last executing test programs: 3m8.066993255s ago: executing program 2 (id=546): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, r1, 0x4}}, 0x18) 3m7.990074709s ago: executing program 2 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000005800)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x880) 3m7.936693989s ago: executing program 2 (id=560): r0 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0) poll(&(0x7f0000000280)=[{r0, 0x480}], 0x1, 0xf0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 3m7.597532342s ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 3m7.537448119s ago: executing program 2 (id=568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x27b6068e) 3m7.239913287s ago: executing program 2 (id=577): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0xfffd) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0f8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) 3m7.102094222s ago: executing program 32 (id=577): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0xfffd) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0f8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) 3.033288425s ago: executing program 4 (id=5439): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401) unshare(0x600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.911298686s ago: executing program 4 (id=5443): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.02980738s ago: executing program 4 (id=5453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000600)=@x86={0x6, 0xc, 0x2, 0x0, 0x9, 0xe, 0x27, 0x4, 0x2, 0x7f, 0x6, 0xa, 0x0, 0x9, 0x8001, 0x52, 0x0, 0x8, 0x4, '\x00', 0x1, 0x2}) 1.787272248s ago: executing program 4 (id=5458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 894.035014ms ago: executing program 4 (id=5468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 642.842426ms ago: executing program 1 (id=5472): r0 = syz_clone(0x0, 0x0, 0x14, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) 517.9311ms ago: executing program 1 (id=5476): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x5, 0x12, 0x7, 0xfffffff2, 0x2, "4d6b5ccb000000000000000000000000000004", 0x104}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000840)) 503.756254ms ago: executing program 0 (id=5477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x8}]}) 445.057282ms ago: executing program 1 (id=5478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 411.969284ms ago: executing program 4 (id=5480): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20}) 330.676707ms ago: executing program 0 (id=5482): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x32, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x3, [0x5]}}, @jumbo={0xc2, 0x4, 0xefb}]}, 0x38) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r1, 0x40, 0x7, &(0x7f0000000040)=""/82, &(0x7f00000000c0)=0x52) 330.127361ms ago: executing program 3 (id=5483): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 243.62565ms ago: executing program 1 (id=5484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf0f5, 0x118000}) 243.1555ms ago: executing program 0 (id=5485): syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 239.572944ms ago: executing program 3 (id=5486): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xb, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 139.152386ms ago: executing program 3 (id=5487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) 138.888119ms ago: executing program 0 (id=5488): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) landlock_restrict_self(r0, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 138.710895ms ago: executing program 3 (id=5489): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x64e, 0x100000, 0x200000, 0x3, 0x9, 0x7fff}) 112.100983ms ago: executing program 1 (id=5490): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340), &(0x7f0000000200)=0x8) 58.454747ms ago: executing program 3 (id=5491): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}}, 0x8040) 58.221735ms ago: executing program 0 (id=5492): r0 = syz_io_uring_setup(0x1d5a, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x10000, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 492.097µs ago: executing program 3 (id=5493): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x404c8c4) 182.203µs ago: executing program 0 (id=5494): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 0s ago: executing program 1 (id=5495): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) kernel console output (not intermixed with test programs): w USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.739011][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.772400][ T29] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 139.390257][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 139.475900][ T6034] libceph: connect (1)[c::]:6789 error -101 [ 139.479524][ T6034] libceph: mon0 (1)[c::]:6789 connect error [ 139.526817][ T5947] Bluetooth: hci1: command 0x0405 tx timeout [ 139.639348][T10216] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.744860][ T29] libceph: connect (1)[c::]:6789 error -101 [ 139.747972][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 140.264973][ T29] libceph: connect (1)[c::]:6789 error -101 [ 140.273133][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 140.296047][T10195] ceph: No mds server is up or the cluster is laggy [ 143.126614][ T6014] usb 9-1: USB disconnect, device number 5 [ 143.370724][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 143.439695][ T5956] Bluetooth: unknown link type 204 [ 143.441930][ T5956] Bluetooth: hci1: connection err: -111 [ 144.194088][ T5956] Bluetooth: unknown link type 204 [ 144.196657][ T5956] Bluetooth: hci3: connection err: -111 [ 144.307283][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.511694][T10507] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2042'. [ 145.644384][T10515] bad cache= option: l [ 145.644384][T10515] [ 145.646951][T10515] CIFS: VFS: bad cache= option: l [ 145.836140][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 145.855802][T10531] bridge0: entered promiscuous mode [ 145.859189][T10531] macsec2: entered promiscuous mode [ 145.862801][T10531] macsec2: entered allmulticast mode [ 145.867301][T10531] bridge0: entered allmulticast mode [ 145.871490][T10531] bridge0: port 3(macsec2) entered blocking state [ 145.875175][T10531] bridge0: port 3(macsec2) entered disabled state [ 145.897874][T10531] bridge0: left allmulticast mode [ 145.900889][T10531] bridge0: left promiscuous mode [ 145.989764][T10541] loop6: detected capacity change from 0 to 524287999 [ 145.994267][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.998468][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.002179][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.008149][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.013069][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.015684][T10543] tipc: Failed to obtain node identity [ 146.018944][T10543] tipc: Enabling of bearer rejected, failed to enable media [ 146.024969][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.030468][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.035696][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.039383][T10541] ldm_validate_partition_table(): Disk read failed. [ 146.043215][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.048706][T10541] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.052316][T10541] Dev loop6: unable to read RDB block 0 [ 146.056064][T10541] loop6: unable to read partition table [ 146.060325][T10541] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 146.252503][ T29] IPVS: starting estimator thread 0... [ 146.364105][T10561] IPVS: using max 23 ests per chain, 55200 per kthread [ 146.839331][T10592] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 147.012221][T10610] program syz.1.2090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.348216][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 147.983514][T10700] pim6reg: entered allmulticast mode [ 148.555741][T10730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.623840][T10737] tipc: Started in network mode [ 148.626305][T10737] tipc: Node identity , cluster identity 4711 [ 149.005972][T10776] sp0: Synchronizing with TNC [ 149.010888][T10776] sp0: Found TNC [ 149.013252][T10774] [U] ` [ 149.683667][ T24] hid_parser_main: 4086 callbacks suppressed [ 149.683688][ T24] hid-generic 000F:FFFFFFFA:0009.0008: unknown main item tag 0x5 [ 149.696295][ T24] hid-generic 000F:FFFFFFFA:0009.0008: hidraw1: HID v0.02 Device [syz0] on syz1 [ 149.763501][T10828] fido_id[10828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.124040][T10784] comedi comedi2: reset error (fatal) [ 150.738634][T10856] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 150.743523][T10856] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 150.937527][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 150.941203][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 150.946746][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 151.054018][ T6034] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 151.202764][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'. [ 151.205125][ T6034] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 151.212754][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.218750][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.223823][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.227129][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.230419][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.239027][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.260786][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.264764][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.269669][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.275058][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.279259][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.284197][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.288940][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.294473][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.300891][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.306335][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.310651][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.316169][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.320304][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.325235][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.331014][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.335047][ T6034] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.339102][ T6034] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.345063][ T6034] usb 9-1: config 0 interface 0 has no altsetting 0 [ 151.350211][ T6034] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.354616][ T6034] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.359647][ T6034] usb 9-1: Product: syz [ 151.361650][ T6034] usb 9-1: Manufacturer: syz [ 151.363598][ T6034] usb 9-1: SerialNumber: syz [ 151.373390][ T6034] usb 9-1: config 0 descriptor?? [ 151.386277][ T6034] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 151.596863][ T6034] usb 9-1: USB disconnect, device number 6 [ 151.602112][ T6034] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 152.352205][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 152.356233][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 152.643414][T10982] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 152.654104][T10982] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 153.274892][T11042] Invalid logical block size (53355) [ 155.721170][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 156.219720][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 156.416657][T11277] xt_socket: unknown flags 0xd0 [ 156.854577][T11306] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 156.864916][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.871267][T11306] batadv0: entered allmulticast mode [ 156.879022][T11306] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 156.959597][T11313] netlink: 'syz.1.2407': attribute type 11 has an invalid length. [ 156.963642][T11313] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.2407'. [ 157.061755][ T13] bond0: (slave batadv0): interface is now down [ 157.066090][ T13] bond0: now running without any active interface! [ 157.491598][T11354] macsec2: entered promiscuous mode [ 157.512650][T11354] macsec2: entered allmulticast mode [ 157.940521][T11390] binder_alloc: binder_alloc_mmap_handler: 11389 80ffd000-81000000 already mapped failed -16 [ 158.147236][T11408] netlink: 'syz.4.2451': attribute type 10 has an invalid length. [ 158.169068][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.183840][T11408] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 158.439051][T11434] Bluetooth: MGMT ver 1.23 [ 158.521301][T11441] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 158.538628][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.574482][T11444] vlan2: entered promiscuous mode [ 158.577099][T11444] bridge0: entered promiscuous mode [ 158.787996][T11458] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 158.792488][T11458] CUSE: unknown device info "ٮ,<_eF" [ 158.796288][T11458] CUSE: unknown device info "3ܟ,̘" [ 158.800058][T11458] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 158.804837][T11458] CUSE: unknown device info " [ 158.804837][T11458] fzXS! [ 158.804837][T11458] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 158.813595][T11458] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 158.822185][T11458] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 158.828717][T11458] CUSE: zero length info key specified [ 159.609240][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2506'. [ 159.746337][T11529] smc: net device wlan0 applied user defined pnetid SYZ0 [ 159.820725][T11538] usb 2-1: USB disconnect, device number 2 [ 159.914478][T11541] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.208549][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'. [ 160.231393][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2531'. [ 