 575.006242][T32681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20183'. [ 575.039987][T32683] binder: Binderfs stats mode cannot be changed during a remount [ 575.076158][T32689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20187'. [ 575.297594][T32708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20194'. [ 575.362789][T32718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20198'. [ 575.455197][T32724] loop4: detected capacity change from 0 to 524287936 [ 576.179057][ T846] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 576.338984][ T846] usb 10-1: Using ep0 maxpacket: 32 [ 576.342126][ T846] usb 10-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 576.345965][ T846] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.350750][ T846] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 576.354576][ T846] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 576.357166][ T846] usb 10-1: Product: syz [ 576.358511][ T846] usb 10-1: Manufacturer: syz [ 576.361086][ T846] usb 10-1: SerialNumber: syz [ 576.369380][ T846] usb 10-1: config 0 descriptor?? [ 576.457338][ T346] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.542963][ T346] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.580390][ T846] usb 10-1: USB disconnect, device number 18 [ 576.606833][ T346] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.664905][ T346] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.205559][ T391] input: syz0 as /devices/virtual/input/input97 [ 578.026378][ T474] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20263'. [ 578.048921][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.067836][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.090026][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.100499][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.165079][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20268'. [ 578.177516][ T499] veth0_macvtap: left promiscuous mode [ 578.195325][ C0] net_ratelimit: 16 callbacks suppressed [ 578.195342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.209201][ T485] block nbd0: server does not support multiple connections per device. [ 578.224317][ T485] block nbd0: shutting down sockets [ 578.341783][ T522] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 578.404284][ T525] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.492730][ T525] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.530809][ T553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20285'. [ 578.592737][ T525] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.675673][ T525] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.691645][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20295'. [ 578.783327][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.807308][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.823984][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.834815][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.239102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.402748][ T611] loop9: detected capacity change from 0 to 255852544 [ 579.550136][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.559789][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.566764][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.571570][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.576490][T19954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.587393][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.595774][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.602388][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.625423][ T629] kvm: kvm [628]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 580.028996][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 580.411012][ T795] kvm: kvm [794]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 581.158698][ T836] loop9: detected capacity change from 0 to 255852544 [ 581.242782][ T836] loop9: detected capacity change from 255852544 to 524287871 [ 581.362479][ T858] kvm: kvm [857]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 581.814939][ T922] vivid-000: disconnect [ 581.822987][ T916] vivid-000: reconnect [ 581.848999][T19954] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 581.999038][T19954] usb 10-1: Using ep0 maxpacket: 8 [ 582.003178][T19954] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 582.007089][T19954] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.028046][T19954] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.033944][T19954] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.039458][T19954] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.044091][T19954] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 582.047242][T19954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.131041][ T1023] netlink: 220 bytes leftover after parsing attributes in process `syz.6.20371'. [ 582.262529][T19954] usb 10-1: GET_CAPABILITIES returned 0 [ 582.267532][T19954] usbtmc 10-1:16.0: can't read capabilities [ 582.428851][ T1100] kvm: kvm [1099]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 582.469126][ T1480] usb 10-1: USB disconnect, device number 19 [ 582.632271][ T1151] [U] [ 582.633217][ T1151] [U] [ 582.634107][ T1151] [U] [ 582.635049][ T1151] [U] [ 582.635935][ T1151] [U] [ 582.636819][ T1151] [U] [ 582.637691][ T1151] [U] [ 582.638585][ T1151] [U] [ 582.640088][ T1151] [U] [ 582.641026][ T1151] [U] [ 582.641917][ T1151] [U] [ 582.642811][ T1151] [U] [ 582.643703][ T1151] [U] [ 582.644579][ T1151] [U] [ 582.645455][ T1151] [U] [ 582.646330][ T1151] [U] [ 582.647273][ T1151] [U] [ 582.648156][ T1151] [U] [ 582.649044][ T1151] [U] [ 582.649916][ T1151] [U] [ 582.650957][ T1151] [U] [ 582.652040][ T1151] [U] [ 582.653001][ T1151] [U] [ 582.653870][ T1151] [U] [ 582.657011][ T1151] [U] [ 582.657958][ T1151] [U] [ 582.658902][ T1151] [U] [ 582.659854][ T1151] [U] [ 582.660805][ T1151] [U] [ 582.661708][ T1151] [U] [ 582.662662][ T1151] [U] [ 582.663561][ T1151] [U] [ 582.664654][ T1151] [U] [ 582.665558][ T1151] [U] [ 582.666473][ T1151] [U] [ 582.667411][ T1151] [U] [ 582.668314][ T1151] [U] [ 582.669208][ T1151] [U] [ 582.670141][ T1151] [U] [ 582.671105][ T1151] [U] [ 582.672520][ T1151] [U] [ 582.673451][ T1151] [U] [ 582.674364][ T1151] [U] [ 582.675275][ T1151] [U] [ 582.676182][ T1151] [U] [ 582.677067][ T1151] [U] [ 582.677962][ T1151] [U] [ 582.678890][ T1151] [U] [ 582.679973][ T1151] [U] [ 582.681175][ T1151] [U] [ 582.682165][ T1151] [U] [ 582.683087][ T1151] [U] [ 582.683906][ T1151] [U] [ 582.684800][ T1151] [U] [ 582.685679][ T1151] [U] [ 582.686558][ T1151] [U] [ 582.688748][ T1151] [U] [ 582.689843][ T1151] [U] [ 582.690883][ T1151] [U] [ 582.691887][ T1151] [U] [ 582.692887][ T1151] [U] [ 582.693915][ T1151] [U] [ 582.694994][ T1151] [U] [ 582.696044][ T1151] [U] [ 582.697286][ T1151] [U] [ 582.698376][ T1151] [U] [ 582.699448][ T1151] [U] [ 582.700499][ T1151] [U] [ 582.701556][ T1151] [U] [ 582.702617][ T1151] [U] [ 582.703693][ T1151] [U] [ 582.708843][ T1151] [U] [ 582.710143][ T1151] [U] [ 582.710997][ T1151] [U] [ 582.711857][ T1151] [U] [ 582.712752][ T1151] [U] [ 582.713631][ T1151] [U] [ 582.714510][ T1151] [U] [ 582.715338][ T1151] [U] [ 582.716149][ T1151] [U] [ 582.717088][ T1151] [U] [ 582.717973][ T1151] [U] [ 582.718823][ T1151] [U] [ 582.719716][ T1151] [U] [ 582.720596][ T1151] [U] [ 582.721401][ T1151] [U] [ 582.722282][ T1151] [U] [ 582.723121][ T1151] [U] [ 582.724273][ T1151] [U] [ 582.725168][ T1151] [U] [ 582.726077][ T1151] [U] [ 582.726979][ T1151] [U] [ 582.727854][ T1151] [U] [ 582.728731][ T1151] [U] [ 582.729608][ T1151] [U] [ 582.730505][ T1151] [U] [ 582.731529][ T1151] [U] [ 582.732414][ T1151] [U] [ 582.733292][ T1151] [U] [ 582.734171][ T1151] [U] [ 582.735078][ T1151] [U] [ 582.735957][ T1151] [U] [ 582.736834][ T1151] [U] [ 582.737714][ T1151] [U] [ 582.738772][ T1151] [U] [ 582.739668][ T1151] [U] [ 582.740570][ T1151] [U] [ 582.741447][ T1151] [U] [ 582.742323][ T1151] [U] [ 582.743216][ T1151] [U] [ 582.744109][ T1151] [U] [ 582.744987][ T1151] [U] [ 582.745929][ T1151] [U] [ 582.746850][ T1151] [U] [ 582.747716][ T1151] [U] [ 582.748605][ T1151] [U] [ 582.749504][ T1151] [U] [ 582.750404][ T1151] [U] [ 582.751294][ T1151] [U] [ 582.752174][ T1151] [U] [ 582.753331][ T1151] [U] [ 582.754223][ T1151] [U] [ 582.755112][ T1151] [U] [ 582.756000][ T1151] [U] [ 582.756878][ T1151] [U] [ 582.757751][ T1151] [U] [ 582.758637][ T1151] [U] [ 582.794047][ T1150] [U] [ 582.878062][ T1160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20394'. [ 583.389397][ C0] net_ratelimit: 17 callbacks