last executing test programs: 9m23.589472251s ago: executing program 32 (id=2465): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m32.359493202s ago: executing program 3 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6}, 0x80) 8m32.119948933s ago: executing program 3 (id=3159): r0 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff03) 8m31.803759491s ago: executing program 3 (id=3164): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 8m31.661806517s ago: executing program 3 (id=3165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 8m31.529703198s ago: executing program 3 (id=3166): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 8m31.321882308s ago: executing program 3 (id=3169): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000daffffffdd6029340c16af32"], 0x10) 8m15.914206104s ago: executing program 33 (id=3169): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000daffffffdd6029340c16af32"], 0x10) 7m16.641606862s ago: executing program 0 (id=4124): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r1}, 0x10) 7m16.591342394s ago: executing program 0 (id=4128): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) 7m16.540017424s ago: executing program 0 (id=4131): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) 7m16.497836974s ago: executing program 0 (id=4135): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$pmem0(0xffffff9c, &(0x7f0000000080), 0x4040, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}) 7m16.428654528s ago: executing program 0 (id=4138): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 7m16.382707619s ago: executing program 0 (id=4140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m1.362974828s ago: executing program 34 (id=4140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m24.558935131s ago: executing program 4 (id=5624): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/consoles\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) 6m24.485964134s ago: executing program 4 (id=5628): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 6m23.771107211s ago: executing program 4 (id=5633): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 6m23.459884079s ago: executing program 4 (id=5636): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 6m23.217631594s ago: executing program 4 (id=5639): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x9, 0x400009, 0xf9, 0xfffffffe, 0x7fffffff, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) 6m17.64211689s ago: executing program 4 (id=5699): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) rmdir(&(0x7f0000000000)='./file0\x00') 6m17.620778998s ago: executing program 35 (id=5699): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) rmdir(&(0x7f0000000000)='./file0\x00') 4m55.567319885s ago: executing program 7 (id=6611): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES16], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 4m53.914392638s ago: executing program 6 (id=6652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000fd00000000090000002c000480130005"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 4m53.7279651s ago: executing program 2 (id=6653): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) read(r0, 0x0, 0x0) 4m53.727617125s ago: executing program 6 (id=6654): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@setlink={0x90, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16122}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0x58}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x0, 0x14, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000) 4m53.54111191s ago: executing program 2 (id=6655): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 4m53.540902276s ago: executing program 6 (id=6656): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) read(r0, 0x0, 0x0) 4m53.219841412s ago: executing program 7 (id=6658): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) 4m53.218947737s ago: executing program 2 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80100102803c0001"], 0x134}}, 0x0) 4m53.091463624s ago: executing program 6 (id=6660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) 4m53.011573584s ago: executing program 7 (id=6661): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) 4m53.0112507s ago: executing program 2 (id=6662): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 4m52.871488276s ago: executing program 7 (id=6663): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x275, 0x40000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 4m52.871050387s ago: executing program 6 (id=6664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000000c0)=0xfffffffe, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) 4m52.780320359s ago: executing program 7 (id=6665): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0xffff}, 0x20) 4m52.780081276s ago: executing program 2 (id=6666): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0xfff, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 4m52.238095162s ago: executing program 7 (id=6667): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r0) 4m51.538148788s ago: executing program 2 (id=6668): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x101100, 0x0) close(0x3) 4m48.317159149s ago: executing program 6 (id=6669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) 4m33.353762343s ago: executing program 36 (id=6667): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r0) 4m33.32333617s ago: executing program 37 (id=6668): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x101100, 0x0) close(0x3) 4m33.263039028s ago: executing program 38 (id=6669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) 1.248594053s ago: