last executing test programs: 6m26.072983258s ago: executing program 32 (id=7928): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7) 5m30.091070963s ago: executing program 4 (id=8806): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x3, @loopback, 0x10}, 0x6b, 0x0}}], 0x1, 0x0) 5m29.725353202s ago: executing program 4 (id=8809): iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 5m29.14738311s ago: executing program 4 (id=8813): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) close_range(r0, r0, 0x2) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) 5m28.34581671s ago: executing program 4 (id=8821): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x7, 0x8, @value=0x2}) 5m27.268107517s ago: executing program 4 (id=8824): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 5m26.366898229s ago: executing program 4 (id=8827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 5m12.581144243s ago: executing program 33 (id=8827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 4m44.090962065s ago: executing program 1 (id=9119): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x7}}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x401, 0x1, 0x2, 0x0, 0xe}}, {0x4}}, {{0x1c, 0x1, {0x18, 0x7, 0x10, 0x4, 0x1, 0x9, 0x3}}, {0x4}}]}]}, 0x7c}}, 0x4c840) 4m43.648012612s ago: executing program 1 (id=9120): timerfd_create(0x1, 0x80800) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 4m43.110797568s ago: executing program 1 (id=9123): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x100000) fcntl$setpipe(r0, 0x407, 0x8005) 4m42.65898618s ago: executing program 1 (id=9126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 4m42.043978066s ago: executing program 1 (id=9129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_init_net_socket$llc(0x1a, 0x801, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) 4m39.069084786s ago: executing program 1 (id=9145): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) 4m38.775413957s ago: executing program 34 (id=9145): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) 3m28.258926523s ago: executing program 6 (id=9752): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) 3m27.475165703s ago: executing program 6 (id=9755): pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 3m26.42637222s ago: executing program 0 (id=9762): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x2, 0x25000, 0x4, 0xffffffffffffffff, 0x4}) 3m26.406217719s ago: executing program 0 (id=9763): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x2000) r0 = syz_clone3(&(0x7f0000000300)={0x8000000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(0xffffffffffffffff, r0, 0x21) 3m26.352727116s ago: executing program 6 (id=9765): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/223, 0xcf) 3m26.306104848s ago: executing program 0 (id=9766): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, 0x0, 0x20) 3m26.305939686s ago: executing program 6 (id=9767): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m26.076745622s ago: executing program 6 (id=9770): write(0xffffffffffffffff, &(0x7f0000000280)="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", 0x21e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) 3m25.759819039s ago: executing program 6 (id=9771): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 3m24.566359058s ago: executing program 0 (id=9777): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') exit(0xc) fchdir(r0) 3m24.566154316s ago: executing program 3 (id=9778): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m24.048854838s ago: executing program 5 (id=9782): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) 3m23.821214151s ago: executing program 5 (id=9783): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m23.198615553s ago: executing program 5 (id=9784): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)) 3m23.185738227s ago: executing program 0 (id=9785): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) 3m23.185407335s ago: executing program 5 (id=9786): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x2) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) 3m23.158938189s ago: executing program 0 (id=9787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) syz_extract_tcp_res(0x0, 0x56, 0xa) 3m23.136538128s ago: executing program 3 (id=9788): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={0x0, &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0}) 3m23.13081475s ago: executing program 3 (id=9789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) 3m23.130614408s ago: executing program 3 (id=9790): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20800) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x2, 0x2, 0x8, 0x2b3, 0x4d, 0x6}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 3m23.130472577s ago: executing program 3 (id=9791): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000001200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x2}}, 0x18) 3m23.117590377s ago: executing program 3 (id=9792): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 3m22.922650582s ago: executing program 5 (id=9793): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x80, 0x0}}], 0x2, 0x9200000000000000) 3m11.868211983s ago: executing program 5 (id=9794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 2m57.68458449s ago: executing program 35 (id=9787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) syz_extract_tcp_res(0x0, 0x56, 0xa) 2m57.473446936s ago: executing program 36 (id=9771): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2m57.36495728s ago: executing program 37 (id=9792): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 2m57.296185417s ago: executing program 38 (id=9794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 2.875578402s ago: executing program 8 (id=13522): r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 2.875290197s ago: executing program 9 (id=13523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 2.786410471s ago: executing program 9 (id=13524): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) landlock_restrict_self(r0, 0x6) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, 0x0) 2.728015523s ago: executing program 9 (id=13526): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 2.019127451s ago: executing program 8 (id=13545): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 1.804535334s ago: executing program 8 (id=13553): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80001) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000640)="1b4fc2f0623b3d9c", 0x8}], 0x1) 1.629298061s ago: executing program 8 (id=13555): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400a, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(0xffffffffffffffff, 0x2d) 1.434891246s ago: executing program 8 (id=13558): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}, {0x0}], 0x2, 0x5, 0xd) 620.752294ms ago: executing program 2 (id=13577): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x1, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 617.163204ms ago: executing program 2 (id=13578): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 602.014878ms ago: executing program 9 (id=13579): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) 524.075094ms ago: executing program 9 (id=13580): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x7f}], 0x1, 0x10100, 0x0) 523.918186ms ago: executing program 9 (id=13581): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 520.495532ms ago: executing program 2 (id=13582): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) 339.247205ms ago: executing program 7 (id=13584): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 336.20691ms ago: executing program 7 (id=13592): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 238.854204ms ago: executing program 2 (id=13585): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 238.326402ms ago: executing program 2 (id=13586): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) close(r0) 194.455942ms ago: executing program 2 (id=13587): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r4, 0x0, 0x0, 0x0, 0x44000, 0x1}) io_uring_enter(r0, 0x1, 0xeed, 0x1, 0x0, 0x0) 179.122608ms ago: executing program 7 (id=13588): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x10, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x100000004]}) 69.23306ms ago: executing program 7 (id=13589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 63.300406ms ago: executing program 8 (id=13590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000e7850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 138.155µs ago: executing program 7 (id=13591): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)="8d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0)={r2}) 0s ago: executing program 7 (id=13593): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) 0s ago: executing program 9 (id=13594): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): process `syz.8.10778'. [ 567.594224][T27010] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 567.768503][T27010] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 567.772524][T27010] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 567.778083][T27010] usb 12-1: Product: syz [ 567.780045][T27010] usb 12-1: Manufacturer: syz [ 567.782121][T27010] usb 12-1: SerialNumber: syz [ 567.788076][T27010] usb 12-1: config 0 descriptor?? [ 567.946362][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.947003][ T6010] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 567.952758][ T6010] zl10353_read_register: readreg error (reg=127, ret==-110) [ 567.975964][T29422] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 567.988841][ T6010] usb 7-1: USB disconnect, device number 10 [ 567.997641][T27206] usb 12-1: USB disconnect, device number 4 [ 568.019419][T27236] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 568.194371][T27236] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 568.198418][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.201405][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.205115][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.208358][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.211900][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.216038][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.220442][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.224419][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.228971][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.233590][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.237401][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.241786][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.245391][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.248266][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.251928][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.255259][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.258175][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.261708][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.265542][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.269090][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.273841][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.277781][T27236] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.281494][T27236] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.286343][T27236] usb 14-1: config 0 interface 0 has no altsetting 0 [ 568.291371][T27236] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 568.295399][T27236] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 568.298791][T27236] usb 14-1: Product: syz [ 568.300537][T27236] usb 14-1: Manufacturer: syz [ 568.302422][T27236] usb 14-1: SerialNumber: syz [ 568.308088][T27236] usb 14-1: config 0 descriptor?? [ 568.316145][T27236] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 568.532763][ T72] usb 14-1: USB disconnect, device number 4 [ 568.538350][ T72] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 568.748965][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10799'. [ 568.752843][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10799'. [ 568.757237][T29549] netlink: 'syz.8.10799': attribute type 14 has an invalid length. [ 568.890220][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10807'. [ 569.392387][T29607] sp0: Synchronizing with TNC [ 569.415687][T29609] netlink: 116 bytes leftover after parsing attributes in process `syz.9.10828'. [ 569.873824][ T72] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 569.913096][T29648] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10847'. [ 570.044135][ T72] usb 12-1: Using ep0 maxpacket: 32 [ 570.051421][ T72] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 570.057175][ T72] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.060566][ T72] usb 12-1: Product: syz [ 570.062482][ T72] usb 12-1: Manufacturer: syz [ 570.068761][ T72] usb 12-1: SerialNumber: syz [ 570.074344][ T72] usb 12-1: config 0 descriptor?? [ 570.085487][ T72] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 570.088834][ T72] dvb-usb: bulk message failed: -22 (4/0) [ 570.091269][ T72] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.096480][ T72] dvb-usb: bulk message failed: -22 (5/0) [ 570.099175][ T72] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.106664][ T72] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.110843][ T72] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 570.114468][ T72] usb 12-1: media controller created [ 570.125773][ T72] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.137844][ T72] usb 12-1: selecting invalid altsetting 3 [ 570.139715][ T72] ttusb2: set interface to alts=3 failed [ 570.168430][ T72] DVB: Unable to find symbol tda10086_attach() [ 570.171074][ T72] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 570.175255][ T72] dvb-usb: bulk message failed: -22 (4/0) [ 570.177664][ T72] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.181907][ T72] dvb-usb: bulk message failed: -22 (5/0) [ 570.189707][ T72] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 570.197773][ T72] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 570.216713][T29681] sp0: Synchronizing