last executing test programs: 6m51.867903874s ago: executing program 0 (id=4287): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x41}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x4}, 0x0, 0x0, 0x20000, 0xe182, 0xa, 0xfffffffffffff3dd, 0xa, 0x200}}], 0x84}, 0x0) 6m51.83921041s ago: executing program 0 (id=4290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, 0x0, 0x0, 0xfffffffffffffffc}]) 6m51.698158888s ago: executing program 0 (id=4293): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) 6m51.622413878s ago: executing program 0 (id=4295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 6m51.620546398s ago: executing program 0 (id=4296): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)}}], 0x1, 0x20040804) 6m51.274392734s ago: executing program 0 (id=4310): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x7c}}, 0x0) 6m51.144860584s ago: executing program 32 (id=4310): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x7c}}, 0x0) 6m1.804328083s ago: executing program 1 (id=5555): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m1.652732336s ago: executing program 1 (id=5558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x28}}, 0x0) 6m1.652340271s ago: executing program 1 (id=5559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006402000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) 6m1.591408426s ago: executing program 1 (id=5560): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r0) 6m1.463413897s ago: executing program 1 (id=5562): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 6m1.461856893s ago: executing program 1 (id=5564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 5m46.240737051s ago: executing program 33 (id=5564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 1.23643011s ago: executing program 2 (id=14249): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.157954408s ago: executing program 3 (id=14251): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 1.128497273s ago: executing program 2 (id=14252): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 1.095524361s ago: executing program 2 (id=14253): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 977.168842ms ago: executing program 2 (id=14256): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='QEMU0002:00', 0xb) 937.056688ms ago: executing program 2 (id=14257): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000000)='\x00', 0x1) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 785.809221ms ago: executing program 5 (id=14262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "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"}}) 687.444393ms ago: executing program 5 (id=14264): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x400c010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x5}], 0x1, 0x10020, 0x0) 636.233162ms ago: executing program 5 (id=14265): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) 539.337467ms ago: executing program 5 (id=14266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) 471.081211ms ago: executing program 5 (id=14268): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0xffffffffffffffff) 444.819716ms ago: executing program 4 (id=14269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4883}, 0x4894) 366.914273ms ago: executing program 4 (id=14270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) 314.852215ms ago: executing program 4 (id=14271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7d) 284.220468ms ago: executing program 4 (id=14272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x4, 0x50000, 0x6000, 0xffffffff], 0x3, 0x8}) 264.166993ms ago: executing program 3 (id=14273): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @host, 0x0, 0x0, 0x4000000f0, 0x0, 0x0, 0x4000000, 0x7}) 211.357223ms ago: executing program 3 (id=14274): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='workdir', 0x0, r1) 184.66532ms ago: executing program 3 (id=14275): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 168.968605ms ago: executing program 5 (id=14276): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000001c0)=0x4000fff9, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 157.579735ms ago: executing program 4 (id=14277): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000630000/0x1000)=nil, 0x1000}, 0x1}) 127.201189ms ago: executing program 4 (id=14278): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xc41d, 0x2, 0x7c, 0x2, 0x2, 0x8001}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 62.024911ms ago: executing program 3 (id=14279): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 5.730316ms ago: executing program 2 (id=14280): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 0s ago: executing program 3 (id=14281): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8) kernel console output (not intermixed with test programs): 3:0) [ 359.821767][T27930] __nla_validate_parse: 13 callbacks suppressed [ 359.821779][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10274'. [ 360.155423][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10300'. [ 360.197577][T27987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 360.199758][T27987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 360.203064][T27987] vhci_hcd vhci_hcd.0: Device attached [ 360.208725][T27988] vhci_hcd: connection closed [ 360.209977][ T12] vhci_hcd vhci_hcd.3: stop threads [ 360.213274][ T12] vhci_hcd vhci_hcd.3: release socket [ 360.215937][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 360.242084][T27993] siw: device registration error -23 [ 360.446933][T28015] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 360.575624][T28035] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10325'. [ 360.636901][T28045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10330'. [ 360.771202][T28063] [U]  [ 360.773234][T28063] [U] K{ [ 360.778464][T28063] [U] T 1ŠFFˊ`GJǘGO/MC [ 360.780182][T28063] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 360.789520][T28063] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 360.789998][T28063] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 360.805504][T28063] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 360.805649][T28063] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 360.820259][T28063] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 360.820536][T28063] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 360.854693][T28063] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 360.854848][T28063] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 360.861987][T28063] [U] 22Ʃ۩X?0;3U [ 360.862289][T28063] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 360.874531][T28063] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 360.877584][T28063] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 360.880300][T28063] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 360.882360][T28063] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 360.886324][T28063] [U] EC [ 360.887489][T28063] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 360.913072][T28062] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 361.004651][T28086] binder: 28084:28086 ioctl 400c620e 80000100 returned -22 [ 361.055017][T28094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10354'. [ 361.068895][T28094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10354'. [ 361.095989][T28098] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 361.181272][T28112] sg_write: process 3145 (syz.4.10363) changed security contexts after opening file descriptor, this is not allowed. [ 361.368251][T28146] validate_nla: 12 callbacks suppressed [ 361.368269][T28146] netlink: 'syz.4.10379': attribute type 5 has an invalid length. [ 361.408247][T28148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10381'. [ 361.512423][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10389'. [ 361.514435][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10388'. [ 361.547146][T28168] xt_l2tp: unknown flags: 51 [ 361.805947][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10409'. [ 361.902452][T28228] netlink: 'syz.2.10416': attribute type 10 has an invalid length. [ 363.264359][ T5897] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 364.358504][T28345] pim6reg: entered allmulticast mode [ 364.367760][T28345] pim6reg: left allmulticast mode [ 364.423297][T28354] sctp: [Deprecated]: syz.2.10473 (pid 28354) Use of int in max_burst socket option. [ 364.423297][T28354] Use struct sctp_assoc_value instead [ 364.551443][T28374] vlan4: entered allmulticast mode [ 364.553214][T28374] bond0: entered allmulticast mode [ 364.556677][T28374] bond_slave_0: entered allmulticast mode [ 364.558536][T28374] bond_slave_1: entered allmulticast mode [ 364.838707][T28427] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 364.840842][T28427] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 364.849398][T28427] vhci_hcd vhci_hcd.0: Device attached [ 364.857062][ T5761] Bluetooth: hci4: unexpected cc 0x080f length: 90 > 1 [ 364.865025][ T5761] Bluetooth: hci4: unexpected event for opcode 0x080f [ 364.868076][T28428] vhci_hcd: connection closed [ 364.868368][ T12] vhci_hcd vhci_hcd.5: stop threads [ 364.874005][ T12] vhci_hcd vhci_hcd.5: release socket [ 364.875958][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 365.110428][T28457] netlink: 'syz.2.10522': attribute type 9 has an invalid length. [ 365.113198][T28457] netlink: 'syz.2.10522': attribute type 7 has an invalid length. [ 365.115767][T28457] netlink: 'syz.2.10522': attribute type 8 has an invalid length. [ 365.140189][T28459] __nla_validate_parse: 3 callbacks suppressed [ 365.140206][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10523'. [ 365.146030][T28459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10523'. [ 365.519331][T28477] openvswitch: netlink: Duplicate or invalid key (type 0). [ 365.522029][T28477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.867354][T28514] fuse: blksize only supported for fuseblk [ 366.070937][T28535] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10560'. [ 366.074031][T28535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10560'. [ 366.076807][T28535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10560'. [ 366.221740][T28557] netlink: 810 bytes leftover after parsing attributes in process `syz.4.10570'. [ 366.481888][T28592] netlink: 'syz.4.10587': attribute type 2 has an invalid length. [ 366.496030][T28592] : entered promiscuous mode [ 366.503569][T28595] CUSE: DEVNAME unspecified [ 366.643006][T28615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.646467][T28616] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 367.174393][T28673] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 367.214433][T28680] CUSE: DEVNAME unspecified [ 367.705998][T28749] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 367.883619][T28774] netlink: 'syz.5.10674': attribute type 1 has an invalid length. [ 367.887319][T28774] netlink: 'syz.5.10674': attribute type 1 has an invalid length. [ 367.918142][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 367.918154][ T42] audit: type=1326 audit(2000000656.146:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 367.926810][ T42] audit: type=1326 audit(2000000656.146:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 367.944228][ T42] audit: type=1326 audit(2000000656.146:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="syz.5.10678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 367.962380][ T42] audit: type=1326 audit(2000000656.146:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="syz.5.10678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 367.977384][ T42] audit: type=1326 audit(2000000656.146:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 367.995988][ T42] audit: type=1326 audit(2000000656.146:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 368.006973][ T42] audit: type=1326 audit(2000000656.146:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 368.013304][ T42] audit: type=1326 audit(2000000656.146:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="syz.5.10678" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 368.021069][ T42] audit: type=1326 audit(2000000656.146:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28778 comm="syz.5.10678" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 368.165288][T28812] binder: 28811:28812 ioctl 4018620d 0 returned -22 [ 368.168508][T28812] binder: 28811:28812 ioctl c0306201 80000180 returned -11 [ 368.346101][T28846] wireguard: wg0: Could not create IPv4 socket [ 368.404640][T28855] sctp: [Deprecated]: syz.3.10715 (pid 28855) Use of int in max_burst socket option. [ 368.404640][T28855] Use struct sctp_assoc_value instead [ 368.538677][T28871] block nbd5: shutting down sockets [ 368.542279][T28878] nbd: must specify a size in bytes for the device [ 368.654114][ T5754] Bluetooth: hci4: command 0x0406 tx timeout [ 368.727747][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10739'. [ 368.857583][T28920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.896599][ T5761] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 368.901214][ T5761] Bluetooth: hci4: Injecting HCI hardware error event [ 368.906937][ T5754] Bluetooth: hci4: hardware error 0x00 [ 369.065980][T28945] CIFS mount error: No usable UNC path provided in device string! [ 369.065980][T28945] [ 369.069238][T28945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.307441][T28981] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 369.353113][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.991584][T29020] xt_l2tp: v2 sid > 0xffff: 1114112 [ 370.083662][T29034] tipc: Enabling of bearer rejected, failed to enable media [ 370.129109][T29044] xt_time: unknown flags 0xf4 [ 370.227116][T29059] netlink: 'syz.5.10815': attribute type 1 has an invalid length. [ 370.229692][T29059] netlink: 200 bytes leftover after parsing attributes in process `syz.5.10815'. [ 370.613482][T29127] digital: digital_start_poll: Unknown protocol [ 370.614283][ T5897] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 370.762496][T29150] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10858'. [ 370.765937][T29150] nbd: couldn't find a device at index -1 [ 370.770969][ T5897] usb 10-1: Using ep0 maxpacket: 32 [ 370.777031][ T5897] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.781982][ T5897] usb 10-1: config 0 has no interface number 0 [ 370.789134][ T5897] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 370.792587][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.796119][ T5897] usb 10-1: Product: syz [ 370.797879][ T5897] usb 10-1: Manufacturer: syz [ 370.799838][ T5897] usb 10-1: SerialNumber: syz [ 370.815713][ T5897] usb 10-1: config 0 descriptor?? [ 370.828490][ T5897] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 370.832394][ T5897] usb 10-1: selecting invalid altsetting 1 [ 370.835155][ T5897] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 370.840735][ T5897] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 370.845387][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 370.848930][ T5897] usb 10-1: media controller created [ 370.862117][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.962734][T29172] netlink: 'syz.3.10868': attribute type 5 has an invalid length. [ 370.976884][ T5754] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 371.140280][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.321261][T29198] netlink: 'syz.2.10881': attribute type 2 has an invalid length. [ 371.331881][T29198] : entered promiscuous mode [ 371.364714][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10884'. [ 371.468521][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10890'. [ 371.488752][T29206] syz.3.10885 (29206): drop_caches: 2 [ 371.818437][T29254] ALSA: mixer_oss: invalid OSS volume '' [ 371.915911][T29268] binder: 29267:29268 ioctl c018620c 80000240 returned -22 [ 371.939725][ T5897] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 371.953433][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 371.956701][ T5897] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 371.992241][ T5897] usb 10-1: USB disconnect, device number 6 [ 372.217322][T29302] binder: 29300:29302 ioctl c0306201 0 returned -14 [ 372.419404][T29332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10944'. [ 372.422937][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10944'. [ 372.427374][T29332] netlink: 'syz.3.10944': attribute type 13 has an invalid length. [ 372.429888][T29332] netlink: 'syz.3.10944': attribute type 14 has an invalid length. [ 372.825093][T29388] syz.3.10973 (29388) used obsolete PPPIOCDETACH ioctl [ 373.134675][ C2] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 373.944009][T29470] ptrace attach of "/syz-executor exec"[29471] was attempted by "/syz-executor exec"[29470] [ 374.148510][T29505] vlan5: entered promiscuous mode [ 375.020917][T29584] bond3: (slave bond_slave_1): Device is not our slave [ 375.023061][T29584] bond3: option active_slave: invalid value (bond_slave_1) [ 375.068501][T29584] bond3 (unregistering): Released all slaves [ 375.434335][T29589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11068'. [ 375.767487][T29641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11092'. [ 375.770533][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11092'. [ 375.777646][T29641] netlink: 'syz.4.11092': attribute type 12 has an invalid length. [ 375.780208][T29641] netlink: 'syz.4.11092': attribute type 13 has an invalid length. [ 375.863088][T29651] IPVS: Error connecting to the multicast addr [ 375.920079][T29657] veth1_macvtap: left promiscuous mode [ 375.922215][T29657] macsec0: entered promiscuous mode [ 375.924252][T29657] macsec0: entered allmulticast mode [ 375.934269][T29657] veth1_macvtap: entered promiscuous mode [ 375.936535][T29657] veth1_macvtap: entered allmulticast mode [ 375.939248][T29657] macsec0: left promiscuous mode [ 375.941515][T29657] macsec0: left allmulticast mode [ 375.943480][T29657] veth1_macvtap: left allmulticast mode [ 376.044386][ T5896] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 376.194026][ T5896] usb 8-1: Using ep0 maxpacket: 32 [ 376.197950][ T5896] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.201384][ T5896] usb 8-1: config 0 has no interface number 0 [ 376.207213][ T5896] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 376.210523][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.213778][ T5896] usb 8-1: Product: syz [ 376.215600][ T5896] usb 8-1: Manufacturer: syz [ 376.217542][ T5896] usb 8-1: SerialNumber: syz [ 376.225302][ T5896] usb 8-1: config 0 descriptor?? [ 376.229842][ T5896] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 376.235746][ T5896] usb 8-1: selecting invalid altsetting 1 [ 376.238125][ T5896] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 376.253179][ T5896] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.257908][ T5896] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 376.261185][ T5896] usb 8-1: media controller created [ 376.271638][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.383500][T29695] program syz.4.11119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.868128][T29743] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.11143'. [ 376.871442][T29743] netlink: 'syz.5.11143': attribute type 1 has an invalid length. [ 377.384730][ T5896] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 377.387150][ T5896] zl10353_read_register: readreg error (reg=127, ret==-110) [ 377.391104][ T5896] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 377.410366][ T5896] usb 8-1: USB disconnect, device number 10 [ 378.027133][T29812] netlink: 'syz.5.11176': attribute type 12 has an invalid length. [ 378.029859][T29812] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11176'. [ 378.063424][T29816] lo: entered promiscuous mode [ 378.068825][T29816] bond0: entered promiscuous mode [ 378.071217][T29816] dummy0: entered promiscuous mode [ 378.073682][T29816] eql: entered promiscuous mode [ 378.075855][T29816] ifb0: entered promiscuous mode [ 378.078803][T29816] ifb1: entered promiscuous mode [ 378.169666][T29816] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 378.185367][ T5897] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 378.264683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.014161][ T5754] Bluetooth: hci1: command 0x1003 tx timeout [ 380.014538][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 382.555185][T29881] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 382.673610][T29891] can0: slcan on ptm0. [ 382.687466][T29898] UHID_CREATE from different security context by process 5557 (syz.3.11204), this is not allowed. [ 382.734488][T29905] support for cryptoloop has been removed. Use dm-crypt instead. [ 382.747150][T29910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.766579][T29890] can0 (unregistered): slcan off ptm0. [ 382.966010][ T29] kernel write not supported for file /amidi2 (pid: 29 comm: kworker/1:0) [ 382.996225][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11224'. [ 382.999351][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11224'. [ 383.297536][T29979] netlink: 'syz.2.11238': attribute type 1 has an invalid length. [ 383.300222][T29979] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11238'. [ 383.303203][T29979] netlink: 'syz.2.11238': attribute type 1 has an invalid length. [ 383.576217][T30018] ptrace attach of "/syz-executor exec"[17720] was attempted by ""[30018] [ 383.821091][T30057] netlink: 'syz.2.11275': attribute type 2 has an invalid length. [ 383.829982][T30057] netlink: 'syz.2.11275': attribute type 2 has an invalid length. [ 384.008631][T30095] tipc: Enabling of bearer rejected, failed to enable media [ 384.066743][T30104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 384.262940][T30124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11309'. [ 385.173564][T30221] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 385.555161][T30255] bridge0: entered promiscuous mode [ 385.555176][T30255] bridge0: entered allmulticast mode [ 385.738867][ T5897] kernel write not supported for file /dsp1 (pid: 5897 comm: kworker/2:3) [ 385.780186][T30280] xt_l2tp: invalid flags combination: 0 [ 385.937708][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11396'. [ 386.148418][T30342] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 386.194709][T30347] IPv6: addrconf: prefix option has invalid lifetime [ 386.199870][T30349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.326366][ T5896] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 386.489840][ T5896] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 386.493443][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 386.497025][ T5896] usb 9-1: Product: syz [ 386.498376][ T5896] usb 9-1: Manufacturer: syz [ 386.499968][ T5896] usb 9-1: SerialNumber: syz [ 386.502714][ T5896] usb 9-1: config 0 descriptor?? [ 386.511546][ T5896] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 386.514265][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 386.522574][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.527078][ T5896] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 386.529857][ T5896] usb 9-1: media controller created [ 386.538857][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.577077][T30398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11440'. [ 386.721490][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11449'. [ 386.721701][T30334] dvb-usb: bulk message failed: -22 (4/0) [ 386.726918][T30334] cxusb: i2c read failed [ 386.741072][ T5896] cxusb: set interface failed [ 386.743143][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 386.777606][ T5896] DVB: Unable to find symbol mt352_attach() [ 386.779753][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 386.781597][ T5896] zl10353_read_register: readreg error (reg=127, ret==-121) [ 386.783817][ T5896] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 386.835446][ T5896] rc_core: IR keymap rc-dvico-mce not found [ 386.837399][ T5896] Registered IR keymap rc-empty [ 386.843446][ T5896] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 386.847944][ T5896] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input39 [ 386.852021][ T5896] dvb-usb: schedule remote query interval to 100 msecs. [ 386.854812][ T5896] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 386.863748][ T5896] usb 9-1: USB disconnect, device number 9 [ 386.925215][ T5896] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 387.324337][T30479] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 387.345845][ T42] audit: type=1326 audit(2000000675.576:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.354323][ T42] audit: type=1326 audit(2000000675.576:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.363677][ T42] audit: type=1326 audit(2000000675.576:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.373468][ T42] audit: type=1326 audit(2000000675.576:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.383708][ T42] audit: type=1326 audit(2000000675.576:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.392654][ T42] audit: type=1326 audit(2000000675.576:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30480 comm="syz.5.11477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 387.456702][T30493] syz.4.11482 (30493): drop_caches: 2 [ 387.467308][ T1134] ata1.00: exception Emask 0x0 SAct 0x8 SErr 0x0 action 0x6 [ 387.469963][ T1134] ata1.00: waking up from sleep [ 387.471694][ T1134] ata1: hard resetting link [ 387.537489][T30500] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.11485' sets config #0 [ 387.796814][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 387.802281][ T1134] ata1.00: configured for UDMA/100 [ 387.804197][ T1134] ata1: EH complete [ 388.018784][T30540] netlink: 'syz.5.11504': attribute type 1 has an invalid length. [ 388.023394][T30540] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.11504'. [ 388.267653][T30582] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 388.304183][ T5897] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 388.464248][ T5897] usb 10-1: Using ep0 maxpacket: 8 [ 388.467326][ T5897] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 388.471581][ T5897] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 388.475911][ T5897] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 388.479594][ T5897] usb 10-1: config 250 has no interface number 0 [ 388.481706][ T5897] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 388.485452][ T5897] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 388.488735][ T5897] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.492195][ T5897] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 388.498072][ T5897] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 388.513961][ T5897] usb 10-1: config 250 interface 228 has no altsetting 0 [ 388.517723][ T5897] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 388.520776][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 388.533974][ T5897] usb 10-1: Product: syz [ 388.535363][ T5897] usb 10-1: SerialNumber: syz [ 388.544910][ T5897] hub 10-1:250.228: bad descriptor, ignoring hub [ 388.549493][ T5897] hub 10-1:250.228: probe with driver hub failed with error -5 [ 388.664002][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 388.750572][ T5897] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 388.825194][ T10] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 388.827822][ T10] usb 9-1: config 1 has no interface number 0 [ 388.829805][ T10] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 388.833396][ T10] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 388.837223][ T10] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.842230][ T10] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 388.845273][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.847886][ T10] usb 9-1: Product: syz [ 388.849261][ T10] usb 9-1: Manufacturer: syz [ 388.850809][ T10] usb 9-1: SerialNumber: syz [ 388.854776][T30608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.058666][ T5896] usb 10-1: USB disconnect, device number 7 [ 389.061016][T30608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.067526][ T5896] usblp0: removed [ 389.283757][ T10] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 389.467758][ T10] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 389.469935][ T10] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 389.474368][ T10] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 389.476523][ T10] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 389.481970][ T10] usb 9-1: USB disconnect, device number 10 [ 389.485286][ T10] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 389.571820][ T10] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 389.707756][T30645] smpboot: CPU 1 is now offline [ 389.738363][T30653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11559'. [ 389.755366][T30653] vlan6: entered promiscuous mode [ 389.757249][T30653] team0: entered promiscuous mode [ 389.758948][T30653] team_slave_0: entered promiscuous mode [ 389.761012][T30653] team_slave_1: entered promiscuous mode [ 389.781217][T30645] smpboot: CPU 3 is now offline [ 390.003373][T30663] erspan0: entered promiscuous mode [ 390.166715][T30679] e1000 0000:00:06.0 eth0: left promiscuous mode [ 390.317757][T30697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11578'. [ 390.397708][T30700] usb3503 0-0008: unknown mode is requested [ 390.399775][T30700] usb3503 0-0008: usb3503_probe: probed in standby mode [ 390.407530][T30700] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 391.561651][T30730] vivid-000: disconnect [ 391.567259][T30725] vivid-000: reconnect [ 392.769940][T30774] loop5: detected capacity change from 0 to 7 [ 392.788425][ C0] blk_print_req_error: 10 callbacks suppressed [ 392.788440][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.794013][ C0] buffer_io_error: 23 callbacks suppressed [ 392.794024][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.803715][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.806829][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.816119][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.819293][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.825729][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.829134][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.840902][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.844172][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.963048][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 392.966120][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 392.970668][T30775] loop5: detected capacity change from 7 to 0 [ 392.972778][T30774] ldm_validate_partition_table(): Disk read failed. [ 392.976190][T30774] Dev loop5: unable to read RDB block 0 [ 392.978338][T30774] loop5: unable to read partition table [ 392.980468][T30774] loop5: partition table beyond EOD, truncated [ 392.982597][T30774] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 393.294209][ T5754] Bluetooth: hci1: command 0x1003 tx timeout [ 393.301341][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 393.905461][T30825] batadv_slave_1: entered promiscuous mode [ 393.907917][T30824] batadv_slave_1: left promiscuous mode [ 393.951599][T30793] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 394.081995][T17448] netdevsim netdevsim10 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.087444][T17448] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.354032][ T41] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 395.504732][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 395.508597][ T41] usb 9-1: config 0 has no interfaces? [ 395.512812][ T41] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 395.516769][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.520329][ T41] usb 9-1: Product: syz [ 395.521951][ T41] usb 9-1: Manufacturer: syz [ 395.523840][ T41] usb 9-1: SerialNumber: syz [ 395.533146][ T41] usb 9-1: config 0 descriptor?? [ 395.743761][T30854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.748256][T30854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.754606][ T10] usb 9-1: USB disconnect, device number 11 [ 396.254096][ T5104] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 396.255093][ T5761] Bluetooth: hci1: command 0x1003 tx timeout [ 396.415373][T30892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11668'. [ 396.628362][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11678'. [ 396.752510][T30920] syz.3.11681: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 396.762128][T30920] CPU: 2 UID: 0 PID: 30920 Comm: syz.3.11681 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.762148][T30920] Tainted: [L]=SOFTLOCKUP [ 396.762153][T30920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.762161][T30920] Call Trace: [ 396.762180][T30920] [ 396.762185][T30920] dump_stack_lvl+0x100/0x190 [ 396.762204][T30920] warn_alloc.cold+0x94/0xa8 [ 396.762218][T30920] ? __pfx_warn_alloc+0x10/0x10 [ 396.762245][T30920] ? __lock_acquire+0x49f/0x1a40 [ 396.762277][T30920] __vmalloc_node_range_noprof+0x136c/0x1630 [ 396.762299][T30920] ? lock_acquire+0x1b9/0x370 [ 396.762318][T30920] ? ip_set_sockfn_get+0x18e/0xd20 [ 396.762345][T30920] ? __lock_acquire+0x49f/0x1a40 [ 396.762362][T30920] ? trace_contention_end+0x126/0x160 [ 396.762375][T30920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 396.762394][T30920] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 396.762414][T30920] ? rcu_is_watching+0x12/0xc0 [ 396.762431][T30920] ? ip_set_sockfn_get+0x18e/0xd20 [ 396.762448][T30920] __vmalloc_node_noprof+0xad/0xf0 [ 396.762465][T30920] ? ip_set_sockfn_get+0x18e/0xd20 [ 396.762485][T30920] ip_set_sockfn_get+0x18e/0xd20 [ 396.762503][T30920] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 396.762522][T30920] ? nf_sockopt_find.isra.0+0x222/0x290 [ 396.762539][T30920] nf_getsockopt+0x7c/0xe0 [ 396.762553][T30920] ip_getsockopt+0x192/0x1e0 [ 396.762570][T30920] ? __pfx_ip_getsockopt+0x10/0x10 [ 396.762585][T30920] ? __pfx_futex_hash+0x10/0x10 [ 396.762601][T30920] raw_getsockopt+0x4d/0x1f0 [ 396.762616][T30920] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 396.762642][T30920] do_sock_getsockopt+0x50a/0x6e0 [ 396.762654][T30920] ? __lock_acquire+0x49f/0x1a40 [ 396.762673][T30920] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 396.762684][T30920] ? percpu_counter_add_batch+0xb9/0x230 [ 396.762707][T30920] ? find_held_lock+0x2b/0x80 [ 396.762725][T30920] ? __fget_files+0x21f/0x3d0 [ 396.762741][T30920] __sys_getsockopt+0x133/0x1d0 [ 396.762761][T30920] ? __ia32_sys_getsockopt+0xbc/0x160 [ 396.762776][T30920] __ia32_sys_getsockopt+0xbc/0x160 [ 396.762790][T30920] ? __do_fast_syscall_32+0x98/0x970 [ 396.762806][T30920] ? lockdep_hardirqs_on+0x78/0x100 [ 396.762825][T30920] __do_fast_syscall_32+0xe7/0x970 [ 396.762842][T30920] do_fast_syscall_32+0x32/0x70 [ 396.762857][T30920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.762873][T30920] RIP: 0023:0xf6feefec [ 396.762889][T30920] Code: Unable to access opcode bytes at 0xf6feefc2. [ 396.762894][T30920] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 396.762907][T30920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 396.762913][T30920] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 396.762920][T30920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.762926][T30920] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 396.762933][T30920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.762972][T30920] [ 396.763017][T30920] Mem-Info: [ 396.861390][T30920] active_anon:1657 inactive_anon:1332 isolated_anon:0 [ 396.861390][T30920] active_file:1208 inactive_file:20668 isolated_file:0 [ 396.861390][T30920] unevictable:768 dirty:405 writeback:0 [ 396.861390][T30920] slab_reclaimable:6953 slab_unreclaimable:74848 [ 396.861390][T30920] mapped:23055 shmem:786 pagetables:1927 [ 396.861390][T30920] sec_pagetables:313 bounce:0 [ 396.861390][T30920] kernel_misc_reclaimable:0 [ 396.861390][T30920] free:45109 free_pcp:11226 free_cma:0 [ 396.875320][T30920] Node 0 active_anon:32kB inactive_anon:156kB active_file:144kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:1092kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 396.885228][T30920] Node 1 active_anon:6596kB inactive_anon:5172kB active_file:4688kB inactive_file:82672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92192kB dirty:1612kB writeback:0kB shmem:1608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6932kB pagetables:6684kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 396.898067][T30920] Node 0 DMA free:3920kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.907598][T30920] lowmem_reserve[]: 0 280 280 280 280 [ 396.909974][T30920] Node 0 DMA32 free:36832kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:156kB active_file:140kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:2344kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:2556kB local_pcp:2556kB free_cma:0kB [ 396.920304][T30920] lowmem_reserve[]: 0 0 0 0 0 [ 396.921803][T30920] Node 1 DMA32 free:139684kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6664kB inactive_anon:5172kB active_file:4688kB inactive_file:82672kB unevictable:1536kB writepending:1612kB zspages:3344kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:42436kB local_pcp:28056kB free_cma:0kB [ 396.931721][T30920] lowmem_reserve[]: 0 0 0 0 0 [ 396.933274][T30920] Node 0 DMA: 184*4kB (U) 88*8kB (UM) 31*16kB (UM) 26*32kB (UM) 4*64kB (UM) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3920kB [ 396.938099][T30920] Node 0 DMA32: 948*4kB (UME) 268*8kB (UME) 117*16kB (UME) 273*32kB (UME) 85*64kB (UME) 28*128kB (UME) 12*256kB (UME) 10*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 36832kB [ 396.943597][T30920] Node 1 DMA32: 87*4kB (UM) 405*8kB (UME) 84*16kB (UME) 233*32kB (UE) 187*64kB (UME) 91*128kB (UME) 101*256kB (UME) 60*512kB (UME) 42*1024kB (UM) 2*2048kB (U) 0*4096kB = 139684kB [ 396.949104][T30920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.952030][T30920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 396.955618][T30920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.958523][T30920] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 396.961387][T30920] 23514 total pagecache pages [ 396.962803][T30920] 854 pages in swap cache [ 396.964245][T30920] Free swap = 102196kB [ 396.965578][T30920] Total swap = 124996kB [ 396.966885][T30920] 524155 pages RAM [ 396.968102][T30920] 0 pages HighMem/MovableOnly [ 396.969586][T30920] 211525 pages reserved [ 396.970910][T30920] 0 pages cma reserved [ 397.580948][T30936] program syz.3.11690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.734099][ C2] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 399.075007][ T10] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 399.163750][T31010] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 399.207706][T31014] input: syz0 as /devices/virtual/input/input41 [ 399.234303][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 399.243780][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 399.252123][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 399.264589][ T10] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 399.270148][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.278318][ T10] usb 8-1: Product: syz [ 399.279784][ T10] usb 8-1: Manufacturer: syz [ 399.306842][ T10] usb 8-1: SerialNumber: syz [ 399.328383][ T10] oti6858 8-1:1.0: oti6858 converter detected [ 399.385096][ T10] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 399.515033][T31026] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11730'. [ 399.681234][T30996] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 399.702282][ T10] usb 8-1: USB disconnect, device number 11 [ 399.781731][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 399.791688][ T10] oti6858 8-1:1.0: device disconnected [ 400.164111][ T5826] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 400.303790][T31061] CUSE: info not properly terminated [ 400.313969][ T5826] usb 10-1: Using ep0 maxpacket: 8 [ 400.317031][ T5826] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 400.322878][ T5826] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 400.330609][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.365222][T31066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11748'. [ 400.410325][T31072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11750'. [ 400.460179][T31078] netlink: 'syz.4.11753': attribute type 1 has an invalid length. [ 400.464433][T31078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11753'. [ 400.556151][ T5826] usb 10-1: USB disconnect, device number 8 [ 402.814062][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 402.818082][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 403.187248][T31167] 8021q: VLANs not supported on vxcan1 [ 404.150878][T31202] input: syz1 as /devices/virtual/input/input42 [ 404.439001][T31217] gfs2: gfs2 mount does not exist [ 404.572084][T31225] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 405.093348][T31262] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11841'. [ 405.569659][T31278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.573748][T31278] IPv6: NLM_F_CREATE should be set when creating new route [ 405.576164][T31278] IPv6: NLM_F_CREATE should be set when creating new route [ 405.578476][T31278] IPv6: NLM_F_CREATE should be set when creating new route [ 407.140937][T31325] pimreg: tun_chr_ioctl cmd 2147767507 [ 407.179509][T31315] ftl_cs: FTL header not found. [ 407.311051][T31315] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 407.766886][T31357] block2mtd: error: cannot open device /dev/loop0 [ 408.935167][T31414] GUP no longer grows the stack in syz.2.11906 (31414): 80009000-8000a000 (80005000) [ 408.939197][T31414] CPU: 2 UID: 0 PID: 31414 Comm: syz.2.11906 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.939216][T31414] Tainted: [L]=SOFTLOCKUP [ 408.939220][T31414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.939227][T31414] Call Trace: [ 408.939232][T31414] [ 408.939237][T31414] dump_stack_lvl+0x100/0x190 [ 408.939254][T31414] gup_vma_lookup.cold+0x83/0x96 [ 408.939272][T31414] __get_user_pages+0x241/0x32a0 [ 408.939293][T31414] ? down_read_killable+0x35e/0x520 [ 408.939310][T31414] ? __pfx___get_user_pages+0x10/0x10 [ 408.939329][T31414] __gup_longterm_locked+0x87d/0x16f0 [ 408.939350][T31414] ? __pfx___gup_longterm_locked+0x10/0x10 [ 408.939366][T31414] ? lock_acquire+0x1b9/0x370 [ 408.939388][T31414] gup_fast_fallback+0x16dc/0x2790 [ 408.939414][T31414] ? __pfx_gup_fast_fallback+0x10/0x10 [ 408.939430][T31414] ? find_held_lock+0x2b/0x80 [ 408.939445][T31414] ? __lock_acquire+0x49f/0x1a40 [ 408.939463][T31414] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 408.939476][T31414] ? lockdep_hardirqs_on+0x78/0x100 [ 408.939492][T31414] get_user_pages_fast+0xa7/0xf0 [ 408.939508][T31414] ? __pfx_get_user_pages_fast+0x10/0x10 [ 