160.420507][T11593] tipc: Enabling not permitted [ 160.423101][T11593] tipc: Enabling of bearer rejected, failed to enable media [ 160.484064][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.484237][ T5956] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 160.487517][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 160.839647][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 160.913781][T11640] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 160.942116][T11640] team0: Port device dummy0 added [ 160.957894][T11640] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 160.978139][T11640] team0: Port device dummy0 removed [ 160.980365][T11646] binder: 11645:11646 ioctl c0306201 80000680 returned -14 [ 160.987886][T11640] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.294243][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 161.466156][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.471159][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.481345][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.485149][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.491803][T11658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.497680][T11674] "syz.1.2579" (11674) uses obsolete ecb(arc4) skcipher [ 161.500832][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.520742][T11682] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 161.582896][T11682] team0: Port device netdevsim0 added [ 161.595357][T11685] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 161.624302][T11684] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.677692][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 161.682002][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 161.723030][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2586'. [ 161.777865][ T29] usb 8-1: USB disconnect, device number 4 [ 161.950891][T11707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.100380][T11714] [U]  [ 162.101732][T11714] [U] K{ [ 162.103284][T11714] [U] t 1ŠFfˊ`GJgo/mC [ 162.107418][T11714] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 162.115827][T11714] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 162.120554][T11714] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 162.138130][T11714] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 162.149879][T11714] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 162.155218][T11714] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 162.160431][T11714] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 162.204579][T11714] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 162.208015][T11714] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 162.213868][T11714] [U] 22Ʃx?0;3u [ 162.216364][T11714] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 162.227736][T11714] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 162.231557][T11714] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 162.235017][T11714] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 162.237082][T11714] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 162.248251][T11714] [U] ec [ 162.249427][T11714] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 162.256172][T11713] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 162.305351][T11720] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 162.305351][T11720] program syz.1.2605 not setting count and/or reply_len properly [ 162.624685][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 162.647193][T11744] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 162.652302][T11744] team0: Device ipvlan2 is already an upper device of the team interface [ 162.991624][T11781] syz.0.2627 (11781): /proc/11780/oom_adj is deprecated, please use /proc/11780/oom_score_adj instead. [ 163.127716][T11794] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 163.155156][T11794] team0: Port device dummy0 added [ 163.193596][T11794] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 163.226539][T11794] team0: Port device dummy0 removed [ 163.336650][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 163.842293][T11841] Invalid ELF header magic: != ELF [ 163.997064][T11850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2662'. [ 164.162663][T11855] [U]  [ 164.164005][T11855] [U] K{ [ 164.167696][T11855] [U] t 1ŠFfˊ`GJgo/mC [ 164.171447][T11855] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 164.179826][T11855] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 164.185781][T11855] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 164.202949][T11855] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 164.217742][T11855] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 164.224150][T11855] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 164.229640][T11855] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 164.271743][T11855] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 164.276028][T11855] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 164.283316][T11855] [U] 22Ʃx?0;3u [ 164.286441][T11855] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 164.302378][T11855] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 164.307888][T11855] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 164.315225][T11855] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 164.317831][T11855] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 164.323098][T11855] [U] ec [ 164.324742][T11855] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 164.340308][T11854] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 164.585742][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 164.675996][T11889] [U]  [ 164.677160][T11889] [U] K{ [ 164.678568][T11889] [U] t 1ŠFfˊ`GJgo/mC [ 164.682888][T11889] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 164.693166][T11889] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 164.714183][T11889] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 164.739145][T11889] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 164.750058][T11889] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 164.756077][T11889] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 164.760469][T11889] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 164.804228][T11889] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 164.808775][T11889] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 164.819361][T11889] [U] 22Ʃx?0;3u [ 164.843821][T11889] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 164.860775][T11889] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 164.865127][T11889] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 164.869615][T11889] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 164.872606][T11889] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 164.884284][T11889] [U] ec [ 164.886059][T11889] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 164.901277][T11887] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 164.970442][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 164.970462][ T40] audit: type=1326 audit(1775849089.088:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 164.990525][ T40] audit: type=1326 audit(1775849089.088:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.003824][ T40] audit: type=1326 audit(1775849089.108:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.017058][ T40] audit: type=1326 audit(1775849089.108:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.029736][ T40] audit: type=1326 audit(1775849089.108:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.039783][ T40] audit: type=1326 audit(1775849089.108:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.048891][ T40] audit: type=1326 audit(1775849089.108:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.058703][ T40] audit: type=1326 audit(1775849089.108:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.0.2692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 165.106747][ C1] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 165.112463][ C1] sr 2:0:0:0: [sr0] tag#18 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 166.016705][T11998] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 166.205237][T12011] can0: slcan on ptm0. [ 166.227941][ C0] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 166.232616][ C0] sr 2:0:0:0: [sr0] tag#19 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 166.341197][T12008] can0 (unregistered): slcan off ptm0. [ 166.506991][T12037] sp0: Synchronizing with TNC [ 166.673050][T12048] netlink: 'syz.4.2750': attribute type 21 has an invalid length. [ 166.678400][T12048] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.682145][T12048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.686048][T12048] IPv6: NLM_F_CREATE should be set when creating new route [ 166.689995][T12048] IPv6: NLM_F_CREATE should be set when creating new route [ 166.693444][T12048] IPv6: NLM_F_CREATE should be set when creating new route [ 166.699694][T12048] netlink: 'syz.4.2750': attribute type 21 has an invalid length. [ 166.704320][T12048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.823699][ T40] audit: type=1326 audit(1775849090.938:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.0.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 166.841202][ T40] audit: type=1326 audit(1775849090.938:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.0.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 167.282883][T12104] hub 8-0:1.0: USB hub found [ 167.288218][T12104] hub 8-0:1.0: 1 port detected [ 167.568139][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2793'. [ 167.885045][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 168.049319][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.054569][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.058263][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.062125][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.075516][T12139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.083510][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.092743][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 168.366987][ T53] usb 9-1: USB disconnect, device number 7 [ 169.102827][T12202] sch_fq: defrate 4294967295 ignored. [ 169.268072][T12212] IPVS: ip_vs_edit_dest(): server weight less than zero [ 169.684272][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 169.707980][T12250] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2848'. [ 169.713419][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x200000) [ 170.354072][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 170.354091][ T40] audit: type=1326 audit(1775849094.468:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12286 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7fc00000 [ 170.414926][T12303] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 170.419697][T12303] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 170.423329][T12303] ALSA: mixer_oss: invalid OSS volume 'lg' [ 170.425893][T12303] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 170.433737][T12303] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 170.439055][T12303] ALSA: mixer_oss: invalid OSS volume '' [ 170.442406][T12303] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 170.446791][T12303] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 170.450897][T12303] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 170.457043][T12303] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 170.462057][T12303] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 170.817918][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 170.997411][ T40] audit: type=1326 audit(1775849095.118:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12286 comm="syz.0.2867" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef88 code=0x7fc00000 [ 171.215750][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 171.219083][ T1114] ata1: failed to read log page 10h (errno=-5) [ 171.224089][ T1114] ata1.00: NCQ disabled due to excessive errors [ 171.227343][ T1114] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 171.232820][ T1114] ata1.00: irq_stat 0x41000008 [ 171.235602][ T1114] ata1.00: failed command: READ FPDMA QUEUED [ 171.238635][ T1114] ata1.00: cmd 60/00:f0:36:13:08/10:00:00:00:00/40 tag 30 ncq dma 2097152 in [ 171.238635][ T1114] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 171.248423][ T1114] ata1.00: status: { DRDY } [ 171.250598][ T1114] ata1.00: error: { ABRT } [ 171.253274][ T1114] ata1.00: configured for UDMA/100 [ 171.256398][ T1114] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 171.262271][ T1114] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 171.272745][ T1114] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 171.277381][ T1114] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 08 13 36 00 10 00 00 [ 171.281135][ T1114] I/O error, dev sda, sector 529206 op 0x0:(READ) flags 0x80700 phys_seg 44 prio class 2 [ 171.287253][ T1114] ata1: EH complete [ 171.434929][T12353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2897'. [ 171.627064][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 171.971385][ T40] audit: type=1326 audit(1775849096.088:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.1.2913" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 172.307312][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2924'. [ 172.450525][T12430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2928'. [ 172.752893][T12454] __nla_validate_parse: 1 callbacks suppressed [ 172.752914][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 172.894903][T12467] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 172.899752][T12467] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 172.907126][T12467] ALSA: mixer_oss: invalid OSS volume 'lg' [ 172.911685][T12467] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 172.918251][T12467] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 172.923310][T12467] ALSA: mixer_oss: invalid OSS volume '' [ 172.926509][T12467] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 172.930540][T12467] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 172.939939][T12467] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 