last executing test programs: 7m5.844272522s ago: executing program 1 (id=20135): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa6002173600232b00fc020000000000000000000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 7m5.840900041s ago: executing program 1 (id=20136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7m5.793595255s ago: executing program 1 (id=20139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m5.725123141s ago: executing program 1 (id=20142): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7m5.475984669s ago: executing program 1 (id=20151): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 7m5.473225804s ago: executing program 1 (id=20153): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 6m49.430665712s ago: executing program 32 (id=20153): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 5m10.336944214s ago: executing program 2 (id=24140): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x6, 0x1, 0x7, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x6, 0x1, 0x80, 0x6, 0xb, 0x20000009, 0xb1, 0x7fffffff, 0xffffffff, 0xca9f, 0x17f, 0x20000a, 0xfffffffb, 0xf29e, 0xffffffff, 0x5, 0xa6b3, 0x0, 0xfffffff8]}) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, 0x0) 5m10.021036718s ago: executing program 2 (id=24141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 5m9.940592279s ago: executing program 2 (id=24142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 5m9.940217761s ago: executing program 2 (id=24143): symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') open$dir(&(0x7f0000000700)='./file0\x00', 0x10000, 0x84) 5m9.844641965s ago: executing program 2 (id=24144): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 5m9.844451754s ago: executing program 2 (id=24145): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x3, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4m53.605796717s ago: executing program 33 (id=24145): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x3, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m11.804499624s ago: executing program 0 (id=27409): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m0.620678563s ago: executing program 0 (id=27421): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1m59.661570789s ago: executing program 0 (id=27437): r0 = syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5b62, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket(0x18, 0x1, 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m59.645154586s ago: executing program 0 (id=27439): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m59.564069478s ago: executing program 0 (id=27440): r0 = socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c, 0x0}}], 0x1, 0x20000040) 1m59.311920526s ago: executing program 0 (id=27444): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800084, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m59.251015449s ago: executing program 34 (id=27444): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800084, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 24.623673228s ago: executing program 4 (id=28694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9}) 24.189357435s ago: executing program 4 (id=28696): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0) 24.183075216s ago: executing program 4 (id=28697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 24.032783745s ago: executing program 4 (id=28705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 23.946745s ago: executing program 4 (id=28707): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 23.940539356s ago: executing program 4 (id=28709): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc}) 7.870801223s ago: executing program 35 (id=28709): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc}) 1.301852722s ago: executing program 3 (id=28907): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 1.253570814s ago: executing program 6 (id=28908): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000262000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000000c0)=0x7, 0x400, 0x0) 1.24683553s ago: executing program 3 (id=28910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 1.183482122s ago: executing program 5 (id=28911): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="7638a56a88000000000000000000", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.183049395s ago: executing program 3 (id=28913): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000000)='\x00', 0x1) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.063285777s ago: executing program 6 (id=28915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f8000000190001002dbd7000fcffffff00000000000000000000000000000000ac1414aa00000000000000000000000000000000010000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000a64900000000000000000000000a0000000000000000000000804000020000000000000800000000000000000100000044000500e0000001000000000000000000000000fffffffc3c00000002000000000000000000000000000000000000000600000004"], 0xf8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.041814285s ago: executing program 5 (id=28916): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 809.262204ms ago: executing program 5 (id=28919): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 809.188469ms ago: executing program 6 (id=28925): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) utime(&(0x7f00000024c0)='.\x00', 0x0) 745.142725ms ago: executing program 5 (id=28921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 742.857676ms ago: executing program 6 (id=28922): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) read(r0, &(0x7f0000000040)=""/139, 0xffffffffffffff64) 625.029559ms ago: executing program 6 (id=28924): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 524.629586ms ago: executing program 6 (id=28927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x22f0}, 0x1, 0x0, 0x0, 0x10}, 0x10) 384.374351ms ago: executing program 7 (id=28930): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) fchown(r2, 0x0, 0x0) 367.21325ms ago: executing program 7 (id=28931): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 355.948751ms ago: executing program 5 (id=28932): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) 289.389944ms ago: executing program 5 (id=28933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000001c0)=""/4105, 0x1009, 0x1, 0x0, 0x0) 250.035158ms ago: executing program 7 (id=28934): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) read(r0, &(0x7f0000000040)=""/139, 0xffffffffffffff64) 241.394182ms ago: executing program 3 (id=28935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000001140)={{0x7000, 0xd000, 0x9, 0x8, 0x8, 0xbd, 0x4, 0x5, 0x40, 0x4, 0x24, 0x5}, {0x9000, 0x60000, 0x8, 0x5, 0x2, 0x2, 0x40, 0x3, 0x8, 0x9, 0x8, 0x9}, {0x70000, 0xeeecd000, 0x3, 0x2, 0xf, 0xfe, 0x40, 0x3, 0x40, 0xc, 0x6, 0x6}, {0xdddd1000, 0xb000, 0x4, 0xf7, 0x48, 0x0, 0xf, 0x5, 0x42, 0x9, 0xa, 0xfd}, {0x70000, 0xe000, 0xe, 0x81, 0x9, 0xf4, 0x1, 0x6, 0x3, 0x7, 0xf5, 0xd}, {0xeeee8000, 0x30000, 0x0, 0x1, 0x3, 0x5, 0x1, 0x7, 0x0, 0xd2, 0x62, 0x2}, {0x26000, 0xdddd0000, 0xd, 0xb5, 0x8, 0x1, 0xff, 0x6, 0x7f, 0x23, 0x9, 0xa}, {0x80a0000, 0x0, 0xd, 0x46, 0x5, 0x80, 0x9, 0x6, 0x6, 0x7, 0x6, 0x9}, {0x3000, 0x8}, {0x40000, 0xb}, 0xc0000008, 0x0, 0xdddd1000, 0x20000, 0x4, 0x2100, 0xe000, 0x0, [0x0, 0x2, 0x6, 0x7fffffffffffffff]}) 152.45241ms ago: executing program 7 (id=28936): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) utime(&(0x7f00000024c0)='.\x00', 0x0) 89.436801ms ago: executing program 3 (id=28937): r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 88.243773ms ago: executing program 7 (id=28945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 379.965µs ago: executing program 7 (id=28938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f8000000190001002dbd7000fcffffff00000000000000000000000000000000ac1414aa00000000000000000000000000000000010000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000a64900000000000000000000000a0000000000000000000000804000020000000000000800000000000000000100000044000500e0000001000000000000000000000000fffffffc3c00000002000000000000000000000000000000000000000600000004"], 0xf8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=28939): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) kernel console output (not intermixed with test programs): file /dsp1 (pid: 5845 comm: kworker/1:6) [ 681.631131][ T8125] wlan0 speed is unknown, defaulting to 1000 [ 681.635458][ T8125] lo speed is unknown, defaulting to 1000 [ 682.390926][ T8228] overlayfs: invalid origin (0000) [ 684.462921][ T42] kauditd_printk_skb: 210 callbacks suppressed [ 684.462936][ T42] audit: type=1800 audit(878.757:22933): pid=8415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26354" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 684.471429][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26355'. [ 684.610685][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26360'. [ 688.268734][ T5755] Bluetooth: hci3: command 0xfc11 tx timeout [ 688.269441][T20778] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 688.333963][ T8590] binder: 8589:8590 ioctl 541b 0 returned -22 [ 688.774861][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26418'. [ 688.983885][ T8674] hugetlbfs: syz.3.26430 (8674): Using mlock ulimits for SHM_HUGETLB is obsolete [ 689.400240][ T42] audit: type=1326 audit(1139.371:22934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.5.26451" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 689.422355][ T8749] [U] [ 689.423345][ T8749] [U] [ 689.424388][ T8749] [U] [ 689.425320][ T8749] [U] [ 689.428205][ T8749] [U] [ 689.429121][ T8749] [U] Gٮ [ 689.430128][ T8749] [U] [ 689.431019][ T8749] [U] [ 689.431944][ T8749] [U] [ 689.432877][ T8749] [U] [ 689.433916][ T8749] [U] [ 689.434840][ T8749] [U] [ 689.435743][ T8749] [U] [ 689.438127][ T8749] [U] [ 689.439036][ T8749] [U] [ 689.439976][ T8749] [U] [ 689.440871][ T8749] [U] [ 689.441838][ T8749] [U] [ 689.443102][ T8749] [U] [ 689.444232][ T8749] [U] [ 689.445294][ T8749] [U] [ 689.447025][ T8749] [U] [ 689.447946][ T8749] [U] [ 689.448973][ T8749] [U] [ 689.449874][ T8749] [U] [ 689.451255][ T8749] [U] [ 689.452163][ T8749] [U] [ 689.453049][ T8749] [U] [ 689.454055][ T8749] [U] [ 689.455717][ T8749] [U] [ 689.456625][ T8749] [U] [ 689.457522][ T8749] [U] [ 689.458428][ T8749] [U] [ 689.459387][ T8749] [U] [ 689.460250][ T8749] [U] [ 689.461127][ T8749] [U] [ 689.462187][ T8749] [U] [ 689.463212][ T8749] [U] [ 689.464280][ T8749] [U] [ 689.465202][ T8749] [U] [ 689.466158][ T8749] [U] [ 689.469682][ T8749] [U] [ 689.470647][ T8749] [U] [ 689.471610][ T8749] [U] [ 689.472514][ T8749] [U] [ 689.473472][ T8749] [U] [ 689.474406][ T8749] [U] [ 689.475380][ T8749] [U] [ 689.476289][ T8749] [U] [ 689.478103][ T8749] [U] [ 689.479022][ T8749] [U] [ 689.479938][ T8749] [U] [ 689.480810][ T8749] [U] [ 689.481728][ T8749] [U] [ 689.482635][ T8749] [U] [ 689.483574][ T8749] [U] [ 689.484464][ T8749] [U] [ 689.485368][ T8749] [U] [ 689.486251][ T8749] [U] [ 689.487115][ T8749] [U] [ 689.487977][ T8749] [U] [ 689.490101][ T8749] [U] [ 689.491013][ T8749] [U] [ 689.492372][ T8749] [U] [ 689.493270][ T8749] [U] [ 689.494296][ T8749] [U] [ 689.495248][ T8749] [U] [ 689.496147][ T8749] [U] [ 689.497035][ T8749] [U] [ 689.497925][ T8749] [U] [ 689.499967][ T8749] [U] [ 689.500974][ T8749] [U] [ 689.502073][ T8749] [U] [ 689.503153][ T8749] [U] [ 689.504302][ T8749] [U] [ 689.505337][ T8749] [U] [ 689.506354][ T8749] [U] [ 689.507381][ T8749] [U] [ 689.508848][ T8749] [U] [ 689.509880][ T8749] [U] [ 689.510902][ T8749] [U] [ 689.511949][ T8749] [U] [ 689.513090][ T8749] [U] [ 689.514115][ T8749] [U] [ 689.515145][ T8749] [U] [ 689.516171][ T8749] [U] [ 689.517369][ T8749] [U] [ 689.518577][ T8749] [U] [ 689.519628][ T8749] [U] [ 689.520629][ T8749] [U] [ 689.522026][ T8749] [U] [ 689.522949][ T8749] [U] [ 689.524042][ T8749] [U] [ 689.525224][ T8749] [U] [ 689.526726][ T8749] [U] [ 689.527691][ T8749] [U] [ 689.528571][ T8749] [U] [ 689.529517][ T8749] [U] [ 689.530529][ T8749] [U] [ 689.531548][ T8749] [U] [ 689.532488][ T8749] [U] [ 689.533378][ T8749] [U] [ 689.534304][ T8749] [U] [ 689.535190][ T8749] [U] [ 689.536047][ T8749] [U] [ 689.536924][ T8749] [U] [ 689.537782][ T8749] [U] [ 689.538650][ T8749] [U] [ 689.539526][ T8749] [U] [ 689.540409][ T8749] [U] [ 689.544389][ T8749] [U] [ 689.545343][ T8749] [U] [ 689.546277][ T8749] [U] [ 689.547468][ T8749] [U] [ 689.549111][ T8749] [U] [ 689.550051][ T8749] [U] [ 689.550970][ T8749] [U] [ 689.551906][ T8749] [U] [ 689.553239][ T8749] [U] [ 689.554338][ T8749] [U] [ 689.555440][ T8749] [U] [ 689.556597][ T8749] [U] [ 689.557747][ T8749] [U] [ 689.558915][ T8749] [U] [ 689.560093][ T8749] [U] [ 689.561259][ T8749] [U] [ 689.563337][ T8749] [U] [ 689.564470][ T8749] [U] [ 689.565657][ T8749] [U] [ 689.608320][ T8747] [U] [ 689.749006][ T8777] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.890399][ T8795] Falling back ldisc for ttyS3. [ 690.069428][ T8812] netlink: 'syz.3.26472': attribute type 2 has an invalid length. [ 690.072088][ T8812] netlink: 'syz.3.26472': attribute type 11 has an invalid length. [ 690.074795][ T8812] netlink: 88 bytes leftover after parsing attributes in process `syz.3.26472'. [ 690.476943][ T8833] overlayfs: invalid origin (0000) [ 690.794906][ T8859] overlayfs: workdir and upperdir must reside under the same mount [ 691.363118][ T8884] loop7: detected capacity change from 0 to 7 [ 691.376915][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.379911][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.386966][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.390354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.393757][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.396766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.404516][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.408428][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.412767][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.415757][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.418573][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.421634][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.426125][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.429750][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.433620][ T8884] ldm_validate_partition_table(): Disk read failed. [ 691.437739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.441805][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.445975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.449894][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.456149][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.459308][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 