last executing test programs: 1m36.350350878s ago: executing program 2 (id=4840): r0 = epoll_create(0x101) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 1m36.285954738s ago: executing program 2 (id=4843): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 1m35.424521395s ago: executing program 2 (id=4881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.329192719s ago: executing program 2 (id=4883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 1m35.279116842s ago: executing program 2 (id=4887): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300ce4d, 0x10) 1m34.961401078s ago: executing program 2 (id=4900): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x800) r1 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000000d}) 1m34.937077783s ago: executing program 32 (id=4900): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x800) r1 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000000d}) 1.049012449s ago: executing program 4 (id=7596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x501, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40400d4}, 0x8800) 989.659582ms ago: executing program 4 (id=7599): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 924.606593ms ago: executing program 4 (id=7600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 924.435883ms ago: executing program 3 (id=7601): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) 920.257055ms ago: executing program 4 (id=7602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) 849.040557ms ago: executing program 3 (id=7604): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x3000000d}) close(0x3) 848.827571ms ago: executing program 4 (id=7605): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 848.629244ms ago: executing program 3 (id=7606): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read$FUSE(r0, 0x0, 0x0) 789.784634ms ago: executing program 3 (id=7607): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}}) close(0x3) 789.680872ms ago: executing program 3 (id=7608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 748.453642ms ago: executing program 3 (id=7609): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 317.523432ms ago: executing program 0 (id=7619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 267.892367ms ago: executing program 1 (id=7620): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a", 0xf, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100000014000300"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 267.700683ms ago: executing program 1 (id=7621): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "3e600194ff5a5f46"}}}, 0x11) 250.037459ms ago: executing program 1 (id=7622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x8, @void}, 0x10) 179.753535ms ago: executing program 1 (id=7623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x939, 0x10000000, 0xb5b4, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c00"], 0xd0}}, 0x571f68543cec8180) 179.475586ms ago: executing program 0 (id=7624): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 178.993459ms ago: executing program 1 (id=7625): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2e60, &(0x7f00000002c0)={0x0, 0xa00000, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f0000000fc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}]) io_uring_enter(r1, 0x21d2, 0x7c5, 0x0, 0x0, 0x0) 178.851533ms ago: executing program 0 (id=7626): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0xff, 0x7, 0xa, 0x201, 0x1}) 76.585211ms ago: executing program 0 (id=7627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5, 0x2, 0x1000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 73.151382ms ago: executing program 1 (id=7628): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat(0xffffffffffffffff, 0x0) 155.691µs ago: executing program 0 (id=7629): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40840) 65.854µs ago: executing program 4 (id=7630): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x800) 0s ago: executing program 0 (id=7631): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') kernel console output (not intermixed with test programs): has an invalid length. [ 165.426579][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4792'. [ 165.779465][T17187] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4817'. [ 165.784471][T17187] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4817'. [ 166.009797][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4830'. [ 166.236188][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 166.236203][ T40] audit: type=1326 audit(2000000055.019:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.4843" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 166.586220][T17320] Option ' ' to dns_resolver key: bad/missing value [ 166.728011][T17333] bond1 (unregistering): Released all slaves [ 166.927967][T17417] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4870'. [ 167.257841][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.263827][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.276481][T17460] pim6reg: entered allmulticast mode [ 167.285335][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.288793][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.292588][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 167.296307][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4889'. [ 167.299167][T17468] netlink: 'syz.1.4889': attribute type 7 has an invalid length. [ 167.302030][T17468] netlink: 'syz.1.4889': attribute type 13 has an invalid length. [ 167.321095][T17460] pim6reg: left allmulticast mode [ 167.330431][ T100] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.544315][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.661630][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.668620][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.674130][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.677165][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.679886][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.746544][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.778993][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4913'. [ 167.782779][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4913'. [ 167.841795][ T78] bond0: (slave netdevsim1): Releasing backup interface [ 167.850627][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.010587][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.077942][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.080296][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.085748][T17514] bridge_slave_0: entered allmulticast mode [ 168.089423][T17514] bridge_slave_0: entered promiscuous mode [ 168.092644][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.095951][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.098285][T17514] bridge_slave_1: entered allmulticast mode [ 168.101071][T17514] bridge_slave_1: entered promiscuous mode [ 168.116693][T17695] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 168.122252][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.126884][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.177991][T17514] team0: Port device team_slave_0 added [ 168.196693][T17514] team0: Port device team_slave_1 added [ 168.219193][ T78] bridge_slave_1: left allmulticast mode [ 168.222344][ T78] bridge_slave_1: left promiscuous mode [ 168.227433][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.236524][ T78] bridge_slave_0: left allmulticast mode [ 168.240552][ T78] bridge_slave_0: left promiscuous mode [ 168.244452][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.257025][ T78] tipc: Resetting bearer [ 168.298203][ T78] tipc: Disabling bearer [ 168.447054][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.453238][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.456854][ T78] bond0 (unregistering): Released all slaves [ 168.469596][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.472234][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.480255][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.487418][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.489778][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.500839][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.539407][T17514] hsr_slave_0: entered promiscuous mode [ 168.543757][T17514] hsr_slave_1: entered promiscuous mode [ 168.547732][T17514] debugfs: 'hsr0' already exists in 'hsr' [ 168.549583][T17514] Cannot create hsr debugfs directory [ 168.555978][ T78] tipc: Left network mode [ 168.592011][T17811] fuseblk: block size(7680) > page size(4096) not supported by filesystem [ 168.604206][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.685605][ T78] IPVS: stopping backup sync thread 15240 ... [ 168.812547][T17514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.822075][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.825160][T17514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.830232][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.833530][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.843944][T17514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.854459][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.885605][T17514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.893942][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.946513][ T78] hsr_slave_0: left promiscuous mode [ 168.950175][ T78] hsr_slave_1: left promiscuous mode [ 168.955540][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.960145][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.966281][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.968753][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.981839][ T78] veth1_macvtap: left promiscuous mode [ 168.984332][ T78] veth0_macvtap: left promiscuous mode [ 168.986198][ T78] veth1_vlan: left promiscuous mode [ 168.988058][ T78] veth0_vlan: left promiscuous mode [ 169.045513][ T78] pim6reg99999999 (unregistering): left allmulticast mode [ 169.138046][ T78] team0 (unregistering): Port device team_slave_1 removed [ 169.146441][ T78] team0 (unregistering): Port device team_slave_0 removed [ 169.247005][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.272513][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.282395][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.287962][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.290283][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.296752][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.299346][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.334820][T17514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.425036][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 169.619645][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.721988][T17996] pim6reg: entered allmulticast mode [ 169.731928][T17996] pim6reg: left allmulticast mode [ 169.751638][ T62] Bluetooth: hci1: command tx timeout [ 169.822446][T17514] veth0_vlan: entered promiscuous mode [ 169.828924][T17514] veth1_vlan: entered promiscuous mode [ 169.848780][T17514] veth0_macvtap: entered promiscuous mode [ 169.855084][T17514] veth1_macvtap: entered promiscuous mode [ 169.878646][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.885082][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.891068][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.894737][T18027] netlink: 'syz.1.4969': attribute type 1 has an invalid length. [ 169.896770][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.897630][T18027] netlink: 'syz.1.4969': attribute type 3 has an invalid length. [ 169.907029][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.911952][T18027] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4969'. [ 169.932653][T18027] NCSI netlink: No device for ifindex 813332851 [ 169.934969][ T100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.960481][ T78] IPVS: stop unused estimator thread 0... [ 169.967216][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.976394][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.006329][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.009544][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.064890][T18057] pim6reg: entered allmulticast mode [ 170.079699][T18057] pim6reg: left allmulticast mode [ 170.310265][T18116] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 170.679093][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'. [ 170.719018][T18204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.156960][T18250] netlink: 810 bytes leftover after parsing attributes in process `syz.1.5046'. [ 171.222505][T18259] vlan2: entered allmulticast mode [ 171.224597][T18259] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 171.360796][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.513652][ T5811] kernel write not supported for file /uinput (pid: 5811 comm: kworker/1:2) [ 171.558470][T18307] usb usb8: usbfs: process 18307 (syz.1.5065) did not claim interface 0 before use [ 171.830965][ T62] Bluetooth: hci1: command tx timeout [ 172.236124][T18417] usb usb8: usbfs: process 18417 (syz.4.5103) did not claim interface 0 before use [ 172.266011][T18422] netlink: 'syz.4.5105': attribute type 4 has an invalid length. [ 172.269663][T18422] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5105'. [ 172.309197][T18427] [U] V3Fپ"S/4:XTZWTLW= [ 172.313871][T18427] [U] J"E:" [ 172.399160][ T40] audit: type=1326 audit(2000000061.179:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.410022][ T40] audit: type=1326 audit(2000000061.179:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.417639][ T40] audit: type=1326 audit(2000000061.179:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.424646][ T40] audit: type=1326 audit(2000000061.179:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.431644][ T40] audit: type=1326 audit(2000000061.179:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.440535][ T40] audit: type=1326 audit(2000000061.189:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.447938][ T40] audit: type=1326 audit(2000000061.189:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.454843][ T40] audit: type=1326 audit(2000000061.189:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.1.5114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 172.557383][T18461] [U]  [ 172.705288][T18492] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5135'. [ 172.870197][T18527] tipc: Started in network