172.944723][T12467] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 172.949108][T12467] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 173.944268][ T40] audit: type=1326 audit(1775849098.058:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.1.2968" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 173.950885][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 174.402493][T12531] mkiss: ax0: crc mode is auto. [ 174.890776][T12546] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 174.893538][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.059545][ T40] audit: type=1326 audit(1775849099.178:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.2991" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 175.266694][T12587] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 175.277837][T12587] CIFS: Unable to determine destination address [ 175.357565][T12593] comedi comedi3: pcl818: I/O port conflict (0x5c22,16) [ 175.654144][T12619] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 175.657388][T12619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.661491][T12619] vhci_hcd vhci_hcd.0: Device attached [ 175.668202][T12620] vhci_hcd: connection closed [ 175.669770][ T354] vhci_hcd vhci_hcd.3: stop threads [ 175.672248][T12625] comedi comedi3: pcl818: I/O port conflict (0x5c22,16) [ 175.678093][ T354] vhci_hcd vhci_hcd.3: release socket [ 175.680973][ T354] vhci_hcd vhci_hcd.3: disconnect device [ 176.228636][T12659] usb usb9: usbfs: process 12659 (syz.1.3035) did not claim interface 0 before use [ 176.485577][T12685] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3048'. [ 176.564115][T12691] binder: 12689:12691 ioctl 541b 0 returned -22 [ 176.824489][T12719] CIFS: Unable to determine destination address [ 177.109636][T12744] netlink: 'syz.4.3076': attribute type 2 has an invalid length. [ 177.850529][T12763] : entered promiscuous mode [ 177.923016][T12771] overlayfs: regular lower layers cannot follow data lower layers [ 178.754908][T12847] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3125'. [ 178.758348][T12847] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3125'. [ 178.761388][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3125'. [ 178.983600][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 178.992383][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3137'. [ 179.007157][T12871] geneve2: entered promiscuous mode [ 179.009661][T12871] geneve2: entered allmulticast mode [ 179.151091][T12886] program syz.1.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.152202][ T5956] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 179.454060][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.548051][T12919] mkiss: ax0: crc mode is auto. [ 179.606721][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'. [ 179.616840][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'. [ 179.661869][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.666139][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.689971][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.699737][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.703507][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.712385][ T24] usb 5-1: Product: syz [ 179.714758][ T24] usb 5-1: Manufacturer: syz [ 179.716824][ T24] usb 5-1: SerialNumber: syz [ 179.744367][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 179.746746][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 179.948553][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.278929][ T29] usb 5-1: USB disconnect, device number 4 [ 180.286722][ T29] usblp0: removed [ 181.606023][T13026] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3212'. [ 181.705943][T13034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3216'. [ 182.610229][T13095] binder: 13093:13095 ioctl c018620c 80000240 returned -22 [ 182.658649][ T39] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 182.670467][ T39] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.719778][T13101] fido_id[13101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.791308][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 182.806021][T13107] geneve2: entered promiscuous mode [ 182.808146][T13107] geneve2: entered allmulticast mode [ 183.776214][T13156] __nla_validate_parse: 1 callbacks suppressed [ 183.776232][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3269'. [ 183.858900][T13162] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3271'. [ 184.630394][ T40] audit: type=1326 audit(1775849108.748:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.0.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7fc00000 [ 185.186623][T13238] tipc: Started in network mode [ 185.189832][T13238] tipc: Node identity 7f000001, cluster identity 4711 [ 185.204958][T13238] tipc: New replicast peer: 100.1.1.1 [ 185.207838][T13238] tipc: Enabled bearer , priority 10 [ 185.337616][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 186.207485][ T1023] tipc: Node number set to 2130706433 [ 186.381352][T13272] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3324'. [ 187.058949][ T5956] Bluetooth: hci1: link tx timeout [ 187.084791][ T5956] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.565905][T13358] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3369'. [ 187.571091][T13358] netlink: 'syz.0.3369': attribute type 2 has an invalid length. [ 187.575098][T13358] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 188.170836][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 188.186250][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3388'. [ 188.252420][T13414] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3390'. [ 188.261378][T13414] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3390'. [ 188.268014][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3390'. [ 188.624062][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 188.660672][T13450] usb usb8: usbfs: process 13450 (syz.4.3408) did not claim interface 0 before use [ 188.686750][T13451] netlink: 'syz.3.3407': attribute type 1 has an invalid length. [ 188.690804][T13451] nbd: error processing sock list [ 188.835943][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.842073][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.850158][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.858425][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.863667][ T24] usb 5-1: Product: syz [ 188.880137][ T24] usb 5-1: Manufacturer: syz [ 188.885247][ T24] usb 5-1: SerialNumber: syz [ 188.906559][ T24] usb 5-1: config 0 descriptor?? [ 188.917910][ T24] usb 5-1: selecting invalid altsetting 0 [ 189.124539][ T1023] usb 5-1: USB disconnect, device number 5 [ 189.144121][ T5956] Bluetooth: hci1: command 0x0405 tx timeout [ 189.228512][T13476] Bluetooth: MGMT ver 1.23 [ 189.279220][T13480] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3422'. [ 189.567035][T13498] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 189.606797][T13500] sp0: Synchronizing with TNC [ 189.827662][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 190.117125][T13541] bridge0: entered promiscuous mode [ 190.487528][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3470'. [ 190.577978][T13591] pim6reg99999999: entered allmulticast mode [ 192.081381][T13663] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3508'. [ 192.090743][T13663] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3508'. [ 192.570518][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 193.075407][ T6014] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.226272][ T6014] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.235453][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.244723][ T6014] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.252122][ T6014] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.256349][ T6014] usb 6-1: Manufacturer: syz [ 193.265514][ T6014] usb 6-1: config 0 descriptor?? [ 193.344020][ T6014] rc_core: IR keymap rc-hauppauge not found [ 193.346461][ T6014] Registered IR keymap rc-empty [ 193.350729][ T6014] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 193.360164][ T6014] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 193.492102][ T39] usb 6-1: USB disconnect, device number 6 [ 194.133087][T13791] nbd: must specify an index to disconnect [ 194.346865][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 194.365522][T13812] netlink: 173 bytes leftover after parsing attributes in process `syz.1.3578'. [ 194.612470][T13834] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3590'. [ 195.042022][T13869] netlink: 'syz.0.3605': attribute type 3 has an invalid length. [ 195.306203][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 195.312330][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 195.626325][T13921] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3632'. [ 195.692415][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 195.988910][T13944] batman_adv: batadv0: Adding interface: gretap1 [ 195.994292][T13944] batman_adv: batadv0: Interface activated: gretap1 [ 196.665707][T13975] random: crng reseeded on system resumption [ 196.678667][T13975] Restarting kernel threads ... [ 196.689433][T13975] Done restarting kernel threads. [ 196.891043][T13989] tipc: Started in network mode [ 196.893659][T13989] tipc: Node identity , cluster identity 4711 [ 196.896913][T13989] tipc: Failed to obtain node identity [ 196.899282][T13989] tipc: Enabling of bearer rejected, failed to enable media [ 196.955075][T13995] can0: slcan on ttyprintk. [ 197.046803][T13994] can0 (unregistered): slcan off ttyprintk. [ 197.332018][T14021] netlink: 'syz.1.3674': attribute type 25 has an invalid length. [ 197.515405][T14038] sp0: Synchronizing with TNC [ 198.093390][T14086] mkiss: ax0: crc mode is auto. [ 198.213690][T14095] program syz.1.3707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.290642][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3710'. [ 198.640923][ T40] audit: type=1326 audit(1775849122.758:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.3723" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0 [ 199.018667][T14154] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.3734'. [ 199.581090][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3746'. [ 199.794606][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.797698][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.594374][T14240] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3773'. [ 203.031310][T14369] program syz.1.3834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.038662][T14369] ata1.00: non-matching transfer count (8388608/133) [ 203.686429][T14411] netlink: 'syz.1.3853': attribute type 4 has an invalid length. [ 203.692160][T14411] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3853'. [ 204.091928][ T6015] kernel read not supported for file /2060/net/snmp6 (pid: 6015 comm: kworker/3:4) [ 204.593659][ T6034] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.715089][T14470] PKCS7: Unknown OID: [5] (bad) [ 204.717915][T14470] PKCS7: Only support pkcs7_signedData type [ 204.764354][ T6034] usb 6-1: Using ep0 maxpacket: 8 [ 204.775587][ T6034] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 204.778738][ T6034] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.787389][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.794167][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.799541][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.806164][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.813645][ T6034] usb 6-1: config 168 interface 0 has no altsetting 0 [ 204.818464][ T6034] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 204.821873][ T6034] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.827985][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.841056][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.848735][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.855297][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.862058][ T6034] usb 6-1: config 168 interface 0 has no altsetting 0 [ 204.866909][ T6034] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 204.870707][ T6034] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.877807][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.887000][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.897299][ T6034] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.907745][ T6034] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.923688][ T6034] usb 6-1: config 168 interface 0 has no altsetting 0 [ 204.932865][ T6034] usb 6-1: string descriptor 0 read error: -22 [ 204.936909][ T6034] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 204.942148][ T6034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.963212][ T6034] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 204.984765][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 205.158393][ T29] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 205.171602][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.180462][ T6034] usb 6-1: USB disconnect, device number 7 [ 205.186338][ T29] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.192954][ T29] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.198300][ T29] usb 9-1: Manufacturer: syz [ 205.201781][ T29] usb 9-1: config 0 descriptor?? [ 205.294080][ T29] rc_core: IR keymap rc-hauppauge not found [ 205.296717][ T29] Registered IR keymap rc-empty [ 205.299836][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 205.309301][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 205.423585][ T6034] usb 9-1: USB disconnect, device number 8 [ 205.722299][T14535] new mount options do not match the existing superblock, will be ignored [ 205.744881][T14535] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 205.857804][T14544] program syz.0.3908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.072318][T14560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.076497][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 206.170574][T14566] : entered promiscuous mode [ 206.191739][T14568] sp0: Synchronizing with TNC [ 206.244404][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 