691.462028][ T8884] Dev loop7: unable to read RDB block 0 [ 691.464936][ T8884] loop7: unable to read partition table [ 691.466877][ T8884] loop7: partition table beyond EOD, truncated [ 691.468994][ T8884] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 691.491718][ T8886] ldm_validate_partition_table(): Disk read failed. [ 691.494592][ T8886] Dev loop7: unable to read RDB block 0 [ 691.498675][ T8886] loop7: unable to read partition table [ 691.500661][ T8886] loop7: partition table beyond EOD, truncated [ 691.727506][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26494'. [ 691.844653][ T8909] team0: Device 26aaaaaaaaa is loopback device. Loopback devices can't be added as a team port [ 691.848678][ T8909] A link change request failed with some changes committed already. Interface 26aaaaaaaaa may have been left with an inconsistent configuration, please check. [ 691.979903][ T8913] PID 8913 killed due to inadequate hugepage pool [ 691.980310][ T8920] bond0: ARP target 9.0.0.0 is already present [ 691.985270][ T8920] bond0: option arp_ip_target: invalid value (9) [ 691.990228][ T8920] bond0 (unregistering): Released all slaves [ 692.530960][ T9029] netlink: 'syz.0.26514': attribute type 8 has an invalid length. [ 693.043519][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26528'. [ 693.274076][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26533'. [ 693.280949][ T9095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26533'. [ 693.283867][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26533'. [ 693.287427][ T9095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26533'. [ 693.410260][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26541'. [ 693.413814][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26541'. [ 693.816855][ T9161] bridge_slave_0: default FDB implementation only supports local addresses [ 694.225634][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26562'. [ 694.928920][ T9222] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 695.116162][T28128] kernel read not supported for file /adsp1 (pid: 28128 comm: kworker/0:2) [ 695.509048][ T9272] openvswitch: netlink: IP tunnel TTL not specified. [ 695.511253][ T9272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.456432][ T9331] __nla_validate_parse: 1 callbacks suppressed [ 696.456447][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26613'. [ 696.671914][ T9365] netlink: 'syz.5.26622': attribute type 7 has an invalid length. [ 696.717180][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26623'. [ 696.722887][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26623'. [ 696.726668][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26623'. [ 696.799422][ T9380] netlink: 'syz.0.26627': attribute type 3 has an invalid length. [ 696.906133][ T9396] tipc: New replicast peer: 172.30.0.1 [ 696.910598][ T9396] tipc: Enabled bearer , priority 4 [ 696.919529][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26633'. [ 696.923318][ T9396] tipc: Disabling bearer [ 697.009788][ T9409] bridge_slave_0: default FDB implementation only supports local addresses [ 697.154571][ T9426] loop9: detected capacity change from 0 to 7 [ 697.166727][ T9426] Dev loop9: unable to read RDB block 7 [ 697.168599][ T9426] loop9: unable to read partition table [ 697.173672][ T9426] loop9: partition table beyond EOD, truncated [ 697.175815][ T9426] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 697.258831][ T9441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26646'. [ 697.319616][T28128] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 697.483076][T28128] usb 9-1: Using ep0 maxpacket: 8 [ 697.488238][T28128] usb 9-1: config 0 has no interfaces? [ 697.500320][T28128] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 697.503719][T28128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.506633][T28128] usb 9-1: Product: syz [ 697.508064][T28128] usb 9-1: Manufacturer: syz [ 697.509994][T28128] usb 9-1: SerialNumber: syz [ 697.514300][T28128] usb 9-1: config 0 descriptor?? [ 697.739102][ T5845] usb 9-1: USB disconnect, device number 14 [ 698.516870][ T9522] block nbd3: server does not support multiple connections per device. [ 698.524287][ T9522] block nbd3: shutting down sockets [ 698.874545][ T9573] netlink: 'syz.5.26682': attribute type 1 has an invalid length. [ 698.877692][ T9573] netlink: 208 bytes leftover after parsing attributes in process `syz.5.26682'. [ 698.947733][ T9579] netlink: 'syz.5.26691': attribute type 1 has an invalid length. [ 700.094398][ T9666] bad cache= option: noner_mlock 0 [ 700.094398][ T9666] nr_zspages 1233 [ 700.094398][ T9666] nr_free_cma 0 [ 700.094398][ T9666] numa_hit 194805 [ 700.094398][ T9666] numa_miss 8661777 [ 700.094398][ T9666] numa_foreign 8661777 [ 700.094398][ T9666] numa_interleave 6099 [ 700.094398][ T9666] numa_local 180684 [ 700.094398][ T9666] numa_other 8675898 [ 700.094398][ T9666] nr_inactive_anon 777 [ 700.094398][ T9666] nr_active_anon 2240 [ 700.094398][ T9666] nr_inactive_file 21648 [ 700.094398][ T9666] nr_active_file 1834 [ 700.094398][ T9666] nr_unevictable 1768 [ 700.094398][ T9666] nr_slab_reclaimable 7440 [ 700.094398][ T9666] nr_slab_unreclaimable 86302 [ 700.094398][ T9666] nr_isolated_anon 0 [ 700.094398][ T9666] nr_isolated_file 0 [ 700.094398][ T9666] workingset_nodes 93 [ 700.094398][ T9666] workingset_refault_anon 17377 [ 700.094398][ T9666] workingset_refault_file 34628 [ 700.094398][ T9666] workingset_activate_anon 1059 [ 700.094398][ T9666] workingset_activate_file 2199 [ 700.094398][ T9666] workingset_restore_anon 1088 [ 700.094398][ T9666] workingset_restore_file 2306 [ 700.094398][ T9666] workingset_nodereclaim 452 [ 700.094398][ T9666] nr_anon_pages 2340 [ 700.094398][ T9666] nr_mapped 22871 [ 700.094398][ T9666] nr_file_pages 26341 [ 700.094398][ T9666] nr_dirty 417 [ 700.094398][ T9666] nr_writeback 0 [ 700.094398][ T9666] nr_shmem 1806 [ 700.094398][ T9666] nr_shmem_hugepages 0 [ 700.094398][ T9666] nr_shmem_pmdmapped 0 [ 700.094398][ T9666] nr_file_hugepages 0 [ 700.094398][ T9666] nr_file_pmdmapped 0 [ 700.094398][ T9666] nr_anon_transparent_hugepages 0 [ 700.094398][ T9666] nr_vmscan_write 64655 [ 700.094398][ T9666] nr_vmscan_immediate_reclaim 3216 [ 700.094398][ T9666] nr_dirtied 23002 [ 700.094398][ T9666] nr_written 22585 [ 700.094398][ T9666] nr_throttled_written 0 [ 700.094398][ T9666] nr_kernel_misc_reclaimable 0 [ 700.094398][ T9666] nr_foll_pin_acquired 24383 [ 700.094398][ T9666] nr_foll_pin_released 24383 [ 700.094862][ T9666] CIFS: VFS: bad cache= option: noner_mlock 0 [ 700.094862][ T9666] nr_zspages 1233 [ 700.094862][ T9666] nr_free_cma 0 [ 700.094862][ T9666] numa_hit 194805 [ 700.094862][ T9666] numa_miss 8661777 [ 700.094862][ T9666] numa_foreign 8661777 [ 700.094862][ T9666] numa_interleave 6099 [ 700.094862][ T9666] numa_local 180684 [ 700.094862][ T9666] numa_other 8675898 [ 700.094862][ T9666] nr_inactive_anon 777 [ 700.094862][ T9666] nr_active_anon 2240 [ 700.094862][ T9666] nr_inactive_file 21648 [ 700.094862][ T9666] nr_active_file 1834 [ 700.094862][ T9666] nr_unevictable 1768 [ 700.094862][ T9666] nr_slab_reclaimable 7440 [ 700.094862][ T9666] nr_slab_unreclaimable 86302 [ 700.094862][ T9666] nr_isolated_anon 0 [ 700.094862][ T9666] nr_isolated_file 0 [ 700.094862][ T9666] workingset_nodes 93 [ 700.094862][ T9666] workingset_refault_anon 17377 [ 700.094862][ T9666] workingset_refault_file 34628 [ 700.094862][ T9666] workingset_activate_anon 1059 [ 700.094862][ T9666] workingset_activate_file 2199 [ 700.094862][ T9666] workingset_restore_anon 1088 [ 700.094862][ T9666] workingset_restore_file 2306 [ 700.094862][ T9666] workingset_nodereclaim 452 [ 700.094862][ T9666] nr_anon_pages 2340 [ 700.094862][ T9666] nr_mapped 22871 [ 700.094862][ T9666] nr_file_pages 26341 [ 700.094862][ T9666] nr_dirty 417 [ 700.094862][ T9666] nr_writeback 0 [ 700.094862][ T9666] nr_shmem 1806 [ 700.094862][ T9666] nr_shmem_hugepages 0 [ 700.094862][ T9666] nr_shmem_pmdmapped 0 [ 700.094862][ T9666] nr_file_hugepages 0 [ 700.094862][ T9666] nr_file_pmdmapped 0 [ 700.094862][ T9666] nr_anon_transparent_hugepages 0 [ 700.094862][ T9666] nr_vmscan_write 64655 [ 700.094862][ T9666] nr_vmscan_immediate_reclaim 3216 [ 700.094862][ T9666] nr_dirtied 23002 [ 700.094862][ T9666] nr_written 22585 [ 700.094862][ T9666] nr_throttled_written 0 [ 700.094862][ T9666] nr_kernel_misc_reclaimable 0 [ 700.094862][ T9666] nr_foll_pin_acquired 24383 [ 700.304513][ T9690] tipc: Enabled bearer , priority 4 [ 700.375943][ T42] audit: type=1326 audit(1149.637:22935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.375978][ T42] audit: type=1326 audit(1149.637:22936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.384534][ T42] audit: type=1326 audit(1149.655:22937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.400184][ T42] audit: type=1326 audit(1149.655:22938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.407613][ T42] audit: type=1326 audit(1149.674:22939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.415453][ T42] audit: type=1326 audit(1149.674:22940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.422636][ T42] audit: type=1326 audit(1149.674:22941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.430343][ T42] audit: type=1326 audit(1149.674:22942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.436995][ T42] audit: type=1326 audit(1149.674:22943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.445112][ T42] audit: type=1326 audit(1149.674:22944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.26722" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf707efec code=0x7ffc0000 [ 700.515586][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26726'. [ 700.519068][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26726'. [ 701.433747][ T41] wlan1: Trigger new scan to find an IBSS to join [ 701.458679][ T9803] input: syz1 as /devices/virtual/input/input98 [ 701.497877][T13209] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 701.508541][ T1348] tipc: Node number set to 3758096385 [ 701.539179][ T9812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.26754'. [ 701.659974][T13209] usb 10-1: Using ep0 maxpacket: 32 [ 701.673726][T13209] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.677069][T13209] usb 10-1: config 0 has no interface number 0 [ 701.681557][T13209] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 701.685139][T13209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.687737][T13209] usb 10-1: Product: syz [ 701.689066][T13209] usb 10-1: Manufacturer: syz [ 701.691806][T13209] usb 10-1: SerialNumber: syz [ 701.696072][T13209] usb 10-1: config 0 descriptor?? [ 701.703765][T13209] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 701.707484][T13209] usb 10-1: selecting invalid altsetting 1 [ 701.709712][T13209] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 701.717318][T13209] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 701.726740][T13209] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 701.732066][T13209] usb 10-1: media controller created [ 701.758771][T13209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.271468][ T9874] Bluetooth: hci3: Frame reassembly failed (-84) [ 702.890432][T13209] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 702.893702][T13209] zl10353_read_register: readreg error (reg=127, ret==-110) [ 702.922738][ T9788] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 702.941345][ T9855] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 702.958291][T13209] usb 10-1: USB disconnect, device number 6 [ 703.604115][ T9903] PID 9903 killed due to inadequate hugepage pool [ 703.610706][ T9910] input: syz0 as /devices/virtual/input/input99 [ 704.393699][T13209] kernel read not supported for file /dsp1 (pid: 13209 comm: kworker/1:9) [ 704.425832][ T5755] Bluetooth: hci3: command 0x1003 tx timeout [ 704.432485][T20778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 704.602825][ T349] wlan1: Trigger new scan to find an IBSS to join [ 704.826421][T10017] loop5: detected capacity change from 0 to 7 [ 704.881305][ T2085] blk_print_req_error: 25 callbacks suppressed [ 704.881326][ T2085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.890081][ T2085] buffer_io_error: 25 callbacks suppressed [ 704.890093][ T2085] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.894762][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.899316][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.904156][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.908809][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.912032][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.915646][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.918926][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.922553][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.925380][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.929355][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.932333][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.935573][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.938384][T10017] ldm_validate_partition_table(): Disk read failed. [ 704.939099][T32558] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 704.944370][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.947517][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.952508][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.956197][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.959016][T10017] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.963065][T10017] Buffer I/O error on dev loop5, logical block 0, async page read [ 704.972905][T10017] Dev loop5: unable to read RDB block 0 [ 704.975297][T10017] loop5: unable to read partition table [ 704.977698][T10017] loop5: partition table beyond EOD, truncated [ 704.979738][T10017] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 705.033289][T10028] netlink: 'syz.0.26807': attribute type 3 has an invalid length. [ 705.037723][T10028] netlink: 'syz.0.26807': attribute type 1 has an invalid length. [ 705.041118][T10028] __nla_validate_parse: 2 callbacks suppressed [ 705.041133][T10028] netlink: 224 bytes leftover after parsing attributes in process `syz.0.26807'. [ 705.131766][T32558] usb 9-1: Using ep0 maxpacket: 8 [ 705.140305][T32558] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 705.148042][T32558] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.151163][T32558] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 705.155898][T32558] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 705.158913][T32558] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.174225][T32558] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 