suppressed [ 583.389413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.394668][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.402191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.786945][ T1168] netlink: 128 bytes leftover after parsing attributes in process `syz.5.20397'. [ 583.790298][ T1168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20397'. [ 583.799984][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.869229][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.921083][ T1185] [U] [ 583.922059][ T1185] [U] [ 583.922952][ T1185] [U] [ 583.923844][ T1185] [U] [ 583.924725][ T1185] [U] [ 583.925614][ T1185] [U] [ 583.926495][ T1185] [U] [ 583.927384][ T1185] [U] [ 583.928414][ T1185] [U] [ 583.929312][ T1185] [U] [ 583.930398][ T1185] [U] [ 583.931300][ T1185] [U] [ 583.932180][ T1185] [U] [ 583.933059][ T1185] [U] [ 583.933930][ T1185] [U] [ 583.934821][ T1185] [U] [ 583.938638][ T1185] [U] [ 583.939564][ T1185] [U] [ 583.940471][ T1185] [U] [ 583.941445][ T1185] [U] [ 583.942426][ T1185] [U] [ 583.943560][ T1185] [U] [ 583.944645][ T1185] [U] [ 583.945721][ T1185] [U] [ 583.947160][ T1185] [U] [ 583.948252][ T1185] [U] [ 583.949346][ T1185] [U] [ 583.950457][ T1185] [U] [ 583.951561][ T1185] [U] [ 583.952741][ T1185] [U] [ 583.953807][ T1185] [U] [ 583.954736][ T1185] [U] [ 583.956042][ T1185] [U] [ 583.956975][ T1185] [U] [ 583.957855][ T1185] [U] [ 583.958848][ T1185] [U] [ 583.959733][ T1185] [U] [ 583.960641][ T1185] [U] [ 583.961542][ T1185] [U] [ 583.962461][ T1185] [U] [ 583.963938][ T1185] [U] [ 583.964856][ T1185] [U] [ 583.965728][ T1185] [U] [ 583.966605][ T1185] [U] [ 583.967493][ T1185] [U] [ 583.968380][ T1185] [U] [ 583.969265][ T1185] [U] [ 583.970150][ T1185] [U] [ 583.971366][ T1185] [U] [ 583.972267][ T1185] [U] [ 583.973183][ T1185] [U] [ 583.974072][ T1185] [U] [ 583.974956][ T1185] [U] [ 583.975839][ T1185] [U] [ 583.976722][ T1185] [U] [ 583.977602][ T1185] [U] [ 583.978564][ T1185] [U] [ 583.979594][ T1185] [U] [ 583.980468][ T1185] [U] [ 583.981351][ T1185] [U] [ 583.982230][ T1185] [U] [ 583.983115][ T1185] [U] [ 583.984067][ T1185] [U] [ 583.984950][ T1185] [U] [ 583.986124][ T1185] [U] [ 583.987030][ T1185] [U] [ 583.987887][ T1185] [U] [ 583.988771][ T1185] [U] [ 583.989649][ T1185] [U] [ 583.990558][ T1185] [U] [ 583.991435][ T1185] [U] [ 583.992317][ T1185] [U] [ 583.993512][ T1185] [U] [ 583.994407][ T1185] [U] [ 583.995304][ T1185] [U] [ 583.996190][ T1185] [U] [ 583.997062][ T1185] [U] [ 583.997939][ T1185] [U] [ 583.998823][ T1185] [U] [ 583.999699][ T1185] [U] [ 584.000991][ T1185] [U] [ 584.001861][ T1185] [U] [ 584.002772][ T1185] [U] [ 584.003665][ T1185] [U] [ 584.004543][ T1185] [U] [ 584.005419][ T1185] [U] [ 584.006292][ T1185] [U] [ 584.007175][ T1185] [U] [ 584.008095][ T1185] [U] [ 584.008985][ T1185] [U] [ 584.009861][ T1185] [U] [ 584.010772][ T1185] [U] [ 584.011645][ T1185] [U] [ 584.012519][ T1185] [U] [ 584.013392][ T1185] [U] [ 584.014267][ T1185] [U] [ 584.015730][ T1185] [U] [ 584.016660][ T1185] [U] [ 584.018157][ T1185] [U] [ 584.019501][ T1185] [U] [ 584.020395][ T1185] [U] [ 584.021607][ T1185] [U] [ 584.022624][ T1185] [U] [ 584.023657][ T1185] [U] [ 584.025424][ T1185] [U] [ 584.026358][ T1185] [U] [ 584.027350][ T1185] [U] [ 584.028265][ T1185] [U] [ 584.029160][ T1185] [U] [ 584.030050][ T1185] [U] [ 584.030990][ T1185] [U] [ 584.031879][ T1185] [U] [ 584.033290][ T1185] [U] [ 584.034192][ T1185] [U] [ 584.035128][ T1185] [U] [ 584.036017][ T1185] [U] [ 584.036908][ T1185] [U] [ 584.037791][ T1185] [U] [ 584.038708][ T1185] [U] [ 584.039645][ T1185] [U] [ 584.040861][ T1185] [U] [ 584.041970][ T1185] [U] [ 584.042869][ T1185] [U] [ 584.043769][ T1185] [U] [ 584.044854][ T1185] [U] [ 584.045987][ T1185] [U] [ 584.046950][ T1185] [U] [ 584.072548][ T1184] [U] [ 584.089689][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20403'. [ 584.156474][ T1199] : renamed from vlan0 (while UP) [ 584.161660][ T1199] tipc: Disabling bearer [ 584.429024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.829461][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.147565][ T1224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20414'. [ 585.311981][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.315819][ T1480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.319656][T19954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.753354][ T1258] kvm: kvm [1257]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 586.426405][ T65] block nbd0: Receive control failed (result -32) [ 586.429673][ T1289] block nbd0: Receive control failed (result -32) [ 586.718356][ T1314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20440'. [ 586.723258][ T1314] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20440'. [ 586.809090][ T1320] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20442'. [ 586.809844][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 586.973258][ T1341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.20451'. [ 586.976284][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20451'. [ 587.774104][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20461'. [ 588.191656][ T1473] loop9: detected capacity change from 0 to 255852544 [ 588.239451][ T1473] loop9: detected capacity change from 255852544 to 524287871 [ 588.277770][ T1498] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 588.280487][ T1498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 588.286378][ T1498] vhci_hcd vhci_hcd.0: Device attached [ 588.459227][ T846] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 588.522516][ T846] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 588.589080][ C0] net_ratelimit: 3344 callbacks suppressed [ 588.589099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.668988][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.159631][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.167321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.410623][ T1787] netlink: 'syz.3.20513': attribute type 19 has an invalid length. [ 589.413618][ T1787] __nla_validate_parse: 2 callbacks suppressed [ 589.413636][ T1787] netlink: 144 bytes leftover after parsing attributes in process `syz.3.20513'. [ 589.629039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.656810][ T1801] input: syz1 as /devices/virtual/input/input98 [ 590.492163][ T1825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.496427][ T1825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.551189][ T1832] netlink: 40 bytes leftover after parsing attributes in process `syz.5.20526'. [ 590.669000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.874977][ T1874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20541'. [ 590.878639][ T1874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20541'. [ 590.974528][ T1872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 590.978951][ T1872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 590.981159][ T1872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 591.297988][ T1499] vhci_hcd: connection reset by peer [ 591.300503][T14203] vhci_hcd vhci_hcd.4: stop threads [ 591.302530][T14203] vhci_hcd vhci_hcd.4: release socket [ 591.304335][T14203] vhci_hcd vhci_hcd.4: disconnect device [ 591.678399][ T1931] loop9: detected capacity change from 0 to 8 [ 591.690700][ T1931] Dev loop9: unable to read RDB block 8 [ 591.692707][ T1931] loop9: unable to read partition table [ 591.694950][ T1931] loop9: partition table beyond EOD, truncated [ 591.697042][ T1931] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 591.709012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.714261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.717678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.526190][ T1986] netlink: 120 bytes leftover after parsing attributes in process `syz.4.20586'. [ 592.713108][ T2002] input: syz1 as /devices/virtual/input/input99 [ 592.995039][ T5749] Bluetooth: hci4: command 0x0c1a tx timeout [ 593.001488][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.242763][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20605'. [ 593.629654][ T846] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 593.641419][ T228] net_ratelimit: 3 callbacks suppressed [ 593.641434][ T228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.789057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.096932][ T2236] netlink: 224 bytes leftover after parsing attributes in process `syz.5.20629'. [ 594.100174][ T2236] netlink: 220 bytes leftover after parsing attributes in process `syz.5.20629'. [ 594.495348][ T2266] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20640'. [ 594.575576][ T2278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20645'. [ 594.650660][ T42] audit: type=1326 audit(2000000732.150:25178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 594.659699][ T42] audit: type=1326 audit(2000000732.150:25179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 594.667444][ T42] audit: type=1326 audit(2000000732.150:25180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 594.677412][ T42] audit: type=1326 audit(2000000732.150:25181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 594.686344][ T42] audit: type=1326 audit(2000000732.150:25182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 594.695811][ T42] audit: type=1326 audit(2000000732.150:25183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 594.709666][ T42] audit: type=1326 audit(2000000732.150:25184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 594.727217][ T42] audit: type=1326 audit(2000000732.150:25185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 594.750069][ T42] audit: type=1326 audit(2000000732.150:25186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 594.757282][ T42] audit: type=1326 audit(2000000732.150:25187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2275 comm="syz.5.20643" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 594.838993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.919291][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.922775][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.991813][ T2310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.081280][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 595.218478][ T2318] netlink: 'syz.5.20662': attribute type 5 has an invalid length. [ 595.503998][ T2338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20669'. [ 595.507964][ T2338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20669'. [ 595.794002][ T2367] netlink: 'syz.3.20679': attribute type 2 has an invalid length. [ 595.796759][ T2367] netlink: 'syz.3.20679': attribute type 11 has an invalid length. [ 595.799585][ T2367] netlink: 88 bytes leftover after parsing attributes in process `syz.3.20679'. [ 595.869133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.829316][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.833300][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.919031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.303184][ T2434] input: syz0 as /devices/virtual/input/input101 [ 597.397052][ T2445] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20705'. [ 597.400207][ T2445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20705'. [ 597.949276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.126417][ T2521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.989073][ C0] net_ratelimit: 10 callbacks suppressed [ 598.989098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.389501][ T228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.739047][ T846] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 599.889190][ T846] usb 10-1: Using ep0 maxpacket: 8 [ 599.910656][ T846] usb 10-1: unable to get BOS descriptor or descriptor too short [ 599.913983][ T846] usb 10-1: no configurations [ 599.916313][ T846] usb 10-1: can't read configurations, error -22 [ 600.029039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.297917][ T2650] binder: 2649:2650 ioctl 4018620d 0 returned -22 [ 600.530929][ T2673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20784'. [ 600.532649][ T2669] can0: slcan on ttyS3. [ 600.535723][ T2673] netlink: 43 bytes leftover after parsing attributes in process `syz.3.20784'. [ 600.541875][ T2673] netlink: 'syz.3.20784': attribute type 5 has an invalid length. [ 600.545297][ T2673] netlink: 43 bytes leftover after parsing attributes in process `syz.3.20784'. [ 600.659163][ T2669] can0 (unregistered): slcan off ttyS3. [ 600.669744][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.673862][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.069008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.137783][ T2778] kvm: kvm [2776]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 601.306795][ T2793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.312797][ T2793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 601.383851][ T42] kauditd_printk_skb: 2190 callbacks suppressed [ 601.383871][ T42] audit: type=1800 audit(2000000738.880:27378): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.20818" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 602.108983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.599410][ T228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.602828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.922614][T19954] kernel read not supported for file /dsp (pid: 19954 comm: kworker/0:6) [ 603.149019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.249666][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 603.390784][ T5756] Bluetooth: hci4: command 0x0c1a tx timeout [ 603.393467][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 603.396529][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 604.189068][ C0] net_ratelimit: 10 callbacks suppressed [ 604.189089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.229201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.550169][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 606.279109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.439411][ T228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.442570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.319061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.709523][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.712743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.349148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.429221][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.389102][ C0] net_ratelimit: 17 callbacks suppressed [ 609.389126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.439236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.469332][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.549981][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.553603][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.709195][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.712648][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.715762][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.718422][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.724553][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.424733][T24233] kernel write not supported for file /uinput (pid: 24233 comm: kworker/1:0) [ 614.549777][ T3047] netlink: 1 bytes leftover after parsing attributes in process `syz.3.20874'. [ 614.598993][ C0] net_ratelimit: 7 callbacks suppressed [ 614.599015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.749322][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.752429][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.638956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.719188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.722800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.726187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.729269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.732584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.735977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.212744][ T3150] pimreg: tun_chr_ioctl cmd 1074025684 [ 617.361849][ T3228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 617.366088][ T3228] block device autoloading is deprecated and will be removed. [ 617.976127][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.072275][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.192489][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.192773][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.204136][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.207640][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.211718][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.214363][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.266002][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.513351][ T12] bridge_slave_1: left promiscuous mode [ 618.515951][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.524292][ T12] bridge_slave_0: left allmulticast mode [ 618.526791][ T12] bridge_slave_0: left promiscuous mode [ 618.530077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.702111][ T12] gretap0 (unregistering): left allmulticast mode [ 618.758719][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 