206.257176][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 206.261468][ T9] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.266527][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.272137][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.277781][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 206.283041][ T9] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 206.287027][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.290302][ T9] usb 8-1: Product: syz [ 206.292175][ T9] usb 8-1: Manufacturer: syz [ 206.295018][ T9] usb 8-1: SerialNumber: syz [ 206.322170][ T9] usb 8-1: config 0 descriptor?? [ 206.325329][T14542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.373639][T14580] ALSA: seq fatal error: cannot create timer (-22) [ 206.551963][T14542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.568986][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 206.734729][T14603] Invalid source name [ 206.788035][ T9] usb 8-1: USB disconnect, device number 5 [ 206.788907][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 207.095702][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3949'. [ 207.107635][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 207.116041][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 207.159048][T14635] fido_id[14635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.524907][T14660] [U]  [ 207.782273][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.085874][T14683] mkiss: ax0: crc mode is auto. [ 208.205387][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3974'. [ 208.465463][T14700] syz.0.3981 (14700) used greatest stack depth: 19088 bytes left [ 208.610128][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 208.957550][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3999'. [ 208.969341][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3999'. [ 209.064437][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 209.332463][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 209.337450][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.349417][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 209.356612][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 209.362646][ T9] usb 6-1: Manufacturer: syz [ 209.368671][ T9] usb 6-1: config 0 descriptor?? [ 209.434059][ T9] rc_core: IR keymap rc-hauppauge not found [ 209.437806][ T9] Registered IR keymap rc-empty [ 209.453742][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 209.461292][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 209.592087][ T6034] usb 6-1: USB disconnect, device number 8 [ 210.290231][T14819] netlink: 'syz.3.4037': attribute type 2 has an invalid length. [ 210.296184][T14819] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4037'. [ 210.300794][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'. [ 210.368092][ T6091] udevd[6091]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 210.805138][T14858] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 210.935926][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 211.156308][T14881] block nbd0: server does not support multiple connections per device. [ 211.168456][T14881] block nbd0: shutting down sockets [ 211.477956][ T6091] udevd[6091]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 211.731981][T14923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.791192][T14965] kvm: kvm [14964]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 213.364731][ T1023] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 213.514307][ T1023] usb 9-1: Using ep0 maxpacket: 8 [ 213.519241][ T1023] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 213.522629][ T1023] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 213.527597][ T1023] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 213.531802][ T1023] usb 9-1: config 250 has no interface number 0 [ 213.535338][ T1023] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 213.540413][ T1023] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 213.546329][ T1023] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.551710][ T1023] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 213.559817][ T1023] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 213.566287][ T1023] usb 9-1: config 250 interface 228 has no altsetting 0 [ 213.572883][ T1023] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 213.584285][ T1023] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 213.584684][ T6034] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 213.588417][ T1023] usb 9-1: Product: syz [ 213.596079][ T1023] usb 9-1: SerialNumber: syz [ 213.612181][ T1023] hub 9-1:250.228: bad descriptor, ignoring hub [ 213.624862][ T1023] hub 9-1:250.228: probe with driver hub failed with error -5 [ 213.754168][ T6034] usb 8-1: Using ep0 maxpacket: 8 [ 213.765567][ T6034] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.771187][ T6034] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.776655][ T6034] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.782579][ T6034] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.800205][ T6034] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.806029][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.850733][ T1023] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 214.034909][ T6034] usb 8-1: GET_CAPABILITIES returned 0 [ 214.037650][ T6034] usbtmc 8-1:16.0: can't read capabilities [ 214.049824][T15011] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 214.155182][ T6034] usb 9-1: USB disconnect, device number 9 [ 214.164231][ T6034] usblp0: removed [ 214.224183][ T5959] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 214.243538][ T39] usb 8-1: USB disconnect, device number 6 [ 214.384075][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 214.390510][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.398321][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.402557][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.412089][ T5959] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 214.416502][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.424389][ T5959] usb 6-1: config 0 descriptor?? [ 214.731113][T15033] pimreg: tun_chr_ioctl cmd 2147767517 [ 214.856978][ T5959] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 214.860692][ T5959] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 214.865131][ T5959] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 214.868486][ T5959] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 214.871546][ T5959] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 214.881007][ T5959] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 214.935193][ T5959] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 214.960739][ T5959] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 215.054559][T15009] random: crng reseeded on system resumption [ 215.096916][ T1023] usb 6-1: USB disconnect, device number 9 [ 215.097440][ T5959] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 215.104643][ T6014] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 215.107932][ T5959] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.120370][ T5959] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.130623][ T5959] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.242099][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4140'. [ 215.270273][ T6014] usb 9-1: Using ep0 maxpacket: 8 [ 215.276792][ T6014] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 215.280295][ T6014] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.294393][ T6014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.324596][ T6014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.330737][ T6014] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.341660][ T6014] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.350398][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.573460][ T6014] usb 9-1: GET_CAPABILITIES returned 0 [ 215.576608][ T6014] usbtmc 9-1:16.0: can't read capabilities [ 215.783236][ T5959] usb 9-1: USB disconnect, device number 10 [ 216.172191][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'. [ 216.253213][T15082] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 216.257891][T15082] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 216.262349][T15082] overlayfs: failed to set uuid (1067/file0, err=-13); falling back to uuid=null. [ 216.373180][T15088] loop6: detected capacity change from 0 to 8 [ 216.445392][T15088] loop6: detected capacity change from 8 to 7 [ 216.462548][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.470432][ C0] buffer_io_error: 7 callbacks suppressed [ 216.470446][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.479933][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.485037][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.496446][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.501444][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.507694][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.512096][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.518289][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.522944][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.528006][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.533060][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.537092][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.541317][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.545269][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.551498][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.555517][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.559736][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.563041][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.568010][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.573160][T15088] ldm_validate_partition_table(): Disk read failed. [ 216.579638][T15088] Dev loop6: unable to read RDB block 0 [ 216.583276][T15088] loop6: unable to read partition table [ 216.586442][T15088] loop6: partition table beyond EOD, truncated [ 216.589557][T15088] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 216.589557][T15088] .BL_se) failed (rc=-5) [ 216.615341][ T5348] ldm_validate_partition_table(): Disk read failed. [ 216.634599][ T5348] Dev loop6: unable to read RDB block 0 [ 216.637403][ T5348] loop6: unable to read partition table [ 216.640963][ T5348] loop6: partition table beyond EOD, truncated [ 217.424247][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.566964][T15136] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 217.605192][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'. [ 217.612611][T15140] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4182'. [ 217.626161][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 217.647159][ T29] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 217.653164][ T29] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 217.656054][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'. [ 217.672701][T15142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4183'. [ 217.674427][ T29] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 217.709715][ T29] usb 5-1: config 250 has no interface number 0 [ 217.712993][ T29] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 217.718953][ T29] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 217.729284][ T29] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.733644][ T29] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 217.738031][ T29] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 217.744543][ T29] usb 5-1: config 250 interface 228 has no altsetting 0 [ 217.749435][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 217.752838][ T29] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 217.756773][ T29] usb 5-1: Product: syz [ 217.758603][ T29] usb 5-1: SerialNumber: syz [ 217.777067][ T29] hub 5-1:250.228: bad descriptor, ignoring hub [ 217.780953][ T29] hub 5-1:250.228: probe with driver hub failed with error -5 [ 218.020589][ T29] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 218.045617][T15160] gretap0: entered promiscuous mode [ 218.053416][T15160] gretap0: left promiscuous mode [ 218.104676][ T5959] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 218.275781][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 218.282428][ T5959] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 218.304153][ T5959] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.306483][ T5959] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 218.310467][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.317925][ T29] usb 5-1: USB disconnect, device number 6 [ 218.326830][ T29] usblp0: removed [ 218.342110][ T5959] usb 6-1: config 0 descriptor?? [ 218.559984][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 218.751481][T15185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.121610][ T5959] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 219.145391][ T5959] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 219.158119][ T5959] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 219.162117][ T5959] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 219.165352][ T5959] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 219.177447][ T5959] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 219.561699][ T5959] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -110 [ 219.573417][ T5959] usb 6-1: USB disconnect, device number 10 [ 219.585664][ T5348] ldm_validate_partition_table(): Disk read failed. [ 219.596212][ T5348] Dev loop6: unable to read RDB block 0 [ 219.601515][ T5348] loop6: unable to read partition table [ 219.606353][ T5348] loop6: partition table beyond EOD, truncated [ 219.937888][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4222'. [ 220.039301][T15228] netlink: 'syz.1.4224': attribute type 6 has an invalid length. [ 220.822958][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 221.874789][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.879634][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.886746][T15313] bridge0: entered allmulticast mode [ 221.961483][T15315] netlink: 