with TNC [ 570.265742][T29685] xt_l2tp: wrong L2TP version: 0 [ 570.304005][T29624] ttusb2: i2c rd len=58 too high [ 570.307704][T27192] usb 12-1: USB disconnect, device number 5 [ 570.324219][T27192] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 570.950288][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10890'. [ 571.193793][T27269] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 571.316976][T29788] [U]  [ 571.318268][T29788] [U] K{ [ 571.319881][T29788] [U] T 1ŠFFˊ`GJǘGO/MC [ 571.323440][T29788] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 571.332429][T29788] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 571.338641][T29788] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 571.344531][T27269] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 571.354635][T29788] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 571.357881][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.367301][T29788] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 571.373993][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.379755][T29788] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 571.386231][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.388993][T29788] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 571.414499][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.431323][T29788] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 571.435658][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.440220][T29788] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 571.444964][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.449886][T29788] [U] 22Ʃ۩X?0;3U [ 571.454140][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.458621][T29792] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10911'. [ 571.460030][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.460156][T29788] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 571.460312][T29788] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 571.460437][T29788] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 571.460520][T29788] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 571.460715][T29788] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 571.460780][T29788] [U] EC [ 571.461015][T29788] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 571.464939][T29792] netlink: 'syz.9.10911': attribute type 6 has an invalid length. [ 571.466636][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.478738][T29792] netlink: 'syz.9.10911': attribute type 5 has an invalid length. [ 571.487003][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.488483][T29787] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 571.488998][T29792] netlink: 'syz.9.10911': attribute type 4 has an invalid length. [ 571.494818][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.514365][T29794] sp0: Synchronizing with TNC [ 571.531199][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.535949][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.539981][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.543955][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.556080][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.559941][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.563613][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.569077][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.573545][T27269] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 571.577417][T27269] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 571.581526][T27269] usb 12-1: config 0 interface 0 has no altsetting 0 [ 571.586262][T27269] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 571.589800][T27269] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 571.592917][T27269] usb 12-1: Product: syz [ 571.594823][T27269] usb 12-1: Manufacturer: syz [ 571.596772][T27269] usb 12-1: SerialNumber: syz [ 571.600983][T27269] usb 12-1: config 0 descriptor?? [ 571.615893][T27269] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 571.830429][T27269] usb 12-1: USB disconnect, device number 6 [ 571.834943][T27269] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 572.149257][T29836] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10931'. [ 572.519451][T29869] binder: 29868:29869 ioctl 541b 0 returned -22 [ 572.875838][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10965'. [ 572.883346][T29907] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10965'. [ 572.887375][T29907] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10965'. [ 572.923908][T27269] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 573.083836][T27269] usb 14-1: Using ep0 maxpacket: 32 [ 573.092502][T27269] usb 14-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 573.096454][T27269] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.099898][T27269] usb 14-1: Product: syz [ 573.101528][T27269] usb 14-1: Manufacturer: syz [ 573.103444][T27269] usb 14-1: SerialNumber: syz [ 573.109765][T27269] usb 14-1: config 0 descriptor?? [ 573.116046][T27269] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 573.119277][T27269] dvb-usb: bulk message failed: -22 (4/0) [ 573.121639][T27269] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 573.126401][T27269] dvb-usb: bulk message failed: -22 (5/0) [ 573.128705][T27269] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 573.138251][T27269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.142953][T27269] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 573.146527][T27269] usb 14-1: media controller created [ 573.157838][T27269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.172814][T27269] usb 14-1: selecting invalid altsetting 3 [ 573.175593][T27269] ttusb2: set interface to alts=3 failed [ 573.203959][T27269] DVB: Unable to find symbol tda10086_attach() [ 573.206697][T27269] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 573.210770][T27269] dvb-usb: bulk message failed: -22 (4/0) [ 573.213235][T27269] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 573.217754][T27269] dvb-usb: bulk message failed: -22 (5/0) [ 573.220200][T27269] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 573.224723][T27269] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 573.326737][T29892] ttusb2: i2c rd len=58 too high [ 573.332435][T27269] usb 14-1: USB disconnect, device number 5 [ 573.357886][T27269] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 573.850074][T29921] binder_alloc: binder_alloc_mmap_handler: 29920 80ffd000-81000000 already mapped failed -16 [ 574.172425][T29952] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10987'. [ 574.180956][T29952] netlink: 3 bytes leftover after parsing attributes in process `syz.9.10987'. [ 574.192429][T29954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10988'. [ 574.206274][T29954] netlink: 43 bytes leftover after parsing attributes in process `syz.7.10988'. [ 574.210244][T29954] netlink: 'syz.7.10988': attribute type 6 has an invalid length. [ 574.220503][T29954] netlink: 'syz.7.10988': attribute type 5 has an invalid length. [ 574.226345][T29954] netlink: 43 bytes leftover after parsing attributes in process `syz.7.10988'. [ 574.240970][T29959] netlink: 'syz.9.10990': attribute type 1 has an invalid length. [ 574.246561][T29959] netlink: 'syz.9.10990': attribute type 1 has an invalid length. [ 574.249807][T29959] netlink: 'syz.9.10990': attribute type 8 has an invalid length. [ 574.289747][T29963] program syz.8.10992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.651904][T30005] netlink: 'syz.9.11011': attribute type 1 has an invalid length. [ 574.655442][T30005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.793736][T27269] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 574.946388][T27269] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 574.950270][T27269] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 574.958184][T27269] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.963482][T27269] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.972638][T27269] usb 12-1: Product: syz [ 574.977655][T27269] usb 12-1: Manufacturer: syz [ 574.981453][T27269] usb 12-1: SerialNumber: syz [ 574.988473][T27269] usb 12-1: config 0 descriptor?? [ 575.212411][T30025] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.215627][T30025] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.409244][T27269] usb 12-1: USB disconnect, device number 7 [ 575.523127][T30025] bridge_slave_0: left allmulticast mode [ 575.526534][T30025] bridge_slave_0: left promiscuous mode [ 575.529459][T30025] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.537525][T30025] bridge_slave_1: left allmulticast mode [ 575.539636][T30025] bridge_slave_1: left promiscuous mode [ 575.541858][T30025] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.561422][T30025] bond0: (slave bond_slave_0): Releasing backup interface [ 575.571168][T30025] bond0: (slave bond_slave_1): Releasing backup interface [ 575.580715][T30025] team0: Port device team_slave_0 removed [ 575.588046][T30025] team0: Port device team_slave_1 removed [ 575.596175][T30025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.612966][T30025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.620986][T30025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.626966][T30025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.637078][T30025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.335430][T30105] binder: 30103:30105 ioctl c00c620f 80000000 returned -22 [ 576.440343][T30115] netlink: 'syz.9.11068': attribute type 7 has an invalid length. [ 576.443431][T30115] netlink: 'syz.9.11068': attribute type 8 has an invalid length. [ 576.608097][T30130] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.610789][T30130] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.654400][T30130] bridge_slave_0: left allmulticast mode [ 576.657072][T30130] bridge_slave_0: left promiscuous mode [ 576.659232][T30130] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.669817][T30130] bridge_slave_1: left allmulticast mode [ 576.672348][T30130] bridge_slave_1: left promiscuous mode [ 576.675300][T30130] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.688199][T30130] bond0: (slave bond_slave_0): Releasing backup interface [ 576.700131][T30130] bond0: (slave bond_slave_1): Releasing backup interface [ 576.711033][T30130] team0: Port device team_slave_0 removed [ 576.719155][T30130] team0: Port device team_slave_1 removed [ 576.723754][T30130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.727681][T30130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.733957][T30130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.739965][T30130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.749908][T30130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.841960][T30139] __nla_validate_parse: 5 callbacks suppressed [ 576.841978][T30139] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11085'. [ 576.898551][T30144] binder: 30143:30144 ioctl c00c620f 80000000 returned -22 [ 576.991785][T30155] ptrace attach of "/syz-executor exec"[27019] was attempted by ""[30155] [ 576.997667][T30156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11081'. [ 577.385768][T30203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11109'. [ 577.884208][T30251] input: syz0 as /devices/virtual/input/input39 [ 577.991331][T30242] bond0: (slave bond_slave_0): Releasing backup interface [ 578.024544][T30242] bond0: (slave bond_slave_1): Releasing backup interface [ 578.049295][T30242] team0: Port device team_slave_0 removed [ 578.064492][T30242] team0: Port device team_slave_1 removed [ 578.071993][T30242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.083571][T30242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.098021][T30242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.113298][T30242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.125729][T30242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.263892][T30281] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 578.539334][T30299] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.542004][T30299] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.579622][T30299] bridge_slave_0: left allmulticast mode [ 578.581675][T30299] bridge_slave_0: left promiscuous mode [ 578.584181][T30299] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.590336][T30299] bridge_slave_1: left allmulticast mode [ 578.592160][T30299] bridge_slave_1: left promiscuous mode [ 578.594404][T30299] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.600243][T30299] bond0: (slave bond_slave_0): Releasing backup interface [ 578.605317][T30299] bond0: (slave bond_slave_1): Releasing backup interface [ 578.611803][T30299] team0: Port device team_slave_0 removed [ 578.621062][T30299] team0: Port device team_slave_1 removed [ 578.628769][T30299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.634789][T30299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.641394][T30299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.647372][T30299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.658340][T30299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 579.578312][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11181'. [ 579.711117][ T40] audit: type=1326 audit(1775411984.384:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.7.11160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7fc00000 [ 580.867900][ T40] audit: type=1800 audit(1775411985.544:312): pid=30383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.11191" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 581.330073][T30422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11208'. [ 581.855823][T30459] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11228'. [ 582.964570][T30557] binder: 30555:30557 ioctl c0306201 80000480 returned -22 [ 583.214096][T27269] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 583.284238][T27082] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 583.377741][T27269] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 583.382430][T27269] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.389175][T27269] usb 14-1: Product: syz [ 583.391330][T27269] usb 14-1: Manufacturer: syz [ 