618.866163][ T12] tipc: Left network mode [ 619.023367][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 619.069461][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.072414][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.074763][ T3267] bridge_slave_0: entered allmulticast mode [ 619.077436][ T3267] bridge_slave_0: entered promiscuous mode [ 619.088644][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.093478][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.096656][ T3267] bridge_slave_1: entered allmulticast mode [ 619.100914][ T3267] bridge_slave_1: entered promiscuous mode [ 619.167184][ T228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.168116][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.177543][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.197192][ T3267] team0: Port device team_slave_0 added [ 619.200418][ T3267] team0: Port device team_slave_1 added [ 619.223534][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.226747][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.245693][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.254549][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.257115][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.262442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.265531][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.269770][ T12] batman_adv: batadv0: Interface deactivated: macvlan2 [ 619.272195][ T12] batman_adv: batadv0: Removing interface: macvlan2 [ 619.300636][ T12] hsr0: left allmulticast mode [ 619.302493][ T12] batadv_slave_1: left allmulticast mode [ 619.304348][ T12] batadv_slave_1: left promiscuous mode [ 619.306202][ T12] veth1_macvtap: left promiscuous mode [ 619.307934][ T12] veth0_macvtap: left promiscuous mode [ 619.310246][ T12] veth1_vlan: left promiscuous mode [ 619.311999][ T12] veth0_vlan: left promiscuous mode [ 619.560987][ T12] team0 (unregistering): Port device team_slave_1 removed [ 619.573006][ T12] team0 (unregistering): Port device team_slave_0 removed [ 619.727895][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.730253][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.738165][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.755452][ T5453] 8021q: adding VLAN 0 to HW filter on device eth16 [ 619.795774][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.801613][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.849426][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.854984][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.882935][ T3493] ipvlan1: left promiscuous mode [ 619.884521][ T3493] ipvlan1: left allmulticast mode [ 619.886171][ T3493] veth0_vlan: left allmulticast mode [ 619.905247][ T3493] gre1: left promiscuous mode [ 619.909694][ T3493] virt_wifi0: left promiscuous mode [ 619.912170][ T3493] macsec1: left promiscuous mode [ 619.915218][ T3493] veth3: left promiscuous mode [ 619.924387][ T3493] geneve2: left promiscuous mode [ 619.931619][ T3502] netlink: 'syz.6.20939': attribute type 1 has an invalid length. [ 619.934406][ T3502] netlink: 84 bytes leftover after parsing attributes in process `syz.6.20939'. [ 619.937779][ T3502] netlink: 'syz.6.20939': attribute type 2 has an invalid length. [ 619.941017][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20939'. [ 619.962509][ T3494] geneve3: entered promiscuous mode [ 619.995519][ T3511] loop5: detected capacity change from 0 to 7 [ 620.057972][T21049] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.061972][T21049] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.065550][T21049] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 48160 - 0 [ 620.069255][T21049] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.073215][T21049] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.076649][T21049] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 48160 - 0 [ 620.122464][T21049] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.126637][T21049] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.129683][T21049] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 48160 - 0 [ 620.132991][T21049] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.138313][T21049] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.143414][T21049] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 48160 - 0 [ 620.162574][ T3267] hsr_slave_0: entered promiscuous mode [ 620.165622][ T3267] hsr_slave_1: entered promiscuous mode [ 620.288627][ T3511] Dev loop5: unable to read RDB block 7 [ 620.290944][ T3511] loop5: unable to read partition table [ 620.293250][ T3511] loop5: partition table beyond EOD, truncated [ 620.295496][ T3511] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 620.352421][ T5756] Bluetooth: hci0: command tx timeout [ 620.478728][ T12] IPVS: stop unused estimator thread 0... [ 620.555584][ T5453] 8021q: adding VLAN 0 to HW filter on device eth17 [ 620.689322][ T3267] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 620.697451][ T3267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.704018][ T3267] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 620.718547][ T3267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.721603][ T3267] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 620.730541][ T3267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.733537][ T3267] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 620.738662][ T3267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.743151][ T3666] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20948'. [ 620.747736][ T3666] net_ratelimit: 11 callbacks suppressed [ 620.747748][ T3666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 620.782911][ T3668] bridge0: port 4(syz_tun) entered blocking state [ 620.786749][ T3668] bridge0: port 4(syz_tun) entered disabled state [ 620.790913][ T3668] syz_tun: entered allmulticast mode [ 620.795213][ T3668] bridge0: port 4(syz_tun) entered blocking state [ 620.798076][ T3668] bridge0: port 4(syz_tun) entered forwarding state [ 620.876487][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20950'. [ 620.942807][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.963026][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.978606][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.981756][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.007718][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.010937][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.154714][ T3702] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.368372][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20964'. [ 621.392499][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.476106][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20967'. [ 621.620299][ T3267] veth0_vlan: entered promiscuous mode [ 621.635848][ T3267] veth1_vlan: entered promiscuous mode [ 621.664265][ T3267] veth0_macvtap: entered promiscuous mode [ 621.677076][ T3267] veth1_macvtap: entered promiscuous mode [ 621.693903][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.709601][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.717559][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.722294][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.728491][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.735076][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.895897][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.904940][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.948282][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.953039][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.211375][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20983'. [ 622.439203][ T5756] Bluetooth: hci0: command tx timeout [ 622.461561][ T3829] bond0: entered promiscuous mode [ 622.463250][ T3829] bond_slave_0: entered promiscuous mode [ 622.465593][ T3829] bond_slave_1: entered promiscuous mode [ 622.472572][ T3829] batadv0: entered promiscuous mode [ 622.475396][ T3829] debugfs: 'hsr1' already exists in 'hsr' [ 622.477198][ T3829] Cannot create hsr debugfs directory [ 622.485169][ T3829] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 622.488494][ T3829] bond0: left promiscuous mode [ 622.490692][ T3829] bond_slave_0: left promiscuous mode [ 622.492511][ T3829] bond_slave_1: left promiscuous mode [ 622.494921][ T3829] batadv0: left promiscuous mode [ 622.626133][ T3846] Bluetooth: MGMT ver 1.23 [ 622.895307][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21005'. [ 622.898212][ T3865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21005'. [ 