executing program 5 (id=11199): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 1.248068262s ago: executing program 5 (id=11202): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) keyctl$link(0x8, r1, r0) 1.15929155s ago: executing program 5 (id=11204): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x4000, 0x0) fanotify_mark(r2, 0x445, 0x1003, r1, 0x0) 1.109979035s ago: executing program 5 (id=11206): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20080, 0x2880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x40000) 1.109717274s ago: executing program 8 (id=11207): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000400)="d3", 0x1}], 0x1, &(0x7f0000002d80)=ANY=[@ANYBLOB="980100000000000029000000360000005c2f000000000000c91000000000000000000000000000000001c910fe88000000000000000000000000010106e985932424d4d7bf801cdf5ccbbd1ec0d56f613d5848ac25720f99d0f31f8ecb4ed11d5ab0a38808ef4cd022b5de74c2e8fae17d45b7b33585f79045b24855fd422762b0e8e89cede97a27414a501be8eaaec0e849d35a206f559f868a4d10a9eba31dea2f282e6cf7eac7b5b7e1c10eba5773204a2922a57c45f41c24c564dd91961d30b6ac524efd439859afbf6affdd5c6fd22c593dbdd2200da3d1cc9b4af0b749f05d4b8da28a0e011f2fcf909ee2cbd975e00bf18cd0247d58bc6a6a6236d22e79fa4a2e3156e6e4da5fb6b1ea6cf56abec74e5f7ea0e1d238fbd61f4a00a23565a973db92e69ec91000000000000000000000ffffe00000020502000405020009c910000000000000000000000000000000000740000000030edc06000700000000010000fb0000000000000003000000000000000b0000000000000000630600000000000700000000000000fbffffffffffffff00020068"], 0x200}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x75267e1d, @local, 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="ff7b", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 1.000054626s ago: executing program 8 (id=11209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0xb000, 0x1000, &(0x7f000050d000/0x1000)=nil, 0x1000000000}) 930.093224ms ago: executing program 8 (id=11211): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/95, 0x5f}], 0x2, 0x185, 0x0) 885.252667ms ago: executing program 5 (id=11212): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x4050}], 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 884.883527ms ago: executing program 8 (id=11213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r2, 0x0) 778.925091ms ago: executing program 5 (id=11214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000080)=[{r0, 0x8040}], 0x1, 0xffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x20, 0x9, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 757.372203ms ago: executing program 8 (id=11215): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 634.406318ms ago: executing program 9 (id=11216): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 579.734406ms ago: executing program 9 (id=11218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 579.515581ms ago: executing program 8 (id=11219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000100, 0x0, 0x0) close_range(r0, r1, 0x0) 579.332293ms ago: executing program 1 (id=11220): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 499.563569ms ago: executing program 9 (id=11221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="c6", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 499.325624ms ago: executing program 1 (id=11222): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 419.847375ms ago: executing program 9 (id=11223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) 346.564515ms ago: executing program 1 (id=11224): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r0, 0x409, 0x7) io_setup(0x66, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r0, &(0x7f0000000980)='-5', 0x2}]) 98.370913ms ago: executing program 1 (id=11225): mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 96.358922ms ago: executing program 9 (id=11226): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 94.280526ms ago: executing program 1 (id=11227): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 187.119µs ago: executing program 9 (id=11228): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 0s ago: executing program 1 (id=11229): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) kernel console output (not intermixed with test programs): config index 0 descriptor too short (expected 301, got 45) [ 696.862656][T18915] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.866999][T18915] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.871395][T18915] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.878396][T18915] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.884513][T18915] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.888327][T18915] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.973797][ T24] usb 6-1: config 0 has no interfaces? [ 696.976845][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 696.983970][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.990166][ T24] usb 6-1: config 0 descriptor?? [ 697.115693][T18915] usb 14-1: GET_CAPABILITIES returned 0 [ 697.118166][T18915] usbtmc 14-1:16.0: can't read capabilities [ 697.259645][ T24] usb 6-1: USB disconnect, device number 19 [ 697.320590][ T1472] usb 14-1: USB disconnect, device number 15 [ 697.556624][T25865] netlink: 'syz.8.8709': attribute type 6 has an invalid length. [ 697.560735][T25865] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 697.566410][T25865] bridge0: port 3(syz_tun) entered disabled state [ 697.569268][T25865] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.572480][T25865] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.282436][T25894] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 698.961880][ T1472] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 