583.393353][T27269] usb 14-1: SerialNumber: syz [ 583.404194][T27269] usb 14-1: config 0 descriptor?? [ 583.443760][T27082] usb 7-1: Using ep0 maxpacket: 16 [ 583.451987][T27082] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 583.458401][T27082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.461374][T27082] usb 7-1: Product: syz [ 583.463023][T27082] usb 7-1: Manufacturer: syz [ 583.471785][T27082] usb 7-1: SerialNumber: syz [ 583.612781][T27206] usb 14-1: USB disconnect, device number 6 [ 583.688794][T27082] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 583.695163][T27082] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.699573][T27082] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 583.703173][T27082] usb 7-1: media controller created [ 583.712976][T27082] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.724059][ T72] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 583.873837][ T72] usb 12-1: Using ep0 maxpacket: 32 [ 583.880363][ T72] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 583.885150][ T72] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 583.892344][ T72] usb 12-1: string descriptor 0 read error: -22 [ 583.895488][ T72] usb 12-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 583.899120][ T72] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.906298][T30583] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 583.911638][ T72] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.914566][ T72] usb 12-1: MIDIStreaming interface descriptor not found [ 583.936489][T27082] zl10353_read_register: readreg error (reg=127, ret==-110) [ 583.974931][T27082] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 583.983425][T27082] usb 7-1: USB disconnect, device number 11 [ 584.065144][T30595] blkio.reset_stats is deprecated [ 584.134132][ T72] usb 12-1: USB disconnect, device number 8 [ 584.507338][T30613] binder: 30612:30613 ioctl c0306201 80000480 returned -22 [ 584.773032][T30644] binder: 30643:30644 ioctl c0306201 80000480 returned -22 [ 585.133967][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 585.164067][T27269] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 585.283839][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 585.289256][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 585.293939][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 585.300585][ T9] usb 7-1: string descriptor 0 read error: -22 [ 585.303063][ T9] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 585.306696][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.313484][T30656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 585.319290][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.323774][T27269] usb 12-1: Using ep0 maxpacket: 16 [ 585.323843][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 585.327661][T27269] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 585.333011][T27269] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 585.339576][T27269] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.347735][T27269] usb 12-1: config 1 interface 0 has no altsetting 0 [ 585.355682][T27269] usb 12-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 585.359498][T27269] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.362550][T27269] usb 12-1: Product: syz [ 585.364931][T27269] usb 12-1: Manufacturer: syz [ 585.366993][T27269] usb 12-1: SerialNumber: syz [ 585.545113][T27082] usb 7-1: USB disconnect, device number 12 [ 585.585295][T27269] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 585.792246][ T6010] usb 12-1: USB disconnect, device number 9 [ 585.798881][ T6010] usblp0: removed [ 586.383782][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 586.535133][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 586.539235][ T9] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 586.543480][ T9] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 586.550107][ T9] usb 13-1: string descriptor 0 read error: -22 [ 586.552409][ T9] usb 13-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 586.557029][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.564892][T30695] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 586.576580][ T9] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.579493][ T9] usb 13-1: MIDIStreaming interface descriptor not found [ 586.785040][ T72] usb 13-1: USB disconnect, device number 2 [ 587.956847][T30774] input: syz0 as /devices/virtual/input/input43 [ 588.018901][T30779] cifs: Unknown parameter 'mode' [ 588.140975][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11368'. [ 588.145088][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11368'. [ 588.442314][T30803] netlink: 3 bytes leftover after parsing attributes in process `syz.8.11375'. [ 588.459557][T30803] netlink: 3 bytes leftover after parsing attributes in process `syz.8.11375'. [ 588.533869][T27269] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 588.714173][T27269] usb 12-1: Using ep0 maxpacket: 8 [ 588.718047][T27269] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 588.721561][T27269] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 588.733503][T27269] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.741697][T27269] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.746075][T27269] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.750063][T30824] batman_adv: batadv0: Adding interface: gretap1 [ 588.751068][T27269] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 588.757363][T30824] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.757730][T27269] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.769824][T30824] batman_adv: batadv0: Interface activated: gretap1 [ 588.953789][ T9] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 589.060556][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11391'. [ 589.115622][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 589.119839][ T9] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 589.124080][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.138413][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 589.141344][ T9] pvrusb2: ********** [ 589.143030][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 589.150134][ T9] pvrusb2: Important functionality might not be entirely working. [ 589.153338][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 589.158465][ T9] pvrusb2: ********** [ 589.187757][ T72] usb 12-1: USB disconnect, device number 10 [ 589.342601][ T2484] pvrusb2: Invalid write control endpoint [ 589.373498][ T2484] pvrusb2: Invalid write control endpoint [ 589.376214][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.380002][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.383145][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.387041][ T2484] pvrusb2: Device being rendered inoperable [ 589.392588][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 589.396557][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 589.402281][ T2484] pvrusb2: Attached sub-driver cx25840 [ 589.404822][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.409953][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 589.543076][ T72] usb 14-1: USB disconnect, device number 7 [ 590.142196][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11402'. [ 590.323766][T27269] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 590.458875][T30872] netlink: 'syz.2.11407': attribute type 1 has an invalid length. [ 590.461998][T30872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11407'. [ 590.465186][T30872] netlink: 'syz.2.11407': attribute type 1 has an invalid length. [ 590.467836][T30872] netlink: 'syz.2.11407': attribute type 8 has an invalid length. [ 590.470313][T30872] netlink: 582 bytes leftover after parsing attributes in process `syz.2.11407'. [ 590.474093][T27269] usb 14-1: Using ep0 maxpacket: 32 [ 590.474380][T30872] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11407'. [ 590.479202][T27269] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 590.485177][T27269] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 590.491353][T27269] usb 14-1: string descriptor 0 read error: -22 [ 590.496805][T27269] usb 14-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 590.500763][T27269] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.516703][T30846] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 590.522163][T27269] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.525213][T27269] usb 14-1: MIDIStreaming interface descriptor not found [ 590.745974][ T6010] usb 14-1: USB disconnect, device number 8 [ 590.942500][ T9] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 590.954440][T27269] kernel write not supported for file /input/mouse0 (pid: 27269 comm: kworker/3:7) [ 591.042717][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11418'. [ 591.105662][ T9] usb 7-1: config 0 has no interfaces? [ 591.107490][ T9] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 591.110401][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.126415][ T9] usb 7-1: config 0 descriptor?? [ 591.362219][T30912] binder: 30911:30912 ioctl c0306201 800002c0 returned -14 [ 591.416172][ T6010] usb 7-1: USB disconnect, device number 13 [ 591.585853][T30926] loop6: detected capacity change from 0 to 8 [ 591.807097][T30926] loop6: detected capacity change from 8 to 7 [ 591.818861][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.822837][ C0] buffer_io_error: 23 callbacks suppressed [ 591.822855][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.831394][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.835490][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.840861][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.844826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.848832][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.852866][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.856546][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.860527][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.873146][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.876511][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.879468][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.883436][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.887242][T30926] ldm_validate_partition_table(): Disk read failed. [ 591.892243][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.896285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.899854][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.903914][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.907896][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 591.912046][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.915836][T30926] Dev loop6: unable to read RDB block 0 [ 591.919218][T30926] loop6: unable to read partition table [ 591.921746][T30926] loop6: partition table beyond EOD, truncated [ 591.925352][T30926] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 591.925352][T30926] .BL_se) failed (rc=-5) [ 592.393259][T30975] kvm: kvm [30974]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7 [ 592.470120][T30985] tmpfs: Too few inodes for current use [ 592.567718][T30995] loop5: detected capacity change from 0 to 7 [ 592.576025][T30995] ldm_validate_partition_table(): Disk read failed. [ 592.579345][T30995] Dev loop5: unable to read RDB block 0 [ 592.585652][T30995] loop5: unable to read partition table [ 592.588511][T30995] loop5: partition table beyond EOD, truncated [ 592.591314][T30995] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 592.702156][T31011] binder: 31010:31011 ioctl c0306201 0 returned -14 [ 594.824507][T31099] vlan2: entered allmulticast mode [ 594.826838][T31099] veth0_to_bond: entered allmulticast mode [ 594.897517][T23542] Bluetooth: hci1: Frame reassembly failed (-84) [ 595.112326][T31108] netlink: 'syz.9.11517': attribute type 21 has an invalid length. [ 595.116075][T31108] __nla_validate_parse: 2 callbacks suppressed [ 595.116092][T31108] netlink: 128 bytes leftover after parsing attributes in process `syz.9.11517'. [ 595.123348][T31108] netlink: 3 bytes leftover after parsing attributes in process `syz.9.11517'. [ 595.613900][T27015] Bluetooth: hci0: command 0x1003 tx timeout [ 595.614013][T26997] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 595.812617][T27010] kernel read not supported for file /dsp (pid: 27010 comm: kworker/1:7) [ 596.059750][T31150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11537'. [ 596.790947][T31169] netlink: 'syz.7.11546': attribute type 11 has an invalid length. [ 596.832837][ T40] audit: type=1326 audit(1775412001.504:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.840355][ T40] audit: type=1326 audit(1775412001.504:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.848197][ T40] audit: type=1326 audit(1775412001.514:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.855341][ T40] audit: type=1326 audit(1775412001.514:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.862243][ T40] audit: type=1326 audit(1775412001.514:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.871634][ T40] audit: type=1326 audit(1775412001.514:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.881685][ T40] audit: type=1326 audit(1775412001.514:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.890766][ T40] audit: type=1326 audit(1775412001.514:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.900021][ T40] audit: type=1326 audit(1775412001.514:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.909222][ T40] audit: type=1326 audit(1775412001.514:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31171 comm="syz.7.11547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 596.949962][T31178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11550'. [ 596.984358][ T5941] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 596.985272][T26997] Bluetooth: hci1: command 0xfc11 tx timeout [ 597.050117][T31182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11552'. [ 597.236323][T31194] can0: slcan on ttyS3. [ 597.326141][T31194] can0 (unregistered): slcan off ttyS3. [ 597.733746][T27010] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 597.883838][T27010] usb 12-1: Using ep0 maxpacket: 32 [ 597.893381][T27010] usb 