622.902029][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21005'. [ 622.988687][ T3878] sctp: [Deprecated]: syz.6.21009 (pid 3878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.988687][ T3878] Use struct sctp_sack_info instead [ 623.037993][ T3884] binder: 3883:3884 ioctl c0306201 80000180 returned -14 [ 623.812328][ T3929] netlink: 'syz.7.21026': attribute type 5 has an invalid length. [ 624.509343][ T5756] Bluetooth: hci0: command tx timeout [ 624.518515][ T3965] sctp: [Deprecated]: syz.4.21038 (pid 3965) Use of int in max_burst socket option. [ 624.518515][ T3965] Use struct sctp_assoc_value instead [ 624.872245][ T3980] loop7: detected capacity change from 0 to 7 [ 624.886125][ C3] blk_print_req_error: 32 callbacks suppressed [ 624.886142][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.891077][ C3] buffer_io_error: 9 callbacks suppressed [ 624.891087][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.897093][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.900575][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.910306][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.913639][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.918499][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.921746][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.925172][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.928023][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.931079][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.934972][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.938425][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.941379][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.943939][ T3980] ldm_validate_partition_table(): Disk read failed. [ 624.946900][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.950022][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.957044][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.960031][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.962995][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 624.966476][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 624.969598][ T3980] Dev loop7: unable to read RDB block 0 [ 624.972776][ T3980] loop7: unable to read partition table [ 624.975139][ T3980] loop7: partition table beyond EOD, truncated [ 624.977347][ T3980] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 625.027389][ T3982] ldm_validate_partition_table(): Disk read failed. [ 625.030864][ T3982] Dev loop7: unable to read RDB block 0 [ 625.033721][ T3982] loop7: unable to read partition table [ 625.036285][ T3982] loop7: partition table beyond EOD, truncated [ 625.310313][ T4009] bad cache= option: nonenr_mlock 0 [ 625.310313][ T4009] nr_zspages 654 [ 625.310313][ T4009] nr_free_cma 0 [ 625.310313][ T4009] numa_hit 561184 [ 625.310313][ T4009] numa_miss 6866987 [ 625.310313][ T4009] numa_foreign 6866987 [ 625.310313][ T4009] numa_interleave 5827 [ 625.310313][ T4009] numa_local 554673 [ 625.310313][ T4009] numa_other 6873498 [ 625.310313][ T4009] nr_inactive_anon 2700 [ 625.310313][ T4009] nr_active_anon 3890 [ 625.310313][ T4009] nr_inactive_file 18705 [ 625.310313][ T4009] nr_active_file 4632 [ 625.310313][ T4009] nr_unevictable 1768 [ 625.310313][ T4009] nr_slab_reclaimable 7007 [ 625.310313][ T4009] nr_slab_unreclaimable 64968 [ 625.310313][ T4009] nr_isolated_anon 0 [ 625.310313][ T4009] nr_isolated_file 0 [ 625.310313][ T4009] workingset_nodes 131 [ 625.310313][ T4009] workingset_refault_anon 8154 [ 625.310313][ T4009] workingset_refault_file 13173 [ 625.310313][ T4009] workingset_activate_anon 461 [ 625.310313][ T4009] workingset_activate_file 939 [ 625.310313][ T4009] workingset_restore_anon 464 [ 625.310313][ T4009] workingset_restore_file 957 [ 625.310313][ T4009] workingset_nodereclaim 557 [ 625.310313][ T4009] nr_anon_pages 5873 [ 625.310313][ T4009] nr_mapped 22745 [ 625.310313][ T4009] nr_file_pages 26017 [ 625.310313][ T4009] nr_dirty 536 [ 625.310313][ T4009] nr_writeback 0 [ 625.310313][ T4009] nr_shmem 1935 [ 625.310313][ T4009] nr_shmem_hugepages 0 [ 625.310313][ T4009] nr_shmem_pmdmapped 0 [ 625.310313][ T4009] nr_file_hugepages 0 [ 625.310313][ T4009] nr_file_pmdmapped 0 [ 625.310313][ T4009] nr_anon_transparent_hugepages 0 [ 625.310313][ T4009] nr_vmscan_write 76412 [ 625.310313][ T4009] nr_vmscan_immediate_reclaim 1460 [ 625.310313][ T4009] nr_dirtied 20318 [ 625.310313][ T4009] nr_written 19782 [ 625.310313][ T4009] nr_throttled_written 0 [ 625.310313][ T4009] nr_kernel_misc_reclaimable 0 [ 625.310313][ T4009] nr_foll_pin_acquired 23528 [ 625.310313][ T4009] nr_foll_pin_released 23528 [ 625.310784][ T4009] CIFS: VFS: bad cache= option: nonenr_mlock 0 [ 625.310784][ T4009] nr_zspages 654 [ 625.310784][ T4009] nr_free_cma 0 [ 625.310784][ T4009] numa_hit 561184 [ 625.310784][ T4009] numa_miss 6866987 [ 625.310784][ T4009] numa_foreign 6866987 [ 625.310784][ T4009] numa_interleave 5827 [ 625.310784][ T4009] numa_local 554673 [ 625.310784][ T4009] numa_other 6873498 [ 625.310784][ T4009] nr_inactive_anon 2700 [ 625.310784][ T4009] nr_active_anon 3890 [ 625.310784][ T4009] nr_inactive_file 18705 [ 625.310784][ T4009] nr_active_file 4632 [ 625.310784][ T4009] nr_unevictable 1768 [ 625.310784][ T4009] nr_slab_reclaimable 7007 [ 625.310784][ T4009] nr_slab_unreclaimable 64968 [ 625.310784][ T4009] nr_isolated_anon 0 [ 625.310784][ T4009] nr_isolated_file 0 [ 625.310784][ T4009] workingset_nodes 131 [ 625.310784][ T4009] workingset_refault_anon 8154 [ 625.310784][ T4009] workingset_refault_file 13173 [ 625.310784][ T4009] workingset_activate_anon 461 [ 625.310784][ T4009] workingset_activate_file 939 [ 625.310784][ T4009] workingset_restore_anon 464 [ 625.310784][ T4009] workingset_restore_file 957 [ 625.310784][ T4009] workingset_nodereclaim 557 [ 625.310784][ T4009] nr_anon_pages 5873 [ 625.310784][ T4009] nr_mapped 22745 [ 625.310784][ T4009] nr_file_pages 26017 [ 625.310784][ T4009] nr_dirty 536 [ 625.310784][ T4009] nr_writeback 0 [ 625.310784][ T4009] nr_shmem 1935 [ 625.310784][ T4009] nr_shmem_hugepages 0 [ 625.310784][ T4009] nr_shmem_pmdmapped 0 [ 625.310784][ T4009] nr_file_hugepages 0 [ 625.310784][ T4009] nr_file_pmdmapped 0 [ 625.310784][ T4009] nr_anon_transparent_hugepages 0 [ 625.310784][ T4009] nr_vmscan_write 76412 [ 625.310784][ T4009] nr_vmscan_immediate_reclaim 1460 [ 625.310784][ T4009] nr_dirtied 20318 [ 625.310784][ T4009] nr_written 19782 [ 625.310784][ T4009] nr_throttled_written 0 [ 625.310784][ T4009] nr_kernel_misc_reclaimable 0 [ 625.310784][ T4009] nr_foll_pin_acquired 23528 [ 625.310784][ T4009] nr_foll_pin_released 23528 [ 625.496866][ T4027] netlink: 'syz.3.21061': attribute type 9 has an invalid length. [ 625.617692][ T5847] kernel read not supported for file /dsp (pid: 5847 comm: kworker/1:4) [ 626.313689][ T4095] ALSA: mixer_oss: invalid OSS volume '' [ 626.315757][ T4095] ALSA: mixer_oss: invalid OSS volume '6;Z' [ 626.445662][ T4111] __nla_validate_parse: 4 callbacks suppressed [ 626.445684][ T4111] netlink: 156 bytes leftover after parsing attributes in process `syz.4.21094'. [ 626.598988][ T5756] Bluetooth: hci0: command tx timeout [ 627.401233][ T4229] tmpfs: Too small a size for current use [ 628.092583][ T4301] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 628.188492][ T4311] ubi1: attaching mtd0 [ 628.198156][ T4311] ubi1 error: ubi_attach_mtd_dev: bad VID header (1073742086) or data offsets (1073742150) [ 628.256754][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.273555][ T4319] blkio.reset_stats is deprecated [ 628.372873][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.398281][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.704218][ T4316] geneve2: entered promiscuous mode [ 628.709490][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.715154][ T12] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 51602 - 0 [ 628.718934][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.723727][ T12] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 51602 - 0 [ 628.736412][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.740987][ T12] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 51602 - 0 [ 628.745686][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.750656][ T12] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 51602 - 0 [ 628.863391][ T4367] 8021q: adding VLAN 0 to HW filter on device bond14 [ 628.866536][ T4367] bond0: (slave bond14): Enslaving as an active interface with an up link [ 629.230119][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.235865][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.236082][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21171'. [ 