'syz.3.4264': attribute type 6 has an invalid length. [ 222.682856][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4281'. [ 222.868872][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4285'. [ 223.285099][ T6090] kernel write not supported for file /amidi2 (pid: 6090 comm: kworker/2:5) [ 223.350611][T15390] netlink: 'syz.0.4298': attribute type 39 has an invalid length. [ 223.535198][T15400] Attempt to restore checkpoint with obsolete wellknown handles [ 223.805446][T15413] loop6: detected capacity change from 7 to 0 [ 224.333746][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 224.341093][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4318'. [ 224.404376][T15437] netlink: 'syz.0.4319': attribute type 9 has an invalid length. [ 224.932538][T15461] ubi16: attaching mtd0 [ 224.936055][T15461] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 224.938080][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'. [ 226.101925][T15522] netlink: 'syz.3.4359': attribute type 1 has an invalid length. [ 226.106489][T15522] netlink: 'syz.3.4359': attribute type 2 has an invalid length. [ 226.110303][T15522] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4359'. [ 226.920204][T15564] netlink: 'syz.4.4378': attribute type 4 has an invalid length. [ 227.190806][T15573] binder: 15572:15573 ioctl c0306201 80000640 returned -22 [ 227.675708][ T6090] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 227.828343][ T6090] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.832440][ T6090] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.838797][ T6090] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.845268][ T6090] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.851567][ T6090] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.855783][ T6090] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.859548][ T6090] usb 9-1: Product: syz [ 227.861794][ T6090] usb 9-1: Manufacturer: syz [ 227.874835][ T6090] cdc_wdm 9-1:1.0: skipping garbage [ 227.877949][ T6090] cdc_wdm 9-1:1.0: skipping garbage [ 227.901240][ T6090] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 227.904870][ T6090] cdc_wdm 9-1:1.0: Unknown control protocol [ 228.075078][T15625] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 228.079008][T15625] netlink: 'syz.0.4408': attribute type 2 has an invalid length. [ 228.082307][ T1023] usb 9-1: USB disconnect, device number 11 [ 228.083165][T15625] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 228.089915][T15625] netlink: 'syz.0.4408': attribute type 3 has an invalid length. [ 228.093396][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4408'. [ 228.304528][ T6014] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 228.476754][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 228.481719][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 228.487714][ T6014] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 228.496362][ T6014] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.500810][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.506455][ T6014] usb 6-1: Product: syz [ 228.509324][ T6014] usb 6-1: Manufacturer: syz [ 228.512307][ T6014] usb 6-1: SerialNumber: syz [ 228.521701][ T6014] usb 6-1: config 0 descriptor?? [ 228.527272][T15623] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 228.735879][T15623] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 228.948481][ T6014] usb 6-1: USB disconnect, device number 11 [ 229.031951][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 229.398350][T15667] batman_adv: batadv0: Adding interface: macvtap1 [ 229.402002][T15667] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.412862][T15667] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 230.493215][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4444'. [ 230.630037][T15712] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4447'. [ 230.640101][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4448'. [ 230.719361][T15720] loop6: detected capacity change from 0 to 2640 [ 230.723481][T15720] buffer_io_error: 235 callbacks suppressed [ 230.723502][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.740551][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.754055][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.758030][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.762544][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.766830][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.770293][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.773665][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.781916][T15720] ldm_validate_partition_table(): Disk read failed. [ 230.792258][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.854098][T15721] loop6: detected capacity change from 2640 to 524288000 [ 230.874060][T15720] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.878504][T15720] Dev loop6: unable to read RDB block 0 [ 230.881191][T15720] loop6: unable to read partition table [ 230.889013][T15720] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 232.054304][ T5951] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.070195][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 232.075339][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 232.086965][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 232.091393][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 232.237150][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.242264][ T5951] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.249971][ T5951] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.262289][ T5951] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 232.267345][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 232.271089][ T5951] usb 5-1: Product: syz [ 232.273236][ T5951] usb 5-1: Manufacturer: syz [ 232.281308][ T5951] usb 5-1: SerialNumber: syz [ 232.503550][ T5951] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.703326][ T29] usb 5-1: USB disconnect, device number 7 [ 232.714997][ T29] usblp0: removed [ 233.974517][T15836] Invalid ELF header magic: != ELF [ 234.087731][T15843] loop5: detected capacity change from 0 to 7 [ 234.293029][ T6091] Dev loop5: unable to read RDB block 7 [ 234.296160][T15844] Invalid logical block size (-1) [ 234.301164][ T6091] loop5: unable to read partition table [ 234.303671][ T6091] loop5: partition table beyond EOD, truncated [ 234.474356][ T6015] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.551219][T15843] Dev loop5: unable to read RDB block 7 [ 234.554404][T15843] loop5: unable to read partition table [ 234.556863][T15843] loop5: partition table beyond EOD, truncated [ 234.560062][T15843] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 234.651971][ T6015] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 234.658265][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.662777][ T6015] usb 5-1: Product: syz [ 234.665294][ T6015] usb 5-1: Manufacturer: syz [ 234.667322][ T6015] usb 5-1: SerialNumber: syz [ 235.030736][ T6015] rtl8150 5-1:1.0: couldn't reset the device [ 235.035268][ T6015] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 235.046850][ T6015] usb 5-1: USB disconnect, device number 8 [ 235.550829][T15882] can0: slcan on pty20. [ 236.277343][T15880] can0 (unregistered): slcan off pty20. [ 236.540029][T15912] tun0: tun_chr_ioctl cmd 1074025675 [ 236.543083][T15912] tun0: persist disabled [ 236.751351][ T29] kernel write not supported for file /uinput (pid: 29 comm: kworker/1:0) [ 236.854073][ T40] audit: type=1326 audit(1775849160.968:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000 [ 236.865335][ T40] audit: type=1326 audit(1775849160.968:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 236.884507][ T40] audit: type=1326 audit(1775849160.968:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000 [ 236.893314][ T40] audit: type=1326 audit(1775849160.968:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 236.924069][ T40] audit: type=1326 audit(1775849160.968:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000 [ 236.935821][ T40] audit: type=1326 audit(1775849160.968:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000 [ 236.948414][ T40] audit: type=1326 audit(1775849160.968:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 236.959193][ T40] audit: type=1326 audit(1775849160.968:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000 [ 236.980330][ T40] audit: type=1326 audit(1775849160.968:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 236.992059][ T40] audit: type=1326 audit(1775849160.968:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.3.4538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 238.250736][T15982] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4561'. [ 238.644192][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 238.645898][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 238.747189][T16007] netlink: 'syz.1.4572': attribute type 9 has an invalid length. [ 238.752850][T16007] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4572'. [ 239.397803][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 239.403158][T16046] netlink: 'syz.4.4589': attribute type 5 has an invalid length. [ 239.552782][T16054] dummy0: entered allmulticast mode [ 239.567803][T16053] dummy0: left allmulticast mode [ 240.540140][T16109] vivid-007: disconnect [ 240.543886][T16109] vivid-007: reconnect [ 240.695492][T16119] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.4625'. [ 240.958693][T16132] loop9: detected capacity change from 0 to 8 [ 240.971573][ T6091] Dev loop9: unable to read RDB block 8 [ 240.974148][ T6091] loop9: unable to read partition table [ 240.977294][ T6091] loop9: partition table beyond EOD, truncated [ 240.989645][T16132] Dev loop9: unable to read RDB block 8 [ 240.992107][T16132] loop9: unable to read partition table [ 241.004200][T16132] loop9: partition table beyond EOD, truncated [ 241.006988][T16132] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 241.321644][T16160] bond0: entered promiscuous mode [ 241.323625][T16160] bond_slave_0: entered promiscuous mode [ 241.326681][T16160] bond_slave_1: entered promiscuous mode [ 241.329072][T16160] batadv0: entered promiscuous mode [ 241.332953][T16160] bond0: left promiscuous mode [ 241.336528][T16160] bond_slave_0: left promiscuous mode [ 241.339129][T16160] bond_slave_1: left promiscuous mode [ 241.341586][T16160] batadv0: left promiscuous mode [ 241.421964][T16165] syz_tun: entered allmulticast mode [ 241.434172][T16165] syz_tun: left allmulticast mode [ 241.911211][ T1023] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 242.067612][ T1023] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 242.072203][ T1023] usb 8-1: config 0 has no interface number 0 [ 242.076938][ T1023] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 242.083388][ T1023] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.104312][ T1023] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.115881][ T1023] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 242.119593][ T1023] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 242.134132][ T1023] usb 8-1: Product: syz [ 242.137589][ T1023] usb 8-1: SerialNumber: syz [ 242.155178][ T1023] usb 8-1: config 0 descriptor?? [ 242.161413][ T1023] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 242.183410][ T1023] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input24 [ 242.316705][T16218] loop9: detected capacity change from 0 to 524287999 [ 242.396798][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 242.409559][ T1023] usb 8-1: USB disconnect, device number 8 [ 242.415950][ T1023] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 243.334122][ T6090] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 243.494187][ T6090] usb 8-1: Using ep0 maxpacket: 16 [ 243.530158][ T6090] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 243.533616][ T6090] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.537230][ T6090] usb 8-1: Product: syz [ 243.539722][ T6090] usb 8-1: Manufacturer: syz [ 243.542831][ T6090] usb 8-1: SerialNumber: syz [ 243.588359][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 243.762692][ T6090] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 243.781743][ T6090] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.793406][ T6090] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 243.800827][ T6090] usb 8-1: media controller created [ 243.821629][ T6090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.022943][ T5947] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 244.075980][ T6090] zl10353_read_register: readreg error (reg=127, ret==-110) [ 244.119142][ T6090] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 244.127278][T16272] kvm: user requested TSC rate below hardware speed [ 244.134277][ T6090] usb 8-1: USB disconnect, device number 9 [ 244.515625][T16289] bond0: entered promiscuous mode [ 244.517953][T16289] bond_slave_0: entered promiscuous mode [ 244.521199][T16289] @0: entered promiscuous mode [ 244.526198][T16289] batadv0: entered promiscuous mode [ 244.535774][T16289] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 244.542722][T16289] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 244.567413][T16289] bond0: left promiscuous mode [ 244.569894][T16289] bond_slave_0: left promiscuous mode [ 244.572433][T16289] @0: left promiscuous mode [ 244.577701][T16289] batadv0: left promiscuous mode [ 244.605464][T16293] erspan0: entered promiscuous mode [ 244.686529][T16296] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4705'. [ 244.692511][T16296] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 245.106614][T16323] binder: 16321:16323 ioctl c0306201 80000480 returned -22 [ 245.433075][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4727'. [ 245.508384][ T6015] kernel write not supported for file /video8 (pid: 6015 comm: kworker/3:4) [ 245.578929][T16356] bridge0: port 3(syz_tun) entered blocking state [ 245.582768][T16356] bridge0: port 3(syz_tun) entered disabled state [ 245.596471][T16356] syz_tun: entered allmulticast mode [ 245.601217][T16356] syz_tun: entered promiscuous mode [ 245.607342][T16356] bridge0: port 3(syz_tun) entered