699.122162][ T1472] usb 10-1: Using ep0 maxpacket: 32 [ 699.130092][ T1472] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 699.134594][ T1472] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 699.138808][ T1472] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 699.144004][ T1472] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 699.149250][ T1472] usb 10-1: config 0 interface 0 has no altsetting 0 [ 699.158258][ T1472] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 699.163341][ T1472] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 699.167582][ T1472] usb 10-1: Product: syz [ 699.169375][ T1472] usb 10-1: Manufacturer: syz [ 699.171435][ T1472] usb 10-1: SerialNumber: syz [ 699.176961][ T1472] usb 10-1: config 0 descriptor?? [ 699.184244][ T1472] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 699.189930][ T1472] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 699.393383][T25897] ldusb 10-1:0.0: Write buffer overflow, 64987 bytes dropped [ 699.450811][T25897] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 699.452948][ T24] usb 10-1: USB disconnect, device number 21 [ 699.455835][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 699.461136][ T24] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 700.216082][T25917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8731'. [ 700.374592][T25934] delete_channel: no stack [ 700.689655][T25952] input: syz0 as /devices/virtual/input/input46 [ 701.434065][T25995] mkiss: ax0: crc mode is auto. [ 701.629013][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8779'. [ 701.635598][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8779'. [ 702.047755][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8790'. [ 702.335945][T26059] binder: Binderfs stats mode cannot be changed during a remount [ 702.520763][T26071] overlayfs: upper fs does not support tmpfile. [ 702.711668][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.411020][T26116] bond1 (unregistering): Released all slaves [ 703.812067][ T6061] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 703.962196][ T6061] usb 13-1: Using ep0 maxpacket: 8 [ 703.967124][ T6061] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 703.970968][ T6061] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 703.974848][ T6061] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 703.978813][ T6061] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.984576][ T6061] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 703.988557][ T6061] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.052118][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 704.074710][T26139] loop9: detected capacity change from 0 to 7 [ 704.080564][ C0] blk_print_req_error: 151 callbacks suppressed [ 704.080590][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.087885][ C0] buffer_io_error: 150 callbacks suppressed [ 704.087900][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.096416][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.101791][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.106465][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.110448][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.113979][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.117930][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.122885][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.127148][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.130997][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.134541][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.162338][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.166884][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.171131][T26139] ldm_validate_partition_table(): Disk read failed. [ 704.175400][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.179524][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.184650][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.189927][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.194215][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.198023][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.201864][T26139] Dev loop9: unable to read RDB block 0 [ 704.205900][T26139] loop9: unable to read partition table [ 704.209314][T26139] loop9: partition table beyond EOD, truncated [ 704.211432][ T6061] usb 13-1: GET_CAPABILITIES returned 0 [ 704.212396][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 704.212426][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.212445][ T24] usb 6-1: Product: syz [ 704.212460][ T24] usb 6-1: Manufacturer: syz [ 704.212475][ T24] usb 6-1: SerialNumber: syz [ 704.213713][T26139] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 704.219189][ T6061] usbtmc 13-1:16.0: can't read capabilities [ 704.417338][ T6061] usb 13-1: USB disconnect, device number 13 [ 704.481497][ T24] rtl8150 6-1:1.0: couldn't reset the device [ 704.486273][ T24] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 704.497600][ T24] usb 6-1: USB disconnect, device number 20 [ 705.654646][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8868'. [ 705.663683][T26197] hsr_slave_0: left promiscuous mode [ 705.667620][T26197] hsr_slave_1: left promiscuous mode [ 706.211334][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8871'. [ 706.324497][T26228] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8874'. [ 706.791915][ T24] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 706.943898][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 706.948397][ T24] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 706.952487][ T24] usb 13-1: config 0 has no interface number 0 [ 706.956222][ T24] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 