mode [ 172.872080][T18527] tipc: Node identity ac14142f, cluster identity 4711 [ 172.875525][T18527] tipc: New replicast peer: 0.0.0.0 [ 172.877699][T18527] tipc: Enabled bearer , priority 5 [ 172.926566][T18538] netlink: 'syz.1.5150': attribute type 4 has an invalid length. [ 172.929938][T18538] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5150'. [ 172.991809][T18545] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.047248][T18556] ip6gretap0: entered promiscuous mode [ 173.090425][T18568] team0: entered allmulticast mode [ 173.093166][T18568] team_slave_0: entered allmulticast mode [ 173.095203][T18568] team_slave_1: entered allmulticast mode [ 173.097252][T18568] vlan0: entered allmulticast mode [ 173.098909][T18568] veth0_vlan: entered allmulticast mode [ 173.187205][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5170'. [ 173.731868][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5183'. [ 173.800923][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5189'. [ 173.803790][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5189'. [ 173.902019][ T5819] tipc: Node number set to 2886997039 [ 173.910924][ T62] Bluetooth: hci1: command tx timeout [ 173.934639][T18654] netlink: 'syz.0.5199': attribute type 16 has an invalid length. [ 173.937368][T18654] netlink: 'syz.0.5199': attribute type 17 has an invalid length. [ 173.954162][T18655] loop8: detected capacity change from 0 to 7 [ 173.959231][T18655] loop8: [POWERTEC] [ 173.977192][T18654] vlan2: left allmulticast mode [ 173.979020][T18654] bond0: left allmulticast mode [ 173.981249][T18654] bond_slave_0: left allmulticast mode [ 173.983309][T18654] @0: left allmulticast mode [ 173.985824][T18654] veth3: left promiscuous mode [ 174.058947][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5204'. [ 174.059508][T18676] loop9: detected capacity change from 0 to 8 [ 174.062367][T18675] block nbd3: Unsupported socket: should be TCP or UNIX. [ 174.069757][T18676] Dev loop9: unable to read RDB block 8 [ 174.074002][T18676] loop9: unable to read partition table [ 174.076304][T18676] loop9: partition table beyond EOD, truncated [ 174.078752][T18676] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 174.213039][T18707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.215665][ T5495] team_slave_0: entered promiscuous mode [ 174.218168][ T5495] team_slave_1: entered promiscuous mode [ 174.301323][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.305489][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.330852][ T5495] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.341028][ T5495] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.570930][ T5495] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.836419][ T5819] kernel read not supported for file /dsp1 (pid: 5819 comm: kworker/2:3) [ 174.882672][T18747] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5225'. [ 175.193278][ T5839] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 175.260829][ T5495] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 175.350881][ T5839] usb 8-1: Using ep0 maxpacket: 8 [ 175.355055][ T5839] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.358540][ T5839] usb 8-1: config 0 has no interface number 0 [ 175.361371][ T5839] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.365920][ T5839] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.369666][ T5839] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.373120][ T5839] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.377443][ T5839] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.380590][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.386182][ T5839] usb 8-1: config 0 descriptor?? [ 175.397325][ T5839] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.412386][ T5495] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.415007][ T5495] usb 5-1: config 0 has no interface number 0 [ 175.417020][ T5495] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.420474][ T5495] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 175.424802][ T5495] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.428612][ T5495] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 175.433516][ T5495] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 175.436949][ T5495] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.442120][ T5495] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.445801][ T5495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.450078][ T5495] usb 5-1: config 0 descriptor?? [ 175.453095][T18766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.455586][T18766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.461506][ T5495] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 175.606872][ T5819] usb 8-1: USB disconnect, device number 16 [ 175.612701][ T5819] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 175.664035][ T29] usb 5-1: USB disconnect, device number 14 [ 175.674077][ T29] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 176.000872][ T62] Bluetooth: hci1: command tx timeout [ 176.145001][T18812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5236'. [ 176.149762][T18812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5236'. [ 176.260075][T18838] netem: change failed [ 176.292758][T18843] input: syz1 as /devices/virtual/input/input24 [ 176.746119][T18936] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 177.041487][ T5819] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 177.190812][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 177.194463][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.198328][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.202309][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.206313][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.211153][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.216945][ T5819] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.220544][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.225298][ T5819] usb 5-1: config 0 descriptor?? [ 177.279576][T18983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.284019][T18983] block device autoloading is deprecated and will be removed. [ 177.444908][ T5819] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.801935][T19011] kvm: kvm [19010]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 178.070864][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.116544][T19036] __nla_validate_parse: 4 callbacks suppressed [ 178.116555][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5292'. [ 179.812802][ T5495] usb 5-1: USB disconnect, device number 15 [ 179.827997][ T5495] usblp0: removed [ 179.862649][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5322'. [ 180.305256][T19178] input: syz1 as /devices/virtual/input/input25 [ 180.604857][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5350'. [ 180.670786][ T34] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 180.832516][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.835388][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.838589][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.842998][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 180.846474][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 180.852544][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.856132][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.858691][ T34] usb 5-1: Product: syz [ 180.860039][ T34] usb 5-1: Manufacturer: syz [ 180.865686][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 180.867375][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 180.869854][T19273] kvm: kvm [19271]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 180.870356][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 180.875856][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 181.078293][ T5819] usb 5-1: USB disconnect, device number 16 [ 181.230798][ T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 181.382036][ T39] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.385596][ T39] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.388745][ T39] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.391976][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.398490][T19284] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.402646][ T39] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.613077][ T39] usb 6-1: USB disconnect, device number 12 [ 181.808174][T19346] kvm: kvm [19342]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 182.210779][ T10] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 182.382740][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.385461][ T10] usb 9-1: config 0 has no interface number 0 [ 182.387527][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.391655][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 182.395030][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.398720][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 182.403335][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 182.406707][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.410858][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.413743][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.417580][ T10] usb 9-1: config 0 descriptor?? [ 182.419722][T19354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.422202][T19354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.427931][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.436915][T19401] netlink: 'syz.1.5379': attribute type 5 has an invalid length. [ 182.541005][ T5839] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 182.631962][T19354] ldusb 9-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 182.636382][ T5826] usb 9-1: USB disconnect, device number 2 [ 182.643023][ T5826] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 182.690877][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 182.694923][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.698117][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.701512][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.704704][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.709073][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.714018][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.923707][ T5839] usb 5-1: GET_CAPABILITIES returned 0 [ 182.925467][ T5839] usbtmc 5-1:16.0: can't read capabilities [ 183.126133][ T10] usb 5-1: USB disconnect, device number 17 [ 183.218499][ T39] kernel write not supported for file /uinput (pid: 39 comm: kworker/2:1) [ 183.494769][T19508] SQUASHFS error: Failed to read block 0x0: -5 [ 183.545135][ T40] audit: type=1326 audit(2000000072.329:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.552774][ T40] audit: type=1326 audit(2000000072.329:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.559291][ T40] audit: type=1326 audit(2000000072.329:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.565984][ T40] audit: type=1326 audit(2000000072.329:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.576075][ T40] audit: type=1326 audit(2000000072.329:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.583578][ T40] audit: type=1326 audit(2000000072.329:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 183.592660][ T40] audit: type=1326 audit(2000000072.329:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 183.600452][ T40] audit: type=1326 audit(2000000072.329:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 183.607557][ T40] audit: type=1326 audit(2000000072.329:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 183.614316][ T40] audit: type=1326 audit(2000000072.329:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.1.5413" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 183.936219][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5435'. [ 183.937889][T19562] kvm: kvm [19561]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 183.943259][T19565] hsr_slave_0: left promiscuous mode [ 183.947961][T19565] hsr_slave_1: left promiscuous mode [ 185.173549][T19630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5448'. [ 185.176426][T19630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5448'. [ 185.504133][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5461'. [ 185.507011][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5461'. [ 185.509821][T19667] netlink: 'syz.3.5461': attribute type 13 has an invalid length. [ 185.513760][T19667] netlink: 'syz.3.5461': attribute type 11 has an invalid length. [ 185.967055][T19693] tipc: Enabling of bearer rejected, already enabled [ 185.990798][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.047701][T19702] sctp: [Deprecated]: syz.4.5473 (pid 19702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.047701][T19702] Use struct sctp_sack_info instead [ 186.320937][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 186.490779][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 186.493801][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.497124][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.500651][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.503814][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.507469][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.512595][ T29] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.515582][ T29] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.518149][ T29] usb 9-1: Manufacturer: syz [ 186.520937][ T29] usb 9-1: config 0 descriptor?? [ 186.650754][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.770838][ T29] rc_core: IR keymap rc-hauppauge not found [ 186.772835][ T29] Registered IR keymap rc-empty [ 186.774572][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.790821][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.812765][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 186.819045][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 186.820780][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 186.828386][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.828766][ T9] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 186.833798][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.836408][ T9] usb 5-1: Product: syz [ 186.837834][ T9] usb 5-1: Manufacturer: syz [ 186.839358][ T9] usb 5-1: SerialNumber: syz [ 