12-1: config index 0 descriptor too short (expected 35577, got 27) [ 597.902460][T27010] usb 12-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 597.906775][T27010] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.914215][T27010] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 597.919383][T27010] usb 12-1: config 1 has no interface number 0 [ 597.924601][T27010] usb 12-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 597.931057][T27010] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.953411][T27010] snd_usb_pod 12-1:1.1: Line 6 Pocket POD found [ 598.158921][T27010] snd_usb_pod 12-1:1.1: set_interface failed [ 598.164221][T27010] snd_usb_pod 12-1:1.1: Line 6 Pocket POD now disconnected [ 598.169181][T27010] snd_usb_pod 12-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 598.181495][T27010] usb 12-1: USB disconnect, device number 11 [ 598.323989][ T72] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 598.483819][ T72] usb 14-1: Using ep0 maxpacket: 32 [ 598.490166][ T72] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 598.495152][ T72] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 598.501907][ T72] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 598.506163][ T72] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 598.509780][ T72] usb 14-1: Product: syz [ 598.511630][ T72] usb 14-1: Manufacturer: syz [ 598.513760][ T72] usb 14-1: SerialNumber: syz [ 598.518488][ T72] usb 14-1: config 0 descriptor?? [ 598.522735][T31237] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 598.738782][T27269] usb 14-1: USB disconnect, device number 9 [ 600.186555][T31279] dvmrp0: entered allmulticast mode [ 600.291214][ T12] dvmrp0 (unregistering): left allmulticast mode [ 600.355655][T31293] loop9: detected capacity change from 0 to 524287999 [ 600.790835][T31324] batadv_slave_0: entered promiscuous mode [ 600.883819][T27269] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 600.883890][T31330] binder: 31329:31330 ioctl c0306201 80000080 returned -14 [ 601.053888][T27269] usb 14-1: Using ep0 maxpacket: 16 [ 601.059797][T27269] usb 14-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 601.063926][T27269] usb 14-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 601.067317][T27269] usb 14-1: Product: syz [ 601.068983][T27269] usb 14-1: Manufacturer: syz [ 601.070825][T27269] usb 14-1: SerialNumber: syz [ 601.076917][T27269] usb 14-1: config 0 descriptor?? [ 601.174443][ T72] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 601.288585][T27269] usb 14-1: USB disconnect, device number 10 [ 601.364246][ T72] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.368384][ T72] usb 13-1: config 0 has no interfaces? [ 601.370701][ T72] usb 13-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 601.374784][ T72] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.386672][ T72] usb 13-1: config 0 descriptor?? [ 601.697391][ T72] usb 13-1: USB disconnect, device number 3 [ 603.615221][T31381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11646'. [ 603.622938][T31383] ubi16: attaching mtd0 [ 603.626970][T31383] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 603.839556][T31396] bond1: entered promiscuous mode [ 604.127338][T31416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11660'. [ 604.132460][T31416] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11660'. [ 604.970390][T31464] sp0: Synchronizing with TNC [ 604.984646][T31463] [U] `` [ 605.316931][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11696'. [ 605.537797][T31511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11704'. [ 605.741315][T31528] netlink: 'syz.8.11711': attribute type 1 has an invalid length. [ 605.746186][T31528] netlink: 'syz.8.11711': attribute type 2 has an invalid length. [ 605.748860][T31528] netlink: 'syz.8.11711': attribute type 1 has an invalid length. [ 605.751475][T31528] netlink: 'syz.8.11711': attribute type 3 has an invalid length. [ 605.754343][T31528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11711'. [ 606.080235][T31549] batadv_slave_1: entered promiscuous mode [ 606.083514][T31549] batadv_slave_1: left promiscuous mode [ 606.114407][T31552] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11723'. [ 606.211988][T31564] netlink: 'syz.7.11729': attribute type 1 has an invalid length. [ 606.317060][T31575] macvlan3: entered promiscuous mode [ 606.319487][T31575] bridge0: entered promiscuous mode [ 606.346106][T31579] block nbd9: NBD_DISCONNECT [ 606.419453][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 606.419470][ T40] audit: type=1326 audit(1775412011.094:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31587 comm="syz.9.11741" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 607.380492][T31631] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11760'. [ 607.384571][T31631] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11760'. [ 607.431925][T31635] netlink: 'syz.2.11762': attribute type 4 has an invalid length. [ 607.820240][ T40] audit: type=1800 audit(1775412012.494:326): pid=31658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11773" name="file0" dev="9p" ino=79431157 res=0 errno=0 [ 607.940289][T31665] netlink: 'syz.8.11777': attribute type 3 has an invalid length. [ 607.943779][T31665] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11777'. [ 608.266371][T31686] overlayfs: upper fs does not support file handles, falling back to index=off. [ 608.269622][T31686] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 608.379833][T31694] bond0: (slave macvlan4): Opening slave failed [ 608.949529][T31716] veth1_macvtap: left promiscuous mode [ 608.951479][T31716] macsec0: entered promiscuous mode [ 608.958883][T31716] veth1_macvtap: entered promiscuous mode [ 608.960865][T31716] macsec0: left promiscuous mode [ 609.008613][T31718] tun0: tun_chr_ioctl cmd 1074025676 [ 609.010914][T31718] tun0: owner set to 0 [ 609.366817][T27269] kernel read not supported for file /vcs (pid: 27269 comm: kworker/3:7) [ 609.397833][T31745] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.494870][T31749] kvm_intel: kvm [31748]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 609.662315][T31765] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 609.664920][T31765] dvmrp1: linktype set to 804 [ 609.834300][T31779] o2cb: This node has not been configured. [ 609.836329][T31779] o2cb: Cluster check failed. Fix errors before retrying. [ 609.839556][T31779] (syz.7.11829,31779,2):user_dlm_register:674 ERROR: status = -22 [ 609.842297][T31779] (syz.7.11829,31779,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 610.366132][T31819] __nla_validate_parse: 1 callbacks suppressed [ 610.366145][T31819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11847'. [ 610.466252][ T72] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 610.615377][ T72] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 610.618608][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 610.623452][ T72] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.628902][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.633715][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 610.639413][ T72] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 610.642575][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 610.647426][ T72] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.652246][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.658461][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 610.664398][ T72] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 610.667579][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 610.672168][ T72] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.677100][T31840] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11857'. [ 610.681375][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.686146][ T72] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 610.694191][ T72] usb 7-1: string descriptor 0 read error: -22 [ 610.697079][ T72] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.700820][ T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.712654][ T72] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 610.916625][T27269] usb 7-1: USB disconnect, device number 14 [ 611.484651][T27236] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 611.643778][T27236] usb 13-1: Using ep0 maxpacket: 32 [ 611.655093][T27236] usb 13-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 611.659590][T27236] usb 13-1: config 1 interface 0 has no altsetting 0 [ 611.665571][T27236] usb 13-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 611.669483][T27236] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.672915][T27236] usb 13-1: Product: syz [ 611.679008][T27236] usb 13-1: Manufacturer: syz [ 611.681139][T27236] usb 13-1: SerialNumber: syz [ 611.890448][ T5941] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 611.890491][ T5941] Bluetooth: hci2: Dropping invalid advertising data [ 611.895460][ T5941] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 611.895473][ T5941] Bluetooth: hci2: Malformed LE Event: 0x02 [ 611.902116][T27236] usbhid 13-1:1.0: can't add hid device: -71 [ 611.905368][T27236] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 611.911332][T27236] usb 13-1: USB disconnect, device number 4 [ 612.707526][T31932] dummy0: entered promiscuous mode [ 612.712461][T31932] macvlan4: entered promiscuous mode [ 612.715405][T31932] macvlan4: entered allmulticast mode [ 612.718273][T31932] dummy0: entered allmulticast mode [ 613.073798][T27010] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 613.227338][T27010] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 613.230998][T27010] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.234396][T27010] usb 12-1: Product: syz [ 613.235768][T27010] usb 12-1: Manufacturer: syz [ 613.237271][T27010] usb 12-1: SerialNumber: syz [ 613.244311][T27010] usb 12-1: config 0 descriptor?? [ 613.458672][T27236] usb 12-1: USB disconnect, device number 12 [ 613.914147][T27236] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 614.083850][T27236] usb 13-1: Using ep0 maxpacket: 16 [ 614.090196][T27236] usb 13-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 614.094485][T27236] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.097858][T27236] usb 13-1: Product: syz [ 614.099628][T27236] usb 13-1: Manufacturer: syz [ 614.101581][T27236] usb 13-1: SerialNumber: syz [ 614.330713][T27236] usb 13-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 614.338371][T27236] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 614.342493][T27236] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 614.348799][T27236] usb 13-1: media controller created [ 614.359302][T27236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.461663][T31996] cifs: Unknown parameter 'mode' [ 614.575146][T27236] zl10353_read_register: readreg error (reg=127, ret==-110) [ 614.590653][T27236] dvb_usb_gl861 13-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 614.594609][T27236] usb 13-1: USB disconnect, device number 5 [ 614.893825][T27010] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 615.067650][T27010] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 615.071648][T27010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.075148][T27010] usb 7-1: Product: syz [ 615.076937][T27010] usb 7-1: Manufacturer: syz [ 615.078941][T27010] usb 7-1: SerialNumber: syz [ 615.083365][T27010] usb 7-1: config 0 descriptor?? [ 615.296788][T27269] usb 7-1: USB disconnect, device number 15 [ 615.506179][T32032] batman_adv: batadv0: Adding interface: gretap1 [ 615.508223][T32032] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.519669][T32032] batman_adv: batadv0: Interface activated: gretap1 [ 615.605135][T32041] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11946'. [ 615.607983][T32041] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11946'. [ 616.056994][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11955'. [ 616.096893][T32079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11956'. [ 616.160545][T32083] netlink: 'syz.8.11961': attribute type 1 has an invalid length. [ 616.163490][T32083] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11961'. [ 616.169036][T32083] netlink: 'syz.8.11961': attribute type 1 has an invalid length. [ 616.172657][T32083] netlink: 'syz.8.11961': attribute type 8 has an invalid length. [ 616.175755][T32083] netlink: 582 bytes leftover after parsing attributes in process `syz.8.11961'. [ 616.178612][T32083] netlink: 1 bytes leftover after parsing attributes in process `syz.8.11961'. [ 616.426231][ T72] kernel write not supported for file /input/mouse0 (pid: 72 comm: kworker/2:2) [ 616.501317][T32122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11977'. [ 616.630038][T32130] binder: 32129:32130 ioctl c0306201 800002c0 returned -14 [ 616.783851][T27236] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 616.954014][T27236] usb 14-1: Using ep0 maxpacket: 8 [ 616.957839][T27236] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 616.961344][T27236] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.966335][T27236] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 616.970061][T27236] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.973307][T27236] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.978989][T27236] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 616.982854][T27236] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.364515][T27269] usb 12-1: new full-speed USB device number 13 using dummy_hcd [ 617.407935][T27010] usb 14-1: USB disconnect, device number 11 [ 617.515580][T27269] usb 12-1: config 0 has no interfaces? [ 617.517380][T27269] usb 12-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 617.520290][T27269] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.524955][T27269] usb 12-1: config 0 descriptor?? [ 617.573749][T27082] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 617.723764][T27082] usb 7-1: Using ep0 maxpacket: 8 [ 617.727209][T27082] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 617.730290][T27082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.739369][T27082] pvrusb2: Hardware description: Terratec Grabster AV400 [ 617.740104][T27236] usb 