408.939524][T31414] ? iov_iter_advance+0xac/0x6d0 [ 408.939542][T31414] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 408.939562][T31414] ? pipe_lock+0x69/0x80 [ 408.939573][T31414] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 408.939590][T31414] ? __pfx___mutex_lock+0x10/0x10 [ 408.939605][T31414] ? iovec_from_user+0xda/0x140 [ 408.939625][T31414] iov_iter_get_pages2+0xa3/0x100 [ 408.939641][T31414] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 408.939657][T31414] ? wait_for_space+0x2ca/0x3b0 [ 408.939671][T31414] __do_sys_vmsplice+0x7dd/0x13c0 [ 408.939690][T31414] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 408.939706][T31414] ? __pfx_futex_wait+0x10/0x10 [ 408.939745][T31414] ? __do_fast_syscall_32+0xe7/0x970 [ 408.939759][T31414] __do_fast_syscall_32+0xe7/0x970 [ 408.939775][T31414] do_fast_syscall_32+0x32/0x70 [ 408.939789][T31414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.939803][T31414] RIP: 0023:0xf705efec [ 408.939818][T31414] Code: Unable to access opcode bytes at 0xf705efc2. [ 408.939823][T31414] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 408.939840][T31414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 408.939848][T31414] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.939855][T31414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.939861][T31414] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 408.939868][T31414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.939883][T31414] [ 410.242212][T31455] usbip-vudc usbip-vudc.0: gadget not bound [ 410.418279][T31467] loop5: detected capacity change from 0 to 7 [ 410.435424][T31467] Dev loop5: unable to read RDB block 7 [ 410.439311][T31467] loop5: AHDI p1 [ 410.442347][T31467] loop5: partition table partially beyond EOD, truncated [ 410.545130][T31472] binder: 31469:31472 ioctl c0306201 80000000 returned -14 [ 410.608090][T31477] binder: 31476:31477 ioctl c018620c 80000140 returned -1 [ 411.496226][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11961'. [ 412.083356][T31568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11977'. [ 412.415547][ T5104] Bluetooth: hci1: command 0xfc11 tx timeout [ 412.416304][ T5761] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 412.642994][T31585] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 413.641513][T31628] misc userio: Begin command sent, but we're already running [ 413.763069][T31638] dummy_hcd dummy_hcd.0: remove, state 4 [ 413.769281][T31638] usb usb5: USB disconnect, device number 1 [ 413.808430][T31638] dummy_hcd dummy_hcd.0: stopped [ 413.810613][T31638] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 414.288749][T31672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12024'. [ 414.457923][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12029'. [ 414.786325][T31708] base or size exceeds the MTRR width [ 414.898414][T31716] misc userio: Can't change port type on an already running userio instance [ 415.724073][ T41] kernel read not supported for file /dsp (pid: 41 comm: kworker/2:1) [ 415.903146][T31754] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12064'. [ 416.228369][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12057'. [ 416.300347][T31768] macvlan0: entered promiscuous mode [ 416.307761][T31768] netlink: 'syz.2.12061': attribute type 1 has an invalid length. [ 416.317420][T31768] netlink: 'syz.2.12061': attribute type 2 has an invalid length. [ 416.562689][T31771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12072'. [ 416.616732][T31777] base or size exceeds the MTRR width [ 416.676360][ T5826] kernel write not supported for file /dsp (pid: 5826 comm: kworker/0:4) [ 416.752238][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12071'. [ 417.338833][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 417.341787][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12085'. [ 417.346294][T31818] netlink: 'syz.2.12085': attribute type 18 has an invalid length. [ 417.348863][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 417.357439][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 417.366341][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12085'. [ 417.371575][T31818] netlink: 'syz.2.12085': attribute type 18 has an invalid length. [ 417.377050][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 419.145038][T31877] zero sized request [ 419.571938][T31900] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 420.816333][T31947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12142'. [ 421.070208][T31958] tipc: Bearer : already 2 bearers with priority 10 [ 421.072656][T31958] tipc: Bearer : trying with adjusted priority [ 421.075366][T31958] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 421.389696][ T5826] hid_parser_main: 73 callbacks suppressed [ 421.389710][ T5826] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.416622][ T5826] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 421.863593][T31996] vhci_hcd: not connected 4 [ 422.018621][T32012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12170'. [ 422.024633][T32012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12170'. [ 422.328527][T32042] openvswitch: netlink: Missing key (keys=40, expected=100) [ 422.608287][T32063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12193'. [ 422.953995][ T10] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 423.106104][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.111258][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 423.116337][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.119417][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.122178][ T10] usb 10-1: Product: syz [ 423.123691][ T10] usb 10-1: Manufacturer: syz [ 423.125394][ T10] usb 10-1: SerialNumber: syz [ 423.128297][ T10] usb 10-1: config 0 descriptor?? [ 423.136812][ T10] usb 10-1: selecting invalid altsetting 0 [ 423.338911][ T10] usb 10-1: USB disconnect, device number 9 [ 423.354958][T32098] tipc: New replicast peer: 127.0.0.1 [ 423.357245][T32098] tipc: Enabled bearer , priority 10 [ 423.588812][T32104] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12213'. [ 424.049195][T32114] vhci_hcd vhci_hcd.0: remove, state 4 [ 424.051060][T32114] usb usb38: USB disconnect, device number 1 [ 424.187343][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.189069][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.190759][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.194123][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.196016][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.198439][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.201785][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.203760][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.207807][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.210379][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.212090][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.221048][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.223025][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.225226][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.227984][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.230030][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.231662][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.233572][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.238694][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.241872][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.243635][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.247106][T17453] vhci_hcd vhci_hcd.0: stop threads [ 424.250254][T17453] vhci_hcd vhci_hcd.0: release socket [ 424.252339][T17453] vhci_hcd vhci_hcd.0: disconnect device [ 424.257143][T32114] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 424.268269][T32128] zero sized request [ 424.273003][T32114] vhci_hcd vhci_hcd.0: remove, state 4 [ 424.286005][T32114] usb usb37: USB disconnect, device number 1 [ 424.326958][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.328681][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.330466][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.335293][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.339748][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.342912][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.346369][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.348214][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.349981][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.354231][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.356073][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.359659][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.362802][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.372775][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.374791][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.376877][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.380091][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.385846][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.392454][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.400259][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.407318][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.411097][T17454] vhci_hcd vhci_hcd.0: stop threads [ 424.415366][T17454] vhci_hcd vhci_hcd.0: release socket [ 424.419209][T17454] vhci_hcd vhci_hcd.0: disconnect device [ 424.422661][T32114] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 424.454487][T32137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.461441][T32137] bond1: entered allmulticast mode [ 424.469594][T32137] bond0: (slave bond1): Enslaving as an active interface with an up link [ 424.470747][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12232'. [ 424.749412][T32165] netlink: 'syz.2.12243': attribute type 1 has an invalid length. [ 424.752172][T32163] can0: slcan on ttyS3. [ 424.758596][T32165] netlink: 'syz.2.12243': attribute type 2 has an invalid length. [ 424.769454][T32165] netlink: 'syz.2.12243': attribute type 1 has an invalid length. [ 424.778645][T32165] netlink: 'syz.2.12243': attribute type 2 has an invalid length. [ 424.825285][T32163] can0 (unregistered): slcan off ttyS3. [ 424.851185][T32173] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 425.107181][T32187] file system registered [ 425.330241][T32207] ip6gretap0: entered promiscuous mode [ 425.332431][T32207] vlan3: entered promiscuous mode [ 425.339513][T32210] scsi_dev_info_list_add_str: bad dev info string 'end' '' '' [ 426.162082][T32249] input: syz1 as /devices/virtual/input/input45 [ 426.675699][T32269] macvlan0: entered promiscuous mode [ 426.678157][T32269] netlink: 'syz.5.12285': attribute type 2 has an invalid length. [ 427.298766][T32311] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 427.305164][T32311] dvmrp1: linktype set to 804 [ 427.554539][T32324] netlink: 'syz.2.12313': attribute type 2 has an invalid length. [ 427.634555][T32330] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 428.035667][T32350] sch_tbf: peakrate 2334440625952748322 is lower than or equals to rate 4745233144430044239 ! [ 428.147130][T32362] Attempt to restore checkpoint with obsolete wellknown handles [ 428.643396][T32395] bridge0: port 3(syz_tun) entered blocking state [ 428.646381][T32395] bridge0: port 3(syz_tun) entered disabled state [ 428.650562][T32395] syz_tun: entered allmulticast mode [ 428.653688][T32395] syz_tun: entered promiscuous mode [ 428.656500][T32395] bridge0: port 3(syz_tun) entered blocking state [ 428.660260][T32395] bridge0: port 3(syz_tun) entered forwarding state [ 428.701813][T32397] tipc: New replicast peer: 172.30.0.3 [ 428.704204][T32397] tipc: Enabled bearer , priority 10 [ 428.707403][T32397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12346'. [ 428.710446][T32397] tipc: Disabling bearer [ 428.908219][T32411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12353'. [ 428.911197][T32411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12353'. [ 429.515286][T32438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12364'. [ 429.521494][T32438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12364'. [ 429.599406][T32442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12366'. [ 429.606319][T32442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12366'. [ 429.609464][T32442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12366'. [ 429.888550][T32462] Failed to get privilege flags for destination (handle=0x2:0x0) [ 430.027619][T32469] program syz.5.12380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.866559][T32555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12417'. [ 433.910655][T32654] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.12451' sets config #1 [ 435.343129][ T36] maxtcpc 0-0020: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 435.348334][T32699] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 435.616760][T32720] binder: 32719:32720 ioctl 541b 0 returned -22 [ 436.246480][T32758] lo speed is unknown, defaulting to 1000 [ 436.877208][ T316] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 437.076074][ T5826] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 437.168651][ T340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12521'. [ 437.224529][ T5826] usb 8-1: Using ep0 maxpacket: 16 [ 437.230955][ T5826] usb 8-1: config 0 has no interfaces? [ 437.233714][ T5826] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 437.238282][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.248527][ T5826] usb 8-1: config 0 descriptor?? [ 437.460020][ T5896] usb 8-1: USB disconnect, device number 12 [ 438.133431][ T407] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 438.945925][ T464] i2c i2c-0: new_device: Extra parameters [ 439.041461][ T473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12584'. [ 439.133349][ T483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12589'. [ 439.431257][ T509] batadv_slave_1: entered promiscuous mode [ 439.448097][ T509] batadv_slave_1: left promiscuous mode [ 439.453500][ T511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12602'. [ 439.936162][ T539] pimreg: tun_chr_ioctl cmd 1074025675 [ 439.942881][ T539] pimreg: persist disabled [ 440.677218][ T581] input: syz0 as /devices/virtual/input/input49 [ 441.241332][ T627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12656'. [ 441.246123][ T627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12656'. [ 441.317909][ T633] netlink: 'syz.2.12660': attribute type 9 has an invalid length. [ 442.078050][ T65] block nbd0: Receive control failed (result -32) [ 442.078741][ T686] block nbd0: Receive control failed (result -32) [ 442.415762][ T41] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 442.576505][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 442.582578][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 442.595678][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 442.601739][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 442.610458][ T41] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 442.619349][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.626394][ T41] usb 8-1: Product: syz [ 442.627749][ T41] usb 8-1: Manufacturer: syz [ 442.635383][ T41] usb 8-1: SerialNumber: syz [ 442.647322][ T41] usb 8-1: config 0 descriptor?? [ 442.781737][ T728] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12703'. [ 442.838381][ T732] bpf: Bad value for 'uid' [ 442.863025][ T41] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 442.867869][ T734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12706'. [ 443.062513][ T694] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 443.066976][ T41] usb 8-1: USB disconnect, device number 13 [ 444.278281][ T833] binder: 832:833 ioctl 541b 0 returned -22 [ 444.995693][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12772'. [ 445.048104][ T887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12773'. [ 446.214750][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 446.469975][ T950] anx7411 0-002c: fail to probe typec property. [ 446.477632][ T954] dyndbg: bad flag-op , at start of #.P,c [ 446.482021][ T954] dyndbg: flags parse failed [ 446.487179][ T950] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 446.834004][ T5896] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 446.855818][ T975] block2mtd: illegal erase size [ 446.986098][ T5896] usb 8-1: Using ep0 maxpacket: 16 [ 446.991553][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 447.001168][ T5896] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 447.001575][ T989] bond1 (unregistering): Released all slaves [ 447.004776][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.009027][ T5896] usb 8-1: Product: syz [ 447.010663][ T5896] usb 8-1: Manufacturer: syz [ 447.012332][ T5896] usb 8-1: SerialNumber: syz [ 447.022257][ T5896] usb 8-1: config 0 descriptor?? [ 447.028898][ T5896] hub 8-1:0.0: bad descriptor, ignoring hub [ 447.031242][ T5896] hub 8-1:0.0: probe with driver hub failed with error -5 [ 447.038578][ T5896] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.108762][ T996] loop9: detected capacity change from 0 to 8 [ 447.129824][ T996] Dev loop9: unable to read RDB block 8 [ 447.134870][ T996] loop9: unable to read partition table [ 447.136778][ T996] loop9: partition table beyond EOD, truncated [ 447.145599][ T996] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 447.288343][ T5897] usb 8-1: USB disconnect, device number 14 [ 448.005594][ T1030] bond2 (unregistering): Released all slaves [ 448.467942][ T1058] i2c i2c-0: Failed to register i2c client anx7411 at 0x2c (-16) [ 448.476152][ T5897] kernel read not supported for file /dsp1 (pid: 5897 comm: kworker/2:3) [ 448.603086][ T36] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 448.632095][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 448.656350][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12851'. [ 448.659784][ T1069] netlink: 'syz.3.12851': attribute type 21 has an invalid length. [ 450.654090][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 450.656699][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 451.338115][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12879'. [ 451.346310][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12879'. [ 452.150858][ T1214] can0: slcan on ttyS3. [ 452.226892][ T1214] can0 (unregistered): slcan off ttyS3. [ 453.588363][T14832] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 453.598651][T14832] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 453.607914][T14832] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 453.685097][ T1324] fido_id[1324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 454.581864][ T1392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12979'. [ 454.897609][ T1412] netlink: 'syz.4.12988': attribute type 9 has an invalid length. [ 454.954985][ T5826] kernel read not supported for file /audio (pid: 5826 comm: kworker/0:4) [ 455.461837][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 455.474708][ T1452] Bluetooth: hci1: Frame reassembly failed (-84) [ 455.587853][ T686] block nbd1: Receive control failed (result -32) [ 455.587853][ T65] block nbd1: Receive control failed (result -32) [ 455.747618][ T1468] ip6erspan0: entered allmulticast mode [ 457.535802][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 457.535866][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 458.914389][ T5897] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 458.975601][ T41] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 459.077970][ T1595] vcan0: tx address claim with dlc 0 [ 459.116025][ T1599] netlink: 16142 bytes leftover after parsing attributes in process `syz.4.13072'. [ 459.127042][ T41] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.133343][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.139051][ T41] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 459.145445][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.149108][ T41] usb 10-1: config 0 descriptor?? [ 459.153423][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 459.156492][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 459.161332][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 459.165176][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 459.167359][ T41] usb 10-1: media controller created [ 459.169868][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.175803][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 459.182414][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 459.186385][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input52 [ 459.191130][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 459.193472][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 459.347554][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 459.351260][ T41] dvb-usb: error while querying for an remote control event. [ 459.369879][ T5826] usb 10-1: USB disconnect, device number 10 [ 459.389711][ T5826] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 460.088024][ T1614] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 460.452928][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13086'. [ 460.608685][ T1636] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 460.738351][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13090'. [ 460.741132][ T1640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13090'. [ 460.744120][ T1640] netlink: 'syz.3.13090': attribute type 20 has an invalid length. [ 462.174119][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 462.174173][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 462.386076][T14832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 462.524040][ T1715] input: syz1 as /devices/virtual/input/input53 [ 462.766757][ T1680] ceph: No mds server is up or the cluster is laggy [ 472.626152][ T42] audit: type=1326 audit(2000001528.855:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.652178][ T42] audit: type=1326 audit(2000001528.865:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.676347][ T42] audit: type=1326 audit(2000001528.865:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.695949][ T42] audit: type=1326 audit(2000001528.865:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.711169][ T42] audit: type=1326 audit(2000001528.865:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.726205][ T42] audit: type=1326 audit(2000001528.865:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.740598][ T42] audit: type=1326 audit(2000001528.865:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.757711][ T42] audit: type=1326 audit(2000001528.865:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.781400][ T42] audit: type=1326 audit(2000001528.865:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.800354][ T42] audit: type=1326 audit(2000001528.865:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1764 comm="syz.5.13131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 472.944909][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13139'. [ 472.952345][ T1784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.007549][ T1784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.190807][ T1797] i2c i2c-0: delete_device: Extra parameters [ 474.031940][ T1851] input: syz0 as /devices/virtual/input/input54 [ 474.534048][ T41] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 474.683976][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 474.687152][ T41] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.689729][ T41] usb 10-1: config 0 has no interface number 0 [ 474.691732][ T41] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.695255][ T41] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.698077][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.703015][ T41] usb 10-1: config 0 descriptor?? [ 474.713211][ T41] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 474.926830][ T41] usb 10-1: USB disconnect, device number 11 [ 475.040741][ T5897] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 475.040776][ T5897] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 475.041636][ T5897] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 475.110260][ T1879] fido_id[1879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.392514][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13209'. [ 476.408260][ T1935] bridge0: port 2(4) entered disabled state [ 476.421694][ T1935] (unregistering): left allmulticast mode [ 476.426346][ T1935] (unregistering): left promiscuous mode [ 476.428343][ T1935] bridge0: port 2(4) entered disabled state [ 476.461702][ T1939] lo speed is unknown, defaulting to 1000 [ 477.247333][ T1969] futex_wake_op: syz.2.13222 tries to shift op by -1; fix this program [ 477.248899][ T1969] trusted_key: encrypted_key: key user:syz not found [ 477.380259][ T1977] gfs2: path_lookup on  returned error -2 [ 477.518120][ T1984] netlink: 'syz.4.13231': attribute type 4 has an invalid length. [ 477.518136][ T1984] netlink: 'syz.4.13231': attribute type 8 has an invalid length. [ 477.518143][ T1984] netlink: 212 bytes leftover after parsing attributes in process `syz.4.13231'. [ 477.720049][ T1993] openvswitch: netlink: IP tunnel dst address not specified [ 477.720079][ T1993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.338306][ T2025] binder: Binderfs stats mode cannot be changed during a remount [ 478.343547][ T2027] binder: 2026:2027 ioctl c0306201 0 returned -14 [ 479.906982][ T2094] syz.4.13282: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 479.911970][ T2094] CPU: 0 UID: 0 PID: 2094 Comm: syz.4.13282 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.911988][ T2094] Tainted: [L]=SOFTLOCKUP [ 479.911991][ T2094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 479.912000][ T2094] Call Trace: [ 479.912005][ T2094] [ 479.912010][ T2094] dump_stack_lvl+0x100/0x190 [ 479.912028][ T2094] warn_alloc.cold+0x94/0xa8 [ 479.912040][ T2094] ? __pfx_warn_alloc+0x10/0x10 [ 479.912056][ T2094] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.912072][ T2094] ? __pfx_get_page_from_freelist+0x10/0x10 [ 479.912089][ T2094] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 479.912110][ T2094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.912125][ T2094] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 479.912142][ T2094] ? __lock_acquire+0x49f/0x1a40 [ 479.912166][ T2094] __folio_alloc_noprof+0x13/0x260 [ 479.912179][ T2094] alloc_migration_target+0x1d7/0x6d0 [ 479.912197][ T2094] migrate_pages_batch+0x5dc/0x45c0 [ 479.912228][ T2094] ? __pfx_alloc_migration_target+0x10/0x10 [ 479.912247][ T2094] ? rcu_read_unlock+0x2d/0xb0 [ 479.912258][ T2094] ? rcu_read_unlock+0x2d/0xb0 [ 479.912270][ T2094] ? __pfx_migrate_pages_batch+0x10/0x10 [ 479.912294][ T2094] ? __pfx_do_wp_page+0x10/0x10 [ 479.912311][ T2094] migrate_pages_sync+0x12c/0x880 [ 479.912328][ T2094] ? __pfx_alloc_migration_target+0x10/0x10 [ 479.912347][ T2094] ? __pfx_migrate_pages_sync+0x10/0x10 [ 479.912365][ T2094] ? __css_rstat_updated+0x1ce/0x5a0 [ 479.912381][ T2094] ? __pfx___handle_mm_fault+0x10/0x10 [ 479.912392][ T2094] ? __pfx___css_rstat_updated+0x10/0x10 [ 479.912411][ T2094] migrate_pages+0x1a83/0x2850 [ 479.912429][ T2094] ? __pfx_alloc_migration_target+0x10/0x10 [ 479.912447][ T2094] ? __up_read+0x333/0x980 [ 479.912459][ T2094] ? __pfx_migrate_pages+0x10/0x10 [ 479.912474][ T2094] ? do_user_addr_fault+0x7de/0x12f0 [ 479.912495][ T2094] ? irqentry_exit+0x24d/0xa00 [ 479.912508][ T2094] ? lockdep_hardirqs_on+0x78/0x100 [ 479.912522][ T2094] move_pages_and_store_status+0xf1/0x230 [ 479.912540][ T2094] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 479.912560][ T2094] ? __might_fault+0x111/0x140 [ 479.912573][ T2094] kernel_move_pages+0xc89/0x14a0 [ 479.912594][ T2094] ? __pfx_kernel_move_pages+0x10/0x10 [ 479.912619][ T2094] ? xfd_validate_state+0x129/0x190 [ 479.912636][ T2094] __ia32_sys_move_pages+0xdd/0x1b0 [ 479.912652][ T2094] ? __do_fast_syscall_32+0x98/0x970 [ 479.912666][ T2094] ? lockdep_hardirqs_on+0x78/0x100 [ 479.912678][ T2094] __do_fast_syscall_32+0xe7/0x970 [ 479.912693][ T2094] do_fast_syscall_32+0x32/0x70 [ 479.912707][ T2094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.912721][ T2094] RIP: 0023:0xf7f65fec [ 479.912737][ T2094] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 479.912741][ T2094] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 479.912753][ T2094] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 479.912759][ T2094] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 479.912765][ T2094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.912771][ T2094] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 