blocking state [ 245.618166][T16356] bridge0: port 3(syz_tun) entered forwarding state [ 246.410596][T16398] sp0: Synchronizing with TNC [ 246.600694][T16412] tipc: Started in network mode [ 246.603376][T16412] tipc: Node identity ac14140f, cluster identity 4711 [ 246.607242][T16412] tipc: New replicast peer: 255.255.255.255 [ 246.611114][T16412] tipc: Enabled bearer , priority 10 [ 246.654082][ T6015] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.806285][ T6015] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.810253][ T6015] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.816302][ T6015] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.840995][ T6015] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.852436][ T6015] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.857175][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.864328][ T6015] usb 5-1: Product: syz [ 246.866810][ T6015] usb 5-1: Manufacturer: syz [ 246.878260][ T6015] cdc_wdm 5-1:1.0: skipping garbage [ 246.882078][ T6015] cdc_wdm 5-1:1.0: skipping garbage [ 246.887070][ T6015] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 246.891132][ T6015] cdc_wdm 5-1:1.0: Unknown control protocol [ 247.085642][ C3] wdm_int_callback: 8 callbacks suppressed [ 247.085666][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.091718][ C3] wdm_int_callback: 8 callbacks suppressed [ 247.091744][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.097933][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.100731][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.103478][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.106564][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.109740][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.112555][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.115606][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.118615][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.121921][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.124902][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.127649][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.130106][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.132598][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 247.136137][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 247.140726][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 247.145614][ T6015] usb 5-1: USB disconnect, device number 9 [ 247.724280][ T6015] tipc: Node number set to 2886997007 [ 247.916894][T16446] bridge0: port 3(syz_tun) entered blocking state [ 247.919696][T16446] bridge0: port 3(syz_tun) entered disabled state [ 247.922748][T16446] syz_tun: entered allmulticast mode [ 247.934473][T16446] syz_tun: entered promiscuous mode [ 248.195314][ T29] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 248.392859][ T29] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 248.397219][ T29] usb 8-1: config 0 has no interface number 0 [ 248.400140][ T29] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 248.405226][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.410190][ T29] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.418013][ T29] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 248.422695][ T29] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 248.427280][ T29] usb 8-1: Product: syz [ 248.429708][ T29] usb 8-1: SerialNumber: syz [ 248.464637][ T29] usb 8-1: config 0 descriptor?? [ 248.472056][ T29] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 248.480272][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input25 [ 248.520845][T16476] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 248.646689][T16480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4790'. [ 248.875327][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.881770][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.885748][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.889039][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.892106][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.895423][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.899474][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.904470][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.910470][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.915237][ T29] usb 8-1: USB disconnect, device number 10 [ 248.919439][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.922460][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 248.935189][ T29] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 249.042804][T16497] loop8: detected capacity change from 0 to 524287999 [ 249.076253][ T6091] buffer_io_error: 7 callbacks suppressed [ 249.076276][ T6091] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 249.364215][ T1023] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 249.525127][ T1023] usb 6-1: Using ep0 maxpacket: 8 [ 249.529513][ T1023] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 249.534950][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.548095][ T1023] pvrusb2: Hardware description: Terratec Grabster AV400 [ 249.553025][ T1023] pvrusb2: ********** [ 249.556400][ T1023] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 249.560917][ T1023] pvrusb2: Important functionality might not be entirely working. [ 249.564968][ T1023] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 249.571626][ T1023] pvrusb2: ********** [ 249.751107][ T2489] pvrusb2: Invalid write control endpoint [ 249.754106][ T5951] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 249.819801][ T2489] pvrusb2: Invalid write control endpoint [ 249.830148][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 249.836198][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 249.843522][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 249.850723][ T2489] pvrusb2: Device being rendered inoperable [ 249.861842][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 249.866787][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 249.877061][ T2489] pvrusb2: Attached sub-driver cx25840 [ 249.879892][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 249.893982][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 249.915713][ T5951] usb 8-1: config 0 has no interfaces? [ 249.918850][ T5951] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.925793][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.933098][ T5951] usb 8-1: config 0 descriptor?? [ 249.951454][T16503] pvrusb2: Killing an I2C write to 5 that is too large (desired=62 limit=61) [ 249.959449][ T5951] usb 6-1: USB disconnect, device number 12 [ 250.146156][ T6034] usb 8-1: USB disconnect, device number 11 [ 250.234612][ T5959] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.413527][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 250.425310][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.432325][ T5959] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.440473][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.459399][ T5959] usb 5-1: config 0 descriptor?? [ 250.699265][ T5959] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 250.914232][ T5959] usb 5-1: USB disconnect, device number 10 [ 250.934412][ T5951] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 251.085912][ T5951] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.091454][ T5951] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.095720][ T5951] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.102584][ T5951] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.107052][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 251.110412][ T5951] usb 9-1: Product: syz [ 251.112625][ T5951] usb 9-1: SerialNumber: syz [ 251.123527][ T5951] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 251.127164][ T5951] cdc_ncm 9-1:1.0: bind() failure [ 251.261494][T16564] CUSE: info not properly terminated [ 251.331758][ T6015] usb 9-1: USB disconnect, device number 12 [ 251.609974][T16578] rtc_cmos 00:05: Alarms can be up to one day in the future [ 251.611268][T16580] netlink: 'syz.0.4838': attribute type 1 has an invalid length. [ 251.620111][T16580] netlink: 'syz.0.4838': attribute type 2 has an invalid length. [ 251.623292][T16580] netlink: 'syz.0.4838': attribute type 1 has an invalid length. [ 251.629022][T16577] rtc_cmos 00:05: Alarms can be up to one day in the future [ 251.900251][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 251.903660][T16590] netlink: 'syz.3.4845': attribute type 18 has an invalid length. [ 251.908404][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4845'. [ 252.118253][ T5947] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 252.144516][ T5959] rtc_cmos 00:05: Alarms can be up to one day in the future [ 252.155536][ T5959] rtc_cmos 00:05: Alarms can be up to one day in the future [ 252.160732][ T5959] rtc_cmos 00:05: Alarms can be up to one day in the future [ 252.170736][ T5959] rtc_cmos 00:05: Alarms can be up to one day in the future [ 252.177955][ T5959] rtc rtc0: __rtc_set_alarm: err=-22 [ 252.230697][T16624] Bluetooth: hci4: Frame reassembly failed (-84) [ 252.238449][ T1196] Bluetooth: hci4: Frame reassembly failed (-84) [ 252.241593][ T429] Bluetooth: hci4: Frame reassembly failed (-84) [ 252.678577][T16647] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 252.754187][ T6015] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 252.904331][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 252.908941][ T6015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 252.913218][ T6015] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.923427][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.934442][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.940015][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.945305][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.950135][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.957693][ T6015] usb 5-1: config 168 interface 0 has no altsetting 0 [ 252.961975][ T6015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 252.965708][ T6015] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.971123][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.977269][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.982544][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.988227][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.993391][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 253.001058][ T6015] usb 5-1: config 168 interface 0 has no altsetting 0 [ 253.008636][ T6015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 253.012464][ T6015] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 253.017730][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 253.022631][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.029515][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.035402][ T6015] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.040423][ T6015] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 253.047486][ T6015] usb 5-1: config 168 interface 0 has no altsetting 0 [ 253.056072][ T6015] usb 5-1: string descriptor 0 read error: -22 [ 253.059385][ T6015] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 253.065170][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.078402][ T6015] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 253.253712][T16673] vivid-003: disconnect [ 253.260044][T16672] vivid-003: reconnect [ 253.285361][ T6034] usb 5-1: USB disconnect, device number 11 [ 254.244659][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 254.597250][T16722] vlan0: entered allmulticast mode [ 254.599494][T16722] veth0_vlan: entered allmulticast mode [ 256.358011][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4931'. [ 256.525693][T16805] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 256.652705][T16812] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4943'. [ 256.740606][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4945'. [ 256.804717][T16822] misc userio: Begin command sent, but we're already running [ 258.044251][ T6015] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 258.194160][ T6015] usb 9-1: Using ep0 maxpacket: 16 [ 258.199062][ T6015] usb 9-1: config 0 has no interfaces? [ 258.231930][ T6015] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 258.236979][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.240903][ T6015] usb 9-1: Product: syz [ 258.243683][ T6015] usb 9-1: Manufacturer: syz [ 258.259691][ T6015] usb 9-1: SerialNumber: syz [ 258.277561][ T6015] usb 9-1: config 0 descriptor?? [ 258.492022][ T6015] usb 9-1: USB disconnect, device number 13 [ 258.582550][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.585179][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.587454][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.589781][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.592271][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.602948][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.611199][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.614521][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.617244][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.620308][ T6090] hid-generic 0005:00B6:0009.000D: unknown main item tag 0x0 [ 258.649692][ T6090] hid-generic 0005:00B6:0009.000D: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 258.799691][T16888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4978'. [ 259.379185][T16921] input: syz0 as /devices/virtual/input/input27 [ 259.417946][ T5951] kernel read not supported for file /dsp1 (pid: 5951 comm: kworker/0:3) [ 260.014157][ T6034] kernel read not supported for file /dsp1 (pid: 6034 comm: kworker/1:3) [ 260.275390][T16972] input: syz0 as /devices/virtual/input/input28 [ 260.704723][T17001] kvm: kvm [17000]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 260.822806][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 260.822828][ T40] audit: type=1400 audit(1775849184.938:203): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 261.081801][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5044'. [ 261.209372][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.212933][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.478216][T17048] infiniband