629.325847][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.335799][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.538708][ T4426] geneve2: entered promiscuous mode [ 629.551171][T21049] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.555419][T21049] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 41617 - 0 [ 629.569698][T21049] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.573916][T21049] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 41617 - 0 [ 629.589306][T21049] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.592832][T21049] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 41617 - 0 [ 629.607407][T21049] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.614720][T21049] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 41617 - 0 [ 629.622040][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21180'. [ 630.905947][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21210'. [ 631.102440][ T4622] netlink: 'syz.6.21217': attribute type 11 has an invalid length. [ 631.237133][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21221'. [ 631.270910][ T4645] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21232'. [ 632.146913][ T4729] netlink: 'syz.6.21255': attribute type 14 has an invalid length. [ 632.457269][ T4756] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 632.460457][ T4756] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 632.953514][ T4807] bpf: Bad value for 'uid' [ 633.296129][ T4842] netlink: 140 bytes leftover after parsing attributes in process `syz.4.21291'. [ 634.208480][ T4926] sg_write: process 10886 (syz.3.21322) changed security contexts after opening file descriptor, this is not allowed. [ 634.358492][ T4945] input: syz1 as /devices/virtual/input/input102 [ 634.553294][ T5033] netlink: 4852 bytes leftover after parsing attributes in process `syz.4.21336'. [ 634.558480][ T5033] netlink: 4852 bytes leftover after parsing attributes in process `syz.4.21336'. [ 634.570486][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21337'. [ 634.623892][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21340'. [ 634.798620][ T5131] netlink: 'syz.6.21343': attribute type 2 has an invalid length. [ 634.802883][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21343'. [ 634.814063][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21345'. [ 634.823980][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21345'. [ 634.992079][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21355'. [ 635.092422][ T5176] loop5: detected capacity change from 0 to 7 [ 635.122734][ T5176] Dev loop5: unable to read RDB block 7 [ 635.124772][ T5176] loop5: unable to read partition table [ 635.126675][ T5176] loop5: partition table beyond EOD, truncated [ 635.128751][ T5176] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 635.809594][ T8827] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 636.289224][T15463] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 636.440972][T15463] usb 11-1: config 0 has no interfaces? [ 636.444364][T15463] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.447291][T15463] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.449879][T15463] usb 11-1: Product: syz [ 636.451451][T15463] usb 11-1: Manufacturer: syz [ 636.453278][T15463] usb 11-1: SerialNumber: syz [ 636.456311][T15463] usb 11-1: config 0 descriptor?? [ 636.661982][ T5833] usb 11-1: USB disconnect, device number 9 [ 646.444367][ T5302] loop5: detected capacity change from 0 to 7 [ 646.450443][ C3] blk_print_req_error: 25 callbacks suppressed [ 646.450459][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.456457][ C3] buffer_io_error: 25 callbacks suppressed [ 646.456472][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.466901][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.471104][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.474677][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.478418][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.481337][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.484435][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.488893][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.491936][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.499658][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.503365][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.551188][ T5309] loop5: detected capacity change from 7 to 0 [ 646.551182][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.551255][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 646.557129][ T4320] kernel write not supported for file bpf-map (pid: 4320 comm: kworker/3:5) [ 646.560244][ T5302] ldm_validate_partition_table(): Disk read failed. [ 646.565822][ T5302] Dev loop5: unable to read RDB block 0 [ 646.568168][ T5302] loop5: unable to read partition table [ 646.572390][ T5302] loop5: partition table beyond EOD, truncated [ 646.575028][ T5302] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 646.598676][ T5322] netlink: 52 bytes leftover after parsing attributes in process `syz.6.21390'. [ 646.689973][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21393'. [ 646.693813][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21393'. [ 646.697533][ T5333] netlink: 'syz.7.21393': attribute type 13 has an invalid length. [ 646.704401][ T5333] netlink: 'syz.7.21393': attribute type 11 has an invalid length. [ 647.309205][ T1480] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 647.460569][ T1480] usb 11-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 647.464214][ T1480] usb 11-1: config 0 interface 0 has no altsetting 0 [ 647.468351][ T1480] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 647.471991][ T1480] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 647.474763][ T1480] usb 11-1: Product: syz [ 647.476151][ T1480] usb 11-1: Manufacturer: syz [ 647.477857][ T1480] usb 11-1: SerialNumber: syz [ 647.481953][ T1480] usb 11-1: config 0 descriptor?? [ 647.484655][ T5381] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 647.490604][ T1480] usb 11-1: selecting invalid altsetting 0 [ 647.710382][ T1480] usb 11-1: USB disconnect, device number 10 [ 648.029037][T15463] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 648.200380][T15463] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.204018][T15463] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.207090][T15463] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.210276][T15463] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.221241][ T5474] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 648.227533][T15463] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.435855][T15463] usb 12-1: USB disconnect, device number 2 [ 648.567700][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21433'. [ 649.060959][ T5576] pimreg: tun_chr_ioctl cmd 1074025675 [ 649.062918][ T5576] pimreg: persist disabled [ 649.798944][T15463] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 649.969080][T15463] usb 11-1: Using ep0 maxpacket: 32 [ 649.972851][T15463] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 649.975686][T15463] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 649.979810][T15463] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 649.983408][T15463] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 649.987660][T15463] usb 11-1: config 0 interface 0 has no altsetting 0 [ 649.991820][T15463] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 649.994890][T15463] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 649.997752][T15463] usb 11-1: Product: syz [ 649.999360][T15463] usb 11-1: Manufacturer: syz [ 650.001104][T15463] usb 11-1: SerialNumber: syz [ 650.004404][T15463] usb 11-1: config 0 descriptor?? [ 650.012140][T15463] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 650.018036][T15463] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 650.162775][ T5656] pimreg: entered allmulticast mode [ 650.181832][ T5656] pimreg: left allmulticast mode [ 650.228804][ T1480] usb 11-1: USB disconnect, device number 11 [ 650.239140][ T1480] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 650.772338][ T5726] block nbd7: Device being setup by another task [ 650.780988][ T5715] block nbd7: shutting down sockets [ 651.714154][ T5859] syzkaller1: tun_chr_ioctl cmd 35108 [ 651.758266][ T5866] loop5: detected capacity change from 0 to 7 [ 651.768743][ T5866] Dev loop5: unable to read RDB block 7 [ 651.770713][ T5866] loop5: unable to read partition table [ 651.772780][ T5866] loop5: partition