186.851240][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.870851][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.891046][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.910913][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.932268][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.950983][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.971203][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 186.990802][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 187.010858][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 187.032286][ T29] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 187.035233][ T29] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 187.040987][ T29] usb 9-1: USB disconnect, device number 3 [ 187.049283][ T9] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 187.056629][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.061251][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 187.064288][ T9] usb 5-1: media controller created [ 187.070901][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.164893][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5483'. [ 187.168194][T19764] hsr_slave_0: left promiscuous mode [ 187.170512][T19764] hsr_slave_1: left promiscuous mode [ 187.291943][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 187.307677][ T9] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 187.312614][ T9] usb 5-1: USB disconnect, device number 18 [ 187.430991][ T5748] Bluetooth: hci4: command 0xfc11 tx timeout [ 187.434508][ T62] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 187.940982][ T39] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 188.113303][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 188.119941][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.121772][T19855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5508'. [ 188.123516][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.125954][T19855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5508'. [ 188.129179][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.129193][ T39] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.129205][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.143499][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.148859][ T39] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.160827][ T39] usb 8-1: Manufacturer: syz [ 188.166416][ T39] usb 8-1: config 0 descriptor?? [ 188.208227][T19868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5512'. [ 188.420801][ T39] rc_core: IR keymap rc-hauppauge not found [ 188.423097][ T39] Registered IR keymap rc-empty [ 188.425844][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.440836][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.461738][ T39] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 188.467768][ T39] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input27 [ 188.474033][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.490901][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.512130][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.540875][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.563556][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.582351][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.600875][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.621065][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.651194][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.670832][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 188.697133][ T39] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.700123][ T39] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 188.705239][ T39] usb 8-1: USB disconnect, device number 17 [ 188.929052][ T62] Bluetooth: hci1: Malformed Event: 0x2f [ 189.148634][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5547'. [ 189.519451][T20049] syz_tun: entered allmulticast mode [ 189.525716][T20049] syz_tun: left allmulticast mode [ 189.612057][T20057] sg_write: process 2743 (syz.1.5573) changed security contexts after opening file descriptor, this is not allowed. [ 189.710759][ T39] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.720203][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5579'. [ 189.781509][T20080] syz.3.5581 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.860767][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 189.869429][ T39] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 189.876649][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.879240][ T39] usb 5-1: Product: syz [ 189.880586][ T39] usb 5-1: Manufacturer: syz [ 189.882540][ T39] usb 5-1: SerialNumber: syz [ 189.990439][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 189.990454][ T40] audit: type=1326 audit(2000000334.770:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 190.002507][ T40] audit: type=1326 audit(2000000334.770:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.009510][ T40] audit: type=1326 audit(2000000334.770:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.017193][ T40] audit: type=1326 audit(2000000334.770:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.024359][ T40] audit: type=1326 audit(2000000334.770:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.032609][ T40] audit: type=1326 audit(2000000334.770:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 190.040955][ T40] audit: type=1326 audit(2000000334.780:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.047603][ T40] audit: type=1326 audit(2000000334.780:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.054919][ T40] audit: type=1326 audit(2000000334.780:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.061529][ T40] audit: type=1326 audit(2000000334.780:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.1.5589" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 190.098213][ T39] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 190.105507][ T39] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.108955][ T39] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 190.111832][ T39] usb 5-1: media controller created [ 190.118292][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.303226][ T39] zl10353_read_register: readreg error (reg=127, ret==-71) [ 190.320710][ T39] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 190.325440][ T39] usb 5-1: USB disconnect, device number 19 [ 190.420068][T20151] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 190.940460][T20188] bond1 (unregistering): Released all slaves [ 190.940464][T20196] kvm: kvm [20195]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 191.039799][T20266] input: syz0 as /devices/virtual/input/input28 [ 191.095710][T20279] o2cb: This node has not been configured. [ 191.099081][T20279] o2cb: Cluster check failed. Fix errors before retrying. [ 191.102008][T20279] (syz.0.5619,20279,3):user_dlm_register:674 ERROR: status = -22 [ 191.105077][T20279] (syz.0.5619,20279,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 191.132888][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5621'. [ 191.166891][T20291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5624'. [ 191.546952][T20330] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 191.550845][T20330] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 191.555184][T20330] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 191.749983][T20357] netlink: 'syz.3.5646': attribute type 1 has an invalid length. [ 191.752687][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5646'. [ 191.807428][T20365] netlink: 'syz.4.5649': attribute type 4 has an invalid length. [ 191.809925][T20365] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5649'. [ 192.034805][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5659'. [ 192.048348][T20397] overlay: filesystem on ./file0 is read-only [ 192.249961][T20425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5671'. [ 192.255935][T20425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5671'. [ 192.640815][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.792601][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.797059][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.802358][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.807804][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 192.811527][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 192.816279][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.819143][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.824764][ T9] usb 5-1: Product: syz [ 192.826126][ T9] usb 5-1: Manufacturer: syz [ 192.835997][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 192.838339][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 192.843909][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 192.846143][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 193.042762][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.045001][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.047186][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.049893][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.052729][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.055296][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.057961][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.060613][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.063232][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.065860][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.068450][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.070626][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.073174][ T5811] usb 5-1: USB disconnect, device number 20 [ 193.075565][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 193.075577][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 193.075585][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 193.441522][T20542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5704'. [ 193.639216][T20559] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 193.646667][ T1156] Bluetooth: hci4: Frame reassembly failed (-84) [ 194.677038][T20672] __nla_validate_parse: 6 callbacks suppressed [ 194.677049][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5754'. [ 195.267146][T20707] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5764'. [ 195.672429][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 195.693917][T20743] nfs: Deprecated parameter 'nointr' [ 195.700396][T20743] nfs: Unknown parameter 'fscontext' [ 195.946939][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 195.946970][ T40] audit: type=1326 audit(2000000340.730:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20769 comm="syz.4.5788" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefcc code=0x0 [ 196.070192][T20777] loop6: detected capacity change from 0 to 2640 [ 196.073326][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.075841][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.078398][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.080966][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.083856][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.086915][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.089580][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.096552][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.099274][T20777] ldm_validate_partition_table(): Disk read failed. [ 196.102099][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.105094][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.107757][T20777] Dev loop6: unable to read RDB block 0 [ 196.110306][T20777] loop6: unable to read partition table [ 196.116264][T20777] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 196.172195][T20777] loop6: detected capacity change from 2640 to 524288000 [ 196.241200][ T9] hid_parser_main: 96 callbacks suppressed [ 196.241213][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.245489][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.247854][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.250195][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.252971][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.255631][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.258316][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.261653][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.264584][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.267545][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.281698][ T9] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 196.281698][ T9] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 196.318815][T20794] fido_id[20794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.703729][T20841] can0: slcan on pty20. [ 196.811190][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5810'. [ 196.812723][T20832] can0 (unregistered): slcan off pty20. [ 197.090749][ T5826] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 197.252686][ T5826] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 197.255855][ T5826] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.259411][ T5826] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.262612][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.265673][ T5826] usb 6-1: Product: syz [ 197.267068][ T5826] usb 6-1: Manufacturer: syz [ 197.268475][ T5826] usb 6-1: SerialNumber: syz [ 197.274482][ T5826] usb 6-1: config 0 descriptor?? [ 197.276540][T20871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.281096][ T5826] usb 6-1: selecting invalid altsetting 0 [ 197.491106][ T5826] usb 6-1: USB disconnect, device number 13 [ 198.179990][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5842'. [ 198.229554][ T5811] hid-generic 0003:0004:FFFFFFFE.000B: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 198.792291][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.927340][T21094] bpf: Bad value for 'uid' [ 199.260308][T21122] input: syz0 as /devices/virtual/input/input29 [ 199.300083][T21128] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 199.525574][T21150] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.5894'. [ 199.528825][T21150] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 199.707545][T21170] sctp: [Deprecated]: syz.4.5900 (pid 21170) Use of int in max_burst socket option. [ 199.707545][T21170] Use struct sctp_assoc_value instead [ 199.892991][T21198] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5911'. [ 199.940622][T21203] openvswitch: netlink: IP tunnel dst address not specified [ 199.984652][T21212] input: syz1 as /devices/virtual/input/input30 [ 200.466457][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'. [ 201.131182][T21271] block nbd3: server does not