syz1: set active [ 261.482966][T17048] infiniband syz1: added syz_tun [ 261.528749][T17048] RDS/IB: syz1: added [ 261.532222][T17048] smc: adding ib device syz1 with port count 1 [ 261.537275][T17048] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 261.814087][ T6034] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 261.986077][ T6034] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.991071][ T6034] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.996592][ T6034] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.005348][ T6034] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.010074][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 262.014325][ T6034] usb 8-1: Product: syz [ 262.016321][ T6034] usb 8-1: SerialNumber: syz [ 262.029710][ T6034] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 262.032955][ T6034] cdc_ncm 8-1:1.0: bind() failure [ 262.232435][ T6015] usb 8-1: USB disconnect, device number 12 [ 262.795544][T17102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 263.010423][T17115] netlink: 'syz.3.5083': attribute type 10 has an invalid length. [ 264.168352][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'. [ 264.179267][T17172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5110'. [ 265.495707][T17253] Failed to get privilege flags for destination (handle=0x2:0x0) [ 265.660562][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 266.725212][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5165'. [ 266.871292][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5172'. [ 267.238637][ T5951] kernel write not supported for file /uinput (pid: 5951 comm: kworker/0:3) [ 267.420714][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5191'. [ 267.649928][T17383] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 267.658092][ T354] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.994522][ T5959] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 268.165101][ T5959] usb 6-1: Using ep0 maxpacket: 8 [ 268.169749][ T5959] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.175385][ T5959] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.184843][ T5959] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.188982][ T5959] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.194457][ T5959] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.197948][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.418831][ T5959] usb 6-1: GET_CAPABILITIES returned 0 [ 268.422000][ T5959] usbtmc 6-1:16.0: can't read capabilities [ 268.454913][ T29] kernel read not supported for file /dsp1 (pid: 29 comm: kworker/1:0) [ 268.475036][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5206'. [ 268.485361][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5206'. [ 268.623015][ T6014] usb 6-1: USB disconnect, device number 13 [ 269.076860][ T40] audit: type=1326 audit(1775849193.188:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.087615][ T40] audit: type=1326 audit(1775849193.188:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.097822][ T40] audit: type=1326 audit(1775849193.198:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.109681][ T40] audit: type=1326 audit(1775849193.198:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.119189][ T40] audit: type=1326 audit(1775849193.198:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.128939][ T40] audit: type=1326 audit(1775849193.198:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.137553][ T40] audit: type=1326 audit(1775849193.198:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.149899][ T40] audit: type=1326 audit(1775849193.198:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.162447][ T40] audit: type=1326 audit(1775849193.198:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.174805][ T40] audit: type=1326 audit(1775849193.198:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.4.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 269.358078][T17427] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 269.694284][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.695540][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 269.804070][ T29] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 269.979624][ T29] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 269.983521][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.987483][ T29] usb 9-1: Product: syz [ 269.989605][ T29] usb 9-1: Manufacturer: syz [ 269.992308][ T29] usb 9-1: SerialNumber: syz [ 270.252993][ T29] rtl8150 9-1:1.0: couldn't reset the device [ 270.256777][ T29] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 270.266139][ T29] usb 9-1: USB disconnect, device number 14 [ 270.825264][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 270.979366][ T29] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 270.985182][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.988626][ T29] usb 5-1: Product: syz [ 270.990657][ T29] usb 5-1: Manufacturer: syz [ 270.992613][ T29] usb 5-1: SerialNumber: syz [ 271.248537][ T29] rtl8150 5-1:1.0: couldn't reset the device [ 271.251110][ T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 271.264508][ T29] usb 5-1: USB disconnect, device number 12 [ 272.842662][T17580] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 272.864079][T17580] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 273.644746][ T1023] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 273.808065][ T1023] usb 9-1: unable to get BOS descriptor or descriptor too short [ 273.813273][ T1023] usb 9-1: not running at top speed; connect to a high speed hub [ 273.826619][ T1023] usb 9-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 273.834111][ T1023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.837537][ T1023] usb 9-1: Product: syz [ 273.839291][ T1023] usb 9-1: Manufacturer: syz [ 273.841327][ T1023] usb 9-1: SerialNumber: syz [ 273.848193][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5309'. [ 273.915523][T17635] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 273.919887][T17635] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 273.924993][T17635] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 274.081774][ T1023] usb 9-1: 1:1 : no cluster descriptor [ 274.086630][ T1023] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.091481][ T1023] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 274.098600][ T1023] usb 9-1: 1:1 : no cluster descriptor [ 274.101533][ T1023] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.108334][ T1023] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 274.116769][ T1023] usb 9-1: 1:1 : no cluster descriptor [ 274.120124][ T1023] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.163288][ T1023] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 274.173682][ T1023] usb 9-1: USB disconnect, device number 15 [ 274.196758][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.198502][T17647] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 274.462651][T17656] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 275.327315][T17707] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5343'. [ 275.332210][T17707] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5343'. [ 275.719466][T17729] program syz.3.5354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.916732][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5359'. [ 275.946105][ T6034] hid_parser_main: 4086 callbacks suppressed [ 275.946125][ T6034] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 275.970175][ T6034] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.024364][T17748] fido_id[17748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.254057][ T6015] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.414230][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 276.419751][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 276.425342][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 276.432644][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.454279][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.459801][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.474135][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.541044][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 276.541066][ T40] audit: type=1804 audit(1775849200.658:215): pid=17765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5371" name="/newroot/1399/file1" dev="tmpfs" ino=7115 res=1 errno=0 [ 276.695381][ T6015] usb 5-1: GET_CAPABILITIES returned 0 [ 276.698088][ T6015] usbtmc 5-1:16.0: can't read capabilities [ 276.903263][T17752] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 276.908922][ T1023] usb 5-1: USB disconnect, device number 13 [ 277.544420][ T5951] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 277.627832][T17802] netlink: 'syz.3.5389': attribute type 8 has an invalid length. [ 277.707199][ T5951] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 277.711369][ T5951] usb 6-1: config 0 interface 0 has no altsetting 0 [ 277.717925][ T5951] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 277.722364][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 277.726819][ T5951] usb 6-1: Product: syz [ 277.728541][ T5951] usb 6-1: Manufacturer: syz [ 277.730461][ T5951] usb 6-1: SerialNumber: syz [ 277.734761][ T5951] usb 6-1: config 0 descriptor?? [ 277.743381][ T5951] usb 6-1: selecting invalid altsetting 0 [ 277.844343][ T1023] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 277.951579][ T6034] usb 6-1: USB disconnect, device number 14 [ 278.004466][T17806] nbd0: detected capacity change from 0 to 127 [ 278.008609][ T1023] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.012662][ T5956] block nbd0: Receive control failed (result -32) [ 278.014297][ T5947] block nbd0: Receive control failed (result -32) [ 278.020021][ T6091] block nbd0: Send control failed (result -32) [ 278.023764][ T1023] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 278.026865][ T6091] block nbd0: Request send failed, requeueing [ 278.030719][ T1023] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.035958][ T1023] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 278.047740][ T1023] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 278.053626][ T1023] usb 9-1: Product: syz [ 278.056162][ T1023] usb 9-1: Manufacturer: syz [ 278.056473][ T6091] block nbd0: Dead connection, failed to find a fallback [ 278.058649][ T1023] usb 9-1: SerialNumber: syz [ 278.072321][ T6091] block nbd0: shutting down sockets [ 278.072354][ T35] blk_print_req_error: 238 callbacks suppressed [ 278.072373][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.074328][T17800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.079439][ T1023] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input30 [ 278.082238][ T6091] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.083195][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.084186][ T6091] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.085164][ T6091] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.085196][ T6091] Buffer I/O error on dev nbd0, logical block 2, async page read [ 278.085250][ T6091] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.085273][ T6091] Buffer I/O error on dev nbd0, logical block 3, async page read [ 278.121784][ C1] appletouch 9-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 278.122726][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.134916][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.135793][T14509] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 278.138881][ T6091] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.151334][ T6091] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.155948][ T6091] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.160271][ T6091] Buffer I/O error on dev nbd0, logical block 2, async page read [ 278.163582][T14509] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.163617][ T6091] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.173316][ T6091] Buffer I/O error on dev nbd0, logical block 3, async page read [ 278.177264][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.181564][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.185220][ T6091] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 278.190369][ T6091] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.193836][ T6091] ldm_validate_partition_table(): Disk read failed. [ 278.199034][ T6091] Dev nbd0: unable to read RDB block 0 [ 278.201639][ T6091] nbd0: unable to read partition table [ 278.215587][ T6091] ldm_validate_partition_table(): Disk read failed. [ 278.225735][ T6091] Dev nbd0: unable to read RDB block 0 [ 278.228607][ T6091] nbd0: unable to read partition table [ 278.258306][T17813] fido_id[17813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 278.286577][ T1023] usb 9-1: USB disconnect, device number 16 [ 278.300215][ T1023] appletouch 9-1:1.0: input: appletouch disconnected [ 278.357560][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 278.362154][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 278.447185][ T6015] kernel write not supported for file /snd/midiC2D0 (pid: 6015 comm: kworker/3:4) [ 278.718918][T17839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5405'. [ 278.790025][T17843] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5407'. [ 278.800051][T17843] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5407'. [ 278.856982][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5409'. [ 278.875717][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5409'. [ 279.039277][ T1023] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 279.047830][ T1023] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.112149][T17870] fido_id[17870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.161534][T17877] dummy0: entered promiscuous mode [ 279.166424][T17877] macvlan2: entered promiscuous mode [ 279.169606][T17877] macvlan2: entered allmulticast mode [ 279.171761][T17877] dummy0: entered allmulticast mode [ 279.528215][ T5959] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 279.529208][T17896] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5432'. [ 