479.912778][ T2094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.912792][ T2094] [ 479.912891][ T2094] Mem-Info: [ 480.017278][ T2094] active_anon:1964 inactive_anon:835 isolated_anon:0 [ 480.017278][ T2094] active_file:1291 inactive_file:17204 isolated_file:0 [ 480.017278][ T2094] unevictable:768 dirty:22 writeback:0 [ 480.017278][ T2094] slab_reclaimable:7031 slab_unreclaimable:75416 [ 480.017278][ T2094] mapped:22851 shmem:793 pagetables:2020 [ 480.017278][ T2094] sec_pagetables:313 bounce:0 [ 480.017278][ T2094] kernel_misc_reclaimable:0 [ 480.017278][ T2094] free:57915 free_pcp:358 free_cma:0 [ 480.031740][ T2094] Node 0 active_anon:44kB inactive_anon:40kB active_file:112kB inactive_file:28kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:1092kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.044211][ T2094] Node 1 active_anon:7812kB inactive_anon:3300kB active_file:5052kB inactive_file:68788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91376kB dirty:80kB writeback:0kB shmem:1636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7120kB pagetables:6988kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.061110][ T2094] Node 0 DMA free:3928kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.076723][ T2094] lowmem_reserve[]: 0 280 280 280 280 [ 480.083827][ T2094] Node 0 DMA32 free:40408kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:40kB active_file:108kB inactive_file:32kB unevictable:1536kB writepending:4kB zspages:2344kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.096797][ T2094] lowmem_reserve[]: 0 0 0 0 0 [ 480.100132][ T2094] Node 1 DMA32 free:187324kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7812kB inactive_anon:3300kB active_file:5052kB inactive_file:68788kB unevictable:1536kB writepending:12kB zspages:3252kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1424kB local_pcp:160kB free_cma:0kB [ 480.111560][ T2094] lowmem_reserve[]: 0 0 0 0 0 [ 480.113634][ T2094] Node 0 DMA: 183*4kB (UM) 88*8kB (UM) 32*16kB (UM) 26*32kB (UM) 4*64kB (UM) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3932kB [ 480.126618][ T2094] Node 0 DMA32: 1006*4kB (UME) 298*8kB (UME) 127*16kB (UME) 283*32kB (UME) 92*64kB (UME) 31*128kB (UME) 13*256kB (UME) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 40408kB [ 480.140690][ T2094] Node 1 DMA32: 1488*4kB (UM) 1342*8kB (UME) 671*16kB (UME) 501*32kB (UME) 226*64kB (UME) 137*128kB (UME) 92*256kB (UME) 48*512kB (UME) 46*1024kB (UM) 8*2048kB (UM) 0*4096kB = 187072kB [ 480.150470][ T2094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.155191][ T2094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 480.158465][ T2094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.162503][ T2094] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 480.168073][ T2094] 20273 total pagecache pages [ 480.170277][ T2094] 986 pages in swap cache [ 480.173051][ T2094] Free swap = 101456kB [ 480.175881][ T2094] Total swap = 124996kB [ 480.178402][ T2094] 524155 pages RAM [ 480.179650][ T2094] 0 pages HighMem/MovableOnly [ 480.181139][ T2094] 211525 pages reserved [ 480.182468][ T2094] 0 pages cma reserved [ 481.680143][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 481.680154][ T42] audit: type=1326 audit(2000001537.905:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 481.680188][ T42] audit: type=1326 audit(2000001537.905:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x7ffc0000 [ 481.680211][ T42] audit: type=1326 audit(2000001537.905:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703f017 code=0x7ffc0000 [ 481.680233][ T42] audit: type=1326 audit(2000001537.905:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x7ffc0000 [ 481.680254][ T42] audit: type=1326 audit(2000001537.905:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703f017 code=0x7ffc0000 [ 481.680275][ T42] audit: type=1326 audit(2000001537.905:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x7ffc0000 [ 481.683651][ T42] audit: type=1326 audit(2000001537.905:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703f017 code=0x7ffc0000 [ 481.683682][ T42] audit: type=1326 audit(2000001537.905:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x7ffc0000 [ 481.683705][ T42] audit: type=1326 audit(2000001537.905:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703f017 code=0x7ffc0000 [ 481.683730][ T42] audit: type=1326 audit(2000001537.905:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2085 comm="syz.5.13278" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x7ffc0000 [ 484.032902][ T2291] loop9: detected capacity change from 0 to 8 [ 484.038199][ T2291] Dev loop9: unable to read RDB block 8 [ 484.040146][ T2291] loop9: unable to read partition table [ 484.042083][ T2291] loop9: partition table beyond EOD, truncated [ 484.047155][ T2291] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 486.684036][ T42] kauditd_printk_skb: 24261 callbacks suppressed [ 486.684049][ T42] audit: type=1326 audit(2000001798.907:24628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 486.704011][ T42] audit: type=1326 audit(2000001798.907:24629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 486.710709][ T42] audit: type=1326 audit(2000001798.917:24630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 486.717642][ T42] audit: type=1326 audit(2000001798.917:24631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 486.724526][ T42] audit: type=1326 audit(2000001798.917:24632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 486.731195][ T42] audit: type=1326 audit(2000001798.917:24633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 486.738132][ T42] audit: type=1326 audit(2000001798.917:24634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 486.744901][ T42] audit: type=1326 audit(2000001798.917:24635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 486.751418][ T42] audit: type=1326 audit(2000001798.917:24636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 486.758347][ T42] audit: type=1326 audit(2000001798.917:24637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2284 comm="syz.3.13364" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 487.354012][ T41] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 487.504172][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 487.509645][ T41] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 487.516372][ T2335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13383'. [ 487.517017][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.528482][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.535168][ T41] pvrusb2: Hardware description: Terratec Grabster AV400 [ 487.547158][ T2335] bridge_slave_1 (unregistering): left allmulticast mode [ 487.547542][ T41] pvrusb2: ********** [ 487.551567][ T2335] bridge_slave_1 (unregistering): left promiscuous mode [ 487.554470][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.556263][ T41] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 487.564048][ T41] pvrusb2: Important functionality might not be entirely working. [ 487.569565][ T41] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 487.576275][ T41] pvrusb2: ********** [ 487.749625][ T2518] pvrusb2: Invalid write control endpoint [ 487.876165][ T2518] pvrusb2: Invalid write control endpoint [ 487.884174][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 487.899833][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 487.902254][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 487.909997][ T2518] pvrusb2: Device being rendered inoperable [ 487.920201][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 487.930226][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 487.946926][ T2312] pvrusb2: Attempted to execute control transfer when device not ok [ 487.964035][ T2518] pvrusb2: Attached sub-driver cx25840 [ 487.965485][ T41] usb 10-1: USB disconnect, device number 12 [ 487.965997][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 487.971049][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 488.585404][ T2345] binder: Binderfs stats mode cannot be changed during a remount [ 489.276320][ T2363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13396'. [ 491.694117][ T42] kauditd_printk_skb: 9695 callbacks suppressed [ 491.694130][ T42] audit: type=1326 audit(2000002059.917:34333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 491.713094][ T42] audit: type=1326 audit(2000002059.927:34334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f66017 code=0x7ffc0000 [ 491.719882][ T42] audit: type=1326 audit(2000002059.927:34335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 491.726762][ T42] audit: type=1326 audit(2000002059.927:34336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f66017 code=0x7ffc0000 [ 491.733485][ T42] audit: type=1326 audit(2000002059.927:34337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 491.740409][ T42] audit: type=1326 audit(2000002059.927:34338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f66017 code=0x7ffc0000 [ 491.747262][ T42] audit: type=1326 audit(2000002059.927:34339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 491.754210][ T42] audit: type=1326 audit(2000002059.927:34340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f66017 code=0x7ffc0000 [ 491.760955][ T42] audit: type=1326 audit(2000002059.927:34341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 491.767858][ T42] audit: type=1326 audit(2000002059.927:34342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2393 comm="syz.4.13409" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f66017 code=0x7ffc0000 [ 492.739793][T19053] Bluetooth: hci1: Frame reassembly failed (-84) [ 492.744687][ T2421] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 493.188766][ T2438] binder: 2437:2438 ioctl c0306201 0 returned -14 [ 494.353008][ T2464] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03 [ 494.381426][ T2466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13442'. [ 494.733970][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 494.734183][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 495.345239][ T2512] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13460'. [ 495.494316][ T2530] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 496.014271][ C2] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 496.305548][ T5897] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 496.454042][ T5897] usb 10-1: Using ep0 maxpacket: 32 [ 496.457299][ T5897] usb 10-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 496.460720][ T5897] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.465790][ T5897] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 496.468504][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 496.471142][ T5897] usb 10-1: Product: syz [ 496.472495][ T5897] usb 10-1: Manufacturer: syz [ 496.475858][ T5897] usb 10-1: SerialNumber: syz [ 496.479176][ T5897] usb 10-1: config 0 descriptor?? [ 496.688220][ T5897] usb 10-1: USB disconnect, device number 13 [ 497.963991][ T5534] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 498.125012][ T5534] usb 10-1: Using ep0 maxpacket: 16 [ 498.129822][ T5534] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 498.135532][ T5534] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 498.139128][ T5534] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.142330][ T5534] usb 10-1: Product: syz [ 498.144331][ T5534] usb 10-1: Manufacturer: syz [ 498.145979][ T5534] usb 10-1: SerialNumber: syz [ 498.150307][ T5534] usb 10-1: config 0 descriptor?? [ 498.155066][ T5534] hub 10-1:0.0: bad descriptor, ignoring hub [ 498.157344][ T5534] hub 10-1:0.0: probe with driver hub failed with error -5 [ 498.161032][ T5534] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.422692][ T5896] usb 10-1: USB disconnect, device number 14 [ 498.980846][ T2678] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13526'. [ 499.212725][ T42] kauditd_printk_skb: 650 callbacks suppressed [ 499.212744][ T42] audit: type=1326 audit(2000002067.437:34993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2688 comm="syz.5.13529" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 500.176187][ T2707] syz.5.13536: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.181062][ T2707] CPU: 0 UID: 0 PID: 2707 Comm: syz.5.13536 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.181081][ T2707] Tainted: [L]=SOFTLOCKUP [ 500.181085][ T2707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.181100][ T2707] Call Trace: [ 500.181111][ T2707] [ 500.181118][ T2707] dump_stack_lvl+0x100/0x190 [ 500.181185][ T2707] warn_alloc.cold+0x94/0xa8 [ 500.181204][ T2707] ? __pfx_warn_alloc+0x10/0x10 [ 500.181222][ T2707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.181261][ T2707] ? __pfx_get_page_from_freelist+0x10/0x10 [ 500.181279][ T2707] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 500.181301][ T2707] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 500.181318][ T2707] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 500.181337][ T2707] ? __lock_acquire+0x49f/0x1a40 [ 500.181361][ T2707] __folio_alloc_noprof+0x13/0x260 [ 500.181375][ T2707] alloc_migration_target+0x1d7/0x6d0 [ 500.181394][ T2707] migrate_pages_batch+0x5dc/0x45c0 [ 500.181412][ T2707] ? __pfx_alloc_migration_target+0x10/0x10 [ 500.181431][ T2707] ? rcu_read_unlock+0x2d/0xb0 [ 500.181442][ T2707] ? rcu_read_unlock+0x2d/0xb0 [ 500.181453][ T2707] ? __pfx_migrate_pages_batch+0x10/0x10 [ 500.181477][ T2707] ? __pfx_do_wp_page+0x10/0x10 [ 500.181494][ T2707] migrate_pages_sync+0x12c/0x880 [ 500.181512][ T2707] ? __pfx_alloc_migration_target+0x10/0x10 [ 500.181531][ T2707] ? __pfx_migrate_pages_sync+0x10/0x10 [ 500.181553][ T2707] ? __css_rstat_updated+0x1ce/0x5a0 [ 500.181569][ T2707] ? __pfx___handle_mm_fault+0x10/0x10 [ 500.181580][ T2707] ? __pfx___css_rstat_updated+0x10/0x10 [ 500.181599][ T2707] migrate_pages+0x1a83/0x2850 [ 500.181617][ T2707] ? __pfx_alloc_migration_target+0x10/0x10 [ 500.181637][ T2707] ? __up_read+0x333/0x980 [ 500.181649][ T2707] ? __pfx_migrate_pages+0x10/0x10 [ 500.181666][ T2707] ? do_user_addr_fault+0x7de/0x12f0 [ 500.181688][ T2707] ? irqentry_exit+0x24d/0xa00 [ 500.181705][ T2707] ? lockdep_hardirqs_on+0x78/0x100 [ 500.181719][ T2707] move_pages_and_store_status+0xf1/0x230 [ 500.181737][ T2707] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 500.181757][ T2707] ? __might_fault+0x111/0x140 [ 500.181770][ T2707] kernel_move_pages+0xc89/0x14a0 [ 500.181792][ T2707] ? __pfx_kernel_move_pages+0x10/0x10 [ 500.181815][ T2707] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 500.181830][ T2707] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 500.181847][ T2707] __ia32_sys_move_pages+0xdd/0x1b0 [ 500.181864][ T2707] ? __do_fast_syscall_32+0x98/0x970 [ 500.181878][ T2707] ? lockdep_hardirqs_on+0x78/0x100 [ 500.181890][ T2707] __do_fast_syscall_32+0xe7/0x970 [ 500.181906][ T2707] do_fast_syscall_32+0x32/0x70 [ 500.181920][ T2707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.181935][ T2707] RIP: 0023:0xf703efec [ 500.181951][ T2707] Code: Unable to access opcode bytes at 0xf703efc2. [ 500.181956][ T2707] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 500.181967][ T2707] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 500.181974][ T2707] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 500.181980][ T2707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.181986][ T2707] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 500.181992][ T2707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.182006][ T2707] [ 500.182016][ T2707] Mem-Info: [ 500.278780][ T2711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13539'. [ 500.279264][ T2707] active_anon:1769 inactive_anon:1317 isolated_anon:0 [ 500.279264][ T2707] active_file:1113 inactive_file:15281 isolated_file:0 [ 500.279264][ T2707] unevictable:768 dirty:353 writeback:0 [ 500.279264][ T2707] slab_reclaimable:7008 slab_unreclaimable:75933 [ 500.279264][ T2707] mapped:22975 shmem:794 pagetables:2086 [ 500.279264][ T2707] sec_pagetables:313 bounce:0 [ 500.279264][ T2707] kernel_misc_reclaimable:0 [ 500.279264][ T2707] free:59116 free_pcp:94 free_cma:0 [ 500.307204][ T2707] Node 0 active_anon:0kB inactive_anon:20kB active_file:104kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:1092kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.317623][ T2707] Node 1 active_anon:7076kB inactive_anon:5248kB active_file:4348kB inactive_file:61088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91872kB dirty:1408kB writeback:0kB shmem:1640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7060kB pagetables:7252kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.328365][ T2707] Node 0 DMA free:3924kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.338049][ T2707] lowmem_reserve[]: 0 280 280 280 280 [ 500.339819][ T2707] Node 0 DMA32 free:41012kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:20kB active_file:104kB inactive_file:36kB unevictable:1536kB writepending:4kB zspages:2324kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.349794][ T2707] lowmem_reserve[]: 0 0 0 0 0 [ 500.359624][ T2707] Node 1 DMA32 free:191324kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6940kB inactive_anon:5248kB active_file:4348kB inactive_file:61088kB unevictable:1536kB writepending:1408kB zspages:3276kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1476kB local_pcp:392kB free_cma:0kB [ 500.375237][ T2707] lowmem_reserve[]: 0 0 0 0 0 [ 500.376950][ T2707] Node 0 DMA: 181*4kB (UM) 88*8kB (UM) 32*16kB (UM) 26*32kB (UM) 4*64kB (UM) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3924kB [ 500.381653][ T2707] Node 0 DMA32: 1025*4kB (UME) 302*8kB (UME) 126*16kB (UME) 291*32kB (UME) 92*64kB (UME) 33*128kB (UME) 13*256kB (UME) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 41012kB [ 500.387754][ T2707] Node 1 DMA32: 802*4kB (UME) 598*8kB (UME) 233*16kB (UME) 596*32kB (UME) 182*64kB (UME) 95*128kB (UME) 112*256kB (UME) 58*512kB (UME) 48*1024kB (UM) 10*2048kB (M) 2*4096kB (M) = 190792kB [ 500.393630][ T2707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.397046][ T2707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.400460][ T2707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.403754][ T2707] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 500.407428][ T2707] 18190 total pagecache pages [ 500.409069][ T2707] 1004 pages in swap cache [ 500.412805][ T2707] Free swap = 101248kB [ 500.415097][ T2707] Total swap = 124996kB [ 500.416608][ T2707] 524155 pages RAM [ 500.426846][ T2707] 0 pages HighMem/MovableOnly [ 500.428744][ T2707] 211525 pages reserved [ 500.430193][ T2707] 0 pages cma reserved [ 501.064802][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13556'. [ 501.089024][ T2764] bridge_slave_1 (unregistering): left promiscuous mode [ 501.091587][ T2764] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.205541][ T2770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13559'. [ 502.104110][ T5534] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 502.254020][ T5534] usb 8-1: Using ep0 maxpacket: 8 [ 502.256996][ T5534] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 502.259616][ T5534] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.262682][ T5534] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.266127][ T5534] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.269282][ T5534] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.273345][ T5534] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.276274][ T5534] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.486620][ T5534] usb 8-1: GET_CAPABILITIES returned 0 [ 502.488412][ T5534] usbtmc 8-1:16.0: can't read capabilities [ 502.693523][ T5896] usb 8-1: USB disconnect, device number 15 [ 503.573555][ T2804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13568'. [ 503.609763][ T2804] bridge_slave_1 (unregistering): left allmulticast mode [ 503.613672][ T2804] bridge_slave_1 (unregistering): left promiscuous mode [ 503.624126][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.090557][ T2852] program syz.2.13589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.164670][ T2856] kvm: kvm [2855]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005d) [ 504.330813][ T2871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13597'. [ 504.465672][ T2884] netlink: 88 bytes leftover after parsing attributes in process `syz.5.13602'. [ 504.731625][ T2902] can0: slcan on ttyS3. [ 504.846138][ T2902] can0 (unregistered): slcan off ttyS3. [ 505.524086][ T41] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 505.552165][ T2962] netlink: zone id is out of range [ 505.555552][ T2962] netlink: zone id is out of range [ 505.557283][ T2962] netlink: zone id is out of range [ 505.560581][ T2962] netlink: zone id is out of range [ 505.562674][ T2962] netlink: zone id is out of range [ 505.566657][ T2962] netlink: zone id is out of range [ 505.569997][ T2962] netlink: zone id is out of range [ 505.571718][ T2962] netlink: zone id is out of range [ 505.575643][ T2962] netlink: zone id is out of range [ 505.578227][ T2962] netlink: set zone limit has 4 unknown bytes [ 505.582253][ T2962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13627'. [ 505.675098][ T41] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 505.682394][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.688787][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.698897][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.701801][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.706133][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.711081][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.718102][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.722130][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.728968][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.733097][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.738639][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.745082][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.750331][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.754809][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.762526][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.767327][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.771909][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.776238][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.781584][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.789221][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.796287][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.801614][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.805613][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.811712][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.819012][ T41] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 505.822383][ T41] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 505.828344][ T41] usb 8-1: Product: syz [ 505.830809][ T41] usb 8-1: Manufacturer: syz [ 505.833524][ T41] usb 8-1: SerialNumber: syz [ 505.841969][ T41] usb 8-1: config 0 descriptor?? [ 505.873258][ T41] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 506.056571][ T41] usb 8-1: USB disconnect, device number 16 [ 506.065436][ T41] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 506.804074][ T3018] block nbd2: server does not support multiple connections per device. [ 506.807220][ T3018] block nbd2: shutting down sockets [ 506.811190][ T2642] udevd[2642]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 507.408655][ T3056] loop9: detected capacity change from 0 to 524287998 [ 507.894932][ T3077] lo speed is unknown, defaulting to 1000 [ 508.985710][ T3119] futex_wake_op: syz.2.13684 tries to shift op by -1; fix this program [ 509.341082][T14832] kernel read not supported for file /swradio1 (pid: 14832 comm: kworker/2:4) [ 510.149874][ T3169] dummy0: entered promiscuous mode [ 510.154122][ T3169] gretap0: entered promiscuous mode [ 510.160963][ T3169] hsr1: entered allmulticast mode [ 510.162656][ T3169] gretap0: entered allmulticast mode [ 510.379821][ T42] audit: type=1800 audit(2000002078.607:34994): pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13712" name="b_vendor_code" dev="configfs" ino=133682 res=0 errno=0 [ 511.359099][ T3229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13733'. [ 511.429624][ T3231] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 511.657698][ T3243] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 512.829894][ T3268] ceph: No mds server is up or the cluster is laggy [ 512.834268][ T2642] udevd[2642]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 512.843080][ T65] block nbd2: Receive control failed (result -32) [ 512.853746][ T2642] udevd[2642]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 513.121007][ T3305] tcpci 0-0050: Can't find connector node. [ 513.126305][ T3305] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 513.132407][ T3305] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 513.208045][ T3314] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13770'. [ 513.462283][ T3328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13777'. [ 513.651185][ T3342] input: syz0 as /devices/virtual/input/input56 [ 514.367030][ T5896] kernel read not supported for file /swradio9 (pid: 5896 comm: kworker/0:7) [ 514.785480][ T42] audit: type=1326 audit(2000002083.017:34995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3411 comm="syz.4.13805" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65fec code=0x0 [ 514.941370][ T5896] kernel read not supported for file /swradio5 (pid: 5896 comm: kworker/0:7) [ 515.309072][ T3433] size and base must be multiples of 4 kiB [ 515.313575][ T3433] CPU: 0 UID: 0 PID: 3433 Comm: syz.3.13813 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.313595][ T3433] Tainted: [L]=SOFTLOCKUP [ 515.313599][ T3433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.313605][ T3433] Call Trace: [ 515.313610][ T3433] [ 515.313616][ T3433] dump_stack_lvl+0x100/0x190 [ 515.313632][ T3433] mtrr_del.cold+0x72/0x85 [ 515.313645][ T3433] mtrr_ioctl+0xbc8/0xcf0 [ 515.313659][ T3433] ? __pfx_mtrr_ioctl+0x10/0x10 [ 515.313675][ T3433] ? find_held_lock+0x2b/0x80 [ 515.313694][ T3433] ? __fget_files+0x21f/0x3d0 [ 515.313707][ T3433] ? __pfx_mtrr_ioctl+0x10/0x10 [ 515.313719][ T3433] proc_reg_compat_ioctl+0x229/0x320 [ 515.313765][ T3433] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 515.313777][ T3433] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 515.313796][ T3433] __do_fast_syscall_32+0xe7/0x970 [ 515.313815][ T3433] do_fast_syscall_32+0x32/0x70 [ 515.313829][ T3433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.313844][ T3433] RIP: 0023:0xf6feefec [ 515.313870][ T3433] Code: Unable to access opcode bytes at 0xf6feefc2. [ 515.313877][ T3433] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 515.313888][ T3433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104d04 [ 515.313894][ T3433] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.313900][ T3433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.313906][ T3433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 515.313912][ T3433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.313927][ T3433] [ 515.449359][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13814'. [ 515.458593][ T3437] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13814'. [ 516.233332][ T3492] netlink: 'syz.2.13841': attribute type 1 has an invalid length. [ 516.237285][ T3492] netlink: 212 bytes leftover after parsing attributes in process `syz.2.13841'. [ 517.712585][ T3570] kvm: kvm [3569]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005d) [ 518.044255][ T41] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 518.196245][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 518.202626][ T41] usb 8-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 518.209724][ T41] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.217733][ T41] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 518.221368][ T41] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 518.226969][ T41] usb 8-1: Product: syz [ 518.228317][ T41] usb 8-1: Manufacturer: syz [ 518.244942][ T41] usb 8-1: SerialNumber: syz [ 518.249999][ T41] usb 8-1: config 0 descriptor?? [ 518.345362][T19053] Bluetooth: hci1: Frame reassembly failed (-84) [ 518.348731][ T3599] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 518.476411][ T10] usb 8-1: USB disconnect, device number 17 [ 519.459945][ T3638] evm: overlay not supported [ 519.554844][ T3642] vxcan0: tx address claim with dest, not broadcast [ 520.414280][ T5104] Bluetooth: hci1: command 0x1003 tx timeout [ 520.414310][ T5761] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 