12-1: USB disconnect, device number 13 [ 617.742057][T27082] pvrusb2: ********** [ 617.745423][T27082] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 617.749590][T27082] pvrusb2: Important functionality might not be entirely working. [ 617.752667][T27082] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 617.756659][T27082] pvrusb2: ********** [ 617.945393][ T2484] pvrusb2: Invalid write control endpoint [ 617.969594][ T2484] pvrusb2: Invalid write control endpoint [ 617.971467][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 617.975768][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 617.978595][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 617.981802][ T2484] pvrusb2: Device being rendered inoperable [ 617.984548][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 617.987088][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 617.996936][ T2484] pvrusb2: Attached sub-driver cx25840 [ 617.998801][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 618.002061][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 618.147233][T27236] usb 7-1: USB disconnect, device number 16 [ 618.249030][ C0] blk_print_req_error: 31 callbacks suppressed [ 618.249043][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.254300][ C0] buffer_io_error: 30 callbacks suppressed [ 618.254311][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.258746][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.261753][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 618.264350][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.267814][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 618.270504][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.274107][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 618.276872][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.280756][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 618.283476][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.286825][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 618.289331][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.292380][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 618.295383][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.298418][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.301097][ C2] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.304189][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 618.306683][ C2] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.309667][ C2] Buffer I/O error on dev loop6, logical block 2, async page read [ 618.319623][ T5343] ldm_validate_partition_table(): Disk read failed. [ 618.328286][ T5343] Dev loop6: unable to read RDB block 0 [ 618.333605][ T5343] loop6: unable to read partition table [ 618.337582][ T5343] loop6: partition table beyond EOD, truncated [ 618.560171][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12009'. [ 618.671684][T32209] tmpfs: Too few inodes for current use [ 618.711947][T32214] kvm: kvm [32212]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7 [ 619.071186][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12031'. [ 619.228380][T32256] loop5: detected capacity change from 0 to 7 [ 619.234693][T27606] ldm_validate_partition_table(): Disk read failed. [ 619.264123][T27606] Dev loop5: unable to read RDB block 0 [ 619.277227][T27606] loop5: unable to read partition table [ 619.279473][T27606] loop5: partition table beyond EOD, truncated [ 619.346116][T32256] ldm_validate_partition_table(): Disk read failed. [ 619.348674][T32256] Dev loop5: unable to read RDB block 0 [ 619.350970][T32256] loop5: unable to read partition table [ 619.352884][T32256] loop5: partition table beyond EOD, truncated [ 619.355412][T32256] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 620.066870][T32318] binder: 32316:32318 ioctl c0306201 0 returned -14 [ 620.150960][T32329] vlan2: entered allmulticast mode [ 620.153252][T32329] veth0_to_bond: entered allmulticast mode [ 621.266604][ T72] kernel read not supported for file /dsp (pid: 72 comm: kworker/2:2) [ 621.316081][T32371] input: syz0 as /devices/virtual/input/input47 [ 621.736634][T32398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12104'. [ 621.740408][T32398] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12104'. [ 621.987031][T32417] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 622.833730][T32430] can0: slcan on ttyS3. [ 622.967052][T32430] can0 (unregistered): slcan off ttyS3. [ 623.033433][T32451] netlink: 'syz.8.12124': attribute type 11 has an invalid length. [ 623.112123][T26998] Bluetooth: hci0: Frame reassembly failed (-84) [ 625.133991][T26997] Bluetooth: hci0: command 0x1003 tx timeout [ 625.138732][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 625.494900][T27236] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 625.673929][T27236] usb 7-1: Using ep0 maxpacket: 32 [ 625.677522][T27236] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 625.680173][T27236] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 625.686177][T27236] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.689328][T27236] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 625.690242][T32503] binder: 32501:32503 ioctl c0306201 80000080 returned -14 [ 625.690365][T32502] loop9: detected capacity change from 0 to 524287999 [ 625.692124][T27236] usb 7-1: config 1 has no interface number 0 [ 625.699847][T27236] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 625.702722][T27236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.717404][T27236] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 625.913128][T27236] snd_usb_pod 7-1:1.1: set_interface failed [ 625.917366][T27236] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 625.919740][T27236] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 625.924151][T27236] usb 7-1: USB disconnect, device number 17 [ 626.136335][T32520] dvmrp0: entered allmulticast mode [ 626.353862][T27236] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 626.506925][T27236] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.511076][T27236] usb 14-1: config 0 has no interfaces? [ 626.513578][T27236] usb 14-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 626.517539][T27236] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.523013][T27236] usb 14-1: config 0 descriptor?? [ 626.737117][T27082] usb 14-1: USB disconnect, device number 12 [ 627.357040][T27082] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 627.503759][T27082] usb 13-1: Using ep0 maxpacket: 32 [ 627.507820][T27082] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 627.511971][T27082] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 627.517957][T27082] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 627.520820][T27082] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 627.523529][T27082] usb 13-1: Product: syz [ 627.525198][T27082] usb 13-1: Manufacturer: syz [ 627.526705][T27082] usb 13-1: SerialNumber: syz [ 627.529475][T27082] usb 13-1: config 0 descriptor?? [ 627.531509][T32534] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 627.660302][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12164'. [ 627.741355][T27082] usb 13-1: USB disconnect, device number 6 [ 628.253106][T32552] batman_adv: batadv0: Adding interface: gretap1 [ 628.255782][T32552] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.265634][T32552] batman_adv: batadv0: Interface activated: gretap1 [ 628.398532][T32567] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12174'. [ 628.526833][T32583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12178'. [ 628.793792][ T72] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 628.955306][ T72] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 628.958038][ T72] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 628.961487][ T72] usb 13-1: config 0 interface 0 has no altsetting 0 [ 628.965705][ T72] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 628.968560][ T72] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 628.971333][ T72] usb 13-1: Product: syz [ 628.972777][ T72] usb 13-1: Manufacturer: syz [ 628.974428][ T72] usb 13-1: SerialNumber: syz [ 628.977397][ T72] usb 13-1: config 0 descriptor?? [ 628.980684][ T72] hub 13-1:0.0: bad descriptor, ignoring hub [ 628.982948][ T72] hub 13-1:0.0: probe with driver hub failed with error -5 [ 628.986784][ T72] usb 13-1: selecting invalid altsetting 0 [ 629.387757][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.615862][T32587] usb 13-1: reset high-speed USB device number 7 using dummy_hcd [ 629.778654][T32587] usb 13-1: device firmware changed [ 629.782903][T27010] usb 13-1: USB disconnect, device number 7 [ 629.933772][T27010] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 630.084893][T27010] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 630.087412][T27010] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 630.090409][T27010] usb 13-1: config 0 interface 0 has no altsetting 0 [ 630.095088][T27010] usb 13-1: string descriptor 0 read error: -22 [ 630.097046][T27010] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.099783][T27010] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.104027][T27010] usb 13-1: config 0 descriptor?? [ 630.107622][T27010] hub 13-1:0.0: bad descriptor, ignoring hub [ 630.109487][T27010] hub 13-1:0.0: probe with driver hub failed with error -5 [ 630.113459][T27010] usb 13-1: selecting invalid altsetting 0 [ 630.415768][T27082] usb 13-1: USB disconnect, device number 8 [ 630.857245][T32605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12184'. [ 631.153753][T27010] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 631.164474][ T6010] usb 14-1: new full-speed USB device number 13 using dummy_hcd [ 631.313845][T27010] usb 13-1: Using ep0 maxpacket: 8 [ 631.317760][ T6010] usb 14-1: config 0 has no interfaces? [ 631.320067][T27010] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 631.322800][T27010] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.326435][ T6010] usb 14-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 631.329778][ T6010] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.333286][T27010] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.337866][ T6010] usb 14-1: config 0 descriptor?? [ 631.339960][T27010] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.345171][T27010] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.349714][T27010] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.353258][T27010] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.437491][ T6010] kernel read not supported for file /dsp (pid: 6010 comm: kworker/1:4) [ 631.551433][ T6010] usb 14-1: USB disconnect, device number 13 [ 631.770554][ T6010] usb 13-1: USB disconnect, device number 9 [ 632.107708][T32625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12203'. [ 632.109767][T32624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12202'. [ 632.433944][ T6010] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 632.599681][T32649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12207'. [ 632.614847][ T6010] usb 12-1: Using ep0 maxpacket: 8 [ 632.623977][ T6010] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 632.627543][ T6010] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.645097][ T6010] pvrusb2: Hardware description: Terratec Grabster AV400 [ 632.651060][ T6010] pvrusb2: ********** [ 632.653497][ T6010] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 632.665806][ T6010] pvrusb2: Important functionality might not be entirely working. [ 632.668161][ T6010] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 632.671551][ T6010] pvrusb2: ********** [ 632.844655][ T2484] pvrusb2: Invalid write control endpoint [ 632.883812][ T2484] pvrusb2: Invalid write control endpoint [ 632.886827][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 632.890647][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 632.893569][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 632.897889][ T2484] pvrusb2: Device being rendered inoperable [ 632.900715][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 632.903536][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 632.914470][ T2484] pvrusb2: Attached sub-driver cx25840 [ 632.916715][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 632.920257][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 633.004643][ T72] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 633.045982][T27192] usb 12-1: USB disconnect, device number 14 [ 633.173785][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 633.176802][ T72] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 633.179538][ T72] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.182725][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.186668][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.190664][ T72] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.194820][ T72] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.197609][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.612372][T27236] usb 7-1: USB disconnect, device number 18 [ 634.569860][T32737] dvmrp0: entered allmulticast mode [ 635.241181][ T305] dvmrp0: entered allmulticast mode [ 635.633430][ T327] o2cb: This node has not been configured. [ 635.635950][ T327] o2cb: Cluster check failed. Fix errors before retrying. [ 635.638827][ T327] (syz.2.12274,327,0):user_dlm_register:674 ERROR: status = -22 [ 635.642525][ T327] (syz.2.12274,327,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 635.833862][T27236] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 636.013777][T27236] usb 13-1: Using ep0 maxpacket: 16 [ 636.019734][T27236] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 636.023175][T27236] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 636.027145][T27236] usb 13-1: Product: syz [ 636.028680][T27236] usb 13-1: Manufacturer: syz [ 636.030409][T27236] usb 13-1: SerialNumber: syz [ 636.033481][T27236] usb 13-1: config 0 descriptor?? [ 636.244865][T27236] usb 13-1: USB disconnect, device number 10 [ 636.897156][ T368] can0: slcan on ttyS3. [ 637.013882][ T368] can0 (unregistered): slcan off ttyS3. [ 637.769152][ T399] dvmrp0: entered allmulticast mode [ 638.027835][T23542] dvmrp0 (unregistering): left