705.186903][T32558] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.304160][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26818'. [ 705.430995][T32558] usb 9-1: GET_CAPABILITIES returned 0 [ 705.433381][T32558] usbtmc 9-1:16.0: can't read capabilities [ 705.648963][T32558] usb 9-1: USB disconnect, device number 15 [ 705.692799][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26834'. [ 705.712086][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26834'. [ 705.723510][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.732905][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.738436][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.746107][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.998421][T10247] ipvlan1: entered promiscuous mode [ 707.114107][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 707.234241][T28128] kernel write not supported for file /input/event2 (pid: 28128 comm: kworker/0:2) [ 707.856402][ T41] wlan1: Trigger new scan to find an IBSS to join [ 707.969982][T10328] bridge0: port 3(syz_tun) entered blocking state [ 707.975276][T10328] bridge0: port 3(syz_tun) entered disabled state [ 707.977938][T10328] syz_tun: entered allmulticast mode [ 708.003149][T10328] syz_tun: entered promiscuous mode [ 708.012239][T10328] bridge0: port 3(syz_tun) entered blocking state [ 708.014346][T10328] bridge0: port 3(syz_tun) entered forwarding state [ 708.332769][T10378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.339012][T10378] bond0: (slave bond6): Enslaving as an active interface with an up link [ 708.648981][T21398] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 708.806996][T21398] usb 10-1: Using ep0 maxpacket: 8 [ 708.810175][T21398] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 708.812944][T21398] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.816102][T21398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.819633][T21398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.822828][T21398] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.826996][T21398] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 708.830136][ T48] wlan1: Creating new IBSS network, BSSID 72:d4:5f:a5:b0:34 [ 708.832576][T21398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.061262][T21398] usb 10-1: GET_CAPABILITIES returned 0 [ 709.067735][T21398] usbtmc 10-1:16.0: can't read capabilities [ 709.274959][T14109] usb 10-1: USB disconnect, device number 7 [ 709.384714][T10494] pimreg: tun_chr_ioctl cmd 1074025675 [ 709.387305][T10494] pimreg: persist disabled [ 709.790652][ T5968] kernel read not supported for file /dsp1 (pid: 5968 comm: kworker/3:4) [ 710.030308][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26951'. [ 710.033169][T10541] netlink: 'syz.5.26951': attribute type 1 has an invalid length. [ 710.040735][T10541] gretap0: entered promiscuous mode [ 710.044090][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26950'. [ 710.044104][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26950'. [ 710.054760][T10541] macvlan2: entered allmulticast mode [ 710.056983][T10541] gretap0: entered allmulticast mode [ 710.339629][T10575] evm: overlay not supported [ 710.470947][T10568] bridge0: port 3(syz_tun) entered disabled state [ 710.492230][T10568] syz_tun (unregistering): left allmulticast mode [ 710.494291][T10568] syz_tun (unregistering): left promiscuous mode [ 710.499715][T10568] bridge0: port 3(syz_tun) entered disabled state [ 710.884587][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.890455][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.895236][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.898942][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.908726][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.213937][T10596] wlan0 speed is unknown, defaulting to 1000 [ 711.226145][T10596] lo speed is unknown, defaulting to 1000 [ 711.504781][T10726] bridge0: entered allmulticast mode [ 711.571903][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.574315][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.577593][T10596] bridge_slave_0: entered allmulticast mode [ 711.580394][T10596] bridge_slave_0: entered promiscuous mode [ 711.583998][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.586649][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.589133][T10596] bridge_slave_1: entered allmulticast mode [ 711.592070][T10596] bridge_slave_1: entered promiscuous mode [ 711.617127][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.623626][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.670643][T10596] team0: Port device team_slave_0 added [ 711.677727][T10596] team0: Port device team_slave_1 added [ 711.719112][T10596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.725558][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.739426][T10596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.744398][T10596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.747212][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.754933][T10596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.803562][T10596] hsr_slave_0: entered promiscuous mode [ 711.805854][T10596] hsr_slave_1: entered promiscuous mode [ 711.807818][T10596] debugfs: 'hsr0' already exists in 'hsr' [ 711.811455][T10596] Cannot create hsr debugfs directory [ 711.904537][T10924] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 711.999579][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26994'. [ 712.006330][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26994'. [ 712.030967][T10596] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.041803][T10950] misc userio: Can't change port type on an already running userio instance [ 712.134741][T10596] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.262961][T10596] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.405910][T10596] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.432430][T11002] kvm: kvm [11001]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x80040 [ 712.673353][T10596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 712.680857][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.685208][T10596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 712.690791][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.698049][T10596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 712.715488][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.720103][T10596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 712.728837][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.755618][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27018'. [ 712.941824][T10596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.965801][T10596] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.980950][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.983267][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.991995][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.994389][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.156441][ T5755] Bluetooth: hci2: command tx timeout [ 713.313503][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.513897][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27036'. [ 713.546400][T10596] veth0_vlan: entered promiscuous mode [ 713.565890][T10596] veth1_vlan: entered promiscuous mode [ 713.608724][T10596] veth0_macvtap: entered promiscuous mode [ 713.621355][T10596] veth1_macvtap: entered promiscuous mode [ 713.645317][T10596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.662510][T10596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.671654][ T5832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.675936][ T5832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.696603][ T5832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.703581][ T5832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.854701][ T5755] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 713.879619][ T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.886671][ T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.934027][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.938207][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.051302][ T1487] kernel write not supported for file /sequencer (pid: 1487 comm: kworker/3:2) [ 714.131404][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27052'. [ 714.144011][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27052'. [ 714.931030][T21398] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 715.091754][T21398] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 715.095817][T21398] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 715.098905][T21398] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 715.101955][T21398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.106405][T11232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 715.116327][T21398] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.379040][ T5755] Bluetooth: hci2: command tx timeout [ 715.431159][ T1487] usb 9-1: USB disconnect, device number 16 [ 716.224536][ T5755] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 717.591090][ T5755] Bluetooth: hci2: command tx timeout [ 718.360846][ T1348] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 718.424497][T21398] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 718.595650][T21398] usb 10-1: Using ep0 maxpacket: 8 [ 718.599886][T21398] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 718.609283][T21398] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 718.618791][T21398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 718.627530][T21398] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 718.633071][T21398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 718.637291][T21398] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.643702][T21398] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.646594][T21398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.870840][T21398] usb 10-1: GET_CAPABILITIES returned 0 [ 718.872914][T21398] usbtmc 10-1:16.0: can't read capabilities [ 719.100084][ C3] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 719.106207][T11422] usbtmc 10-1:16.0: Unable to send data, error -71 [ 719.110176][T32558] usb 10-1: USB disconnect, device number 8 [ 719.824625][ T5755] Bluetooth: hci2: command tx timeout [ 735.853840][T11507] netlink: 'syz.5.27129': attribute type 2 has an invalid length. [ 735.929922][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27133'. [ 736.123536][T11542] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 737.287718][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27176'. [ 737.447570][T11671] openvswitch: netlink: IP tunnel dst address not specified [ 737.451282][T11671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.965046][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 737.965064][ T42] audit: type=1326 audit(1184.823:22954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.5.27194" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 738.657445][T11718] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.659527][T11718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 738.665005][T11718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 738.673705][T11718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 738.761326][T11737] wlan0 speed is unknown, defaulting to 1000 [ 738.765221][T11737] lo speed is unknown, defaulting to 1000 [ 738.792167][ T48] wlan1: Trigger new scan to find an IBSS to join [ 738.911808][T11773] macvlan0: entered promiscuous mode [ 738.921473][T11773] netlink: 'syz.3.27206': attribute type 2 has an invalid length. [ 739.272136][ T48] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 739.693906][T11962] netlink: 766 bytes leftover after parsing attributes in process `syz.4.27229'. [ 739.744890][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27230'. [ 740.606813][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27246'. [ 740.844222][T20778] Bluetooth: hci4: command 0x0405 tx timeout [ 740.844263][ T5760] Bluetooth: hci2: command 0x0c1a tx timeout [ 740.952174][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 741.445843][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 741.447876][ T5760] Bluetooth: hci3: command 0x1003 tx timeout [ 741.625814][T12065] binder: 12064:12065 ioctl c0306201 80000000 returned -14 [ 741.627246][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27253'. [ 741.957465][ T48] wlan1: Trigger new scan to find an IBSS to join [ 742.427585][T12167] misc userio: Begin command sent, but we're already running [ 742.494720][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27286'. [ 743.016069][T12217] overlayfs: upper fs does not support file handles, falling back to index=off. [ 743.019419][T12217] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 743.077911][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 743.365364][T12240] veth0: entered promiscuous mode [ 743.371050][T12239] veth0: left promiscuous mode [ 743.675956][T11733] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 743.835840][T11733] usb 10-1: Using ep0 maxpacket: 8 [ 743.845859][T11733] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 743.849899][T11733] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.849923][T11733] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.849944][T11733] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.849965][T11733] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.850001][T11733] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 743.850020][T11733] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.857876][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27315'. [ 744.068011][T12284] netlink: 'syz.3.27319': attribute type 1 has an invalid length. [ 744.078530][T11733] usb 10-1: GET_CAPABILITIES returned 0 [ 744.080306][T11733] usbtmc 10-1:16.0: can't read capabilities [ 744.276124][T12309] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 744.301548][T11733] usb 10-1: USB disconnect, device number 9 [ 744.420191][T12329] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27332'. [ 745.025516][T12373] kvm: kvm [12372]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 745.119156][ T41] wlan1: Trigger new scan to find an IBSS to join [ 745.299996][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 746.112915][ T1253] wlan1: Creating new IBSS network, BSSID 72:12:6d:6c:4f:7b [ 746.616709][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27385'. [ 746.962194][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.27396'. [ 748.165112][T11733] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 759.176212][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27431'. [ 759.190169][T12665] bridge_slave_1 (unregistering): left