support multiple connections per device. [ 201.138225][T21271] block nbd3: shutting down sockets [ 201.351009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.405899][T21326] evm: overlay not supported [ 201.635456][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'. [ 202.461131][ T39] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 202.610803][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 202.613690][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.616902][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.620253][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.623616][ T39] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 202.627132][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.634734][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.637612][ T39] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.640110][ T39] usb 8-1: Manufacturer: syz [ 202.643919][ T39] usb 8-1: config 0 descriptor?? [ 202.870762][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 202.890875][ T39] rc_core: IR keymap rc-hauppauge not found [ 202.893455][ T39] Registered IR keymap rc-empty [ 202.895940][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 202.910911][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 202.942445][ T39] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 202.948723][ T39] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input31 [ 202.955873][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 202.980945][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.000914][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.021443][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.021995][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.027139][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.030287][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.033414][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.036818][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.040989][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.041364][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.046797][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.049304][ T10] usb 6-1: Product: syz [ 203.051196][ T10] usb 6-1: Manufacturer: syz [ 203.055364][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 203.057049][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 203.061506][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.063409][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 203.067116][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 203.094443][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.111220][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.130757][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.150752][ T39] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 203.181952][ T39] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.185396][ T39] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.192820][ T39] usb 8-1: USB disconnect, device number 18 [ 203.379610][T21486] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 203.421751][ T10] usb 6-1: USB disconnect, device number 14 [ 203.978474][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6009'. [ 204.009176][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6013'. [ 204.166453][T21563] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 204.301895][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'. [ 204.304776][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6027'. [ 204.307835][T21579] netlink: 'syz.3.6027': attribute type 20 has an invalid length. [ 204.652110][T21623] tun0: tun_chr_ioctl cmd 1074025675 [ 204.653862][T21623] tun0: persist disabled [ 205.078676][T21679] Invalid ELF header magic: != ELF [ 205.380749][ T5819] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 205.532258][ T5819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.536150][ T5819] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.540028][ T5819] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.546990][ T5819] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 205.550508][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 205.553834][ T5819] usb 9-1: Product: syz [ 205.555643][ T5819] usb 9-1: Manufacturer: syz [ 205.557614][ T5819] usb 9-1: SerialNumber: syz [ 205.775500][ T5819] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 205.980529][ T10] usb 9-1: USB disconnect, device number 4 [ 205.989296][ T10] usblp0: removed [ 206.422717][T21749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6082'. [ 206.574805][ T40] audit: type=1326 audit(2000000351.360:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.583416][ T40] audit: type=1326 audit(2000000351.360:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.591511][ T40] audit: type=1326 audit(2000000351.370:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.598363][ T40] audit: type=1326 audit(2000000351.370:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.605418][ T40] audit: type=1326 audit(2000000351.370:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.612445][ T40] audit: type=1326 audit(2000000351.380:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.619630][ T40] audit: type=1326 audit(2000000351.380:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.640759][ T40] audit: type=1326 audit(2000000351.380:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.4.6095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 206.914172][T21811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6108'. [ 207.382529][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.459799][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.531705][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.607119][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.744122][ T46] bridge_slave_1: left allmulticast mode [ 207.746033][ T46] bridge_slave_1: left promiscuous mode [ 207.747973][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.755637][ T46] bridge_slave_0: left allmulticast mode [ 207.757625][ T46] bridge_slave_0: left promiscuous mode [ 207.759565][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.907388][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.925662][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.930189][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.936871][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.939424][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.190109][ T29] kernel write not supported for file /input/event2 (pid: 29 comm: kworker/1:0) [ 208.201805][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.210299][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.219527][ T46] bond0 (unregistering): Released all slaves [ 208.264519][T21911] netlink: 'syz.0.6136': attribute type 1 has an invalid length. [ 208.267250][T21911] netlink: 'syz.0.6136': attribute type 2 has an invalid length. [ 208.269742][T21911] netlink: 'syz.0.6136': attribute type 2 has an invalid length. [ 208.272373][T21911] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6136'. [ 208.310247][ T46] tipc: Left network mode [ 208.407415][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 208.658724][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 208.667381][T21865] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.670155][T21865] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.673266][T21865] bridge_slave_0: entered allmulticast mode [ 208.676656][T21865] bridge_slave_0: entered promiscuous mode [ 208.682637][T21865] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.684901][T21865] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.691077][T21865] bridge_slave_1: entered allmulticast mode [ 208.695044][T21865] bridge_slave_1: entered promiscuous mode [ 208.726295][T21865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.737298][T21865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.755812][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.758110][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.762367][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.764781][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.848579][ T46] veth1_macvtap: left promiscuous mode [ 208.850355][ T46] veth0_macvtap: left promiscuous mode [ 208.853089][ T46] veth1_vlan: left promiscuous mode [ 208.944507][ T46] team0 (unregistering): Port device vlan0 removed [ 208.986667][ T46] team0 (unregistering): Port device team_slave_1 removed [ 208.999176][ T46] team0 (unregistering): Port device team_slave_0 removed [ 209.088164][T21865] team0: Port device team_slave_0 added [ 209.098668][T21865] team0: Port device team_slave_1 added [ 209.133017][T21865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.140726][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.154083][T21865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.158435][T21865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.160816][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.168860][T21865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.216259][T21865] hsr_slave_0: entered promiscuous mode [ 209.218523][T21865] hsr_slave_1: entered promiscuous mode [ 209.221148][T21865] debugfs: 'hsr0' already exists in 'hsr' [ 209.223012][T21865] Cannot create hsr debugfs directory [ 209.264288][ T5811] Process accounting resumed [ 209.334302][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6165'. [ 209.339197][T22235] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6165'. [ 209.353955][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 209.510800][ T5826] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 209.515171][ T46] IPVS: stop unused estimator thread 0... [ 209.683099][ T5826] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.687176][ T5826] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.692258][ T5826] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 209.695162][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.697663][ T5826] usb 6-1: Product: syz [ 209.699199][ T5826] usb 6-1: Manufacturer: syz [ 209.704013][ T5826] usb 6-1: SerialNumber: syz [ 209.708314][ T5826] usb 6-1: config 0 descriptor?? [ 209.925069][ T5826] usb 6-1: USB disconnect, device number 15 [ 209.991240][ T5748] Bluetooth: hci3: command tx timeout [ 210.013117][T21865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.017301][T21865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.020156][T21865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.024324][T21865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.027743][T21865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.032183][T21865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.034988][T21865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.038903][T21865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.088121][T21865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.098201][T21865] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.104569][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.107383][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.116674][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.119515][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.253068][T22381] Falling back ldisc for ttyS3. [ 210.354643][T21865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.382996][T21865] veth0_vlan: entered promiscuous mode [ 210.388949][T21865] veth1_vlan: entered promiscuous mode [ 210.412301][T21865] veth0_macvtap: entered promiscuous mode [ 210.416184][T21865] veth1_macvtap: entered promiscuous mode [ 210.424913][T21865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.432256][T21865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.437919][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.442285][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.446280][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.450407][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.557561][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.560770][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.575855][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.578336][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.041739][T22482] 9p: Invalid gid '0x00000000ffffffff' [ 211.100621][T22491] kvm: user requested TSC rate below hardware speed [ 211.126295][T22497] netem: change failed [ 211.237785][T22511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6215'. [ 211.380118][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'. [ 211.483632][ T8051] kernel write not supported for file /uinput (pid: 8051 comm: kworker/0:5) [ 211.545160][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6228'. [ 211.554394][T22549] netlink: 'syz.3.6229': attribute type 1 has an invalid length. [ 211.556883][T22549] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6229'. [ 211.559921][T22549] netlink: 'syz.3.6229': attribute type 1 has an invalid length. [ 211.562794][T22549] netlink: 'syz.3.6229': attribute type 8 has an invalid length. [ 211.565708][T22549] netlink: 582 bytes leftover after parsing attributes in process `syz.3.6229'. [ 211.568809][T22549] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6229'. [ 211.588616][T22552] netlink: 'syz.4.6230': attribute type 11 has an invalid length. [ 211.591345][T22552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6230'. [ 211.672029][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 211.672659][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 212.080780][ T62] Bluetooth: hci3: command tx timeout [ 212.221845][T22597] Falling back ldisc for ttyS3. [ 212.520776][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 212.680796][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 212.683609][ T34] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.686381][ T34] usb 6-1: config 0 has no interface number 0 [ 212.688339][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.691820][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.695466][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.698979][ T34] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.703174][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.706085][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.709875][ T34] usb 6-1: config 0 descriptor?? [ 212.714508][ T34] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.989333][ T29] usb 6-1: USB disconnect, device number 16 [ 