706.961291][ T24] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 706.966572][ T24] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 706.971672][ T24] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.978358][ T24] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 706.981926][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.987626][ T24] usb 13-1: config 0 descriptor?? [ 706.997213][ T24] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 707.203793][ T6061] usb 13-1: USB disconnect, device number 14 [ 707.203895][ C0] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 707.212293][T26248] ldusb 13-1:0.55: Couldn't submit interrupt_out_urb -19 [ 707.223877][ T6061] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 709.024469][T26344] input: syz1 as /devices/virtual/input/input47 [ 709.027403][T26344] input: failed to attach handler leds to device input47, error: -6 [ 709.146549][T26349] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8929'. [ 710.612473][T18915] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 710.762396][T18915] usb 14-1: Using ep0 maxpacket: 32 [ 710.766711][T18915] usb 14-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 710.774565][T18915] usb 14-1: config 0 interface 0 has no altsetting 0 [ 710.778039][T18915] usb 14-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 710.784025][T18915] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.790190][T18915] usb 14-1: config 0 descriptor?? [ 711.021160][T18915] usbhid 14-1:0.0: can't add hid device: -71 [ 711.023818][T18915] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 711.032947][T18915] usb 14-1: USB disconnect, device number 16 [ 711.290242][T26387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8945'. [ 711.695554][T26403] macsec1: entered promiscuous mode [ 711.697784][T26403] veth1_to_batadv: entered promiscuous mode [ 712.237114][T26428] netlink: 211856 bytes leftover after parsing attributes in process `syz.8.8965'. [ 713.904250][ T5985] Bluetooth: hci0: command 0x1003 tx timeout [ 713.907435][T21066] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 714.060035][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8983'. [ 714.064791][T26466] netlink: 'syz.5.8983': attribute type 2 has an invalid length. [ 714.461903][T21066] Bluetooth: hci6: command 0x0c1a tx timeout [ 715.684708][ C1] blk_print_req_error: 10 callbacks suppressed [ 715.684729][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.684769][ C3] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.687415][ C1] buffer_io_error: 10 callbacks suppressed [ 715.687432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 715.691529][ C3] Buffer I/O error on dev loop6, logical block 5, async page read [ 715.695921][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.699228][ C3] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.702800][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 715.706020][ C3] Buffer I/O error on dev loop6, logical block 6, async page read [ 715.709853][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.709885][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 715.731382][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.735162][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 715.738198][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.741148][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 715.745882][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.745928][ C2] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.747089][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.747131][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 715.747202][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 715.747255][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 715.774130][ T5369] ldm_validate_partition_table(): Disk read failed. [ 715.780689][ T5369] Dev loop6: unable to read RDB block 0 [ 715.793110][ T5369] loop6: unable to read partition table [ 715.796656][ T5369] loop6: partition table beyond EOD, truncated [ 716.300590][T26516] tun0: tun_chr_ioctl cmd 1074025676 [ 716.304805][T26516] tun0: owner set to 0 [ 716.332079][ T1472] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 716.481882][ T1472] usb 14-1: Using ep0 maxpacket: 8 [ 716.486028][ T1472] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 716.489645][ T1472] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.494030][ T1472] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.498876][ T1472] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.504032][ T1472] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.509909][ T1472] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.515912][ T1472] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.735250][ T1472] usb 14-1: GET_CAPABILITIES returned 0 [ 716.738933][ T1472] usbtmc 14-1:16.0: can't read capabilities [ 716.963552][ T6061] usb 14-1: USB disconnect, device number 17 [ 717.541606][T26536] pimreg: tun_chr_ioctl cmd 1074025678 [ 717.554160][T26536] pimreg: group set to 768 [ 719.464453][T26612] (syz.5.9043,26612,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 719.537862][T26617] netlink: 'syz.5.9046': attribute type 10 has an invalid length. [ 719.545035][T26617] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9046'. [ 719.549736][T26617] dummy0: left promiscuous mode [ 719.555134][T26617] dummy0: entered promiscuous mode [ 719.565298][T26617] bridge0: port 3(dummy0) entered blocking state [ 719.568866][T26617] bridge0: port 3(dummy0) entered disabled state [ 719.573373][T26617] dummy0: entered allmulticast mode [ 719.577901][T26617] dummy0: left allmulticast mode [ 