promiscuous mode [ 759.196542][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.097387][T31159] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.102341][T31159] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.220681][T31159] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.224596][T31159] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.362845][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 760.380162][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 760.381992][T31159] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.397808][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 760.398115][T31159] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.401974][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 760.408845][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 760.428580][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27448'. [ 760.478146][T31159] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.486212][T31159] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.629913][T12756] netlink: 'syz.3.27455': attribute type 1 has an invalid length. [ 760.633168][T12756] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.27455'. [ 760.637529][T12756] netlink: 'syz.3.27455': attribute type 1 has an invalid length. [ 760.640745][T12756] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.27455'. [ 760.862564][T12721] wlan0 speed is unknown, defaulting to 1000 [ 760.890194][T31159] pim6reg: left allmulticast mode [ 760.893883][T31159] pimreg: left allmulticast mode [ 761.131966][ T5845] hid_parser_main: 12 callbacks suppressed [ 761.131988][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x3 [ 761.137260][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x3 [ 761.140843][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.143563][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.146716][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.149611][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.152367][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.155085][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.157932][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.161144][ T5845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 761.206208][T12806] netlink: 232 bytes leftover after parsing attributes in process `syz.5.27463'. [ 761.212740][ T5845] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.03 Device [syz1] on syz1 [ 761.286365][T12810] fido_id[12810]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 761.411070][T31159] .` (unregistering): Released all slaves [ 761.422843][T31159] bond0 (unregistering): (slave bond6): Releasing backup interface [ 761.426493][T31159] bond0 (unregistering): Released all slaves [ 761.435180][T31159] bond1 (unregistering): Released all slaves [ 761.443706][T31159] bond2 (unregistering): Released all slaves [ 761.451813][T31159] bond3 (unregistering): Released all slaves [ 761.466535][T31159] bond4 (unregistering): Released all slaves [ 761.487767][T31159] bond5 (unregistering): Released all slaves [ 761.502537][T31159] bond6 (unregistering): Released all slaves [ 761.513098][T12721] lo speed is unknown, defaulting to 1000 [ 761.513511][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 761.686115][T31159] : left promiscuous mode [ 761.823540][T12885] program syz.5.27471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.826545][T12885] ata1.00: invalid service action 31 [ 761.891131][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 761.919784][T31159] tipc: Disabling bearer [ 761.922042][T31159] tipc: Disabling bearer [ 761.923832][T31159] tipc: Left network mode [ 762.088947][T12721] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.092102][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.095331][T12721] bridge_slave_0: entered allmulticast mode [ 762.099290][T12721] bridge_slave_0: entered promiscuous mode [ 762.113592][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.116996][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.121368][T12721] bridge_slave_1: entered allmulticast mode [ 762.155078][T12721] bridge_slave_1: entered promiscuous mode [ 762.220692][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 762.236395][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.244149][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.268999][T12721] team0: Port device team_slave_0 added [ 762.272985][T12721] team0: Port device team_slave_1 added [ 762.326860][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.341029][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.352993][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.365793][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.368920][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.379457][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.520248][T12721] hsr_slave_0: entered promiscuous mode [ 762.533036][T12721] hsr_slave_1: entered promiscuous mode [ 762.544208][T12721] debugfs: 'hsr0' already exists in 'hsr' [ 762.545962][T12721] Cannot create hsr debugfs directory [ 762.630454][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 762.643523][ T5755] Bluetooth: hci1: command tx timeout [ 763.066853][T12721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 763.071848][T12721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.074899][T12721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 763.088847][T12721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.093882][T12721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.109482][T12721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.109645][T13216] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 763.112677][T12721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 763.130102][T12721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.253711][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.277341][T12721] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.297595][ T1487] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 763.324998][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.328072][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.334934][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.338137][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.354029][T13244] fido_id[13244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 763.452387][ T41] smbdirect: ib_dev[syz0] removed [ 763.617660][T31159] hsr_slave_0: left promiscuous mode [ 763.622135][T31159] hsr_slave_1: left promiscuous mode [ 763.657786][T31159] veth1_macvtap: left allmulticast mode [ 763.661092][T31159] veth1_macvtap: left promiscuous mode [ 763.666691][T31159] veth0_macvtap: left promiscuous mode [ 763.673997][T31159] veth1_vlan: left promiscuous mode [ 763.677220][T31159] veth0_vlan: left promiscuous mode [ 764.115991][T18110] smbdirect: ib_dev[syz2] removed [ 764.121637][ T1487] lo speed is unknown, defaulting to 1000 [ 764.131897][ T1487] syz2: Port: 1 Link DOWN [ 764.367350][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.404007][T13335] loop4: detected capacity change from 0 to 524287964 [ 764.597393][T12721] veth0_vlan: entered promiscuous mode [ 764.624844][T12721] veth1_vlan: entered promiscuous mode [ 764.678754][T12721] veth0_macvtap: entered promiscuous mode [ 764.694837][T12721] veth1_macvtap: entered promiscuous mode [ 764.723145][T12721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.751002][T12721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.765776][ T5746] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.769183][ T5746] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.774053][ T5746] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.777592][ T5746] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.815484][T31159] IPVS: stop unused estimator thread 0... [ 764.869043][ T5755] Bluetooth: hci1: command tx timeout [ 764.923221][ T349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.941043][ T349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.978445][T18110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.981805][T18110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.069736][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27533'. [ 765.211781][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27538'. [ 765.376458][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27543'. [ 766.355013][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27569'. [ 766.405885][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27570'. [ 766.764159][T13553] netlink: 27 bytes leftover after parsing attributes in process `syz.6.27581'. [ 766.987600][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27588'. [ 767.089069][ T5755] Bluetooth: hci1: command tx timeout [ 769.311910][ T5755] Bluetooth: hci1: command tx timeout [ 770.869513][T13891] netlink: 56 bytes leftover after parsing attributes in process `syz.6.27663'. [ 770.882774][T32558] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 771.053690][T32558] usb 10-1: Using ep0 maxpacket: 32 [ 771.056752][T32558] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 771.059510][T32558] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 771.063041][T32558] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 771.067181][T32558] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 771.071330][T32558] usb 10-1: config 0 interface 0 has no altsetting 0 [ 771.075189][T32558] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 771.078154][T32558] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 771.080799][T32558] usb 10-1: Product: syz [ 771.082192][T32558] usb 10-1: Manufacturer: syz [ 771.083733][T32558] usb 10-1: SerialNumber: syz [ 771.087783][T32558] usb 10-1: config 0 descriptor?? [ 771.095097][T32558] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 771.102241][T32558] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 771.325022][ T5823] usb 10-1: USB disconnect, device number 10 [ 771.334887][ T5823] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 772.203653][T13965] netlink: 766 bytes leftover after parsing attributes in process `syz.5.27679'. [ 772.849403][T13990] netlink: 64 bytes leftover after parsing attributes in process `syz.5.27686'. [ 773.351198][ T5855] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 774.107930][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.265813][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 790.512758][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 791.238239][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27706'. [ 791.243500][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27706'. [ 791.495698][ T5845] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 791.657412][ T5845] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 791.662102][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.665686][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.670431][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.673981][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.676838][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.680576][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.683953][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.686805][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.690406][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.693604][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.696577][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.700257][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.703239][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.706201][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.710189][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.713176][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.716175][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.719559][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.722632][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.725838][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.729272][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.732291][ T5845] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.735149][ T5845] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.738484][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 791.742326][ T5845] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 791.745544][ T5845] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 791.748257][ T5845] usb 10-1: Product: syz [ 791.749616][ T5845] usb 10-1: Manufacturer: syz [ 791.751135][ T5845] usb 10-1: SerialNumber: syz [ 791.754462][ T5845] usb 10-1: config 0 descriptor?? [ 791.761009][ T5845] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 792.280696][T14180] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 792.788661][ T24] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 792.951499][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 792.955821][ T24] usb 9-1: config 0 has no interface number 0 [ 792.959170][ T24] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 792.965800][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 792.970524][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 792.975880][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 792.979892][ T24] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 792.983627][ T24] usb 9-1: Product: syz [ 792.985360][ T24] usb 9-1: SerialNumber: syz [ 792.989564][ T24] usb 9-1: config 0 descriptor?? [ 792.995210][ T24] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 793.001906][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input106 [ 793.188663][T14237] netlink: 'syz.3.27731': attribute type 3 has an invalid length. [ 793.192043][T14237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.27731'. [ 793.222141][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 793.222417][T13219] usb 9-1: USB disconnect, device number 17 [ 793.225043][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 793.240537][T13219] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 793.825344][T13219] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 793.986173][T13219] usb 11-1: Using ep0 maxpacket: 32 [ 793.989545][T13219] usb 11-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 793.993041][T13219] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 793.997742][T13219] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 794.001022][T13219] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 794.004319][T13219] usb 11-1: Product: syz [ 794.006093][T13219] usb 11-1: Manufacturer: syz [ 794.008424][T13219] usb 11-1: SerialNumber: syz [ 794.015204][T13219] usb 11-1: config 0 descriptor?? [ 794.150506][ T42] audit: type=1326 audit(1493.400:22955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.160634][ T42] audit: type=1326 audit(1493.400:22956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.169259][ T42] audit: type=1326 audit(1493.400:22957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.175971][ T42] audit: type=1326 audit(1493.419:22958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.183394][ T42] audit: type=1326 audit(1493.419:22959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.191018][ T42] audit: type=1326 audit(1493.419:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14284 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71672eb code=0x7ffc0000 [ 794.193375][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 794.199546][ T42] audit: type=1326 audit(1493.447:22961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.208626][ C1] usb 10-1: yurex_control_callback - control failed: -32 [ 794.208665][ T42] audit: type=1326 audit(1493.447:22962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.218246][ T42] audit: type=1326 audit(1493.447:22963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 794.226899][T13219] usb 10-1: USB disconnect, device number 11 [ 794.229821][ T42] audit: type=1326 audit(1493.447:22964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.27740" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f64008 code=0x7ffc0000 [ 794.236726][T13219] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 794.261818][ T5823] usb 11-1: USB disconnect, device number 2 [ 794.466896][T14318] netlink: 'syz.4.27746': attribute type 16 has an invalid length. [ 794.470223][T14318] netlink: 'syz.4.27746': attribute type 3 has an invalid length. [ 794.473467][T14318] netlink: 'syz.4.27746': attribute type 1 has an invalid length. [ 794.476672][T14318] netlink: 112 bytes leftover after parsing attributes in process `syz.4.27746'. [ 794.901756][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27756'. [ 795.083617][T14372] team0: No ports can be present during mode change [ 795.162648][T14374] Invalid logical block size (4095) [ 795.246419][ T5823] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 795.369440][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.374928][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.431493][ T5823] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 795.437825][ T5823] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 795.443703][ T5823] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 795.447075][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.454578][T14357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 795.471814][ T5823] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 795.497574][T14397] tun0: tun_chr_ioctl cmd 1074025676 [ 795.501774][T14397] tun0: owner set to 0 [ 795.688884][ T5823] usb 9-1: USB disconnect, device number 18 [ 795.921257][T14457] tmpfs: Too few inodes for current use [ 795.984270][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 796.752992][T14535] netlink: 'syz.4.27804': attribute type 10 has an invalid length. [ 796.756144][T14535] netlink: 128 bytes leftover after parsing attributes in process `syz.4.27804'. [ 796.965160][T14556] netlink: 'syz.5.27810': attribute type 8 has an invalid length. [ 797.231211][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27818'. [ 797.236035][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27818'. [ 797.605134][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27828'. [ 797.795863][T14642] tipc: Started in network mode [ 797.797496][T14642] tipc: Node identity ac14140f, cluster identity 4711 [ 797.803160][T14642] tipc: New replicast peer: 255.255.255.255 [ 797.807201][T14642] tipc: Enabled bearer , priority 4 [ 798.239598][T14701] macvlan0: left promiscuous mode [ 798.241253][T14703] loop8: detected capacity change from 0 to 7 [ 798.242951][T14701] netlink: 'syz.3.27854': attribute type 1 has an invalid length. [ 798.246523][ C0] blk_print_req_error: 5 callbacks suppressed [ 798.246534][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.252244][ C0] buffer_io_error: 5 callbacks suppressed [ 798.252255][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.253282][T14701] netlink: 'syz.3.27854': attribute type 2 has an invalid length. [ 798.259414][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.262554][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.265373][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.268715][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.271943][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.275073][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.278698][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.282172][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.286178][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.289463][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.294425][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.298228][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.301452][T14703] ldm_validate_partition_table(): Disk read failed. [ 798.309560][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.313567][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.317467][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.321157][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.325332][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.329178][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 798.337265][T14703] Dev loop8: unable to read RDB block 0 [ 798.340378][T14703] loop8: unable to read partition table [ 798.342932][T14703] loop8: partition table beyond EOD, truncated [ 798.348265][T14703] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 798.433951][T14727] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 798.541794][T14744] binder: 14742:14744 ioctl c018620c 80000140 returned -1 [ 798.613795][T14753] openvswitch: netlink: IP tunnel dst address not specified [ 798.618165][T14753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.008623][T32558] tipc: Node number set to 2886997007 [ 799.743397][T13209] kernel read not supported for file /vcs (pid: 13209 comm: kworker/1:9) [ 800.460725][T14945] netlink: 52 bytes leftover after parsing attributes in process `syz.5.27921'. [ 800.660290][T14962] netlink: 48 bytes leftover after parsing attributes in process `syz.5.27926'. [ 801.401816][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27945'. [ 801.406352][T15034] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27945'. [ 801.576217][T15049] bond1: invalid ARP target 0.0.0.0 specified for addition [ 801.579285][T15049] bond1: option arp_ip_target: invalid value (0) [ 801.584414][T15049] bond1 (unregistering): Released all slaves [ 801.848358][T15140] tipc: Started in network mode [ 801.850030][T15140] tipc: Node identity ac14140f, cluster identity 4711 [ 801.853813][T15140] tipc: New replicast peer: 255.255.255.255 [ 801.856743][T15140] tipc: Enabled bearer , priority 4 [ 801.859318][T13209] hid_parser_main: 70 callbacks suppressed [ 801.859331][T13209] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 801.865203][T13209] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 801.876740][T13209] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 801.904457][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27959'. [ 801.912100][T15152] netlink: 72 bytes leftover after parsing attributes in process `syz.5.27959'. [ 801.921939][T15149] fido_id[15149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 802.581458][ T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 802.584652][ T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 802.597903][ T24] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 802.650593][T15209] fido_id[15209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 802.713299][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27971'. [ 802.719235][T15218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.27971'. [ 802.933020][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.938471][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.036478][T15232] geneve2: entered promiscuous mode [ 803.040438][ T5855] tipc: Node number set to 2886997007 [ 803.050280][ T5807] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.056095][ T5807] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 47230 - 0 [ 803.061235][ T5807] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.065061][ T5807] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 47230 - 0 [ 803.068812][ T5807] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.072432][ T5807] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 47230 - 0 [ 803.075860][ T5807] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.080293][ T5807] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 47230 - 0 [ 803.932325][T15260] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.935371][T15260] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.528821][ T5968] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 804.531578][ T5968] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 804.538195][ T5968] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 804.578737][T15288] fido_id[15288]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 804.636328][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 804.636341][ T42] audit: type=1326 audit(1503.216:22969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.648022][ T42] audit: type=1326 audit(1503.226:22970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.657981][ T42] audit: type=1326 audit(1503.226:22971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.668171][ T42] audit: type=1326 audit(1503.226:22972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.675659][ T42] audit: type=1326 audit(1503.226:22973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.684252][ T42] audit: type=1326 audit(1503.226:22974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.691135][ T42] audit: type=1326 audit(1503.226:22975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.698752][ T42] audit: type=1326 audit(1503.226:22976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.707976][ T42] audit: type=1326 audit(1503.226:22977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf703efec code=0x7ffc0000 [ 804.718083][ T42] audit: type=1326 audit(1503.226:22978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.6.27990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 806.926413][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 807.154550][ T1253] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 808.170589][T15633] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 808.559939][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28062'. [ 808.592601][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28055'. [ 808.811260][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28059'. [ 809.182141][ T5855] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 809.748262][ T5755] Bluetooth: hci1: link tx timeout [ 809.756404][ T5755] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 810.712175][ T5760] Bluetooth: hci1: link tx timeout [ 810.714505][ T5760] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 811.312743][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 811.970298][ T5760] Bluetooth: hci1: command 0x0406 tx timeout [ 811.987339][ T5760] Bluetooth: hci1: link tx timeout [ 812.398336][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.879517][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 820.488259][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28104'. [ 820.491918][T15872] netlink: 'syz.6.28104': attribute type 21 has an invalid length. [ 820.624328][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28109'. [ 820.629811][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 820.629829][ T42] audit: type=1326 audit(1518.180:22981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.638887][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28109'. [ 820.652396][ T42] audit: type=1326 audit(1518.180:22982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 820.675286][ T42] audit: type=1326 audit(1518.180:22983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.682914][ T42] audit: type=1326 audit(1518.180:22984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.689992][ T42] audit: type=1326 audit(1518.180:22985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.696525][ T42] audit: type=1326 audit(1518.180:22986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 820.707287][ T42] audit: type=1326 audit(1518.180:22987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.717044][ T42] audit: type=1326 audit(1518.180:22988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.727689][ T42] audit: type=1326 audit(1518.180:22989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.735025][ T42] audit: type=1326 audit(1518.180:22990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.28110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703f008 code=0x7ffc0000 [ 820.990546][T15935] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 821.319655][T15966] input: syz0 as /devices/virtual/input/input107 [ 821.484303][T15980] netlink: 'syz.3.28138': attribute type 11 has an invalid length. [ 821.523402][T13209] kernel read not supported for file /dsp1 (pid: 13209 comm: kworker/1:9) [ 821.547350][T32558] kernel read not supported for file /dsp (pid: 32558 comm: kworker/3:1) [ 821.600698][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28140'. [ 821.704346][T15999] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.778662][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28148'. [ 822.001026][ T5823] Process accounting resumed [ 822.718649][T16124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.28181'. [ 822.861352][ T1487] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 823.034078][ T1487] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.038183][ T1487] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 823.043618][ T1487] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.046755][ T1487] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.056773][T16115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 823.068118][ T1487] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 823.210649][T16192] ref_ctr_offset mismatch. inode: 0x1b91 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 823.288583][ T5855] usb 10-1: USB disconnect, device number 12 [ 823.879320][T16258] loop8: detected capacity change from 0 to 7 [ 823.883375][T16258] loop8: [POWERTEC] [ 824.181196][T16283] : renamed from vlan0 (while UP) [ 824.776373][T16322] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 