212.994893][ T29] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 213.546447][ T40] audit: type=1800 audit(2000000358.330:313): pid=22682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6271" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 214.122664][T22754] nr0: tun_chr_ioctl cmd 21731 [ 214.140784][ T5811] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 214.150996][ T62] Bluetooth: hci3: command tx timeout [ 214.169842][T22762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6295'. [ 214.291265][ T5811] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 214.294947][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.298260][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.301927][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.304948][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.307938][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.311667][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.314552][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.317550][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.321615][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.325439][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.328419][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.332179][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.335175][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.338139][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.341895][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.344890][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.347907][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.351750][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.354849][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.357856][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.361790][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.364775][ T5811] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.367744][ T5811] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.371566][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.375913][ T5811] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 214.379002][ T5811] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 214.381988][ T5811] usb 9-1: Product: syz [ 214.383428][ T5811] usb 9-1: Manufacturer: syz [ 214.385105][ T5811] usb 9-1: SerialNumber: syz [ 214.388482][ T5811] usb 9-1: config 0 descriptor?? [ 214.398426][ T5811] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 215.150089][T22796] ubi16: attaching mtd0 [ 215.152599][T22796] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 215.427050][T22828] netlink: 'syz.1.6319': attribute type 10 has an invalid length. [ 215.440418][T22828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.443790][T22828] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 215.455964][T22828] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6319'. [ 215.470960][T22828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.477061][T22828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.483228][T22828] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 215.487710][T22828] bond0 (unregistering): Released all slaves [ 216.230850][ T62] Bluetooth: hci3: command tx timeout [ 216.483819][T22848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6327'. [ 216.633141][ C1] usb 9-1: yurex_control_callback - control failed: -2 [ 216.636636][ C1] usb 9-1: yurex_control_callback - control failed: -32 [ 216.639891][ T8051] usb 9-1: USB disconnect, device number 5 [ 216.645842][ T8051] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 217.502554][ T40] audit: type=1804 audit(2000000362.290:314): pid=22896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6342" name="/newroot/35/file0/file0" dev="9p" ino=72637563 res=1 errno=0 [ 217.535891][T22904] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6344'. [ 217.538803][T22904] openvswitch: netlink: Message has 5 unknown bytes. [ 217.555708][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6347'. [ 217.861430][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6369'. [ 217.864378][T22959] vivid-007: disconnect [ 217.865975][T22959] vivid-007: reconnect [ 218.954299][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6391'. [ 218.959704][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6391'. [ 220.171072][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 220.331240][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 220.335741][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.339457][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.343596][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.346850][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.351581][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.361442][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.380647][T23112] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6419'. [ 220.384521][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6420'. [ 220.509743][T23131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6427'. [ 220.534693][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6429'. [ 220.578734][ T39] usb 6-1: GET_CAPABILITIES returned 0 [ 220.580510][ T39] usbtmc 6-1:16.0: can't read capabilities [ 220.738477][T23158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6436'. [ 220.785682][ T9] usb 6-1: USB disconnect, device number 17 [ 221.455656][T23255] netlink: 'syz.4.6458': attribute type 12 has an invalid length. [ 221.458666][T23255] netlink: 'syz.4.6458': attribute type 29 has an invalid length. [ 221.598102][T23277] tipc: Started in network mode [ 221.599992][T23277] tipc: Node identity ac1414aa, cluster identity 4711 [ 221.601901][T23279] netlink: 'syz.3.6466': attribute type 1 has an invalid length. [ 221.603301][T23277] tipc: Enabled bearer , priority 5 [ 221.607265][T23279] netlink: 'syz.3.6466': attribute type 2 has an invalid length. [ 221.613411][T23279] netlink: 'syz.3.6466': attribute type 1 has an invalid length. [ 221.616060][T23279] netlink: 'syz.3.6466': attribute type 2 has an invalid length. [ 221.880842][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 222.031754][ T9] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 222.041525][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.044400][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.047812][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.050661][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.053848][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.057302][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.060084][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.063127][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.066496][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.069287][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.072362][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.075713][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.078539][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.081662][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.085099][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.087919][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.090990][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.094396][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.097292][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.100149][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.103801][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.106842][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.109724][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.113385][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.117026][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 222.119946][ T9] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 222.122738][ T9] usb 9-1: Product: syz [ 222.124034][ T9] usb 9-1: Manufacturer: syz [ 222.125530][ T9] usb 9-1: SerialNumber: syz [ 222.128654][ T9] usb 9-1: config 0 descriptor?? [ 222.133632][ T9] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 222.192701][ T40] audit: type=1326 audit(2000000366.980:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.199279][ T40] audit: type=1326 audit(2000000366.980:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.205939][ T40] audit: type=1326 audit(2000000366.980:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.212839][ T40] audit: type=1326 audit(2000000366.980:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.219472][ T40] audit: type=1326 audit(2000000366.980:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.226297][ T40] audit: type=1326 audit(2000000366.980:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.233034][ T40] audit: type=1326 audit(2000000366.980:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 222.239658][ T40] audit: type=1326 audit(2000000366.980:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.246333][ T40] audit: type=1326 audit(2000000366.980:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.253549][ T40] audit: type=1326 audit(2000000366.980:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23365 comm="syz.0.6487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 222.351507][ T9] usb 9-1: USB disconnect, device number 6 [ 222.370477][ T9] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 222.491321][T23386] tmpfs: Cannot retroactively limit size [ 222.608810][T23395] __nla_validate_parse: 7 callbacks suppressed [ 222.608822][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6496'. [ 222.615591][T23395] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6496'. [ 222.618796][T23395] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6496'. [ 222.720750][ T9] tipc: Node number set to 2886997162 [ 223.140804][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 223.300812][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 223.305591][ T9] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 223.308665][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.311636][ T9] usb 9-1: Product: syz [ 223.313076][ T9] usb 9-1: Manufacturer: syz [ 223.314646][ T9] usb 9-1: SerialNumber: syz [ 223.523221][ T9] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 223.530263][ T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.534582][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 223.537366][ T9] usb 9-1: media controller created [ 223.544028][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.578142][T23473] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 223.747398][ T5741] Bluetooth: hci4: sending frame failed (-49) [ 223.750588][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 223.763651][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 223.781365][ T9] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 223.786081][ T9] usb 9-1: USB disconnect, device number 7 [ 223.899192][T23501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6523'. [ 224.443098][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 224.918920][T23575] vxcan1: tx address claim with dest, not broadcast [ 225.029630][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6544'. [ 225.033115][T23581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6544'. [ 225.064001][T23583] Failed to get privilege flags for destination (handle=0x2:0x0) [ 225.550745][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 225.720805][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 225.725758][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 225.730531][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 225.736598][ T34] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.739915][ T34] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.743715][ T34] usb 9-1: Product: syz [ 225.745542][ T34] usb 9-1: Manufacturer: syz [ 225.747562][ T34] usb 9-1: SerialNumber: syz [ 225.750835][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 225.756741][ T34] usb 9-1: config 0 descriptor?? [ 225.758849][T23604] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 225.967951][ T5819] usb 9-1: USB disconnect, device number 8 [ 226.241091][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6579'. [ 226.279825][T23679] batman_adv: batadv0: Adding interface: vlan4 [ 226.282674][T23679] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.292311][T23679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.296121][T23679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.300038][T23679] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 226.447136][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6588'. [ 226.726556][T23732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6604'. [ 226.773877][T23742] misc userio: Can't change port type on an already running userio instance [ 226.879836][T23740] Set syz1 is full, maxelem 6117 reached [ 227.298297][T23792] batadv0: entered promiscuous mode [ 227.301179][T23792] batadv0: left promiscuous mode [ 227.471430][T23881] can0: slcan on ttyS3. [ 227.572652][T23881] can0 (unregistered): slcan off ttyS3. [ 227.629660][T23907] __nla_validate_parse: 3 callbacks suppressed [ 227.629676][T23907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6649'. [ 227.732503][T23917] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 227.767543][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6644'. [ 228.220891][ T5951] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.372492][ T5951] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.377298][ T5951] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.381708][ T5951] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.385587][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.393415][T23953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.399893][ T5951] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.635920][ T5951] usb 5-1: USB disconnect, device number 21 [ 228.753661][ T46] tipc: Subscription rejected, illegal request [ 229.321619][T24089] can0: slcan on ttyS3. [ 229.394694][T24089] can0 (unregistered): slcan off ttyS3. [ 229.623313][T24137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6700'. [ 229.943342][T24179] loop4: detected capacity change from 0 to 7 [ 229.947411][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.950250][ C2] buffer_io_error: 11 callbacks suppressed [ 229.950258][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.956930][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.959931][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.959936][T24172] Set