719.580358][T26617] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 719.711833][ T1472] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 719.861850][ T1472] usb 13-1: Using ep0 maxpacket: 8 [ 719.866059][ T1472] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 719.871482][ T1472] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 719.876036][ T1472] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.880412][ T1472] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.888869][ T1472] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 719.893093][ T1472] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.123766][ T1472] usb 13-1: GET_CAPABILITIES returned 0 [ 720.128716][ T1472] usbtmc 13-1:16.0: can't read capabilities [ 720.324693][T26614] usb 13-1: usbtmc_ioctl_clear_in_halt returned -32 [ 720.327682][ T1472] usb 13-1: USB disconnect, device number 15 [ 720.584334][T26655] netlink: 212336 bytes leftover after parsing attributes in process `syz.9.9062'. [ 721.438770][T26705] can0: slcan on ttyS3. [ 721.612877][T26705] can0 (unregistered): slcan off ttyS3. [ 721.742882][T26724] tipc: New replicast peer: 100.1.1.1 [ 721.759855][T26724] tipc: Enabled bearer , priority 5 [ 722.150537][ T40] audit: type=1326 audit(2000000431.679:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.160286][ T40] audit: type=1326 audit(2000000431.679:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.171460][ T40] audit: type=1326 audit(2000000431.689:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.181410][ T40] audit: type=1326 audit(2000000431.689:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.190934][ T40] audit: type=1326 audit(2000000431.689:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.201138][ T40] audit: type=1326 audit(2000000431.689:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.212942][ T40] audit: type=1326 audit(2000000431.689:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 722.224955][ T40] audit: type=1326 audit(2000000431.689:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.243679][ T40] audit: type=1326 audit(2000000431.689:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 722.253482][ T40] audit: type=1326 audit(2000000431.689:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26745 comm="syz.5.9098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 722.522348][T18915] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 722.679491][T18915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 722.684759][T18915] usb 6-1: config 0 has no interface number 0 [ 722.694865][T18915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 722.706406][T18915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 722.724875][T18915] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 722.732562][T18915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.741004][T18915] usb 6-1: config 0 descriptor?? [ 722.745825][T26756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.761030][T18915] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 722.970457][T18915] usb 6-1: USB disconnect, device number 21 [ 722.974169][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 723.938682][T26807] sp0: Synchronizing with TNC [ 725.312361][ T1472] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 725.461920][ T1472] usb 10-1: Using ep0 maxpacket: 8 [ 725.466454][ T1472] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 725.474113][ T1472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.493783][ T1472] pvrusb2: Hardware description: Terratec Grabster AV400 [ 725.497772][ T1472] pvrusb2: ********** [ 725.500380][ T1472] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 725.508732][ T1472] pvrusb2: Important functionality might not be entirely working. [ 725.512506][ T1472] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 725.521366][ T1472] pvrusb2: ********** [ 725.698760][ T2511] pvrusb2: Invalid write control endpoint [ 725.789825][ T2511] pvrusb2: Invalid write control endpoint [ 725.793595][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 725.797960][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 725.801418][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 725.808113][ T2511] pvrusb2: Device being rendered inoperable [ 725.811422][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 725.815606][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 725.825862][ T2511] pvrusb2: Attached sub-driver cx25840 [ 725.828224][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 725.833703][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 725.909943][ T1472] usb 10-1: USB disconnect, device number 22 [ 727.175394][T26914] kvm: kvm [26912]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 727.307850][T26921] netlink: 128 bytes leftover after parsing attributes in process `syz.9.9169'. [ 727.312130][T26921] netlink: 'syz.9.9169': attribute type 6 has an invalid length. [ 729.142102][T27016] trusted_key: encrypted_key: keyword 'upw' not recognized [ 729.411400][T27032] erspan0: entered promiscuous mode [ 729.712324][ T6061] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 729.874702][ T6061] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.877681][ T6061] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.881549][ T6061] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.885376][ T6061] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.891423][ T6061] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.895971][ T6061] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.899602][ T6061] usb 13-1: Product: syz [ 729.901296][ T6061] usb 13-1: Manufacturer: syz [ 729.907125][ T6061] cdc_wdm 13-1:1.0: skipping garbage [ 729.909727][ T6061] cdc_wdm 13-1:1.0: skipping garbage [ 729.914515][ T6061] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 729.917093][ T6061] cdc_wdm 13-1:1.0: Unknown control protocol [ 730.658872][T27078] evm: overlay not supported [ 730.792309][ T5985] Bluetooth: hci5: command 0x0c1a tx timeout [ 730.831343][T27085] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9237'. [ 731.007967][T27094] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 732.454553][ T24] usb 13-1: USB disconnect, device number 16 [ 732.521445][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9247'. [ 732.861894][ T5985] Bluetooth: hci5: command 0x0c1a tx timeout [ 733.966645][T27167] batadv_slave_1: entered promiscuous mode [ 733.970465][T27167] batadv_slave_1: left promiscuous mode [ 734.501920][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 734.682608][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 734.688387][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.697780][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.704231][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 734.714922][ T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 734.725759][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.738863][ T24] usb 10-1: config 0 descriptor?? [ 735.204479][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:05AC:8241.0011/input/input50 [ 735.340752][ T24] appleir 0003:05AC:8241.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 735.379688][T18915] usb 10-1: USB disconnect, device number 23 [ 735.414145][T27222] fido_id[27222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 735.434682][T27226] bridge0: port 3(syz_tun) entered blocking state [ 735.438198][T27226] bridge0: port 3(syz_tun) entered forwarding state [ 735.441625][T27226] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.444752][T27226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.448041][T27226] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.451205][T27226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.610163][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9305'. [ 735.786778][T27246] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9311'. [ 736.122208][T27265] 9p: Bad value for 'rfdno' [ 736.133060][T27260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.136275][T27260] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 736.139322][T27260] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 736.191515][T27269] netlink: 'syz.5.9320': attribute type 1 has an invalid length. [ 736.322977][ T6061] hid_parser_main: 17 callbacks suppressed [ 736.322998][ T6061] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 736.329988][ T6061] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 736.351442][ T6061] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 736.377738][T27281] sp0: Synchronizing with TNC [ 736.406744][T27282] fido_id[27282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 736.552749][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9332'. [ 736.557868][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9332'. [ 736.628786][T27302] loop1: detected capacity change from 0 to 7 [ 736.662440][ C2] blk_print_req_error: 131 callbacks suppressed [ 736.662463][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.669322][ C2] buffer_io_error: 130 callbacks suppressed [ 736.669341][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.687902][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.692794][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.701033][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.704979][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.708737][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.713771][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.718535][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.721731][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.729067][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.733225][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.737254][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.741253][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.744970][T27302] ldm_validate_partition_table(): Disk read failed. [ 736.747752][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.751908][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.755628][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.759666][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.764839][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.769217][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.779310][T27302] Dev loop1: unable to read RDB block 0 [ 736.785630][T27302] loop1: unable to read partition table [ 736.788653][T27302] loop1: partition table beyond EOD, truncated [ 736.792262][T27302] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 736.863877][T18915] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 736.867311][T18915] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 736.888485][T18915] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 736.935132][T27315] fido_id[27315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 737.440653][T27329] tun0: tun_chr_ioctl cmd 1074025676 [ 737.443803][T27329] tun0: owner set to 0 [ 737.569312][T18915] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 737.576841][T18915] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 737.595232][T18915] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 737.686183][T27339] fido_id[27339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 737.860052][T27351] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9356'. [ 