table beyond EOD, truncated [ 651.774965][ T5866] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 651.870986][ T5877] Invalid ELF header magic: != ELF [ 652.064346][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21539'. [ 652.068224][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21539'. [ 652.249640][ T5939] loop6: detected capacity change from 0 to 2640 [ 652.260272][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.263413][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.266304][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.271413][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.274799][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.278305][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.283436][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.286807][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.290453][ T5939] ldm_validate_partition_table(): Disk read failed. [ 652.292853][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.295421][ T5939] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.297943][ T5939] Dev loop6: unable to read RDB block 0 [ 652.302768][ T5939] loop6: unable to read partition table [ 652.305578][ T5939] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 652.349323][ T5945] loop6: detected capacity change from 2640 to 524288000 [ 652.637703][ T5970] netlink: 318 bytes leftover after parsing attributes in process `syz.3.21559'. [ 652.759261][ T5978] Bluetooth: MGMT ver 1.23 [ 652.793472][ T5982] batman_adv: batadv0: Adding interface: macvtap1 [ 652.795791][ T5982] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.804806][ T5982] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 652.872535][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21564'. [ 653.163123][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21573'. [ 653.250825][T24233] IPVS: starting estimator thread 0... [ 653.359017][ T6022] IPVS: using max 42 ests per chain, 100800 per kthread [ 654.329062][ T4320] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 654.415006][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21590'. [ 654.419946][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21590'. [ 654.481153][ T4320] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 654.484525][ T4320] usb 11-1: config 0 has no interface number 0 [ 654.486825][ T4320] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.493243][ T4320] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 654.496760][ T4320] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.500761][ T4320] usb 11-1: Product: syz [ 654.502627][ T4320] usb 11-1: Manufacturer: syz [ 654.504574][ T4320] usb 11-1: SerialNumber: syz [ 654.507658][ T4320] usb 11-1: config 0 descriptor?? [ 654.517658][ T4320] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 654.721423][T15463] usb 11-1: USB disconnect, device number 12 [ 654.731746][T15463] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 655.045273][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21593'. [ 655.073538][ T5756] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 655.151702][ T6104] veth0_macvtap: left promiscuous mode [ 655.164280][ T6106] netlink: 'syz.4.21596': attribute type 1 has an invalid length. [ 655.166934][ T6106] netlink: 208 bytes leftover after parsing attributes in process `syz.4.21596'. [ 656.670952][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21633'. [ 656.772531][ T6234] tipc: Started in network mode [ 656.774398][ T6234] tipc: Node identity 7f000001, cluster identity 4711 [ 656.779621][ T6234] tipc: Enabled bearer , priority 4 [ 657.269018][T24233] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 657.419113][T24233] usb 12-1: Using ep0 maxpacket: 16 [ 657.422452][T24233] usb 12-1: config 0 has no interfaces? [ 657.424290][T24233] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.427216][T24233] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.432146][T24233] usb 12-1: config 0 descriptor?? [ 657.609080][T15463] kernel read not supported for file /dsp1 (pid: 15463 comm: kworker/0:5) [ 657.647350][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.656884][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.662371][ T5756] Bluetooth: hci0: adv larger than maximum supported [ 657.662458][ T5756] Bluetooth: hci0: Malformed LE Event: 0x0d [ 657.662791][T24233] usb 12-1: USB disconnect, device number 3 [ 657.779108][T15463] tipc: Node number set to 2130706433 [ 658.425441][ T6340] can0: slcan on ttyS3. [ 658.539525][ T6340] can0 (unregistered): slcan off ttyS3. [ 658.839504][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.847472][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.858558][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.874567][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.878235][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 659.339017][T24233] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 659.357555][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.360893][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.364141][ T6371] bridge_slave_0: entered allmulticast mode [ 659.368038][ T6371] bridge_slave_0: entered promiscuous mode [ 659.372429][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.375385][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.378428][ T6371] bridge_slave_1: entered allmulticast mode [ 659.382900][ T6371] bridge_slave_1: entered promiscuous mode [ 659.421968][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.427815][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.459191][ T6371] team0: Port device team_slave_0 added [ 659.464180][ T6371] team0: Port device team_slave_1 added [ 659.489147][T24233] usb 11-1: Using ep0 maxpacket: 32 [ 659.493545][T24233] usb 11-1: unable to get BOS descriptor or descriptor too short [ 659.501059][T24233] usb 11-1: string descriptor 0 read error: -22 [ 659.503869][T24233] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 659.507550][T24233] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 659.517584][T24233] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 659.521032][T24233] dw2102: su3000_power_ctrl: 1, initialized 0 [ 659.523516][T24233] dvb-usb: bulk message failed: -22 (2/0) [ 659.528057][T24233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.547855][T24233] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 659.551999][T24233] usb 11-1: media controller created [ 659.554260][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.556585][T24233] dw2102: i2c transfer failed. [ 659.560291][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.562629][T24233] dw2102: i2c transfer failed. [ 659.564568][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.566882][T24233] dw2102: i2c transfer failed. [ 659.568795][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.571246][T24233] dw2102: i2c transfer failed. [ 659.576812][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.580214][T24233] dw2102: i2c transfer failed. [ 659.582168][T24233] dvb-usb: bulk message failed: -22 (6/0) [ 659.584454][T24233] dw2102: i2c transfer failed. [ 659.586475][T24233] dvb-usb: MAC address: 02:02:02:02:02:02 [ 659.597415][T24233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.621748][T24233] dvb-usb: bulk message failed: -22 (3/0) [ 659.623713][T24233] dw2102: command 0x0e transfer failed. [ 659.626787][T24233] dvb-usb: bulk message failed: -22 (3/0) [ 659.629212][T24233] dw2102: command 0x0e transfer failed. [ 659.956903][T24233] dvb-usb: bulk message failed: -22 (3/0) [ 659.959023][T24233] dw2102: command 0x0e transfer failed. [ 659.960966][T24233] dvb-usb: bulk message failed: -22 (3/0) [ 659.962976][T24233] dw2102: command 0x0e transfer failed. [ 659.965287][T24233] dvb-usb: bulk message failed: -22 (1/0) [ 659.967623][T24233] dw2102: command 0x51 transfer failed. [ 659.974126][ T6405] dvb-usb: bulk message failed: -22 (5/0) [ 659.978423][ T6405] dw2102: i2c transfer failed. [ 659.999155][T24233] DVB: Unable to find symbol ds3000_attach() [ 660.003531][T24233] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 660.060924][T24233] rc_core: IR keymap rc-su3000 not found [ 660.062845][T24233] Registered IR keymap rc-empty [ 660.075077][T24233] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 660.080779][T24233] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input103 [ 660.105563][T24233] dvb-usb: schedule remote query interval to 150 msecs. [ 660.112577][T24233] dw2102: su3000_power_ctrl: 0, initialized 1 [ 660.118968][T24233] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 