syz1 is full, maxelem 6117 reached [ 229.963934][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.968141][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.971515][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.974441][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.977248][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.980156][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.983120][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.987032][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.990502][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.994339][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.997802][T24179] ldm_validate_partition_table(): Disk read failed. [ 230.000028][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.002961][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 230.006071][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.009106][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 230.012157][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.015051][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 230.017692][T24179] Dev loop4: unable to read RDB block 0 [ 230.019863][T24179] loop4: unable to read partition table [ 230.022049][T24179] loop4: partition table beyond EOD, truncated [ 230.024059][T24179] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 230.339451][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6730'. [ 230.374551][T24226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6731'. [ 230.377779][T24226] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6731'. [ 230.419345][T24231] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.665674][T24243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6736'. [ 231.063368][T24280] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6749'. [ 231.106028][T24286] loop4: detected capacity change from 0 to 7 [ 231.120029][T24286] ldm_validate_partition_table(): Disk read failed. [ 231.123745][T24286] Dev loop4: unable to read RDB block 0 [ 231.125943][T24286] loop4: unable to read partition table [ 231.127825][T24286] loop4: partition table beyond EOD, truncated [ 231.132561][T24286] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 231.430819][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.496962][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'. [ 231.500422][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'. [ 231.643200][T24340] geneve2: entered promiscuous mode [ 232.054796][T24350] netlink: 'syz.1.6782': attribute type 1 has an invalid length. [ 232.057327][T24350] netlink: 'syz.1.6782': attribute type 2 has an invalid length. [ 232.059781][T24350] netlink: 'syz.1.6782': attribute type 1 has an invalid length. [ 232.062891][T24350] netlink: 'syz.1.6782': attribute type 3 has an invalid length. [ 232.266868][T24362] Bluetooth: MGMT ver 1.23 [ 232.457937][T24376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.461563][T24376] IPv6: NLM_F_CREATE should be set when creating new route [ 232.463893][T24376] IPv6: NLM_F_CREATE should be set when creating new route [ 232.467228][T24376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.923582][T24417] can0: slcan on ttyS3. [ 233.031194][T24417] can0 (unregistered): slcan off ttyS3. [ 233.343464][T24469] input: syz1 as /devices/virtual/input/input35 [ 233.346686][T24469] input: failed to attach handler leds to device input35, error: -6 [ 233.396200][T24477] loop5: detected capacity change from 0 to 7 [ 233.562319][T24477] Dev loop5: unable to read RDB block 7 [ 233.564170][T24477] loop5: unable to read partition table [ 233.566148][T24477] loop5: partition table beyond EOD, truncated [ 233.568148][T24477] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 233.660015][T24515] __nla_validate_parse: 2 callbacks suppressed [ 233.660027][T24515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6826'. [ 233.871718][T24544] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.6832'. [ 233.881380][T24548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6833'. [ 233.966091][T24559] hugetlbfs: syz.0.6838 (24559): Using mlock ulimits for SHM_HUGETLB is obsolete [ 234.368198][T24590] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 234.779624][T24626] netlink: 'syz.1.6857': attribute type 1 has an invalid length. [ 234.832947][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6860'. [ 234.862485][T24643] binder: 24640:24643 ioctl c0306201 80000640 returned -22 [ 234.951843][T24661] vivid-000: disconnect [ 234.956655][T24644] vivid-000: reconnect [ 235.325876][T24755] sctp: [Deprecated]: syz.4.6879 (pid 24755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.325876][T24755] Use struct sctp_sack_info instead [ 235.617908][T24848] program syz.0.6890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.277664][T24912] sctp: [Deprecated]: syz.0.6914 (pid 24912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.277664][T24912] Use struct sctp_sack_info instead [ 236.310384][T24918] netlink: 'syz.1.6916': attribute type 12 has an invalid length. [ 236.314079][T24918] netlink: 'syz.1.6916': attribute type 29 has an invalid length. [ 236.317231][T24918] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6916'. [ 236.320928][T24918] netlink: 'syz.1.6916': attribute type 1 has an invalid length. [ 236.324051][T24918] netlink: 'syz.1.6916': attribute type 2 has an invalid length. [ 237.160536][T25035] tipc: Enabling of bearer rejected, failed to enable media [ 237.460744][ T5839] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 237.630805][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 237.634245][ T5839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.638241][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.641831][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.645824][ T5839] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.650597][ T5839] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.654300][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.863063][ T5839] usb 6-1: GET_CAPABILITIES returned 0 [ 237.865274][ T5839] usbtmc 6-1:16.0: can't read capabilities [ 238.069898][ T5839] usb 6-1: USB disconnect, device number 18 [ 238.463334][T25099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 238.465510][T25099] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.468497][T25099] vhci_hcd vhci_hcd.0: Device attached [ 238.472368][T25100] vhci_hcd: connection closed [ 238.475649][ T1156] vhci_hcd vhci_hcd.4: stop threads [ 238.479002][ T1156] vhci_hcd vhci_hcd.4: release socket [ 238.481939][ T1156] vhci_hcd vhci_hcd.4: disconnect device [ 238.762027][T25126] syz_tun: entered allmulticast mode [ 238.765748][T25125] syz_tun: left allmulticast mode [ 238.847084][T25131] gfs2: path_lookup on  returned error -2 [ 239.636650][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7002'. [ 239.743573][T25198] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 240.120915][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 240.272833][ T29] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 240.276066][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7033'. [ 240.279562][ T29] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 240.282641][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.287305][ T29] usb 5-1: Product: syz [ 240.288536][ T29] usb 5-1: Manufacturer: syz [ 240.291804][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7033'. [ 240.292051][ T29] usb 5-1: SerialNumber: syz [ 240.302524][T25181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.305224][T25181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.316522][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 240.319823][T25398] netlink: 'syz.3.7035': attribute type 30 has an invalid length. [ 240.333354][ T1156] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.336119][ T1156] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.337502][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 240.339026][ T1156] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.341858][T25398] netlink: 'syz.3.7035': attribute type 30 has an invalid length. [ 240.345019][ T1156] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.513710][ T29] usb 5-1: USB disconnect, device number 22 [ 240.879175][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.883737][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.886833][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.973729][T25469] infiniband syz2: set down [ 240.974618][ T34] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.975870][T25469] infiniband syz2: added ip6_vti0 [ 240.992910][T25469] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 240.998331][T25469] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 241.003775][T25469] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 241.022265][T25469] RDS/IB: syz2: added [ 241.027425][T25469] smc: adding ib device syz2 with port count 1 [ 241.029552][T25469] smc: ib device syz2 port 1 has no pnetid [ 241.036897][ T34] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.054820][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.146441][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.229821][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.234452][T25496] binder: 25495:25496 ioctl c0306201 80000480 returned -22 [ 241.312126][T25469] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.453677][T25512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7067'. [ 242.030222][T25567] loop4: detected capacity change from 0 to 7 [ 242.039570][ C1] blk_print_req_error: 31 callbacks suppressed [ 242.039581][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.046146][ C1] buffer_io_error: 30 callbacks suppressed [ 242.046157][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.052144][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.055736][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.058966][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.062488][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.065658][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.069151][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.072566][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.076074][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.079273][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.082225][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.085811][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.088751][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.091316][T25567] ldm_validate_partition_table(): Disk read failed. [ 242.095053][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.098948][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.102504][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.106341][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.109914][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.113822][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 242.116810][T25567] Dev loop4: unable to read RDB block 0 [ 242.119209][T25567] loop4: unable to read partition table [ 242.121239][T25567] loop4: partition table beyond EOD, truncated [ 242.123250][T25567] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 242.551972][ T62] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 242.557558][ T62] Bluetooth: hci1: Injecting HCI hardware error event [ 242.562107][ T5748] Bluetooth: hci1: hardware error 0x00 [ 243.093839][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7118'. [ 243.359491][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7124'. [ 243.561794][T25671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.564560][T25671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.585039][T25671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.656092][T25684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.807660][ T5951] hid_parser_main: 9 callbacks suppressed [ 243.807727][ T5951] hid-generic 0000:0000:0002.000C: unknown main item tag 0x0 [ 243.812499][ T5951] hid-generic 0000:0000:0002.000C: unknown main item tag 0x0 [ 243.816271][ T5951] hid-generic 0000:0000:0002.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 243.854274][T25711] fido_id[25711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.633986][ T5748] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 244.798015][T25732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7142'. [ 245.260770][ T5881] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 245.410927][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 245.421942][ T5881] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 245.424747][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 245.428545][ T5881] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 245.432151][ T5881] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 245.436492][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.440566][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 245.444448][ T5881] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 245.447982][ T5881] usb 5-1: Product: syz [ 245.449509][ T5881] usb 5-1: Manufacturer: syz [ 245.451268][ T5881] usb 5-1: SerialNumber: syz [ 245.455596][ T5881] usb 5-1: config 0 descriptor?? [ 245.459929][ T5881] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.464785][ T5881] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.590849][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 245.662422][ T5881] usb 5-1: USB disconnect, device number 23 [ 245.666973][ T5881] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 246.065128][T25836] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.749307][T25847] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.752903][T25847] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.806362][T25847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.812737][T25847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.904171][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.906983][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.909850][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.912723][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.915601][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.918404][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.921537][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.924369][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.044385][T25874] overlayfs: invalid origin (0000) [ 247.152650][T25889] dummy0: entered allmulticast mode [ 247.159606][T25888] dummy0: left allmulticast mode [ 247.270979][T25905] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 247.409423][T25936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'. [ 247.567742][T25945] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 247.670759][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 247.717722][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7219'. [ 247.723681][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7219'. [ 248.179215][T26015] overlayfs: invalid origin (0000) [ 248.310765][ T100] wlan1: Trigger new scan to find an IBSS to join [ 249.236928][T26044] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 249.285394][T26056] batadv0: entered promiscuous mode [ 249.287940][T26056] veth0_to_bridge: entered promiscuous mode [ 249.290577][T26056] debugfs: 'hsr0' already exists in 'hsr' [ 249.292885][T26056] Cannot create hsr debugfs directory [ 249.299001][T26056] hsr0: entered allmulticast mode [ 249.300631][T26056] batadv0: entered allmulticast mode [ 249.302759][T26056] veth0_to_bridge: entered allmulticast mode [ 249.700350][T26113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7276'. [ 249.725361][T26115] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.728992][T26115] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.761114][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 249.822582][T26115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.829274][T26115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.957677][ T1156] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.966927][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.969858][ T1156] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.973859][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.976763][ T1156] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.979586][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.983121][ T1156] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.986283][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.099364][T26145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.103447][T26145] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.108091][T26145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.124874][T26145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.128493][T26145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.133940][T26145] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 250.142071][ T5811] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.143675][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.144074][ T5811] syz2: Port: 1 Link ACTIVE [ 250.147101][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.152003][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.154343][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.171476][ T5811] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.260786][ T53] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 250.432263][ T53] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.435724][ T53] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.438766][ T53] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.441896][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.446565][T26135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.450907][ T53] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.518858][T26179] netem: change failed [ 250.696015][T26127] usb 6-1: USB disconnect, device number 19 [ 251.049908][T26251] netem: incorrect gi model size [ 251.052392][T26251] netem: change failed [ 251.265159][T26276] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.267691][T26276] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.281042][ T13] wlan1: Trigger new scan to find an IBSS to join [ 251.335360][T26276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.342355][T26276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.420418][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.423493][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.426342][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.429226][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.490767][T26127] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 251.564967][T26297] netlink: 'syz.4.7326': attribute type 9 has an invalid length. [ 251.567454][T26297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7326'. [ 251.573758][T26297] macvlan1: entered promiscuous mode [ 251.575602][T26297] hsr0: entered promiscuous mode [ 251.577335][T26297] macvlan1: entered allmulticast mode [ 251.579082][T26297] hsr0: entered allmulticast mode [ 251.580766][T26297] hsr_slave_0: entered allmulticast mode [ 251.582629][T26297] hsr_slave_1: entered allmulticast mode [ 251.651953][T26127] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 251.654562][T26127] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.657593][T26127] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.661168][T26127] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.664100][T26127] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.666677][T26127] usb 6-1: Product: syz [ 251.667998][T26127] usb 6-1: Manufacturer: syz [ 251.669590][T26127] usb 6-1: SerialNumber: syz [ 251.675503][T26127] usb 6-1: config 0 descriptor?? [ 251.678404][T26127] hub 6-1:0.0: bad descriptor, ignoring hub [ 251.680613][T26127] hub 6-1:0.0: probe with driver hub failed with error -5 [ 251.684465][T26127] usb 6-1: selecting invalid altsetting 0 [ 252.296230][T26274] usb 6-1: reset high-speed USB device number 20 using dummy_hcd [ 252.446102][ T53] kernel read not supported for file /adsp1 (pid: 53 comm: kworker/1:1) [ 252.455143][T26274] usb 6-1: device firmware changed [ 252.458984][ T5811] usb 6-1: USB disconnect, device number 20 [ 252.581787][T26393] tmpfs: Cannot change global quota limit on remount [ 252.621244][ T5811] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 252.772057][ T5811] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 252.775654][ T5811] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 252.779125][ T5811] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.783866][ T5811] usb 6-1: string descriptor 0 read error: -22 [ 252.785899][ T5811] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.788849][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 252.802390][ T5811] usb 6-1: config 0 descriptor?? [ 252.805273][ T5811] hub 6-1:0.0: bad descriptor, ignoring hub [ 252.807249][ T5811] hub 6-1:0.0: probe with driver hub failed with error -5 [ 252.808770][T26417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7357'. [ 252.816121][T26417] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7357'. [ 252.819460][ T5811] usb 6-1: selecting invalid altsetting 0 [ 252.858166][T26428] netlink: 'syz.0.7358': attribute type 9 has an invalid length. [ 252.860852][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'. [ 252.869340][T26428] macvlan3: entered promiscuous mode [ 252.871948][T26428] hsr0: entered promiscuous mode [ 252.873877][T26428] macvlan3: entered allmulticast mode [ 253.110990][ T5840] usb 6-1: USB disconnect, device number 21 [ 253.511939][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7374'. [ 253.523598][T26491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7375'. [ 253.887081][T26520] team_slave_0: left promiscuous mode [ 253.895160][T26520] team_slave_1: left promiscuous mode [ 253.968939][T26520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.979647][T26520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.111958][ T1157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.117924][ T1157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.121454][ T1157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.124394][T26549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7394'. [ 254.128056][T26549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7394'. [ 254.133822][T26549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7394'. [ 254.138262][T26549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7394'. [ 254.142562][ T1157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.230582][T26565] overlayfs: upper fs does not support file handles, falling back to index=off. [ 254.234069][T26565] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 254.660188][ T39] kernel write not supported for file /uinput (pid: 39 comm: kworker/2:1) [ 255.400945][T26124] kernel read not supported for file /dsp1 (pid: 26124 comm: kworker/0:7) [ 255.563201][T26680] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 256.430784][ T39] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 256.586127][ T39] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.591972][ T39] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.595468][ T39] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.599213][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.606606][T26718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.611848][ T39] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.856120][T26124] usb 9-1: USB disconnect, device number 9 [ 257.304104][T26782] loop5: detected capacity change from 0 to 7 [ 257.436208][T26782] Dev loop5: unable to read RDB block 7 [ 257.438082][T26782] loop5: unable to read partition table [ 257.449307][T26782] loop5: partition table beyond EOD, truncated [ 257.453932][T26782] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 257.598040][T26124] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 257.600577][T26124] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 257.605535][T26124] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 258.009420][T26868] __nla_validate_parse: 2 callbacks suppressed [ 258.009431][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7487'. [ 258.315265][T26912] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.395969][T26929] veth0_vlan: left promiscuous mode [ 258.398208][T26929] veth0_vlan: entered promiscuous mode [ 258.403397][T26929] team0: Device veth0_vlan failed to register rx_handler [ 258.543205][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 258.543216][ T40] audit: type=1326 audit(2000000403.330:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.565921][ T40] audit: type=1326 audit(2000000403.330:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.580952][ T40] audit: type=1326 audit(2000000403.340:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.591119][ T40] audit: type=1326 audit(2000000403.340:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.598117][ T40] audit: type=1326 audit(2000000403.340:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.600789][ T5840] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 258.604945][ T40] audit: type=1326 audit(2000000403.340:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.614228][ T40] audit: type=1326 audit(2000000403.340:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.621295][ T40] audit: type=1326 audit(2000000403.340:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.627966][ T40] audit: type=1326 audit(2000000403.340:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.634799][ T40] audit: type=1326 audit(2000000403.340:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26963 comm="syz.1.7507" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 258.736229][T26975] bond0: entered promiscuous mode [ 258.782405][ T5840] usb 5-1: config 0 has no interfaces? [ 258.784673][ T5840] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.788236][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.804064][ T5840] usb 5-1: config 0 descriptor?? [ 258.815321][T27016] sctp: [Deprecated]: syz.1.7513 (pid 27016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.815321][T27016] Use struct sctp_sack_info instead [ 259.058512][T26127] usb 5-1: USB disconnect, device number 24 [ 259.067064][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7523'. [ 259.134065][T26124] kernel read not supported for file /swradio7 (pid: 26124 comm: kworker/0:7) [ 259.323603][T27084] team0: Device veth0_vlan is already a lower device of the team interface [ 259.357254][T27086] bond1: invalid ARP target 0.0.0.0 specified for addition [ 259.359667][T27086] bond1: option arp_ip_target: invalid value (0) [ 259.363199][T27086] bond1 (unregistering): Released all slaves [ 259.374444][T27130] netlink: 'syz.1.7537': attribute type 21 has an invalid length. [ 259.377125][T27130] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7537'. [ 259.380920][T27130] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7537'. [ 259.820755][T26127] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 259.993789][T26127] usb 5-1: Using ep0 maxpacket: 8 [ 260.004784][T26127] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 260.008814][T26127] usb 5-1: config 0 has no interface number 0 [ 260.010839][T26127] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.021112][T26127] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 260.024516][T26127] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 260.028220][T26127] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 260.035467][ T841] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 260.041159][T26127] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.062264][T26127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 260.067454][T26127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.076901][T26127] usb 5-1: Product: syz [ 260.078290][T26127] usb 5-1: Manufacturer: syz [ 260.079840][T26127] usb 5-1: SerialNumber: syz [ 260.082904][T26127] usb 5-1: config 0 descriptor?? [ 260.220812][ T841] usb 9-1: Using ep0 maxpacket: 8 [ 260.225941][ T841] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 260.228647][ T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.232017][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.237736][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.241512][ T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.243784][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.246254][ T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.251115][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.296494][T26127] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 260.470797][ T841] usb 9-1: GET_CAPABILITIES returned 0 [ 260.472600][ T841] usbtmc 9-1:16.0: can't read