279.536659][ T5959] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.553762][T17896] netlink: 'syz.3.5432': attribute type 1 has an invalid length. [ 279.594583][T17901] fido_id[17901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.698935][ T1023] kernel write not supported for file /uinput (pid: 1023 comm: kworker/0:2) [ 279.746394][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5441'. [ 280.769689][T17944] evm: overlay not supported [ 281.950700][T17980] input: syz1 as /devices/virtual/input/input31 [ 282.702647][T18032] [ 282.704546][T18032] ====================================================== [ 282.707534][T18032] WARNING: possible circular locking dependency detected [ 282.711716][T18032] syzkaller #0 Tainted: G L [ 282.714417][T18032] ------------------------------------------------------ [ 282.718365][T18032] syz.0.5494/18032 is trying to acquire lock: [ 282.721655][T18032] ffffffff8e9aa8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 282.726252][T18032] [ 282.726252][T18032] but task is already holding lock: [ 282.729441][T18032] ffffffff8e84a4d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x4632/0x7a40 [ 282.734445][T18032] [ 282.734445][T18032] which lock already depends on the new lock. [ 282.734445][T18032] [ 282.740949][T18032] [ 282.740949][T18032] the existing dependency chain (in reverse order) is: [ 282.745284][T18032] [ 282.745284][T18032] -> #8 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 282.748771][T18032] percpu_down_write+0x53/0x3e0 [ 282.751705][T18032] cgroup_procs_write_start+0x568/0x890 [ 282.755004][T18032] __cgroup_procs_write+0xd7/0x730 [ 282.757589][T18032] cgroup_procs_write+0x26/0x60 [ 282.759872][T18032] cgroup_file_write+0x1e9/0x790 [ 282.762211][T18032] kernfs_fop_write_iter+0x3e0/0x5f0 [ 282.765092][T18032] vfs_write+0x6ac/0x1070 [ 282.767480][T18032] ksys_write+0x12a/0x250 [ 282.769839][T18032] do_int80_emulation+0x141/0x6b0 [ 282.772219][T18032] asm_int80_emulation+0x1a/0x20 [ 282.774510][T18032] [ 282.774510][T18032] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 282.777876][T18032] cpus_read_lock+0x42/0x170 [ 282.780234][T18032] static_key_slow_inc+0x12/0x30 [ 282.782703][T18032] fl_create+0x7fb/0xd10 [ 282.785009][T18032] ipv6_flowlabel_opt+0x519/0x2d40 [ 282.787489][T18032] do_ipv6_setsockopt+0x1944/0x4400 [ 282.789973][T18032] ipv6_setsockopt+0xcb/0x170 [ 282.792751][T18032] tcp_setsockopt+0xa7/0x100 [ 282.796042][T18032] do_sock_setsockopt+0xf3/0x1d0 [ 282.798553][T18032] __sys_setsockopt+0x119/0x190 [ 282.801013][T18032] __ia32_sys_setsockopt+0xbc/0x160 [ 282.803535][T18032] __do_fast_syscall_32+0xe3/0x8c0 [ 282.806297][T18032] do_fast_syscall_32+0x32/0x70 [ 282.808757][T18032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.811687][T18032] [ 282.811687][T18032] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 282.815279][T18032] lock_sock_nested+0x41/0xf0 [ 282.818000][T18032] inet_shutdown+0x67/0x410 [ 282.820502][T18032] nbd_mark_nsock_dead+0xae/0x5c0 [ 282.822902][T18032] sock_shutdown+0x16b/0x200 [ 282.825076][T18032] nbd_config_put+0x1eb/0x750 [ 282.827418][T18032] nbd_genl_connect+0xaf8/0x1a40 [ 282.830115][T18032] genl_family_rcv_msg_doit+0x214/0x300 [ 282.832922][T18032] genl_rcv_msg+0x560/0x800 [ 282.834995][T18032] netlink_rcv_skb+0x159/0x420 [ 282.837197][T18032] genl_rcv+0x28/0x40 [ 282.839046][T18032] netlink_unicast+0x5aa/0x870 [ 282.841465][T18032] netlink_sendmsg+0x8b0/0xda0 [ 282.843719][T18032] ____sys_sendmsg+0x9e1/0xb70 [ 282.846085][T18032] ___sys_sendmsg+0x190/0x1e0 [ 282.848326][T18032] __sys_sendmsg+0x170/0x220 [ 282.850520][T18032] __do_fast_syscall_32+0xe3/0x8c0 [ 282.853337][T18032] do_fast_syscall_32+0x32/0x70 [ 282.856052][T18032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.858805][T18032] [ 282.858805][T18032] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 282.862088][T18032] __mutex_lock+0x1a2/0x1b90 [ 282.864380][T18032] nbd_queue_rq+0x428/0x1080 [ 282.866945][T18032] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 282.869760][T18032] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 282.873420][T18032] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 282.876568][T18032] blk_mq_run_hw_queue+0x23c/0x670 [ 282.879400][T18032] blk_mq_dispatch_list+0x51d/0x1360 [ 282.883176][T18032] blk_mq_flush_plug_list+0x130/0x600 [ 282.885977][T18032] __blk_flush_plug+0x2c4/0x4b0 [ 282.888195][T18032] __submit_bio+0x584/0x6c0 [ 282.890386][T18032] submit_bio_noacct_nocheck+0x562/0xc10 [ 282.892827][T18032] submit_bio_noacct+0xd17/0x2010 [ 282.895144][T18032] submit_bh_wbc+0x59c/0x770 [ 282.897398][T18032] block_read_full_folio+0x264/0x8e0 [ 282.899884][T18032] filemap_read_folio+0xfc/0x3b0 [ 282.902420][T18032] do_read_cache_folio+0x2d7/0x6b0 [ 282.905295][T18032] read_part_sector+0xd1/0x370 [ 282.908057][T18032] adfspart_check_ICS+0x93/0x910 [ 282.910600][T18032] bdev_disk_changed+0x7f8/0xc80 [ 282.912825][T18032] blkdev_get_whole+0x187/0x290 [ 282.915776][T18032] bdev_open+0x2c7/0xe40 [ 282.919870][T18032] blkdev_open+0x34e/0x4f0 [ 282.922813][T18032] do_dentry_open+0x6d8/0x1660 [ 282.925694][T18032] vfs_open+0x82/0x3f0 [ 282.927782][T18032] path_openat+0x208c/0x31a0 [ 282.930166][T18032] do_file_open+0x20e/0x430 [ 282.932293][T18032] do_sys_openat2+0x10d/0x1e0 [ 282.934675][T18032] __x64_sys_openat+0x12d/0x210 [ 282.936428][T18032] do_syscall_64+0x106/0xf80 [ 282.938409][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.941506][T18032] [ 282.941506][T18032] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 282.944730][T18032] __mutex_lock+0x1a2/0x1b90 [ 282.947044][T18032] nbd_queue_rq+0xba/0x1080 [ 282.949477][T18032] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 282.952352][T18032] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 282.955395][T18032] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 282.958563][T18032] blk_mq_run_hw_queue+0x23c/0x670 [ 282.961390][T18032] blk_mq_dispatch_list+0x51d/0x1360 [ 282.964038][T18032] blk_mq_flush_plug_list+0x130/0x600 [ 282.966776][T18032] __blk_flush_plug+0x2c4/0x4b0 [ 282.969411][T18032] __submit_bio+0x584/0x6c0 [ 282.971924][T18032] submit_bio_noacct_nocheck+0x562/0xc10 [ 282.974853][T18032] submit_bio_noacct+0xd17/0x2010 [ 282.977338][T18032] submit_bh_wbc+0x59c/0x770 [ 282.979693][T18032] block_read_full_folio+0x264/0x8e0 [ 282.982706][T18032] filemap_read_folio+0xfc/0x3b0 [ 282.985493][T18032] do_read_cache_folio+0x2d7/0x6b0 [ 282.988000][T18032] read_part_sector+0xd1/0x370 [ 282.990258][T18032] adfspart_check_ICS+0x93/0x910 [ 282.992527][T18032] bdev_disk_changed+0x7f8/0xc80 [ 282.995153][T18032] blkdev_get_whole+0x187/0x290 [ 282.997843][T18032] bdev_open+0x2c7/0xe40 [ 283.000257][T18032] blkdev_open+0x34e/0x4f0 [ 283.002727][T18032] do_dentry_open+0x6d8/0x1660 [ 283.005063][T18032] vfs_open+0x82/0x3f0 [ 283.007074][T18032] path_openat+0x208c/0x31a0 [ 283.009552][T18032] do_file_open+0x20e/0x430 [ 283.012176][T18032] do_sys_openat2+0x10d/0x1e0 [ 283.014483][T18032] __x64_sys_openat+0x12d/0x210 [ 283.016442][T18032] do_syscall_64+0x106/0xf80 [ 283.018208][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.021352][T18032] [ 283.021352][T18032] -> #3 (set->srcu){.+.+}-{0:0}: [ 283.024528][T18032] __synchronize_srcu+0xa2/0x300 [ 283.027620][T18032] blk_mq_quiesce_queue+0x149/0x1c0 [ 283.030466][T18032] elevator_switch+0x17b/0x7e0 [ 283.032574][T18032] elevator_change+0x352/0x530 [ 283.034736][T18032] elevator_set_default+0x29e/0x360 [ 283.037021][T18032] blk_register_queue+0x412/0x590 [ 283.039438][T18032] __add_disk+0x73f/0xe40 [ 283.041475][T18032] add_disk_fwnode+0x118/0x5c0 [ 283.043933][T18032] nbd_dev_add+0x77a/0xb10 [ 283.046358][T18032] nbd_init+0x291/0x2b0 [ 283.049989][T18032] do_one_initcall+0x11d/0x760 [ 283.052383][T18032] kernel_init_freeable+0x6e5/0x7a0 [ 283.054580][T18032] kernel_init+0x1f/0x1e0 [ 283.056453][T18032] ret_from_fork+0x754/0xd80 [ 283.058540][T18032] ret_from_fork_asm+0x1a/0x30 [ 283.060629][T18032] [ 283.060629][T18032] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 283.064317][T18032] __mutex_lock+0x1a2/0x1b90 [ 283.066604][T18032] elevator_change+0x1bc/0x530 [ 283.068762][T18032] elevator_set_none+0x92/0xf0 [ 283.070952][T18032] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 283.073859][T18032] nbd_start_device+0x1a6/0xbd0 [ 283.076735][T18032] nbd_genl_connect+0xff2/0x1a40 [ 283.079207][T18032] genl_family_rcv_msg_doit+0x214/0x300 [ 283.082351][T18032] genl_rcv_msg+0x560/0x800 [ 283.085487][T18032] netlink_rcv_skb+0x159/0x420 [ 283.088299][T18032] genl_rcv+0x28/0x40 [ 283.090437][T18032] netlink_unicast+0x5aa/0x870 [ 283.093081][T18032] netlink_sendmsg+0x8b0/0xda0 [ 283.095766][T18032] ____sys_sendmsg+0x9e1/0xb70 [ 283.098494][T18032] ___sys_sendmsg+0x190/0x1e0 [ 283.101125][T18032] __sys_sendmsg+0x170/0x220 [ 283.103871][T18032] __do_fast_syscall_32+0xe3/0x8c0 [ 283.106661][T18032] do_fast_syscall_32+0x32/0x70 [ 283.109152][T18032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.112128][T18032] [ 283.112128][T18032] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 283.115964][T18032] blk_alloc_queue+0x610/0x790 [ 283.118244][T18032] blk_mq_alloc_queue+0x174/0x290 [ 283.120549][T18032] __blk_mq_alloc_disk+0x29/0x120 [ 283.122758][T18032] nbd_dev_add+0x492/0xb10 [ 283.124820][T18032] nbd_init+0x291/0x2b0 [ 283.127017][T18032] do_one_initcall+0x11d/0x760 [ 283.129501][T18032] kernel_init_freeable+0x6e5/0x7a0 [ 283.131820][T18032] kernel_init+0x1f/0x1e0 [ 283.133808][T18032] ret_from_fork+0x754/0xd80 [ 283.135866][T18032] ret_from_fork_asm+0x1a/0x30 [ 283.138428][T18032] [ 283.138428][T18032] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 283.141957][T18032] __lock_acquire+0x14b8/0x2630 [ 283.144117][T18032] lock_acquire+0x1cf/0x380 [ 283.146265][T18032] fs_reclaim_acquire+0xc4/0x100 [ 283.148993][T18032] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 283.152252][T18032] alloc_inode+0x183/0x250 [ 283.154543][T18032] iget_locked+0x1d9/0x6d0 [ 283.156532][T18032] kernfs_get_inode+0x46/0x470 [ 283.158620][T18032] cgroup_may_write+0x89/0x120 [ 283.160898][T18032] cgroup_can_fork+0xb89/0x1390 [ 283.163303][T18032] copy_process+0x4632/0x7a40 [ 283.165641][T18032] kernel_clone+0xfc/0x9a0 [ 283.167591][T18032] __do_sys_clone3+0x214/0x290 [ 283.169745][T18032] __do_fast_syscall_32+0xe3/0x8c0 [ 283.171980][T18032] do_fast_syscall_32+0x32/0x70 [ 283.174159][T18032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.177295][T18032] [ 283.177295][T18032] other info that might help us debug this: [ 283.177295][T18032] [ 283.182326][T18032] Chain exists of: [ 283.182326][T18032] fs_reclaim --> cpu_hotplug_lock --> cgroup_threadgroup_rwsem [ 283.182326][T18032] [ 283.187700][T18032] Possible unsafe locking scenario: [ 283.187700][T18032] [ 283.190903][T18032] CPU0 CPU1 [ 283.193244][T18032] ---- ---- [ 283.195741][T18032] rlock(cgroup_threadgroup_rwsem); [ 283.198006][T18032] lock(cpu_hotplug_lock); [ 283.200697][T18032] lock(cgroup_threadgroup_rwsem); [ 283.203791][T18032] lock(fs_reclaim); [ 283.205627][T18032] [ 283.205627][T18032] *** DEADLOCK *** [ 283.205627][T18032] [ 283.209246][T18032] 2 locks held by syz.0.5494/18032: [ 283.211360][T18032] #0: ffffffff8e84a7c8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_can_fork+0x88f/0x1390 [ 283.214955][T18032] #1: ffffffff8e84a4d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x4632/0x7a40 [ 283.219547][T18032] [ 283.219547][T18032] stack backtrace: [ 283.221990][T18032] CPU: 0 UID: 0 PID: 18032 Comm: syz.0.5494 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.222020][T18032] Tainted: [L]=SOFTLOCKUP [ 283.222026][T18032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.222104][T18032] Call Trace: [ 283.222162][T18032] [ 283.222172][T18032] dump_stack_lvl+0x100/0x190 [ 283.222204][T18032] print_circular_bug.cold+0x178/0x1c7 [ 283.222234][T18032] check_noncircular+0x146/0x160 [ 283.222259][T18032] __lock_acquire+0x14b8/0x2630 [ 283.222283][T18032] ? check_irq_usage+0xe5/0x810 [ 283.222305][T18032] lock_acquire+0x1cf/0x380 [ 283.222327][T18032] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 283.222359][T18032] fs_reclaim_acquire+0xc4/0x100 [ 283.222379][T18032] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 283.222407][T18032] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 283.222433][T18032] ? alloc_inode+0x183/0x250 [ 283.222457][T18032] ? find_inode_fast+0x1fa/0x910 [ 283.222480][T18032] alloc_inode+0x183/0x250 [ 283.222502][T18032] iget_locked+0x1d9/0x6d0 [ 283.222529][T18032] ? __pfx_iget_locked+0x10/0x10 [ 283.222551][T18032] ? find_held_lock+0x2b/0x80 [ 283.222567][T18032] ? css_tryget_online_from_dir+0x22a/0x7c0 [ 283.222586][T18032] ? css_tryget_online_from_dir+0x22a/0x7c0 [ 283.222604][T18032] kernfs_get_inode+0x46/0x470 [ 283.222628][T18032] cgroup_may_write+0x89/0x120 [ 283.222652][T18032] cgroup_can_fork+0xb89/0x1390 [ 283.222672][T18032] copy_process+0x4632/0x7a40 [ 283.222691][T18032] ? futex_unqueue+0x133/0x2c0 [ 283.222717][T18032] ? __pfx_copy_process+0x10/0x10 [ 283.222738][T18032] ? _copy_from_user+0x59/0xd0 [ 283.222761][T18032] kernel_clone+0xfc/0x9a0 [ 283.222781][T18032] ? __pfx_kernel_clone+0x10/0x10 [ 283.222802][T18032] ? __pfx_futex_wait+0x10/0x10 [ 283.222830][T18032] __do_sys_clone3+0x214/0x290 [ 283.222850][T18032] ? __pfx___do_sys_clone3+0x10/0x10 [ 283.222884][T18032] __do_fast_syscall_32+0xe3/0x8c0 [ 283.222906][T18032] do_fast_syscall_32+0x32/0x70 [ 283.222925][T18032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.222946][T18032] RIP: 0023:0xf708ef6c [ 283.222959][T18032] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 283.222975][T18032] RSP: 002b:00000000f547d3dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 283.223054][T18032] RAX: ffffffffffffffda RBX: 00000000f547d410 RCX: 0000000000000058 [ 283.223065][T18032] RDX: 0000000000000000 RSI: 0000000080a00200 RDI: 0000000000000002 [ 283.223075][T18032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.223085][T18032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.223095][T18032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.223111][T18032] [ 283.344938][ T5947] Bluetooth: hci1: command 0x0405 tx timeout