520.499852][ T3649] program syz.3.13912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.649881][ T3665] overlayfs: failed to clone lowerpath [ 520.806468][ T41] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 520.955460][ T41] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 520.963687][ T41] usb 8-1: config 0 has no interface number 0 [ 520.968777][ T41] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 520.980830][ T41] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 520.994284][ T41] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 521.000616][ T41] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 521.004581][ T41] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 521.010574][ T41] usb 8-1: Product: syz [ 521.011914][ T41] usb 8-1: SerialNumber: syz [ 521.016360][ T41] usb 8-1: config 0 descriptor?? [ 521.022548][ T41] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 521.026440][ T41] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input57 [ 521.327667][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.332725][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.335145][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.338002][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.340336][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.342724][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.345318][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.347677][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.350020][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.352387][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 521.378903][ T41] usb 8-1: USB disconnect, device number 18 [ 521.380912][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 521.397508][ T41] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 523.034482][ T5897] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 530.671933][ T3849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13990'. [ 530.831659][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13997'. [ 530.867572][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13997'. [ 531.120955][ T3886] scsi_strcpy_devinfo: vendor string 'vendo*r' is too long [ 531.130510][ T3886] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long [ 531.421048][ T3909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14019'. [ 532.101736][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14041'. [ 532.107234][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14041'. [ 532.601087][ T4010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14064'. [ 532.704101][ T5897] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 532.853937][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 532.859169][ T5897] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 532.864734][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.896239][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 532.902484][ T5897] pvrusb2: ********** [ 532.903828][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 532.911579][ T4030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14074'. [ 532.915430][ T5897] pvrusb2: Important functionality might not be entirely working. [ 532.921908][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 532.931008][ T5897] pvrusb2: ********** [ 532.983073][ T4038] bridge0: port 2(syz_tun) entered blocking state [ 532.989391][ T4038] bridge0: port 2(syz_tun) entered disabled state [ 532.991764][ T4038] syz_tun: entered allmulticast mode [ 533.005680][ T4038] syz_tun: left allmulticast mode [ 533.096774][ T2518] pvrusb2: Invalid write control endpoint [ 533.148166][ T2518] pvrusb2: Invalid write control endpoint [ 533.150937][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 533.155616][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 533.159591][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 533.162844][ T2518] pvrusb2: Device being rendered inoperable [ 533.165635][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 533.169050][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 533.177424][ T2518] pvrusb2: Attached sub-driver cx25840 [ 533.180975][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 533.184662][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 533.297178][ T3994] pvrusb2: Attempted to execute control transfer when device not ok [ 533.300678][ T41] usb 8-1: USB disconnect, device number 19 [ 534.365853][ T5897] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 534.514582][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 534.535875][ T5897] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 534.543745][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.556008][ T5897] usb 8-1: Product: syz [ 534.559559][ T5897] usb 8-1: Manufacturer: syz [ 534.563248][ T5897] usb 8-1: SerialNumber: syz [ 534.586023][ T4128] bridge0: port 2(syz_tun) entered blocking state [ 534.588971][ T4128] bridge0: port 2(syz_tun) entered disabled state [ 534.591598][ T4128] syz_tun: entered allmulticast mode [ 534.597607][ T4128] syz_tun: left allmulticast mode [ 534.785615][ T5897] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 534.795228][ T5897] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 534.803016][ T5897] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 534.808797][ T5897] usb 8-1: media controller created [ 534.822478][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.058470][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 535.087053][ T5897] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 535.091018][ T5897] usb 8-1: USB disconnect, device number 20 [ 535.574058][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 535.884173][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 536.064224][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 536.067416][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 536.072140][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 536.078892][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 536.085605][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 536.096430][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 536.106124][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 536.113597][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 536.118508][ T10] usb 8-1: Product: syz [ 536.121658][ T10] usb 8-1: Manufacturer: syz [ 536.126094][ T10] usb 8-1: SerialNumber: syz [ 536.133637][ T10] usb 8-1: config 0 descriptor?? [ 536.140658][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 536.150298][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 536.271992][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14150'. [ 536.279130][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14150'. [ 536.672339][ T42] audit: type=1326 audit(2000002104.897:34996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4212 comm="syz.5.14158" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 536.894854][ T4224] net_ratelimit: 3 callbacks suppressed [ 536.894867][ T4224] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 536.928155][ T5897] usb 8-1: USB disconnect, device number 21 [ 536.937902][ T5897] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 538.042872][ T4286] Invalid ELF header magic: != ELF [ 538.437818][ T4319] binder: 4318:4319 ioctl c0306201 80000000 returned -14 [ 538.734110][ T5896] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 538.904656][ T5896] usb 8-1: Using ep0 maxpacket: 8 [ 538.908856][ T5896] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 538.912867][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.919234][ T5896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 538.921538][ T5896] pvrusb2: ********** [ 538.923099][ T5896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 538.926702][ T5896] pvrusb2: Important functionality might not be entirely working. [ 538.929238][ T5896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 538.932807][ T5896] pvrusb2: ********** [ 539.125108][ T2518] pvrusb2: Invalid write control endpoint [ 539.161344][ T2518] pvrusb2: Invalid write control endpoint [ 539.163234][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 539.166354][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 539.168887][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 539.172181][ T2518] pvrusb2: Device being rendered inoperable [ 539.174436][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 539.176740][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 539.181597][ T2518] pvrusb2: Attached sub-driver cx25840 [ 539.183538][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 539.190039][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 539.330596][ T4323] pvrusb2: Attempted to execute control transfer when device not ok [ 539.337093][ T5896] usb 8-1: USB disconnect, device number 22 [ 539.663464][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14227'. [ 539.711187][ T42] audit: type=1326 audit(2000002107.937:34997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.2.14228" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 539.888145][T14832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 540.796641][ T4397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14235'. [ 552.038736][ T4530] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 552.042517][ T4530] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 552.045369][ T4530] CPU: 0 UID: 0 PID: 4530 Comm: syz.2.14280 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.048819][ T4530] Tainted: [L]=SOFTLOCKUP [ 552.050174][ T4530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 552.053301][ T4530] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 552.055229][ T4530] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 5d 61 3b fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 552.061158][ T4530] RSP: 0018:ffffc90006b578c8 EFLAGS: 00010246 [ 552.063083][ T4530] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d051000 [ 552.065535][ T4530] RDX: 0000000000000000 RSI: ffffffff87ce4b03 RDI: ffff888026e99290 [ 552.067989][ T4530] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 552.070460][ T4530] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 552.072913][ T4530] R13: ffff888026e98068 R14: ffff888026e98c58 R15: ffff8880267e7810 [ 552.075373][ T4530] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f544db40 [ 552.078110][ T4530] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 552.080175][ T4530] CR2: 00000000f7f155b8 CR3: 000000004c79f000 CR4: 0000000000352ef0 [ 552.082680][ T4530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.085135][ T4530] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 552.087594][ T4530] Call Trace: [ 552.088656][ T4530] [ 552.089595][ T4530] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 552.091431][ T4530] usb_gadget_set_selfpowered+0x73/0x2b0 [ 552.093202][ T4530] composite_dev_prepare+0x254/0x420 [ 552.094870][ T4530] configfs_composite_bind+0xd2/0x1960 [ 552.096573][ T4530] ? kernfs_create_link+0x1bd/0x240 [ 552.098210][ T4530] gadget_bind_driver+0x28c/0xbf0 [ 552.099794][ T4530] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 552.101550][ T4530] ? __pfx_gadget_bind_driver+0x10/0x10 [ 552.103296][ T4530] really_probe+0x241/0xa60 [ 552.104730][ T4530] __driver_probe_device+0x20e/0x450 [ 552.106396][ T4530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.108247][ T4530] driver_probe_device+0x4a/0x140 [ 552.109828][ T4530] __driver_attach+0x21f/0x5b0 [ 552.111348][ T4530] ? __pfx___driver_attach+0x10/0x10 [ 552.113001][ T4530] bus_for_each_dev+0x13e/0x1d0 [ 552.114536][ T4530] ? __pfx_bus_for_each_dev+0x10/0x10 [ 552.116224][ T4530] ? bus_add_driver+0x2b5/0x5b0 [ 552.117756][ T4530] bus_add_driver+0x305/0x5b0 [ 552.119247][ T4530] driver_register+0x1e2/0x360 [ 552.120755][ T4530] usb_gadget_register_driver_owner+0x132/0x210 [ 552.122723][ T4530] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 552.124479][ T4530] configfs_write_iter+0x302/0x4e0 [ 552.126078][ T4530] vfs_write+0x6ac/0x1050 [ 552.127457][ T4530] ? __pfx_configfs_write_iter+0x10/0x10 [ 552.129206][ T4530] ? __pfx_vfs_write+0x10/0x10 [ 552.130714][ T4530] ? find_held_lock+0x2b/0x80 [ 552.132213][ T4530] ksys_write+0x12a/0x250 [ 552.133574][ T4530] ? __pfx_ksys_write+0x10/0x10 [ 552.135104][ T4530] __do_fast_syscall_32+0xe7/0x970 [ 552.136693][ T4530] do_fast_syscall_32+0x32/0x70 [ 552.138223][ T4530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.140196][ T4530] RIP: 0023:0xf705efec [ 552.141484][ T4530] Code: Unable to access opcode bytes at 0xf705efc2. [ 552.143547][ T4530] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 552.146098][ T4530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00 [ 552.148564][ T4530] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 552.151014][ T4530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.153466][ T4530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.155925][ T4530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.158392][ T4530] [ 552.159377][ T4530] Modules linked in: [ 552.161170][ T4530] ---[ end trace 0000000000000000 ]--- [ 552.165329][ T4530] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 552.168346][ T4530] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 5d 61 3b fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 552.176282][ T4530] RSP: 0018:ffffc90006b578c8 EFLAGS: 00010246 [ 552.179725][ T4530] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d051000 [ 552.182278][ T4530] RDX: 0000000000000000 RSI: ffffffff87ce4b03 RDI: ffff888026e99290 [ 552.185726][ T4530] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 552.188266][ T4530] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 552.190740][ T4530] R13: ffff888026e98068 R14: ffff888026e98c58 R15: ffff8880267e7810 [ 552.193246][ T4530] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f544db40 [ 552.196249][ T4530] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 552.198462][ T4530] CR2: 00007f34054fdad0 CR3: 000000004c79f000 CR4: 0000000000352ef0 [ 552.200977][ T4530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.203461][ T4530] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 552.206120][ T4530] Kernel panic - not syncing: Fatal exception [ 552.208552][ T4530] Kernel Offset: disabled [ 552.209904][ T4530] Rebooting in 86400 seconds..