824.779577][T16322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.926691][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28236'. [ 825.320077][ T5823] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 825.326476][ T5823] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 825.423413][ T24] IPVS: starting estimator thread 0... [ 825.531686][T16370] IPVS: using max 45 ests per chain, 108000 per kthread [ 826.375372][T16483] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 826.393836][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28279'. [ 826.515908][T16501] Invalid ELF header magic: != ELF [ 826.678566][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28284'. [ 827.281036][T16705] [U] [ 827.282165][T16705] [U] [ 827.283078][T16705] [U] [ 827.283978][T16705] [U] [ 827.284885][T16705] [U] [ 827.285816][T16705] [U] [ 827.286723][T16705] [U] [ 827.287630][T16705] [U] [ 827.293875][T16705] [U] [ 827.294830][T16705] [U] [ 827.295789][T16705] [U] [ 827.296671][T16705] [U] [ 827.297593][T16705] [U] [ 827.298500][T16705] [U] [ 827.299409][T16705] [U] [ 827.300409][T16705] [U] [ 827.311552][T16705] [U] [ 827.312784][T16705] [U] [ 827.314019][T16705] [U] [ 827.315214][T16705] [U] [ 827.316400][T16705] [U] [ 827.317591][T16705] [U] [ 827.318776][T16705] [U] [ 827.319975][T16705] [U] [ 827.324094][T16705] [U] [ 827.325253][T16705] [U] [ 827.326408][T16705] [U] [ 827.327546][T16705] [U] [ 827.328644][T16705] [U] [ 827.329729][T16705] [U] [ 827.330823][T16705] [U] [ 827.331903][T16705] [U] [ 827.335615][T16705] [U] [ 827.336685][T16705] [U] [ 827.337810][T16705] [U] [ 827.338803][T16705] [U] [ 827.339698][T16705] [U] [ 827.340580][T16705] [U] [ 827.341476][T16705] [U] [ 827.342350][T16705] [U] [ 827.354695][T16705] [U] [ 827.355634][T16705] [U] [ 827.356537][T16705] [U] [ 827.357437][T16705] [U] [ 827.358325][T16705] [U] [ 827.359215][T16705] [U] [ 827.360177][T16705] [U] [ 827.361266][T16705] [U] [ 827.384375][T16705] [U] [ 827.385590][T16705] [U] [ 827.386588][T16705] [U] [ 827.387470][T16705] [U] [ 827.388367][T16705] [U] [ 827.389248][T16705] [U] [ 827.390180][T16705] [U] [ 827.391244][T16705] [U] [ 827.394431][T16705] [U] [ 827.395413][T16705] [U] [ 827.396411][T16705] [U] [ 827.397375][T16705] [U] [ 827.398315][T16705] [U] [ 827.399194][T16705] [U] [ 827.400211][T16705] [U] [ 827.401248][T16705] [U] [ 827.406366][T16705] [U] [ 827.407515][T16705] [U] [ 827.408712][T16705] [U] [ 827.410100][T16705] [U] [ 827.411320][T16705] [U] [ 827.412287][T16705] [U] [ 827.413180][T16705] [U] [ 827.414096][T16705] [U] [ 827.415515][T16705] [U] [ 827.416429][T16705] [U] [ 827.417367][T16705] [U] [ 827.418245][T16705] [U] [ 827.419254][T16705] [U] [ 827.420276][T16705] [U] [ 827.421306][T16705] [U] [ 827.422227][T16705] [U] [ 827.427566][T16705] [U] [ 827.428494][T16705] [U] [ 827.429397][T16705] [U] [ 827.430366][T16705] [U] [ 827.431280][T16705] [U] [ 827.432154][T16705] [U] [ 827.433143][T16705] [U] [ 827.434050][T16705] [U] [ 827.436482][T16705] [U] [ 827.437701][T16705] [U] [ 827.438831][T16705] [U] [ 827.439774][T16705] [U] [ 827.440717][T16705] [U] [ 827.441903][T16705] [U] [ 827.442968][T16705] [U] [ 827.443933][T16705] [U] [ 827.445784][T16705] [U] [ 827.446700][T16705] [U] [ 827.447573][T16705] [U] [ 827.448464][T16705] [U] [ 827.449355][T16705] [U] [ 827.450313][T16705] [U] [ 827.451432][T16705] [U] [ 827.452315][T16705] [U] [ 827.453291][T16705] [U] [ 827.454189][T16705] [U] [ 827.455240][T16705] [U] [ 827.456294][T16705] [U] [ 827.457329][T16705] [U] [ 827.458488][T16705] [U] [ 827.459646][T16705] [U] [ 827.460686][T16705] [U] [ 827.462688][T16705] [U] [ 827.463623][T16705] [U] [ 827.464512][T16705] [U] [ 827.465449][T16705] [U] [ 827.466369][T16705] [U] [ 827.467258][T16705] [U] [ 827.468164][T16705] [U] [ 827.469025][T16705] [U] [ 827.470952][T16705] [U] [ 827.471900][T16705] [U] [ 827.472800][T16705] [U] [ 827.473709][T16705] [U] [ 827.474595][T16705] [U] [ 827.475659][T16705] [U] [ 827.476813][T16705] [U] [ 827.531313][T16702] [U] [ 827.593717][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28309'. [ 827.598240][T16735] netlink: 104 bytes leftover after parsing attributes in process `syz.4.28309'. [ 827.601852][T16735] netlink: 104 bytes leftover after parsing attributes in process `syz.4.28309'. [ 827.968330][ T5855] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 828.139188][ T5855] usb 10-1: Using ep0 maxpacket: 16 [ 828.146290][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.159400][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.164051][ T5855] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.180793][ T5855] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 828.184370][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.188951][ T5855] usb 10-1: config 0 descriptor?? [ 828.664602][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.673035][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.678790][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.688885][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.694857][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.704663][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.707877][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.711339][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.714346][ T5855] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 828.786548][ T5855] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 828.921145][ T5855] usb 10-1: USB disconnect, device number 13 [ 829.607654][T16869] macvlan0: entered promiscuous mode [ 829.610217][T16869] netlink: 'syz.6.28342': attribute type 1 has an invalid length. [ 829.612893][T16869] netlink: 'syz.6.28342': attribute type 2 has an invalid length. [ 830.106079][ T42] kauditd_printk_skb: 589 callbacks suppressed [ 830.106098][ T42] audit: type=1326 audit(1527.051:23580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16904 comm="syz.5.28353" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 832.024353][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28390'. [ 832.034741][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28390'. [ 832.043639][T17047] input: syz1 as /devices/virtual/input/input108 [ 832.171331][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28396'. [ 832.537011][T13209] kernel read not supported for file /swradio9 (pid: 13209 comm: kworker/1:9) [ 832.932453][ T42] audit: type=1326 audit(1529.690:23581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 832.943661][ T42] audit: type=1326 audit(1529.690:23582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f64017 code=0x7ffc0000 [ 832.957751][ T42] audit: type=1326 audit(1529.690:23583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 832.964178][ T42] audit: type=1326 audit(1529.690:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f64017 code=0x7ffc0000 [ 832.977335][ T42] audit: type=1326 audit(1529.690:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 832.985233][ T42] audit: type=1326 audit(1529.690:23586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f64017 code=0x7ffc0000 [ 832.990268][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28425'. [ 832.991965][ T42] audit: type=1326 audit(1529.690:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 833.003554][ T42] audit: type=1326 audit(1529.690:23588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f64017 code=0x7ffc0000 [ 833.010418][ T42] audit: type=1326 audit(1529.690:23589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17146 comm="syz.4.28422" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 834.163209][T17259] can0: slcan on ttyS3. [ 834.272075][T17259] can0 (unregistered): slcan off ttyS3. [ 834.600895][T17285] syz.6.28456: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 834.609549][T17285] CPU: 3 UID: 0 PID: 17285 Comm: syz.6.28456 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.609569][T17285] Tainted: [L]=SOFTLOCKUP [ 834.609574][T17285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 834.609581][T17285] Call Trace: [ 834.609586][T17285] [ 834.609590][T17285] dump_stack_lvl+0x100/0x190 [ 834.609608][T17285] warn_alloc.cold+0x94/0xa8 [ 834.609633][T17285] ? __pfx_warn_alloc+0x10/0x10 [ 834.609650][T17285] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 834.609664][T17285] ? __pfx_get_page_from_freelist+0x10/0x10 [ 834.609680][T17285] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 834.609701][T17285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 834.609714][T17285] ? __pfx_flush_tlb_func+0x10/0x10 [ 834.609728][T17285] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 834.609753][T17285] ? __lock_acquire+0x49f/0x1a40 [ 834.609777][T17285] __folio_alloc_noprof+0x13/0x260 [ 834.609789][T17285] alloc_migration_target+0x1d7/0x6d0 [ 834.609814][T17285] migrate_pages_batch+0x5dc/0x45c0 [ 834.609832][T17285] ? __pfx_alloc_migration_target+0x10/0x10 [ 834.609851][T17285] ? rcu_read_unlock+0x2d/0xb0 [ 834.609861][T17285] ? rcu_read_unlock+0x2d/0xb0 [ 834.609872][T17285] ? __pfx_migrate_pages_batch+0x10/0x10 [ 834.609907][T17285] ? __pfx_do_wp_page+0x10/0x10 [ 834.609926][T17285] migrate_pages_sync+0x12c/0x880 [ 834.609957][T17285] ? __pfx_alloc_migration_target+0x10/0x10 [ 834.609977][T17285] ? __pfx_migrate_pages_sync+0x10/0x10 [ 834.609995][T17285] ? __css_rstat_updated+0x1ce/0x5a0 [ 834.610012][T17285] ? __pfx___handle_mm_fault+0x10/0x10 [ 834.610029][T17285] ? __pfx___css_rstat_updated+0x10/0x10 [ 834.610048][T17285] migrate_pages+0x1a83/0x2850 [ 834.610067][T17285] ? __pfx_alloc_migration_target+0x10/0x10 [ 834.610085][T17285] ? __up_read+0x333/0x980 [ 834.610096][T17285] ? __pfx_migrate_pages+0x10/0x10 [ 834.610111][T17285] ? do_user_addr_fault+0x7de/0x12f0 [ 834.610132][T17285] ? irqentry_exit+0x24d/0xa00 [ 834.610143][T17285] ? lockdep_hardirqs_on+0x78/0x100 [ 834.610156][T17285] move_pages_and_store_status+0xf1/0x230 [ 834.610175][T17285] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 834.610195][T17285] ? __might_fault+0x111/0x140 [ 834.610207][T17285] kernel_move_pages+0xc89/0x14a0 [ 834.610229][T17285] ? __pfx_kernel_move_pages+0x10/0x10 [ 834.610250][T17285] ? xfd_validate_state+0x129/0x190 [ 834.610262][T17285] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 834.610278][T17285] __ia32_sys_move_pages+0xdd/0x1b0 [ 834.610295][T17285] ? __do_fast_syscall_32+0x98/0x970 [ 834.610307][T17285] ? lockdep_hardirqs_on+0x78/0x100 [ 834.610318][T17285] __do_fast_syscall_32+0xe7/0x970 [ 834.610333][T17285] do_fast_syscall_32+0x32/0x70 [ 834.610346][T17285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.610360][T17285] RIP: 0023:0xf703efec [ 834.610374][T17285] Code: Unable to access opcode bytes at 0xf703efc2. [ 834.610380][T17285] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 834.610391][T17285] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 834.610399][T17285] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 834.610406][T17285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.610412][T17285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 834.610419][T17285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.610434][T17285] [ 834.718940][T17285] Mem-Info: [ 834.720314][T17285] active_anon:2718 inactive_anon:1217 isolated_anon:0 [ 834.720314][T17285] active_file:1800 inactive_file:17496 isolated_file:0 [ 834.720314][T17285] unevictable:1768 dirty:273 writeback:0 [ 834.720314][T17285] slab_reclaimable:7631 slab_unreclaimable:87791 [ 834.720314][T17285] mapped:22910 shmem:1787 pagetables:1942 [ 834.720314][T17285] sec_pagetables:332 bounce:0 [ 834.720314][T17285] kernel_misc_reclaimable:0 [ 834.720314][T17285] free:29344 free_pcp:12540 free_cma:0 [ 834.736063][T17285] Node 0 active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7968kB pagetables:1244kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 834.747948][T17285] Node 1 active_anon:10872kB inactive_anon:4864kB active_file:7196kB inactive_file:69916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91612kB dirty:1088kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8112kB pagetables:6524kB sec_pagetables:196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 834.760074][T17285] Node 0 DMA free:3788kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB zspages:100kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 834.770163][T17285] lowmem_reserve[]: 0 280 280 280 280 [ 834.771874][T17285] Node 0 DMA32 free:38912kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1160kB present:1032196kB managed:287056kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:56kB free_cma:0kB [ 834.782850][T17285] lowmem_reserve[]: 0 0 0 0 0 [ 834.784354][T17285] Node 1 DMA32 free:74676kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10872kB inactive_anon:4864kB active_file:7196kB inactive_file:69916kB unevictable:3536kB writepending:1088kB zspages:3268kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50572kB local_pcp:17412kB free_cma:0kB [ 834.794903][T17285] lowmem_reserve[]: 0 0 0 0 0 [ 834.796833][T17285] Node 0 DMA: 287*4kB (U) 46*8kB (U) 10*16kB (U) 18*32kB (U) 10*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3788kB [ 834.801457][T17285] Node 0 DMA32: 1278*4kB (UME) 389*8kB (UME) 142*16kB (UME) 282*32kB (UME) 87*64kB (UME) 52*128kB (UME) 18*256kB (UME) 3*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 38912kB [ 834.807333][T17285] Node 1 DMA32: 299*4kB (UME) 67*8kB (UM) 44*16kB (UM) 205*32kB (UME) 26*64kB (UME) 9*128kB (UM) 25*256kB (UM) 18*512kB (UM) 34*1024kB (UM) 4*2048kB (UM) 1*4096kB (E) = 74532kB [ 834.812880][T17285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.815793][T17285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 834.819081][T17285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.822044][T17285] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 834.824864][T17285] 22080 total pagecache pages [ 834.826329][T17285] 999 pages in swap cache [ 834.828213][T17285] Free swap = 88728kB [ 834.829501][T17285] Total swap = 124996kB [ 834.830901][T17285] 524155 pages RAM [ 834.832088][T17285] 0 pages HighMem/MovableOnly [ 834.833737][T17285] 211498 pages reserved [ 834.835036][T17285] 0 pages cma reserved [ 835.510174][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28469'. [ 835.840934][T17361] can0: slcan on ttyS3. [ 836.014862][T17361] can0 (unregistered): slcan off ttyS3. [ 836.614640][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28510'. [ 836.852592][ T42] kauditd_printk_skb: 1380 callbacks suppressed [ 836.852607][ T42] audit: type=1326 audit(1533.368:24970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17525 comm="syz.4.28527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 836.868533][ T42] audit: type=1326 audit(1533.368:24971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17525 