660.139860][T24233] usb 11-1: USB disconnect, device number 13 [ 660.223899][T24233] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 660.278281][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.282572][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.293882][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.301321][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.303536][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.313390][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.346104][ T6615] __nla_validate_parse: 2 callbacks suppressed [ 660.346124][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21690'. [ 660.374035][ T6371] hsr_slave_0: entered promiscuous mode [ 660.376999][ T6371] hsr_slave_1: entered promiscuous mode [ 660.379668][ T6371] debugfs: 'hsr0' already exists in 'hsr' [ 660.381492][ T6371] Cannot create hsr debugfs directory [ 660.716750][ T6371] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 660.741627][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.745977][ T6371] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 660.776316][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.780623][ T6371] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 660.786750][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.797392][ T6371] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 660.805292][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.812159][ T6756] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 660.917050][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.934270][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.943931][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.946264][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.962088][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.964598][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.989382][ T5749] Bluetooth: hci3: command tx timeout [ 661.003085][ T6781] tipc: Started in network mode [ 661.004670][ T6781] tipc: Node identity ac14140f, cluster identity 4711 [ 661.007132][ T6781] tipc: New replicast peer: 172.30.0.7 [ 661.010427][ T1163] ------------[ cut here ]------------ [ 661.011432][ T6781] tipc: Enabled bearer , priority 4 [ 661.013230][ T1163] time_after(jiffies, timeout) [ 661.015110][ T1163] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#2: kworker/u33:8/1163 [ 661.018723][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21702'. [ 661.018738][ T6781] tipc: Disabling bearer [ 661.027976][ T1163] Modules linked in: [ 661.029966][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.033796][ T1163] Tainted: [L]=SOFTLOCKUP [ 661.035192][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.038397][ T1163] Workqueue: iou_exit io_ring_exit_work [ 661.040399][ T1163] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 661.042293][ T1163] Code: 8e e8 bb 5a 43 01 48 8b 05 d4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 a2 d5 d3 00 4d 85 ff 79 12 e8 f8 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 e6 da d3 00 48 8b 74 24 20 [ 661.048192][ T1163] RSP: 0018:ffffc90006637aa0 EFLAGS: 00010293 [ 661.050405][ T1163] RAX: 0000000000000000 RBX: ffff88804b3f2710 RCX: ffffffff81354dbe [ 661.053015][ T1163] RDX: ffff8880295cca80 RSI: ffffffff81354dc8 RDI: ffff8880295cca80 [ 661.055625][ T1163] RBP: ffffc90006637c38 R08: 0000000000000007 R09: 0000000000000000 [ 661.058066][ T1163] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88804b3f2000 [ 661.060801][ T1163] R13: dffffc0000000000 R14: 000000004b3f2700 R15: ffffffffffffffff [ 661.063425][ T1163] FS: 0000000000000000(0000) GS:ffff888096df1000(0000) knlGS:0000000000000000 [ 661.065864][ T1163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.067683][ T1163] CR2: 00000000f71f5fc0 CR3: 000000002259b000 CR4: 0000000000352ef0 [ 661.070366][ T1163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.072962][ T1163] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 661.075965][ T1163] Call Trace: [ 661.077397][ T1163] [ 661.078680][ T1163] ? do_raw_spin_lock+0x128/0x260 [ 661.080709][ T1163] ? __pfx_io_ring_exit_work+0x10/0x10 [ 661.082377][ T1163] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 661.084327][ T1163] ? debug_object_deactivate+0x2e4/0x3b0 [ 661.086627][ T1163] ? rcu_is_watching+0x12/0xc0 [ 661.088510][ T1163] process_one_work+0xa23/0x1940 [ 661.090602][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 661.092976][ T1163] ? __pfx_io_ring_exit_work+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 661.102415][ T1163] worker_thread+0x5ef/0xe50 [ 661.104098][ T1163] ? kthread+0x13a/0x450 [ 661.105460][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 661.107055][ T1163] kthread+0x370/0x450 [ 661.108355][ T1163] ? __pfx_kthread+0x10/0x10 [ 661.110041][ T1163] ret_from_fork+0x72b/0xd50 [ 661.111590][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 661.113284][ T1163] ? __switch_to+0x800/0x10f0 [ 661.115187][ T1163] ? __pfx_kthread+0x10/0x10 [ 661.116924][ T1163] ret_from_fork_asm+0x1a/0x30 [ 661.118711][ T1163] [ 661.119854][ T1163] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 661.122159][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.125602][ T1163] Tainted: [L]=SOFTLOCKUP [ 661.126972][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.130290][ T1163] Workqueue: iou_exit io_ring_exit_work [ 661.132022][ T1163] Call Trace: [ 661.133077][ T1163] [ 661.134101][ T1163] dump_stack_lvl+0x100/0x190 [ 661.135604][ T1163] vpanic+0x552/0x970 [ 661.136892][ T1163] ? __pfx_vpanic+0x10/0x10 [ 661.138361][ T1163] panic+0xd1/0xe0 [ 661.139586][ T1163] ? __pfx_panic+0x10/0x10 [ 661.140959][ T1163] ? check_panic_on_warn+0x1f/0x90 [ 661.142554][ T1163] check_panic_on_warn.cold+0x19/0x34 [ 661.144272][ T1163] ? io_ring_exit_work+0x479/0xd7a [ 661.145884][ T1163] __warn.cold+0x191/0x318 [ 661.147252][ T1163] __report_bug+0x30f/0x440 [ 661.148688][ T1163] ? io_ring_exit_work+0x479/0xd7a [ 661.150337][ T1163] ? __pfx___report_bug+0x10/0x10 [ 661.151922][ T1163] ? rcu_is_watching+0x12/0xc0 [ 661.153441][ T1163] ? trace_contention_end+0x126/0x160 [ 661.155156][ T1163] ? __mutex_lock+0x26d/0x1bd0 [ 661.156657][ T1163] ? io_ring_exit_work+0x422/0xd7a [ 661.158270][ T1163] ? find_held_lock+0x2b/0x80 [ 661.159771][ T1163] ? io_ring_exit_work+0x434/0xd7a [ 661.161398][ T1163] ? io_ring_exit_work+0x479/0xd7a [ 661.163043][ T1163] report_bug+0xb2/0x220 [ 661.164586][ T1163] ? io_ring_exit_work+0x479/0xd7a [ 661.166225][ T1163] handle_bug+0x16a/0x2a0 [ 661.167603][ T1163] exc_invalid_op+0x17/0x50 [ 661.169042][ T1163] asm_exc_invalid_op+0x1a/0x20 [ 661.170616][ T1163] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 661.172389][ T1163] Code: 8e e8 bb 5a 43 01 48 8b 05 d4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 a2 d5 d3 00 4d 85 ff 79 12 e8 f8 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 e6 da d3 00 48 8b 74 24 20 [ 661.178509][ T1163] RSP: 0018:ffffc90006637aa0 EFLAGS: 00010293 [ 661.180518][ T1163] RAX: 0000000000000000 RBX: ffff88804b3f2710 RCX: ffffffff81354dbe [ 661.182890][ T1163] RDX: ffff8880295cca80 RSI: ffffffff81354dc8 RDI: ffff8880295cca80 [ 661.185748][ T1163] RBP: ffffc90006637c38 R08: 0000000000000007 R09: 0000000000000000 [ 661.188284][ T1163] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88804b3f2000 [ 661.190884][ T1163] R13: dffffc0000000000 R14: 000000004b3f2700 R15: ffffffffffffffff [ 661.193449][ T1163] ? io_ring_exit_work+0x46e/0xd7a [ 661.195153][ T1163] ? io_ring_exit_work+0x478/0xd7a [ 661.196831][ T1163] ? do_raw_spin_lock+0x128/0x260 [ 661.198333][ T1163] ? __pfx_io_ring_exit_work+0x10/0x10 [ 661.200053][ T1163] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 661.201969][ T1163] ? debug_object_deactivate+0x2e4/0x3b0 [ 661.203855][ T1163] ? rcu_is_watching+0x12/0xc0 [ 661.205470][ T1163] process_one_work+0xa23/0x1940 [ 661.207114][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 661.208864][ T1163] ? __pfx_io_ring_exit_work+0x10/0x10 [ 661.210691][ T1163] worker_thread+0x5ef/0xe50 [ 661.212202][ T1163] ? kthread+0x13a/0x450 [ 661.213628][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 661.215336][ T1163] kthread+0x370/0x450 [ 661.216658][ T1163] ? __pfx_kthread+0x10/0x10 [ 661.218243][ T1163] ret_from_fork+0x72b/0xd50 [ 661.219752][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 661.221392][ T1163] ? __switch_to+0x800/0x10f0 [ 661.222969][ T1163] ? __pfx_kthread+0x10/0x10 [ 661.224493][ T1163] ret_from_fork_asm+0x1a/0x30 [ 661.226109][ T1163] [ 661.227862][ T1163] Kernel Offset: disabled [ 661.229298][ T1163] Rebooting in 86400 seconds..