allmulticast mode [ 638.037939][ T40] audit: type=1804 audit(1775412042.714:327): pid=409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.12308" name="/newroot/635/file0/file0" dev="9p" ino=79431157 res=1 errno=0 [ 638.632157][ T432] netlink: 52 bytes leftover after parsing attributes in process `syz.9.12309'. [ 639.000749][ T447] sp0: Synchronizing with TNC [ 639.016648][ T446] [U] `` [ 639.760799][ T457] netlink: 52 bytes leftover after parsing attributes in process `syz.8.12330'. [ 640.035154][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12337'. [ 640.888033][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12366'. [ 641.112834][ T555] netlink: 'syz.2.12374': attribute type 1 has an invalid length. [ 641.115804][ T555] netlink: 'syz.2.12374': attribute type 2 has an invalid length. [ 641.118687][ T555] netlink: 'syz.2.12374': attribute type 1 has an invalid length. [ 641.121569][ T555] netlink: 'syz.2.12374': attribute type 3 has an invalid length. [ 641.124679][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12374'. [ 641.507824][ T602] netlink: 'syz.9.12397': attribute type 1 has an invalid length. [ 641.820946][ T630] netlink: 'syz.8.12409': attribute type 1 has an invalid length. [ 641.839616][ T634] macvlan2: entered promiscuous mode [ 641.842111][ T634] bridge0: entered promiscuous mode [ 641.900241][ T639] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12412'. [ 642.034294][ T653] block nbd7: NBD_DISCONNECT [ 642.291085][ T672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12428'. [ 642.454654][ T40] audit: type=1326 audit(1775412047.134:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=691 comm="syz.2.12445" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cef6c code=0x0 [ 643.331469][ T714] macvlan3: entered promiscuous mode [ 643.333201][ T714] bridge0: entered promiscuous mode [ 643.649995][ T40] audit: type=1326 audit(1775412048.324:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=735 comm="syz.7.12455" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8f6c code=0x0 [ 643.658193][ T738] netlink: 236 bytes leftover after parsing attributes in process `syz.9.12456'. [ 643.661479][ T738] netlink: 236 bytes leftover after parsing attributes in process `syz.9.12456'. [ 644.188386][ T742] netlink: 'syz.9.12459': attribute type 4 has an invalid length. [ 644.501021][ T761] netlink: 236 bytes leftover after parsing attributes in process `syz.8.12468'. [ 644.504679][ T761] netlink: 236 bytes leftover after parsing attributes in process `syz.8.12468'. [ 644.582679][ T769] netlink: 'syz.8.12470': attribute type 4 has an invalid length. [ 644.811452][ T40] audit: type=1800 audit(1775412049.484:330): pid=793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12479" name="file0" dev="9p" ino=79431157 res=0 errno=0 [ 644.888214][ T800] netlink: 'syz.7.12486': attribute type 3 has an invalid length. [ 644.891309][ T800] netlink: 72 bytes leftover after parsing attributes in process `syz.7.12486'. [ 645.199599][ T40] audit: type=1800 audit(1775412049.874:331): pid=824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.12493" name="file0" dev="9p" ino=79431157 res=0 errno=0 [ 645.399162][ T828] netlink: 'syz.2.12497': attribute type 3 has an invalid length. [ 645.402538][ T828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12497'. [ 645.441312][ T832] overlayfs: upper fs does not support file handles, falling back to index=off. [ 645.445299][ T832] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 645.675234][ T848] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 645.771659][ T858] overlayfs: upper fs does not support file handles, falling back to index=off. [ 645.780816][ T858] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 645.967914][ T873] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.058333][ T879] bond0: (slave macvlan4): Opening slave failed [ 646.167387][T27082] kernel read not supported for file /vcs (pid: 27082 comm: kworker/3:5) [ 646.500259][ T907] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 646.502490][ T907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.505154][ T907] vhci_hcd vhci_hcd.0: Device attached [ 646.724556][ T39] kernel read not supported for file /vcs (pid: 39 comm: kworker/2:1) [ 646.754042][ T72] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 646.775070][T27192] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 646.814986][ T784] Bluetooth: hci2: command 0x0406 tx timeout [ 646.817879][ T784] Bluetooth: hci5: command 0x0406 tx timeout [ 646.820322][ T784] Bluetooth: hci6: command 0x0406 tx timeout [ 646.945626][T27192] usb 7-1: config 0 has no interfaces? [ 646.948471][T27192] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 646.951223][T27192] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 646.954313][T27192] usb 7-1: Manufacturer: syz [ 646.959159][T27192] usb 7-1: config 0 descriptor?? [ 647.144534][T27192] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 647.162976][ T908] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 647.163371][T27236] usb 7-1: USB disconnect, device number 19 [ 647.167006][T26995] vhci_hcd vhci_hcd.2: stop threads [ 647.167029][T26995] vhci_hcd vhci_hcd.2: release socket [ 647.170476][T26995] vhci_hcd vhci_hcd.2: disconnect device [ 647.201718][ T40] audit: type=1326 audit(1775412051.874:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 647.213811][ T40] audit: type=1326 audit(1775412051.874:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef88 code=0x7ffc0000 [ 647.220180][ T40] audit: type=1326 audit(1775412051.874:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 647.231669][ T40] audit: type=1326 audit(1775412051.884:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef88 code=0x7ffc0000 [ 647.238184][ T40] audit: type=1326 audit(1775412051.884:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 647.242499][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12553'. [ 647.244854][ T40] audit: type=1326 audit(1775412051.884:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef88 code=0x7ffc0000 [ 647.247386][ T949] netlink: 32 bytes leftover after parsing attributes in process `syz.9.12553'. [ 647.254312][ T40] audit: type=1326 audit(1775412051.884:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=942 comm="syz.9.12551" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdef88 code=0x7ffc0000 [ 647.264425][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12553'. [ 647.268332][ T949] netlink: 32 bytes leftover after parsing attributes in process `syz.9.12553'. [ 647.553784][T27082] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 647.613793][T27192] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 647.703892][T27082] usb 13-1: Using ep0 maxpacket: 8 [ 647.713000][T27082] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 647.716239][T27082] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 647.719433][T27082] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.722442][T27082] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.726956][T27082] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.730361][T27082] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.778650][T27192] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 647.782489][T27192] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.785922][T27192] usb 14-1: Product: syz [ 647.787488][T27192] usb 14-1: Manufacturer: syz [ 647.789231][T27192] usb 14-1: SerialNumber: syz [ 647.793119][T27192] usb 14-1: config 0 descriptor?? [ 647.940607][T27082] usb 13-1: GET_CAPABILITIES returned 0 [ 647.942479][T27082] usbtmc 13-1:16.0: can't read capabilities [ 647.999810][T27082] usb 14-1: USB disconnect, device number 14 [ 648.147243][T27269] usb 13-1: USB disconnect, device number 11 [ 648.686325][ T995] 9p: Invalid uid '0x00000000ffffffff' [ 648.894533][ T6010] kernel read not supported for file /dsp1 (pid: 6010 comm: kworker/1:4) [ 649.103948][T27269] usb 14-1: new full-speed USB device number 15 using dummy_hcd [ 649.131911][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12585'. [ 649.223583][ T1040] overlay: filesystem on ./bus not supported as upperdir [ 649.265647][T27269] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.269805][T27269] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.273489][T27269] usb 14-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 649.285321][T27269] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.290013][ T1048] input: syz1 as /devices/virtual/input/input49 [ 649.296250][T27269] usb 14-1: config 0 descriptor?? [ 649.305697][T27269] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 649.307951][T27269] dvb-usb: bulk message failed: -22 (3/0) [ 649.312104][T27269] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 649.318240][T27269] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 649.320456][T27269] usb 14-1: media controller created [ 649.322961][T27269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.332354][T27269] dvb-usb: bulk message failed: -22 (6/0) [ 649.335498][T27269] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 649.338990][T27269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input50 [ 649.345397][T27269] dvb-usb: schedule remote query interval to 150 msecs. [ 649.347502][T27269] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 649.506213][T27269] dvb-usb: bulk message failed: -22 (1/0) [ 649.508740][T27269] dvb-usb: error while querying for an remote control event. [ 649.516684][ T9] usb 14-1: USB disconnect, device number 15 [ 649.539450][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 650.371905][ T1109] 9p: Invalid uid '0x00000000ffffffff' [ 651.774464][T27192] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 651.849710][ T72] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 662.325153][ T1226] kAFS: unable to lookup cell '(' [ 662.328983][ T1226] kAFS: unable to lookup cell '(,cL' [ 662.395367][ T1231] nbd: socks must be embedded in a SOCK_ITEM attr [ 662.402672][ T1231] block nbd0: shutting down sockets [ 662.791975][ T1263] netlink: 'syz.9.12660': attribute type 1 has an invalid length. [ 663.172140][ T1292] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 663.176536][ T1292] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 663.181238][ T1292] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 663.312723][ T1309] netlink: 'syz.9.12681': attribute type 8 has an invalid length. [ 663.682771][ T1335] netlink: 'syz.8.12692': attribute type 8 has an invalid length. [ 664.803123][ T1386] tipc: Started in network mode [ 664.804954][ T1386] tipc: Node identity ac14140f, cluster identity 4711 [ 664.807211][ T1386] tipc: New replicast peer: 255.255.255.255 [ 664.809619][ T1386] tipc: Enabled bearer , priority 10 [ 664.903810][ T9] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 665.063724][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 665.073210][ T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.076376][ T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.079450][ T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.083094][ T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.087863][ T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.090976][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.303556][ T9] usb 12-1: GET_CAPABILITIES returned 0 [ 665.305821][ T9] usbtmc 12-1:16.0: can't read capabilities [ 665.528427][T27346] usb 12-1: USB disconnect, device number 15 [ 665.815060][T27269] tipc: Node number set to 2886997007 [ 667.076643][ T1469] netlink: 120 bytes leftover after parsing attributes in process `syz.9.12748'. [ 667.079432][ T1469] netlink: 'syz.9.12748': attribute type 1 has an invalid length. [ 667.279856][ T1492] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12759'. [ 667.283502][ T1492] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12759'. [ 667.610916][ T1513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12767'. [ 667.718797][ T1521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12771'. [ 667.722572][ T1521] netem: unknown loss type 0 [ 667.724826][ T1521] netem: change failed [ 667.854096][ T1529] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.953015][ T1529] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.046958][ T1529] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.143827][ T1529] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.260186][T26998] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.264303][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.273564][T26998] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.286489][ T13] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.573801][ T1585] input: syz1 as /devices/virtual/input/input51 [ 669.463782][T27007] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 669.524500][ T1649] input: syz0 as /devices/virtual/input/input52 [ 669.573859][ T6025] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 669.634080][T27007] usb 13-1: Using ep0 maxpacket: 8 [ 669.638740][T27007] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 669.642064][T27007] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 669.645196][T27007] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.648058][T27007] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.651748][T27007] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.655180][T27007] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.724251][ T6025] usb 7-1: Using ep0 maxpacket: 8 [ 669.727320][ T6025] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 669.736977][ T6025] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 669.739845][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.750229][ T6025] usb 7-1: config 0 descriptor?? [ 669.869827][T27007] usb 13-1: GET_CAPABILITIES returned 0 [ 669.871453][T27007] usbtmc 13-1:16.0: can't read capabilities [ 669.964677][ T6025] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 670.076375][ T6025] usb 13-1: USB disconnect, device number 12 [ 670.166034][ T39] usb 7-1: USB disconnect, device number 20 [ 670.216323][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12844'. [ 670.434580][ T39] kernel read not supported for file /dsp (pid: 39 comm: kworker/2:1) [ 