comm="syz.4.28527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 836.880676][ T42] audit: type=1326 audit(1533.368:24972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17525 comm="syz.4.28527" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 836.889357][ T42] audit: type=1326 audit(1533.368:24973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17525 comm="syz.4.28527" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x0 [ 837.907545][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28552'. [ 837.967136][T17605] openvswitch: netlink: IPv4 tunnel dst address is zero [ 837.971284][T17605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.252295][T17640] sctp: [Deprecated]: syz.4.28563 (pid 17640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 838.252295][T17640] Use struct sctp_sack_info instead [ 838.306576][T17644] can0: slcan on ttyS3. [ 838.376465][T17644] can0 (unregistered): slcan off ttyS3. [ 838.471510][ T5760] Bluetooth: hci1: command 0x0406 tx timeout [ 838.699463][ T42] audit: type=1326 audit(1535.090:24974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17707 comm="syz.6.28581" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 838.817680][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28582'. [ 839.102575][ T5855] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 840.200520][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.359094][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 849.310040][T17789] fuse: Invalid rootmode [ 849.339978][T17793] netlink: 272 bytes leftover after parsing attributes in process `syz.6.28596'. [ 849.937191][T17842] dummy0: entered allmulticast mode [ 849.940038][T17841] dummy0: left allmulticast mode [ 850.057366][T17857] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 850.237982][ T5968] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 850.419048][ T5968] usb 9-1: Using ep0 maxpacket: 8 [ 850.424305][ T5968] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 850.426925][ T5968] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 850.432885][ T5968] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 850.439167][ T5968] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 850.446837][ T5968] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 850.454467][ T5968] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.461863][ T5968] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 850.470473][ T5968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.694735][ T5968] usb 9-1: GET_CAPABILITIES returned 0 [ 850.700023][ T5968] usbtmc 9-1:16.0: can't read capabilities [ 850.792542][T21330] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 850.913292][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 850.916178][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 850.924090][T17847] usbtmc 9-1:16.0: Unable to send data, error -71 [ 850.929190][ T5823] usb 9-1: USB disconnect, device number 19 [ 850.952842][T21330] usb 10-1: Using ep0 maxpacket: 32 [ 850.956808][T21330] usb 10-1: config 0 has no interfaces? [ 850.961040][T21330] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 850.965241][T21330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.968673][T21330] usb 10-1: Product: syz [ 850.970491][T21330] usb 10-1: Manufacturer: syz [ 850.972491][T21330] usb 10-1: SerialNumber: syz [ 850.977782][T21330] usb 10-1: config 0 descriptor?? [ 851.206451][T17885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.216738][T17885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.223831][ T5823] usb 10-1: USB disconnect, device number 14 [ 851.552322][ T5760] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 851.667429][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28625'. [ 851.966818][T17949] input: syz0 as /devices/virtual/input/input109 [ 852.240568][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 852.241462][ T5760] Bluetooth: hci5: command 0x1003 tx timeout [ 852.258606][T13209] kernel write not supported for file /uinput (pid: 13209 comm: kworker/1:9) [ 852.373486][ T5755] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 853.533228][T18082] block nbd4: Unsupported socket: should be TCP or UNIX. [ 853.869054][ T1487] IPVS: starting estimator thread 0... [ 853.981751][T18104] IPVS: using max 33 ests per chain, 79200 per kthread [ 855.456826][T18198] netlink: 200 bytes leftover after parsing attributes in process `syz.5.28706'. [ 855.569841][T18206] Bluetooth: hci3: Frame reassembly failed (-84) [ 856.168203][ C2] ip6_tunnel: K xmit: Local address not yet configured! [ 856.517239][T18259] [U] [ 856.518491][T18259] [U] [ 856.519686][T18259] [U] [ 856.520804][T18259] [U] [ 856.521907][T18259] [U] [ 856.523058][T18259] [U] [ 856.524198][T18259] [U] [ 856.525325][T18259] [U] [ 856.527929][T18259] [U] [ 856.529086][T18259] [U] [ 856.530187][T18259] [U] [ 856.531241][T18259] [U] [ 856.532293][T18259] [U] [ 856.533213][T18259] [U] [ 856.534091][T18259] [U] [ 856.535435][T18259] [U] [ 856.537919][T18259] [U] [ 856.538817][T18259] [U] [ 856.540216][T18259] [U] [ 856.541453][T18259] [U] [ 856.542700][T18259] [U] [ 856.543841][T18259] [U] [ 856.545375][T18259] [U] [ 856.546617][T18259] [U] [ 856.563288][T18259] [U] [ 856.564217][T18259] [U] [ 856.565121][T18259] [U] [ 856.565978][T18259] [U] [ 856.567039][T18259] [U] [ 856.567894][T18259] [U] [ 856.568771][T18259] [U] [ 856.569746][T18259] [U] [ 856.570670][T18259] [U] [ 856.571507][T18259] [U] [ 856.572391][T18259] [U] [ 856.573264][T18259] [U] [ 856.574114][T18259] [U] [ 856.574954][T18259] [U] [ 856.575775][T18259] [U] [ 856.576650][T18259] [U] [ 856.578631][T18259] [U] [ 856.579487][T18259] [U] [ 856.580404][T18259] [U] [ 856.581273][T18259] [U] [ 856.582119][T18259] [U] [ 856.582970][T18259] [U] [ 856.583822][T18259] [U] [ 856.584651][T18259] [U] [ 856.586259][T18259] [U] [ 856.587423][T18259] [U] [ 856.588556][T18259] [U] [ 856.589719][T18259] [U] [ 856.590857][T18259] [U] [ 856.592037][T18259] [U] [ 856.593233][T18259] [U] [ 856.594407][T18259] [U] [ 856.598223][T18259] [U] [ 856.599416][T18259] [U] [ 856.600633][T18259] [U] [ 856.601811][T18259] [U] [ 856.602979][T18259] [U] [ 856.604146][T18259] [U] [ 856.605300][T18259] [U] [ 856.606416][T18259] [U] [ 856.610453][T18259] [U] [ 856.611694][T18259] [U] [ 856.612883][T18259] [U] [ 856.614495][T18259] [U] [ 856.615533][T18259] [U] [ 856.616545][T18259] [U] [ 856.617709][T18259] [U] [ 856.618924][T18259] [U] [ 856.620477][T18259] [U] [ 856.621664][T18259] [U] [ 856.622928][T18259] [U] [ 856.624095][T18259] [U] [ 856.625274][T18259] [U] [ 856.626428][T18259] [U] [ 856.627655][T18259] [U] [ 856.628821][T18259] [U] [ 856.630664][T18259] [U] [ 856.631806][T18259] [U] [ 856.632980][T18259] [U] [ 856.634085][T18259] [U] [ 856.635226][T18259] [U] [ 856.636358][T18259] [U] [ 856.637383][T18259] [U] [ 856.638271][T18259] [U] [ 856.639245][T18259] [U] [ 856.640231][T18259] [U] [ 856.641204][T18259] [U] [ 856.642081][T18259] [U] [ 856.642972][T18259] [U] [ 856.643960][T18259] [U] [ 856.644859][T18259] [U] [ 856.645773][T18259] [U] [ 856.646690][T18259] [U] [ 856.647569][T18259] [U] [ 856.648661][T18259] [U] [ 856.649624][T18259] [U] [ 856.650794][T18259] [U] [ 856.651952][T18259] [U] [ 856.653115][T18259] [U] [ 856.654223][T18259] [U] [ 856.656153][T18259] [U] [ 856.657190][T18259] [U] [ 856.658267][T18259] [U] [ 856.659431][T18259] [U] [ 856.660556][T18259] [U] [ 856.661441][T18259] [U] [ 856.662425][T18259] [U] [ 856.663346][T18259] [U] [ 856.664515][T18259] [U] [ 856.665431][T18259] [U] [ 856.666323][T18259] [U] [ 856.667157][T18259] [U] [ 856.667982][T18259] [U] [ 856.668841][T18259] [U] [ 856.669799][T18259] [U] [ 856.670926][T18259] [U] [ 856.672334][T18259] [U] [ 856.673504][T18259] [U] [ 856.674645][T18259] [U] [ 856.675774][T18259] [U] [ 856.676911][T18259] [U] [ 856.678018][T18259] [U] [ 856.679143][T18259] [U] [ 856.710545][T18258] [U] [ 857.799826][ T5760] Bluetooth: hci3: command 0xfc11 tx timeout [ 857.800926][ T5755] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 857.874349][T18274] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 859.054819][T18365] macvlan0: entered promiscuous mode [ 859.057237][T18365] netlink: 'syz.5.28759': attribute type 1 has an invalid length. [ 859.060535][T18365] netlink: 'syz.5.28759': attribute type 2 has an invalid length. [ 859.202604][ T5855] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 859.327459][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28769'. [ 859.363647][ T5855] usb 11-1: Using ep0 maxpacket: 8 [ 859.370486][ T5855] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 859.374726][ T5855] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.396380][ T5855] pvrusb2: Hardware description: Terratec Grabster AV400 [ 859.399361][ T5855] pvrusb2: ********** [ 859.401034][ T5855] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 859.404789][ T5855] pvrusb2: Important functionality might not be entirely working. [ 859.413278][ T5855] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 859.419097][ T5855] pvrusb2: ********** [ 859.615801][ T2514] pvrusb2: Invalid write control endpoint [ 859.687113][ T2514] pvrusb2: Invalid write control endpoint [ 859.691191][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 859.698889][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 859.703395][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 859.709577][ T2514] pvrusb2: Device being rendered inoperable [ 859.720867][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 859.728148][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 859.742894][ T2514] pvrusb2: Attached sub-driver cx25840 [ 859.745945][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 859.749679][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 859.829221][ T1487] usb 11-1: USB disconnect, device number 3 [ 861.326801][T21330] IPVS: starting estimator thread 0... [ 861.357604][T18437] : renamed from vlan0 [ 861.371756][T18440] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 861.374886][T18440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.446562][T18434] IPVS: using max 28 ests per chain, 67200 per kthread [ 863.616780][ T5755] Bluetooth: hci1: link tx timeout [ 863.622836][ T5755] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.838464][ T5760] Bluetooth: hci1: command 0x0406 tx timeout [ 871.688198][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 871.692989][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 871.701100][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 871.709462][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 871.713275][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.205197][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.208521][T18495] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.212678][T18495] bridge_slave_0: entered allmulticast mode [ 872.217305][T18495] bridge_slave_0: entered promiscuous mode [ 872.226905][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.230059][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.232506][T18495] bridge_slave_1: entered allmulticast mode [ 872.235335][T18495] bridge_slave_1: entered promiscuous mode [ 872.259769][T18495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.266905][T18495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.298411][T18495] team0: Port device team_slave_0 added [ 872.303783][T18495] team0: Port device team_slave_1 added [ 872.322122][T18495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.324495][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.335231][T18495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.341207][T18495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.343516][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.354403][T18495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.435781][T18495] hsr_slave_0: entered promiscuous mode [ 872.439387][T18495] hsr_slave_1: entered promiscuous mode [ 872.444830][T18495] debugfs: 'hsr0' already exists in 'hsr' [ 872.447301][T18495] Cannot create hsr debugfs directory [ 872.525290][T18743] openvswitch: netlink: IPv4 tunnel dst address is zero [ 872.528899][T18743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.658617][T18495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 872.665287][T18495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 872.670507][T18495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 872.676526][T18495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 872.680649][T18495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 872.689544][T18495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 872.693410][T18495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 872.700504][T18495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.722936][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.725726][T18495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.728533][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.731328][T18495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.771972][T18495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.789021][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.791866][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.809913][T18495] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.819499][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.822570][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.832305][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.835379][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.165154][T18495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.356162][ T349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 873.374804][T18495] veth0_vlan: entered promiscuous mode [ 873.386464][T18495] veth1_vlan: entered promiscuous mode [ 873.411047][T18495] veth0_macvtap: entered promiscuous mode [ 873.418079][T18495] veth1_macvtap: entered promiscuous mode [ 873.427523][T18495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.435130][T18495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.441414][ T5807] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.445023][ T5807] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.450269][ T5807] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.453713][ T5807] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.529131][ T349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.537215][ T349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.558630][ T349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.561247][ T349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.885801][T18852] netlink: 'syz.3.28792': attribute type 10 has an invalid length. [ 873.904918][T18852] team0: Device wg2 is of different type [ 873.958327][ T42] audit: type=1326 