capabilities [ 260.503845][T26124] usb 5-1: USB disconnect, device number 25 [ 260.671921][ T5840] usb 9-1: USB disconnect, device number 10 [ 260.681201][T27225] nbd3: detected capacity change from 0 to 63 [ 260.696455][ T5748] block nbd3: Receive control failed (result -104) [ 260.699358][ T5741] block nbd3: Receive control failed (result -32) [ 261.423430][T27328] loop2: detected capacity change from 0 to 7 [ 261.435984][T27328] Dev loop2: unable to read RDB block 7 [ 261.437814][T27328] loop2: unable to read partition table [ 261.446486][T27328] loop2: partition table beyond EOD, truncated [ 261.452961][T27328] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 261.675663][T27368] input: syz0 as /devices/virtual/input/input38 [ 262.326576][T27413] netlink: 'syz.1.7623': attribute type 6 has an invalid length. [ 262.493590][T27425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.528776][T27430] [ 262.529615][T27430] ====================================================== [ 262.532034][T27430] WARNING: possible circular locking dependency detected [ 262.534259][T27430] syzkaller #0 Tainted: G L [ 262.536416][T27430] ------------------------------------------------------ [ 262.538675][T27430] syz.0.7631/27430 is trying to acquire lock: [ 262.540619][T27430] ffffffff8e9b0880 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 262.543699][T27430] [ 262.543699][T27430] but task is already holding lock: [ 262.546055][T27430] ffffffff8e849610 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x49da/0x7ed0 [ 262.549208][T27430] [ 262.549208][T27430] which lock already depends on the new lock. [ 262.549208][T27430] [ 262.552546][T27430] [ 262.552546][T27430] the existing dependency chain (in reverse order) is: [ 262.555443][T27430] [ 262.555443][T27430] -> #8 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 262.558108][T27430] percpu_down_write+0x53/0x3e0 [ 262.559841][T27430] cgroup_procs_write_start+0x568/0x890 [ 262.561801][T27430] __cgroup_procs_write+0xd7/0x730 [ 262.563642][T27430] cgroup_procs_write+0x26/0x60 [ 262.565373][T27430] cgroup_file_write+0x1e6/0x8a0 [ 262.567103][T27430] kernfs_fop_write_iter+0x3e0/0x5f0 [ 262.569039][T27430] vfs_write+0x6ac/0x1070 [ 262.570634][T27430] ksys_write+0x12a/0x250 [ 262.572207][T27430] do_int80_emulation+0x141/0x700 [ 262.573987][T27430] asm_int80_emulation+0x1a/0x20 [ 262.575778][T27430] [ 262.575778][T27430] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 262.578221][T27430] cpus_read_lock+0x42/0x170 [ 262.579901][T27430] static_key_slow_inc+0x12/0x30 [ 262.581792][T27430] tcp_md5_do_add+0x296/0x430 [ 262.583541][T27430] tcp_v6_parse_md5_keys+0x4e0/0x860 [ 262.585435][T27430] do_tcp_setsockopt+0x1a6f/0x2b40 [ 262.587263][T27430] tcp_setsockopt+0xe2/0x100 [ 262.588925][T27430] do_sock_setsockopt+0xf3/0x1d0 [ 262.590698][T27430] __sys_setsockopt+0x119/0x190 [ 262.592439][T27430] __ia32_sys_setsockopt+0xbc/0x160 [ 262.594286][T27430] __do_fast_syscall_32+0xe7/0x950 [ 262.596131][T27430] do_fast_syscall_32+0x32/0x70 [ 262.597862][T27430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.600066][T27430] [ 262.600066][T27430] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 262.602633][T27430] lock_sock_nested+0x41/0xf0 [ 262.604306][T27430] inet_shutdown+0x67/0x410 [ 262.605950][T27430] nbd_mark_nsock_dead+0xae/0x5c0 [ 262.607764][T27430] sock_shutdown+0x16b/0x200 [ 262.609425][T27430] nbd_config_put+0x1eb/0x750 [ 262.611112][T27430] nbd_genl_connect+0xaf8/0x1a40 [ 262.612865][T27430] genl_family_rcv_msg_doit+0x214/0x300 [ 262.614826][T27430] genl_rcv_msg+0x560/0x800 [ 262.616457][T27430] netlink_rcv_skb+0x159/0x420 [ 262.618168][T27430] genl_rcv+0x28/0x40 [ 262.619641][T27430] netlink_unicast+0x585/0x850 [ 262.621338][T27430] netlink_sendmsg+0x8b0/0xda0 [ 262.623068][T27430] ____sys_sendmsg+0x9e1/0xb70 [ 262.624768][T27430] ___sys_sendmsg+0x190/0x1e0 [ 262.626466][T27430] __sys_sendmsg+0x170/0x220 [ 262.628127][T27430] __do_fast_syscall_32+0xe7/0x950 [ 262.629943][T27430] do_fast_syscall_32+0x32/0x70 [ 262.631677][T27430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.633844][T27430] [ 262.633844][T27430] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 262.636287][T27430] __mutex_lock+0x1a4/0x1b10 [ 262.637944][T27430] nbd_queue_rq+0x428/0x1080 [ 262.639624][T27430] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 262.641571][T27430] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 262.643785][T27430] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 262.645841][T27430] blk_mq_run_hw_queue+0x23c/0x670 [ 262.647643][T27430] blk_mq_dispatch_list+0x51d/0x1360 [ 262.649535][T27430] blk_mq_flush_plug_list+0x130/0x600 [ 262.651435][T27430] __blk_flush_plug+0x2c4/0x4b0 [ 262.653157][T27430] __submit_bio+0x584/0x6c0 [ 262.654769][T27430] submit_bio_noacct_nocheck+0x543/0xbf0 [ 262.656725][T27430] submit_bio_noacct+0xd18/0x2000 [ 262.658482][T27430] submit_bh_wbc+0x681/0x890 [ 262.660115][T27430] block_read_full_folio+0x264/0x8e0 [ 262.661992][T27430] filemap_read_folio+0xfc/0x3b0 [ 262.663794][T27430] do_read_cache_folio+0x2d7/0x6b0 [ 262.665612][T27430] read_part_sector+0xd1/0x370 [ 262.667352][T27430] adfspart_check_ICS+0x91/0x7d0 [ 262.669103][T27430] bdev_disk_changed+0x7a3/0x1250 [ 262.670888][T27430] blkdev_get_whole+0x187/0x290 [ 262.672617][T27430] bdev_open+0x2c7/0xe40 [ 262.674166][T27430] blkdev_open+0x34e/0x4f0 [ 262.675758][T27430] do_dentry_open+0x6d8/0x1660 [ 262.677422][T27430] vfs_open+0x82/0x3f0 [ 262.678918][T27430] path_openat+0x208c/0x31a0 [ 262.680546][T27430] do_file_open+0x20e/0x430 [ 262.682128][T27430] do_sys_openat2+0x10d/0x1e0 [ 262.683782][T27430] __x64_sys_openat+0x12d/0x210 [ 262.685553][T27430] do_syscall_64+0x10b/0xf80 [ 262.687183][T27430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.689183][T27430] [ 262.689183][T27430] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 262.691476][T27430] __mutex_lock+0x1a4/0x1b10 [ 262.693070][T27430] nbd_queue_rq+0xba/0x1080 [ 262.694680][T27430] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 262.696609][T27430] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 262.698706][T27430] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 262.700730][T27430] blk_mq_run_hw_queue+0x23c/0x670 [ 262.702490][T27430] blk_mq_dispatch_list+0x51d/0x1360 [ 262.704324][T27430] blk_mq_flush_plug_list+0x130/0x600 [ 262.706186][T27430] __blk_flush_plug+0x2c4/0x4b0 [ 262.707856][T27430] __submit_bio+0x584/0x6c0 [ 262.709452][T27430] submit_bio_noacct_nocheck+0x543/0xbf0 [ 262.711356][T27430] submit_bio_noacct+0xd18/0x2000 [ 262.713074][T27430] submit_bh_wbc+0x681/0x890 [ 262.714704][T27430] block_read_full_folio+0x264/0x8e0 [ 262.716519][T27430] filemap_read_folio+0xfc/0x3b0 [ 262.718243][T27430] do_read_cache_folio+0x2d7/0x6b0 [ 262.719993][T27430] read_part_sector+0xd1/0x370 [ 262.721663][T27430] adfspart_check_ICS+0x91/0x7d0 [ 262.723380][T27430] bdev_disk_changed+0x7a3/0x1250 [ 262.725095][T27430] blkdev_get_whole+0x187/0x290 [ 262.726776][T27430] bdev_open+0x2c7/0xe40 [ 262.728281][T27430] blkdev_open+0x34e/0x4f0 [ 262.729883][T27430] do_dentry_open+0x6d8/0x1660 [ 262.731564][T27430] vfs_open+0x82/0x3f0 [ 262.733027][T27430] path_openat+0x208c/0x31a0 [ 262.734662][T27430] do_file_open+0x20e/0x430 [ 262.736279][T27430] do_sys_openat2+0x10d/0x1e0 [ 262.737910][T27430] __x64_sys_openat+0x12d/0x210 [ 262.739645][T27430] do_syscall_64+0x10b/0xf80 [ 262.741277][T27430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.743359][T27430] [ 262.743359][T27430] -> #3 (set->srcu){.+.+}-{0:0}: [ 262.745629][T27430] __synchronize_srcu+0xa2/0x300 [ 262.747358][T27430] blk_mq_quiesce_queue+0x149/0x1c0 [ 262.749149][T27430] elevator_switch+0x17b/0x7e0 [ 262.750853][T27430] elevator_change+0x352/0x530 [ 262.752514][T27430] elevator_set_default+0x29e/0x360 [ 262.754298][T27430] blk_register_queue+0x48e/0x630 [ 262.756043][T27430] __add_disk+0x73f/0xe40 [ 262.757592][T27430] add_disk_fwnode+0x118/0x5c0 [ 262.759337][T27430] nbd_dev_add+0x77a/0xb10 [ 262.760932][T27430] nbd_init+0x291/0x2b0 [ 262.762444][T27430] do_one_initcall+0x121/0x750 [ 262.764090][T27430] kernel_init_freeable+0x6ea/0x7b0 [ 262.765872][T27430] kernel_init+0x1f/0x1e0 [ 262.767460][T27430] ret_from_fork+0x72b/0xd50 [ 262.769098][T27430] ret_from_fork_asm+0x1a/0x30 [ 262.770766][T27430] [ 262.770766][T27430] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 262.773186][T27430] __mutex_lock+0x1a4/0x1b10 [ 262.774818][T27430] elevator_change+0x1bc/0x530 [ 262.776498][T27430] elevator_set_none+0x92/0xf0 [ 262.778168][T27430] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 262.780160][T27430] nbd_start_device+0x1a6/0xbd0 [ 262.781850][T27430] nbd_genl_connect+0xff2/0x1a40 [ 262.783565][T27430] genl_family_rcv_msg_doit+0x214/0x300 [ 262.785506][T27430] genl_rcv_msg+0x560/0x800 [ 262.787127][T27430] netlink_rcv_skb+0x159/0x420 [ 262.788818][T27430] genl_rcv+0x28/0x40 [ 262.790267][T27430] netlink_unicast+0x585/0x850 [ 262.791947][T27430] netlink_sendmsg+0x8b0/0xda0 [ 262.793609][T27430] ____sys_sendmsg+0x9e1/0xb70 [ 262.795380][T27430] ___sys_sendmsg+0x190/0x1e0 [ 262.797043][T27430] __sys_sendmsg+0x170/0x220 [ 262.798676][T27430] __do_fast_syscall_32+0xe7/0x950 [ 262.800450][T27430] do_fast_syscall_32+0x32/0x70 [ 262.802155][T27430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.804272][T27430] [ 262.804272][T27430] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 262.806962][T27430] blk_alloc_queue+0x610/0x790 [ 262.808636][T27430] blk_mq_alloc_queue+0x174/0x290 [ 262.810353][T27430] __blk_mq_alloc_disk+0x29/0x120 [ 262.812091][T27430] nbd_dev_add+0x492/0xb10 [ 262.813663][T27430] nbd_init+0x291/0x2b0 [ 262.815155][T27430] do_one_initcall+0x121/0x750 [ 262.816807][T27430] kernel_init_freeable+0x6ea/0x7b0 [ 262.818601][T27430] kernel_init+0x1f/0x1e0 [ 262.820160][T27430] ret_from_fork+0x72b/0xd50 [ 262.821763][T27430] ret_from_fork_asm+0x1a/0x30 [ 262.823425][T27430] [ 262.823425][T27430] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 262.825704][T27430] __lock_acquire+0x14b8/0x2630 [ 262.827400][T27430] lock_acquire+0x1b1/0x370 [ 262.828998][T27430] fs_reclaim_acquire+0xc4/0x100 [ 262.830722][T27430] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 262.832681][T27430] alloc_inode+0x183/0x250 [ 262.834239][T27430] iget_locked+0x1d9/0x6d0 [ 262.835821][T27430] kernfs_get_inode+0x46/0x470 [ 262.837477][T27430] cgroup_may_write+0x89/0x120 [ 262.839137][T27430] cgroup_can_fork+0xb89/0x1390 [ 262.840828][T27430] copy_process+0x49da/0x7ed0 [ 262.842514][T27430] kernel_clone+0x12e/0x9c0 [ 262.844120][T27430] __do_sys_clone3+0x214/0x290 [ 262.845793][T27430] __do_fast_syscall_32+0xe7/0x950 [ 262.847561][T27430] do_fast_syscall_32+0x32/0x70 [ 262.849276][T27430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.851422][T27430] [ 262.851422][T27430] other info that might help us debug this: [ 262.851422][T27430] [ 262.854574][T27430] Chain exists of: [ 262.854574][T27430] fs_reclaim --> cpu_hotplug_lock --> cgroup_threadgroup_rwsem [ 262.854574][T27430] [ 262.858688][T27430] Possible unsafe locking scenario: [ 262.858688][T27430] [ 262.860953][T27430] CPU0 CPU1 [ 262.862581][T27430] ---- ---- [ 262.864214][T27430] rlock(cgroup_threadgroup_rwsem); [ 262.865813][T27430] lock(cpu_hotplug_lock); [ 262.867938][T27430] lock(cgroup_threadgroup_rwsem); [ 262.870328][T27430] lock(fs_reclaim); [ 262.871580][T27430] [ 262.871580][T27430] *** DEADLOCK *** [ 262.871580][T27430] [ 262.874033][T27430] 2 locks held by syz.0.7631/27430: [ 262.875681][T27430] #0: ffffffff8e8498a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_can_fork+0x88f/0x1390 [ 262.878590][T27430] #1: ffffffff8e849610 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x49da/0x7ed0 [ 262.881727][T27430] [ 262.881727][T27430] stack backtrace: [ 262.883558][T27430] CPU: 1 UID: 0 PID: 27430 Comm: syz.0.7631 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.883574][T27430] Tainted: [L]=SOFTLOCKUP [ 262.883578][T27430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.883584][T27430] Call Trace: [ 262.883589][T27430] [ 262.883593][T27430] dump_stack_lvl+0x100/0x190 [ 262.883606][T27430] print_circular_bug.cold+0x178/0x1c7 [ 262.883624][T27430] check_noncircular+0x146/0x160 [ 262.883643][T27430] __lock_acquire+0x14b8/0x2630 [ 262.883655][T27430] lock_acquire+0x1b1/0x370 [ 262.883664][T27430] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 262.883684][T27430] fs_reclaim_acquire+0xc4/0x100 [ 262.883697][T27430] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 262.883715][T27430] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 262.883732][T27430] ? alloc_inode+0x183/0x250 [ 262.883748][T27430] ? find_inode_fast+0x1fa/0x910 [ 262.883765][T27430] alloc_inode+0x183/0x250 [ 262.883782][T27430] iget_locked+0x1d9/0x6d0 [ 262.883791][T27430] ? __pfx_iget_locked+0x10/0x10 [ 262.883800][T27430] ? find_held_lock+0x2b/0x80 [ 262.883813][T27430] ? css_tryget_online_from_dir+0x279/0x8e0 [ 262.883830][T27430] ? css_tryget_online_from_dir+0x279/0x8e0 [ 262.883847][T27430] kernfs_get_inode+0x46/0x470 [ 262.883859][T27430] cgroup_may_write+0x89/0x120 [ 262.883871][T27430] cgroup_can_fork+0xb89/0x1390 [ 262.883889][T27430] copy_process+0x49da/0x7ed0 [ 262.883903][T27430] ? futex_unqueue+0x133/0x2c0 [ 262.883916][T27430] ? __pfx_copy_process+0x10/0x10 [ 262.883932][T27430] ? _copy_from_user+0x59/0xd0 [ 262.883943][T27430] kernel_clone+0x12e/0x9c0 [ 262.883961][T27430] ? __pfx_kernel_clone+0x10/0x10 [ 262.883982][T27430] ? __pfx_futex_wait+0x10/0x10 [ 262.884004][T27430] __do_sys_clone3+0x214/0x290 [ 262.884024][T27430] ? __pfx___do_sys_clone3+0x10/0x10 [ 262.884054][T27430] ? rcu_is_watching+0x12/0xc0 [ 262.884070][T27430] __do_fast_syscall_32+0xe7/0x950 [ 262.884088][T27430] do_fast_syscall_32+0x32/0x70 [ 262.884105][T27430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.884118][T27430] RIP: 0023:0xf708efcc [ 262.884127][T27430] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 262.884137][T27430] RSP: 002b:00000000f547d3dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 262.884148][T27430] RAX: ffffffffffffffda RBX: 00000000f547d410 RCX: 0000000000000058 [ 262.884155][T27430] RDX: 0000000000000000 RSI: 0000000000a40080 RDI: 0000000000000002 [ 262.884161][T27430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.884167][T27430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.884173][T27430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.884182][T27430]