670.815661][ T1708] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 670.819446][ T1708] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 670.833951][ T1708] overlayfs: failed to get uuid (739/file0, err=-13); falling back to uuid=null. [ 671.139640][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.142541][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.146828][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.149338][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.151722][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.154548][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.157093][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.159538][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.161923][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.165039][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 671.170588][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 671.170588][ T9] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 671.269141][ T1736] fido_id[1736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.384634][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 671.384645][ T40] audit: type=1326 audit(1775412077.059:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8f88 code=0x7ffc0000 [ 671.395350][ C2] blk_print_req_error: 166 callbacks suppressed [ 671.395364][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 671.403915][ T40] audit: type=1326 audit(1775412077.059:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8f88 code=0x7ffc0000 [ 671.404627][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.410559][ T40] audit: type=1326 audit(1775412077.059:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 671.410587][ T40] audit: type=1326 audit(1775412077.059:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 671.413594][ C3] buffer_io_error: 165 callbacks suppressed [ 671.413603][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 671.430364][ T40] audit: type=1326 audit(1775412077.069:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8f88 code=0x7ffc0000 [ 671.432667][ C3] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.439351][ T40] audit: type=1326 audit(1775412077.069:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8f88 code=0x7ffc0000 [ 671.442942][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 671.453271][ C3] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.456292][ C3] Buffer I/O error on dev loop6, logical block 2, async page read [ 671.458811][ C3] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.459271][ T40] audit: type=1326 audit(1775412077.069:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 671.461778][ C3] Buffer I/O error on dev loop6, logical block 3, async page read [ 671.461820][ C3] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.476096][ C3] Buffer I/O error on dev loop6, logical block 4, async page read [ 671.478989][ C3] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.482804][ C3] Buffer I/O error on dev loop6, logical block 5, async page read [ 671.482875][ T40] audit: type=1326 audit(1775412077.069:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 671.485934][ C3] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.497878][ C3] Buffer I/O error on dev loop6, logical block 6, async page read [ 671.501480][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.505328][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 671.509143][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.512545][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 671.513868][ T40] audit: type=1326 audit(1775412077.069:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8f88 code=0x7ffc0000 [ 671.515942][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 671.533864][ T40] audit: type=1326 audit(1775412077.069:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1753 comm="syz.7.12882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x7ffc0000 [ 671.763546][ T1782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12894'. [ 671.773834][ T1782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12894'. [ 671.777235][ T1782] netlink: 'syz.9.12894': attribute type 13 has an invalid length. [ 671.779668][ T1782] netlink: 'syz.9.12894': attribute type 14 has an invalid length. [ 671.840126][ T1786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12896'. [ 672.087593][ T1806] can0: slcan on ttyS3. [ 672.167284][ T1806] can0 (unregistered): slcan off ttyS3. [ 672.387121][T27015] Bluetooth: hci7: unexpected event for opcode 0x2002 [ 672.389952][T27015] Bluetooth: hci7: hcon ffff88804b8bc000 sent 1 < count 511 [ 672.471047][ T1841] bond0: entered promiscuous mode [ 673.307169][ T6025] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 673.465153][ T6025] usb 12-1: config 0 has no interfaces? [ 673.466968][ T6025] usb 12-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 673.475574][ T6025] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.482247][ T6025] usb 12-1: config 0 descriptor?? [ 673.693190][T27346] usb 12-1: USB disconnect, device number 16 [ 673.775969][T27015] Bluetooth: hci0: command 0x1003 tx timeout [ 673.780886][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 673.802333][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12943'. [ 673.852720][ T1904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12946'. [ 674.451446][ T1943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12961'. [ 674.495153][ T9] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 674.647737][ T9] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 674.651564][ T9] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 674.655542][ T9] usb 13-1: Product: syz [ 674.657333][ T9] usb 13-1: Manufacturer: syz [ 674.659313][ T9] usb 13-1: SerialNumber: syz [ 674.662963][ T9] usb 13-1: config 0 descriptor?? [ 674.878222][ T9] usb 13-1: USB disconnect, device number 13 [ 675.097630][ T1961] loop8: detected capacity change from 0 to 524287999 [ 675.176666][ T1969] Attempt to restore checkpoint with obsolete wellknown handles [ 675.249868][ T1977] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 675.496490][ T1992] netlink: 'syz.8.12984': attribute type 6 has an invalid length. [ 676.049802][ T2038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 676.527770][ T2069] input: syz0 as /devices/virtual/input/input54 [ 676.607010][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13022'. [ 676.609963][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13022'. [ 676.612820][ T2075] netlink: 'syz.9.13022': attribute type 20 has an invalid length. [ 676.659526][ T2077] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 676.662054][T27346] kernel read not supported for file /dsp (pid: 27346 comm: kworker/1:8) [ 676.666183][T26995] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.875928][ T2088] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13030'. [ 677.207552][ T2107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13038'. [ 677.460254][ T2117] team0: entered allmulticast mode [ 677.462952][ T2117] team0: left allmulticast mode [ 678.520959][ T2169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13066'. [ 678.733805][T27015] Bluetooth: hci0: command 0x1003 tx timeout [ 678.733825][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 679.435154][ T2245] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13103'. [ 679.714395][T27346] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 679.883831][T27346] usb 13-1: Using ep0 maxpacket: 8 [ 679.893563][T27346] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.897068][T27346] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.903842][T27346] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.906996][T27346] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.911034][T27346] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 679.914547][T27346] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.066675][ T2287] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.124924][T27346] usb 13-1: GET_CAPABILITIES returned 0 [ 680.126739][T27346] usbtmc 13-1:16.0: can't read capabilities [ 680.164739][ T2287] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.261389][ T2287] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.335610][ T9] usb 13-1: USB disconnect, device number 14 [ 680.387463][ T2287] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.506074][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.517223][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.526171][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.534818][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.803339][ T2328] geneve2: entered promiscuous mode [ 682.042702][ T2386] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 682.048037][ T2386] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 682.054725][ T2386] overlayfs: failed to get uuid (900/file0, err=-13); falling back to uuid=null. [ 682.105933][ T2388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13169'. [ 682.193919][ T39] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 682.336169][T27082] kernel read not supported for file /dsp (pid: 27082 comm: kworker/3:5) [ 682.345022][ T39] usb 14-1: Using ep0 maxpacket: 8 [ 682.348633][ T39] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.351960][ T39] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 682.364185][ T39] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.379309][ T39] usb 14-1: config 0 descriptor?? [ 682.591202][ C3] blk_print_req_error: 26 callbacks suppressed [ 682.591215][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 682.591307][ T39] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 682.595553][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.602296][ C3] buffer_io_error: 26 callbacks suppressed [ 682.602306][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 682.606252][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.610068][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 682.612505][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.615790][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 682.619020][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.622193][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 682.625341][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.628378][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 682.631169][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.634492][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 682.637006][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.640424][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 682.645313][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.648243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 682.650756][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 682.654066][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 682.657267][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 682.759409][T27346] hid_parser_main: 6 callbacks suppressed [ 682.759429][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.766214][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.769374][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.772581][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.775816][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.778785][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.781788][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.785826][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.793721][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.797223][T27346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 682.800679][ T39] usb 14-1: USB disconnect, device number 16 [ 682.804242][T27346] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 682.804242][T27346] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 682.811623][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 682.811637][ T40] audit: type=1326 audit(1775412088.479:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 682.830154][ T40] audit: type=1326 audit(1775412088.479:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 682.842084][ T40] audit: type=1326 audit(1775412088.489:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.850714][ T40] audit: type=1326 audit(1775412088.489:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.871873][ T40] audit: type=1326 audit(1775412088.489:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.872175][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13191'. [ 682.881049][ T2435] fido_id[2435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.883048][ T2437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13191'. [ 682.883083][ T2437] netlink: 'syz.7.13191': attribute type 13 has an invalid length. [ 682.883309][ T40] audit: type=1326 audit(1775412088.489:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.883352][ T40] audit: type=1326 audit(1775412088.489:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.883390][ T40] audit: type=1326 audit(1775412088.489:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 682.883426][ T40] audit: type=1326 audit(1775412088.489:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 682.883464][ T40] audit: type=1326 audit(1775412088.489:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2433 comm="syz.2.13190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 682.940550][ T2437] netlink: 'syz.7.13191': attribute type 14 has an invalid length. [ 683.062773][ T2445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13195'. [ 683.733438][ T2476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13204'. [ 683.738909][ T2476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13204'. [ 683.964010][T27269] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 684.137506][T27269] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 684.141386][T27269] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.145331][T27269] usb 12-1: Product: syz [ 684.146879][T27269] usb 12-1: Manufacturer: syz [ 684.148507][T27269] usb 12-1: SerialNumber: syz [ 684.392145][T27269] rtl8150 12-1:1.0: couldn't reset the device [ 684.394769][T27269] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 