audit(1568.086:24975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.3.28795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 873.965931][ T42] audit: type=1326 audit(1568.086:24976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.3.28795" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70befec code=0x7ffc0000 [ 873.966295][ T5755] Bluetooth: hci3: command tx timeout [ 873.972979][ T42] audit: type=1326 audit(1568.086:24977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.3.28795" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 874.063373][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28801'. [ 874.068437][T18866] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 874.205604][T18874] syz.5.28805: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 874.211221][T18874] CPU: 0 UID: 0 PID: 18874 Comm: syz.5.28805 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.211251][T18874] Tainted: [L]=SOFTLOCKUP [ 874.211257][T18874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 874.211269][T18874] Call Trace: [ 874.211276][T18874] [ 874.211284][T18874] dump_stack_lvl+0x100/0x190 [ 874.211312][T18874] warn_alloc.cold+0x94/0xa8 [ 874.211332][T18874] ? __pfx_warn_alloc+0x10/0x10 [ 874.211358][T18874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 874.211380][T18874] ? __pfx_get_page_from_freelist+0x10/0x10 [ 874.211407][T18874] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 874.211444][T18874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 874.211467][T18874] ? __pfx_flush_tlb_func+0x10/0x10 [ 874.211491][T18874] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 874.211532][T18874] ? __lock_acquire+0x49f/0x1a40 [ 874.211571][T18874] __folio_alloc_noprof+0x13/0x260 [ 874.211592][T18874] alloc_migration_target+0x1d7/0x6d0 [ 874.211621][T18874] migrate_pages_batch+0x5dc/0x45c0 [ 874.211652][T18874] ? __pfx_alloc_migration_target+0x10/0x10 [ 874.211684][T18874] ? rcu_read_unlock+0x2d/0xb0 [ 874.211702][T18874] ? rcu_read_unlock+0x2d/0xb0 [ 874.211720][T18874] ? __pfx_migrate_pages_batch+0x10/0x10 [ 874.211761][T18874] ? __pfx_do_wp_page+0x10/0x10 [ 874.211796][T18874] migrate_pages_sync+0x12c/0x880 [ 874.211825][T18874] ? __pfx_alloc_migration_target+0x10/0x10 [ 874.211857][T18874] ? __pfx_migrate_pages_sync+0x10/0x10 [ 874.211887][T18874] ? __css_rstat_updated+0x1ce/0x5a0 [ 874.211914][T18874] ? __pfx___handle_mm_fault+0x10/0x10 [ 874.211943][T18874] ? __pfx___css_rstat_updated+0x10/0x10 [ 874.211975][T18874] migrate_pages+0x1a83/0x2850 [ 874.212007][T18874] ? __pfx_alloc_migration_target+0x10/0x10 [ 874.212036][T18874] ? __up_read+0x333/0x980 [ 874.212055][T18874] ? __pfx_migrate_pages+0x10/0x10 [ 874.212081][T18874] ? do_user_addr_fault+0x7de/0x12f0 [ 874.212114][T18874] ? irqentry_exit+0x24d/0xa00 [ 874.212133][T18874] ? lockdep_hardirqs_on+0x78/0x100 [ 874.212155][T18874] move_pages_and_store_status+0xf1/0x230 [ 874.212185][T18874] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 874.212218][T18874] ? __might_fault+0x111/0x140 [ 874.212239][T18874] kernel_move_pages+0xc89/0x14a0 [ 874.212274][T18874] ? __pfx_kernel_move_pages+0x10/0x10 [ 874.212308][T18874] ? xfd_validate_state+0x129/0x190 [ 874.212355][T18874] __ia32_sys_move_pages+0xdd/0x1b0 [ 874.212381][T18874] ? __do_fast_syscall_32+0x98/0x970 [ 874.212401][T18874] ? lockdep_hardirqs_on+0x78/0x100 [ 874.212419][T18874] __do_fast_syscall_32+0xe7/0x970 [ 874.212444][T18874] do_fast_syscall_32+0x32/0x70 [ 874.212465][T18874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 874.212489][T18874] RIP: 0023:0xf6feefec [ 874.212513][T18874] Code: Unable to access opcode bytes at 0xf6feefc2. [ 874.212547][T18874] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 874.212567][T18874] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 874.212579][T18874] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 874.212591][T18874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.212602][T18874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.212614][T18874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.212638][T18874] [ 874.212737][T18874] Mem-Info: [ 874.329760][T18874] active_anon:1115 inactive_anon:934 isolated_anon:0 [ 874.329760][T18874] active_file:1169 inactive_file:13220 isolated_file:0 [ 874.329760][T18874] unevictable:1763 dirty:281 writeback:0 [ 874.329760][T18874] slab_reclaimable:7624 slab_unreclaimable:90167 [ 874.329760][T18874] mapped:22561 shmem:1773 pagetables:1670 [ 874.329760][T18874] sec_pagetables:336 bounce:0 [ 874.329760][T18874] kernel_misc_reclaimable:0 [ 874.329760][T18874] free:45083 free_pcp:124 free_cma:0 [ 874.345516][T18874] Node 0 active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7936kB pagetables:1244kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 874.360082][T18874] Node 1 active_anon:4460kB inactive_anon:3732kB active_file:4672kB inactive_file:52812kB unevictable:3516kB isolated(anon):0kB isolated(file):0kB mapped:90216kB dirty:1124kB writeback:0kB shmem:3556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:5436kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 874.376662][T18874] Node 0 DMA free:3796kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB zspages:92kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.386002][T18874] lowmem_reserve[]: 0 280 280 280 280 [ 874.388198][T18874] Node 0 DMA32 free:38080kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:0kB zspages:1944kB present:1032196kB managed:287056kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.399922][T18874] lowmem_reserve[]: 0 0 0 0 0 [ 874.401527][T18874] Node 1 DMA32 free:138052kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4360kB inactive_anon:3732kB active_file:4672kB inactive_file:52812kB unevictable:3516kB writepending:1124kB zspages:3412kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1188kB local_pcp:0kB free_cma:0kB [ 874.412113][T18874] lowmem_reserve[]: 0 0 0 0 0 [ 874.413721][T18874] Node 0 DMA: 285*4kB (U) 46*8kB (U) 11*16kB (U) 18*32kB (U) 10*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3796kB [ 874.418340][T18874] Node 0 DMA32: 1258*4kB (UME) 385*8kB (UME) 165*16kB (UME) 282*32kB (UME) 86*64kB (UME) 48*128kB (UME) 18*256kB (UME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 38080kB [ 874.423955][T18874] Node 1 DMA32: 825*4kB (ME) 650*8kB (UME) 395*16kB (UME) 609*32kB (UME) 247*64kB (UME) 108*128kB (UM) 54*256kB (UM) 25*512kB (UM) 14*1024kB (UM) 14*2048kB (U) 1*4096kB (U) = 137668kB [ 874.429696][T18874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.433016][T18874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.436035][T18874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.439071][T18874] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 874.442256][T18874] 16868 total pagecache pages [ 874.443806][T18874] 708 pages in swap cache [ 874.445249][T18874] Free swap = 84544kB [ 874.446598][T18874] Total swap = 124996kB [ 874.447971][T18874] 524155 pages RAM [ 874.449228][T18874] 0 pages HighMem/MovableOnly [ 874.451197][T18874] 211498 pages reserved [ 874.453371][T18874] 0 pages cma reserved [ 874.455972][T18885] can0: slcan on ttyS3. [ 874.829406][T18885] can0 (unregistered): slcan off ttyS3. [ 874.942647][T18904] netlink: 'syz.5.28808': attribute type 10 has an invalid length. [ 874.955788][T18904] team0: Device wg2 is of different type [ 875.151835][T18929] fuse: Invalid rootmode [ 875.271333][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28820'. [ 875.274300][T18939] team0: Cannot enslave team device to itself [ 875.316768][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28821'. [ 875.411538][T18936] Process accounting resumed [ 875.753964][T18979] netlink: 44 bytes leftover after parsing attributes in process `syz.6.28836'. [ 876.172362][ T5755] Bluetooth: hci3: command tx timeout [ 876.206001][T19032] netlink: 'syz.7.28852': attribute type 10 has an invalid length. [ 876.228098][T19032] team0: Device wg2 is of different type [ 876.927282][T19107] block nbd4: Unsupported socket: should be TCP or UNIX. [ 877.514669][ T349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 877.629377][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28893'. [ 877.830842][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28899'. [ 878.147450][T19190] netlink: 272 bytes leftover after parsing attributes in process `syz.7.28905'. [ 878.222927][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28910'. [ 878.395172][ T5755] Bluetooth: hci3: command tx timeout [ 878.612672][T19218] Process accounting resumed [ 878.662856][T19228] netlink: 272 bytes leftover after parsing attributes in process `syz.5.28919'. [ 878.904098][T19251] gfs2: path_lookup on  returned error -2 [ 879.381710][T19282] gfs2: path_lookup on  returned error -2 [ 879.496561][ T81] ------------[ cut here ]------------ [ 879.503048][ T81] time_after(jiffies, timeout) [ 879.503065][ T81] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#3: kworker/u33:4/81 [ 879.509290][ T81] Modules linked in: [ 879.513205][ T81] CPU: 3 UID: 0 PID: 81 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.516692][ T81] Tainted: [L]=SOFTLOCKUP [ 879.518056][ T81] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 879.521541][ T81] Workqueue: iou_exit io_ring_exit_work [ 879.523306][ T81] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 879.525093][ T81] Code: 8e e8 8b 5f 43 01 48 8b 05 a4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 72 d4 d3 00 4d 85 ff 79 12 e8 c8 d9 d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 b6 d9 d3 00 48 8b 74 24 20 [ 879.531604][ T81] RSP: 0018:ffffc90000bbfaa0 EFLAGS: 00010293 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 879.533501][ T81] RAX: 0000000000000000 RBX: ffff88805f4a8710 RCX: ffffffff81354eee [ 879.536303][ T81] RDX: ffff888021f0ca80 RSI: ffffffff81354ef8 RDI: ffff888021f0ca80 [ 879.540132][ T81] RBP: ffffc90000bbfc38 R08: 0000000000000007 R09: 0000000000000000 [ 879.542686][ T81] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff88805f4a8000 [ 879.545374][ T81] R13: dffffc0000000000 R14: 000000005f4a8700 R15: fffffffffffffffd [ 879.549265][ T81] FS: 0000000000000000(0000) GS:ffff888096eee000(0000) knlGS:0000000000000000 [ 879.552237][ T81] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.554314][ T81] CR2: 00000000f74134f0 CR3: 000000006a120000 CR4: 0000000000352ef0 [ 879.556836][ T81] Call Trace: [ 879.557917][ T81] [ 879.558970][ T81] ? do_raw_spin_lock+0x128/0x260 [ 879.561759][ T81] ? __pfx_io_ring_exit_work+0x10/0x10 [ 879.563976][ T81] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 879.566264][ T81] ? debug_object_deactivate+0x2e4/0x3b0 [ 879.568122][ T81] ? rcu_is_watching+0x12/0xc0 [ 879.570636][ T81] process_one_work+0xa23/0x1940 [ 879.572243][ T81] ? __pfx_process_one_work+0x10/0x10 [ 879.573950][ T81] ? __pfx_io_ring_exit_work+0x10/0x10 [ 879.575668][ T81] worker_thread+0x5ef/0xe50 [ 879.577370][ T81] ? kthread+0x13a/0x450 [ 879.580060][ T81] ? __pfx_worker_thread+0x10/0x10 [ 879.582418][ T81] kthread+0x370/0x450 [ 879.584108][ T81] ? __pfx_kthread+0x10/0x10 [ 879.585637][ T81] ret_from_fork+0x72b/0xd50 [ 879.588267][ T81] ? __pfx_ret_from_fork+0x10/0x10 [ 879.590949][ T81] ? __switch_to+0x800/0x10f0 [ 879.594513][ T81] ? __pfx_kthread+0x10/0x10 [ 879.596484][ T81] ret_from_fork_asm+0x1a/0x30 [ 879.598511][ T81] [ 879.599946][ T81] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.602872][ T81] CPU: 3 UID: 0 PID: 81 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.607133][ T81] Tainted: [L]=SOFTLOCKUP [ 879.608851][ T81] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 879.612824][ T81] Workqueue: iou_exit io_ring_exit_work [ 879.615036][ T81] Call Trace: [ 879.616392][ T81] [ 879.617601][ T81] dump_stack_lvl+0x100/0x190 [ 879.619522][ T81] vpanic+0x552/0x970 [ 879.621101][ T81] ? __pfx_vpanic+0x10/0x10 [ 879.622921][ T81] panic+0xd1/0xe0 [ 879.624464][ T81] ? __pfx_panic+0x10/0x10 [ 879.626260][ T81] ? check_panic_on_warn+0x1f/0x90 [ 879.628305][ T81] check_panic_on_warn.cold+0x19/0x34 [ 879.630478][ T81] ? io_ring_exit_work+0x479/0xd7a [ 879.632527][ T81] __warn.cold+0x191/0x318 [ 879.633932][ T81] __report_bug+0x30f/0x440 [ 879.635412][ T81] ? io_ring_exit_work+0x479/0xd7a [ 879.637073][ T81] ? __pfx___report_bug+0x10/0x10 [ 879.638709][ T81] ? rcu_is_watching+0x12/0xc0 [ 879.640356][ T81] ? trace_contention_end+0x126/0x160 [ 879.642154][ T81] ? __mutex_lock+0x26d/0x1bd0 [ 879.643687][ T81] ? io_ring_exit_work+0x422/0xd7a [ 879.645338][ T81] ? find_held_lock+0x2b/0x80 [ 879.646872][ T81] ? io_ring_exit_work+0x434/0xd7a [ 879.648516][ T81] ? io_ring_exit_work+0x479/0xd7a [ 879.650631][ T81] report_bug+0xb2/0x220 [ 879.652394][ T81] ? io_ring_exit_work+0x479/0xd7a [ 879.654137][ T81] handle_bug+0x16a/0x2a0 [ 879.655551][ T81] exc_invalid_op+0x17/0x50 [ 879.657106][ T81] asm_exc_invalid_op+0x1a/0x20 [ 879.658657][ T81] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 879.660762][ T81] Code: 8e e8 8b 5f 43 01 48 8b 05 a4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 72 d4 d3 00 4d 85 ff 79 12 e8 c8 d9 d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 b6 d9 d3 00 48 8b 74 24 20 [ 879.667011][ T81] RSP: 0018:ffffc90000bbfaa0 EFLAGS: 00010293 [ 879.668987][ T81] RAX: 0000000000000000 RBX: ffff88805f4a8710 RCX: ffffffff81354eee [ 879.671537][ T81] RDX: ffff888021f0ca80 RSI: ffffffff81354ef8 RDI: ffff888021f0ca80 [ 879.674092][ T81] RBP: ffffc90000bbfc38 R08: 0000000000000007 R09: 0000000000000000 [ 879.676623][ T81] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff88805f4a8000 [ 879.679141][ T81] R13: dffffc0000000000 R14: 000000005f4a8700 R15: fffffffffffffffd [ 879.681882][ T81] ? io_ring_exit_work+0x46e/0xd7a [ 879.683606][ T81] ? io_ring_exit_work+0x478/0xd7a [ 879.685254][ T81] ? do_raw_spin_lock+0x128/0x260 [ 879.686884][ T81] ? __pfx_io_ring_exit_work+0x10/0x10 [ 879.688629][ T81] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 879.690600][ T81] ? debug_object_deactivate+0x2e4/0x3b0 [ 879.692417][ T81] ? rcu_is_watching+0x12/0xc0 [ 879.693960][ T81] process_one_work+0xa23/0x1940 [ 879.695568][ T81] ? __pfx_process_one_work+0x10/0x10 [ 879.697317][ T81] ? __pfx_io_ring_exit_work+0x10/0x10 [ 879.699127][ T81] worker_thread+0x5ef/0xe50 [ 879.700760][ T81] ? kthread+0x13a/0x450 [ 879.702128][ T81] ? __pfx_worker_thread+0x10/0x10 [ 879.703780][ T81] kthread+0x370/0x450 [ 879.705191][ T81] ? __pfx_kthread+0x10/0x10 [ 879.707171][ T81] ret_from_fork+0x72b/0xd50 [ 879.709245][ T81] ? __pfx_ret_from_fork+0x10/0x10 [ 879.711415][ T81] ? __switch_to+0x800/0x10f0 [ 879.713433][ T81] ? __pfx_kthread+0x10/0x10 [ 879.715394][ T81] ret_from_fork_asm+0x1a/0x30 [ 879.717449][ T81] [ 879.719555][ T81] Kernel Offset: disabled [ 879.721410][ T81] Rebooting in 86400 seconds..