684.401013][T27269] usb 12-1: USB disconnect, device number 17 [ 684.609029][T27346] kernel write not supported for file /uinput (pid: 27346 comm: kworker/1:8) [ 684.674538][ T2524] batadv_slave_1: entered promiscuous mode [ 684.680130][ T2523] batadv_slave_1: left promiscuous mode [ 685.523777][ T2602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13262'. [ 685.529220][ T2602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13262'. [ 685.837559][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13267'. [ 686.144624][ T2646] sp0: Synchronizing with TNC [ 686.157191][ T2646] [U] [ 686.567204][ T2686] IPv6: NLM_F_CREATE should be specified when creating new route [ 687.123452][ T2748] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.13317'. [ 687.594135][T27346] kernel read not supported for file /dsp (pid: 27346 comm: kworker/1:8) [ 687.648604][ T2794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13335'. [ 687.649767][ T2795] team0: entered allmulticast mode [ 687.655623][ T2795] team0: left allmulticast mode [ 688.072663][ T2816] tipc: Enabling of bearer rejected, already enabled [ 688.263162][T27346] kernel read not supported for file /dsp (pid: 27346 comm: kworker/1:8) [ 688.553192][ T2848] misc userio: Can't change port type on an already running userio instance [ 688.984981][ T2876] evm: overlay not supported [ 689.151087][ T2893] dummy0: entered allmulticast mode [ 689.154254][ T2891] dummy0: left allmulticast mode [ 689.156218][ C0] blk_print_req_error: 26 callbacks suppressed [ 689.156262][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 689.180254][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.183947][ C0] buffer_io_error: 25 callbacks suppressed [ 689.183962][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.189548][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.193053][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 689.196297][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.199867][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 689.202350][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.205956][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 689.209274][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.214113][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 689.217245][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.221232][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 689.224599][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.228525][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 689.232757][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.236712][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.239931][ C2] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.243903][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 689.247303][ C2] Buffer I/O error on dev loop6, logical block 2, async page read [ 689.307262][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13377'. [ 689.364539][ T2915] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.13381'. [ 689.543572][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 689.543589][ T40] audit: type=1326 audit(1775412095.209:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.552506][ T40] audit: type=1326 audit(1775412095.209:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.561020][ T40] audit: type=1326 audit(1775412095.209:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 689.571028][ T40] audit: type=1326 audit(1775412095.209:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.580282][ T40] audit: type=1326 audit(1775412095.209:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 689.592771][ T40] audit: type=1326 audit(1775412095.209:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 689.601855][ T40] audit: type=1326 audit(1775412095.209:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.610608][ T40] audit: type=1326 audit(1775412095.209:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.619427][ T40] audit: type=1326 audit(1775412095.219:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.626711][ T40] audit: type=1326 audit(1775412095.219:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2926 comm="syz.2.13387" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cef88 code=0x7ffc0000 [ 689.743784][T27082] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 689.894370][T27082] usb 12-1: Using ep0 maxpacket: 8 [ 689.907587][T27082] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 689.912238][T27082] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 689.917119][T27082] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.921222][T27082] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.926971][T27082] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 689.930313][T27082] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.157572][T27082] usb 12-1: GET_CAPABILITIES returned 0 [ 690.160144][T27082] usbtmc 12-1:16.0: can't read capabilities [ 690.368009][ T2933] usb 12-1: usbtmc_ioctl_clear_out_halt returned -32 [ 690.384571][T27082] usb 12-1: USB disconnect, device number 18 [ 690.816194][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.920211][ T3007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13413'. [ 690.923742][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13413'. [ 691.007104][ T3021] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.13416'. [ 691.187242][ T3033] tap0: tun_chr_ioctl cmd 1074025672 [ 691.189620][ T3033] tap0: ignored: set checksum disabled [ 691.236438][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13426'. [ 691.240092][ T3041] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13426'. [ 691.311832][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13436'. [ 691.315060][ T3049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13436'. [ 691.319305][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13436'. [ 691.322206][ T3049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13436'. [ 691.391617][ T80] Bluetooth: hci0: Frame reassembly failed (-84) [ 691.402906][ T3051] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 693.453780][T27015] Bluetooth: hci0: command 0x1003 tx timeout [ 693.458570][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 693.571639][ T3188] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13496'. [ 693.649841][ T3197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.652593][ T3197] IPv6: NLM_F_CREATE should be set when creating new route [ 693.655570][ T3197] IPv6: NLM_F_CREATE should be set when creating new route [ 693.660170][ T3197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.797795][ T3210] loop4: detected capacity change from 0 to 524287936 [ 693.833849][T27082] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 693.898293][ T3221] netlink: 'syz.7.13506': attribute type 1 has an invalid length. [ 693.901198][ T3221] netlink: 'syz.7.13506': attribute type 7 has an invalid length. [ 693.904634][ T3221] netlink: 'syz.7.13506': attribute type 8 has an invalid length. [ 693.907911][ T3221] NCSI netlink: No device for ifindex 119 [ 693.999422][T27082] usb 13-1: config 0 has no interfaces? [ 694.002828][T27082] usb 13-1: config 0 has no interfaces? [ 694.009673][T27082] usb 13-1: config 0 has no interfaces? [ 694.014887][T27082] usb 13-1: string descriptor 0 read error: -22 [ 694.017664][T27082] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 694.022663][T27082] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.028741][T27082] usb 13-1: config 0 descriptor?? [ 694.244603][T27236] usb 13-1: USB disconnect, device number 15 [ 694.783555][ T3264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.906285][ T3264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.990187][ T3264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.094596][ T3264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.257897][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.266952][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.279192][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.291009][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.457196][ T3300] pimreg: entered allmulticast mode [ 695.465676][ T3300] pimreg: left allmulticast mode [ 696.633889][T27236] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 696.783781][T27236] usb 13-1: Using ep0 maxpacket: 8 [ 696.787070][T27236] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.790643][T27236] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 696.793523][T27236] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.798111][T27236] usb 13-1: config 0 descriptor?? [ 696.802029][ T3370] __nla_validate_parse: 4 callbacks suppressed [ 696.802039][ T3370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13564'. [ 697.008949][T27236] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 697.137137][ T5941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 697.137152][ T5957] Bluetooth: hci0: command 0x1003 tx timeout [ 697.214787][T27346] usb 13-1: USB disconnect, device number 16 [ 697.481423][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13592'. [ 697.487902][ T3411] veth0_macvtap: left promiscuous mode [ 697.683755][ T3421] loop6: detected capacity change from 7 to 8 [ 697.822978][ T3429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13593'. [ 698.023720][ T5941] Bluetooth: hci7: command 0x0405 tx timeout [ 698.165922][ T3431] Oops: general protection fault, probably for non-canonical address 0xe7cd88adce4cad67: 0000 [#1] SMP KASAN NOPTI [ 698.169751][ T3431] KASAN: maybe wild-memory-access in range [0x3e6c656e72656b38-0x3e6c656e72656b3f] [ 698.172838][ T3431] CPU: 3 UID: 0 PID: 3431 Comm: syz.9.13594 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.176294][ T3431] Tainted: [L]=SOFTLOCKUP [ 698.177720][ T3431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 698.181903][ T3431] RIP: 0010:try_module_get+0x23/0xd0 [ 698.184263][ T3431] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 698.191766][ T3431] RSP: 0000:ffffc90002f278b8 EFLAGS: 00010203 [ 698.193698][ T3431] RAX: dffffc0000000000 RBX: 3e6c656e72656b3c RCX: ffffc90031b8b000 [ 698.196116][ T3431] RDX: 07cd8cadce4cad67 RSI: ffffffff87eaf930 RDI: 3e6c656e72656b3c [ 698.198577][ T3431] RBP: ffff8880008b4e00 R08: 0000000000000001 R09: fffffbfff1fda801 [ 698.201027][ T3431] R10: ffffffff8fed400f R11: 0000000000000000 R12: ffff8880134d1500 [ 698.203525][ T3431] R13: ffff8880008b4e28 R14: ffff8880008748a8 R15: ffff8880134d1548 [ 698.206266][ T3431] FS: 0000000000000000(0000) GS:ffff888097440000(0063) knlGS:00000000f53cdb40 [ 698.209620][ T3431] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 698.211989][ T3431] CR2: 00000000f53ccff4 CR3: 000000002b79e000 CR4: 0000000000352ef0 [ 698.215309][ T3431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 698.218620][ T3431] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 698.221845][ T3431] Call Trace: [ 698.223269][ T3431] [ 698.224503][ T3431] dvb_device_open+0x124/0x3b0 [ 698.226635][ T3431] ? __pfx_dvb_device_open+0x10/0x10 [ 698.228648][ T3431] chrdev_open+0x234/0x6a0 [ 698.230551][ T3431] ? __pfx_apparmor_file_open+0x10/0x10 [ 698.232871][ T3431] ? __pfx_chrdev_open+0x10/0x10 [ 698.234873][ T3431] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 698.237407][ T3431] do_dentry_open+0x6d8/0x1660 [ 698.238921][ T3431] ? __pfx_chrdev_open+0x10/0x10 [ 698.240483][ T3431] vfs_open+0x82/0x3f0 [ 698.241729][ T3431] path_openat+0x208c/0x31a0 [ 698.243191][ T3431] ? asm_int80_emulation+0x1a/0x20 [ 698.244850][ T3431] ? __pfx_path_openat+0x10/0x10 [ 698.246423][ T3431] do_file_open+0x20e/0x430 [ 698.247868][ T3431] ? __pfx_do_file_open+0x10/0x10 [ 698.249969][ T3431] ? _raw_spin_unlock+0x28/0x50 [ 698.251987][ T3431] ? alloc_fd+0x476/0x790 [ 698.253828][ T3431] do_sys_openat2+0x10d/0x1e0 [ 698.255816][ T3431] ? __pfx_do_sys_openat2+0x10/0x10 [ 698.258009][ T3431] ? kcov_ioctl+0x16a/0x720 [ 698.259525][ T3431] ? rcu_is_watching+0x12/0xc0 [ 698.261037][ T3431] ? kcov_ioctl+0x16a/0x720 [ 698.262488][ T3431] __ia32_compat_sys_openat+0x12d/0x210 [ 698.264260][ T3431] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 698.266180][ T3431] ? kcov_ioctl+0x16a/0x720 [ 698.267619][ T3431] do_int80_emulation+0x141/0x6b0 [ 698.269551][ T3431] asm_int80_emulation+0x1a/0x20 [ 698.271206][ T3431] RIP: 0023:0xf7115cab [ 698.272505][ T3431] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 698.278524][ T3431] RSP: 002b:00000000f53cd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 698.281220][ T3431] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cd100 [ 698.284430][ T3431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.286942][ T3431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.289441][ T3431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 698.292035][ T3431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.294539][ T3431] [ 698.295501][ T3431] Modules linked in: [ 698.297158][ T3431] ---[ end trace 0000000000000000 ]--- [ 698.301446][ T3432] 9p: Bad value for 'rfdno' [ 698.303253][ T3431] RIP: 0010:try_module_get+0x23/0xd0 [ 698.309022][ T3431] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 698.315754][ T3431] RSP: 0000:ffffc90002f278b8 EFLAGS: 00010203 [ 698.318255][ T3431] RAX: dffffc0000000000 RBX: 3e6c656e72656b3c RCX: ffffc90031b8b000 [ 698.321621][ T3431] RDX: 07cd8cadce4cad67 RSI: ffffffff87eaf930 RDI: 3e6c656e72656b3c [ 698.324364][ T3431] RBP: ffff8880008b4e00 R08: 0000000000000001 R09: fffffbfff1fda801 [ 698.326991][ T3431] R10: ffffffff8fed400f R11: 0000000000000000 R12: ffff8880134d1500 [ 698.329564][ T3431] R13: ffff8880008b4e28 R14: ffff8880008748a8 R15: ffff8880134d1548 [ 698.332132][ T3431] FS: 0000000000000000(0000) GS:ffff888097440000(0063) knlGS:00000000f53cdb40 [ 698.336336][ T3431] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 698.338642][ T3431] CR2: 00000000f74532f0 CR3: 000000002b79e000 CR4: 0000000000352ef0 [ 698.341306][ T3431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 698.343868][ T3431] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 698.346325][ T3431] Kernel panic - not syncing: Fatal exception [ 698.348907][ T3431] Kernel Offset: disabled [ 698.350277][ T3431] Rebooting in 86400 seconds..