737.880331][T27348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.887078][T27348] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 737.892425][T27348] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 738.291427][T27364] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9369'. [ 738.314234][T27369] tun0: tun_chr_ioctl cmd 1074025676 [ 738.316709][T27369] tun0: owner set to 0 [ 738.526262][T27377] mkiss: ax0: crc mode is auto. [ 738.692218][ T6061] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 738.844349][ T6061] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.847948][ T6061] usb 6-1: config 0 has no interface number 0 [ 738.850715][ T6061] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 738.856497][ T6061] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 738.861801][ T6061] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.865612][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.870358][ T6061] usb 6-1: config 0 descriptor?? [ 738.873820][T27376] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 738.883205][ T6061] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 739.089190][ C2] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 739.093762][ T1340] usb 6-1: USB disconnect, device number 22 [ 739.180204][T27383] overlayfs: upper fs does not support tmpfile. [ 739.902097][T21066] Bluetooth: hci6: command 0x0c1a tx timeout [ 739.903123][ T5985] Bluetooth: hci5: command 0x0c1a tx timeout [ 739.903505][ T5319] Bluetooth: hci1: command 0x0c1a tx timeout [ 740.968787][T27450] veth1_to_bond: entered promiscuous mode [ 740.974168][T27450] batadv0: entered promiscuous mode [ 740.983156][T27450] veth1_to_bond: left promiscuous mode [ 740.990010][T27450] batadv0: left promiscuous mode [ 741.192193][T18915] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 741.270299][T27460] veth1_to_batadv: entered promiscuous mode [ 741.272638][T27460] macsec1: entered promiscuous mode [ 741.343235][T18915] usb 6-1: Using ep0 maxpacket: 32 [ 741.349399][T18915] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 741.354533][T18915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.357324][T18915] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 741.360454][T18915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.369544][T18915] usb 6-1: config 0 descriptor?? [ 741.545209][T16989] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 741.636547][T18915] usbhid 6-1:0.0: can't add hid device: -71 [ 741.641025][T18915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 741.654803][T18915] usb 6-1: USB disconnect, device number 23 [ 741.704807][T16989] usb 10-1: config 0 has no interfaces? [ 741.706779][T16989] usb 10-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 741.710510][T16989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.715965][T16989] usb 10-1: config 0 descriptor?? [ 742.030744][T16989] usb 10-1: USB disconnect, device number 24 [ 743.581860][T16989] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 743.657947][T27501] mkiss: ax0: crc mode is auto. [ 743.751938][T16989] usb 6-1: Using ep0 maxpacket: 8 [ 743.755734][T16989] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 743.758869][T16989] usb 6-1: config 0 has no interface number 0 [ 743.761359][T16989] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 743.765895][T16989] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 743.770855][T16989] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 743.774546][T16989] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 743.780239][T16989] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 743.784016][T16989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.788521][T16989] usb 6-1: config 0 descriptor?? [ 743.794506][T16989] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 743.894638][T27513] netlink: 'syz.9.9435': attribute type 10 has an invalid length. [ 743.898942][T27513] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9435'. [ 743.904079][T27513] bridge0: port 3(dummy0) entered blocking state [ 743.912850][T27513] bridge0: port 3(dummy0) entered disabled state [ 743.919278][T27513] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 744.010780][T18915] usb 6-1: USB disconnect, device number 24 [ 744.014128][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 744.020082][T27493] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 744.026512][T18915] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 744.054170][T27518] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 744.617106][T27530] debugfs: 'ttyS3' already exists in 'caif_serial' [ 745.044322][T27541] mkiss: ax0: crc mode is auto. [ 745.357363][ T40] kauditd_printk_skb: 345 callbacks suppressed [ 745.357379][ T40] audit: type=1326 audit(2000000454.899:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.375749][ T40] audit: type=1326 audit(2000000454.909:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.390601][ T40] audit: type=1326 audit(2000000454.909:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.401878][ T40] audit: type=1326 audit(2000000454.909:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.410841][ T40] audit: type=1326 audit(2000000454.909:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.436980][ T40] audit: type=1326 audit(2000000454.909:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.448647][ T40] audit: type=1326 audit(2000000454.909:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.460312][ T40] audit: type=1326 audit(2000000454.909:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.466375][T27562] veth1_to_bond: entered promiscuous mode [ 745.470007][ T40] audit: type=1326 audit(2000000454.909:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.474690][T27562] batadv0: entered promiscuous mode [ 745.484558][ T40] audit: type=1326 audit(2000000454.909:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27553 comm="syz.5.9443" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 745.487183][T27564] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 745.503822][T27562] veth1_to_bond: left promiscuous mode [ 745.515794][T27562] batadv0: left promiscuous mode [ 745.767131][T27571] mkiss: ax0: crc mode is auto. [ 746.230736][T27592] netlink: 'syz.1.9462': attribute type 8 has an invalid length. [ 746.388249][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9469'. [ 746.398433][T27604] hsr_slave_0: left promiscuous mode [ 746.405333][T27604] hsr_slave_1: left promiscuous mode [ 746.526514][T27613] batadv0: entered promiscuous mode [ 746.530514][T27613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 746.536240][T27613] batadv0: left promiscuous mode [ 746.840428][T27632] mkiss: ax0: crc mode is auto. [ 746.985297][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9483'. [ 746.993298][T27636] hsr_slave_0: left promiscuous mode [ 747.005262][T27636] hsr_slave_1: left promiscuous mode [ 747.129317][T27645] veth1_to_bond: entered promiscuous mode [ 747.136198][T27645] batadv0: entered promiscuous mode [ 747.151521][T27645] veth1_to_bond: left promiscuous mode [ 747.164832][T27645] batadv0: left promiscuous mode [ 747.456516][T27664] mkiss: ax0: crc mode is auto. [ 747.507274][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9496'. [ 747.853601][T27694] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 747.866565][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9507'. [ 747.995078][T27702] mkiss: ax0: crc mode is auto. [ 748.711485][T27720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9518'. [ 748.892828][ T24] IPVS: starting estimator thread 0... [ 748.982554][T27731] IPVS: using max 31 ests per chain, 74400 per kthread [ 749.347977][T27746] kvm: kvm [27745]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 749.655948][T27770] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.9543'. [ 750.072105][T16989] kernel read not supported for file /video37 (pid: 16989 comm: kworker/0:5) [ 750.491874][T16989] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 750.645836][T16989] usb 6-1: config 0 has no interfaces? [ 750.650423][T16989] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 750.664546][T16989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.670377][T16989] usb 6-1: config 0 descriptor?? [ 750.691266][T27831] mkiss: ax0: crc mode is auto. [ 750.950765][ T6061] usb 6-1: USB disconnect, device number 25 [ 751.096873][T27846] input: syz1 as /devices/virtual/input/input51 [ 751.103006][T27846] input: failed to attach handler leds to device input51, error: -6 [ 752.269584][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9591'. [ 752.367884][T27889] loop5: detected capacity change from 0 to 7 [ 752.377949][ C0] blk_print_req_error: 10 callbacks suppressed [ 752.377964][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.384020][ C0] buffer_io_error: 10 callbacks suppressed [ 752.384033][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.394710][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.398352][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.405617][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.412152][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.423223][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.427255][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.431370][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.438502][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.447143][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.454606][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.458457][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.466610][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.470588][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.474791][T27889] ldm_validate_partition_table(): Disk read failed. [ 752.477325][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.480671][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.485146][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 752.489586][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.493711][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 752.498774][T27889] Dev loop5: unable to read RDB block 0 [ 752.502789][T27889] loop5: unable to read partition table [ 752.506147][T27889] loop5: partition table beyond EOD, truncated [ 752.513579][T27889] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 752.539412][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 752.539430][ T40] audit: type=1326 audit(2000000462.079:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.555122][ T40] audit: type=1326 audit(2000000462.079:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.565332][ T40] audit: type=1326 audit(2000000462.079:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.577230][ T40] audit: type=1326 audit(2000000462.079:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.600179][ T40] audit: type=1326 audit(2000000462.079:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.619398][ T40] audit: type=1326 audit(2000000462.079:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.631013][ T40] audit: type=1326 audit(2000000462.079:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.641330][ T40] audit: type=1326 audit(2000000462.079:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.652226][ T40] audit: type=1326 audit(2000000462.079:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 752.661476][ T40] audit: type=1326 audit(2000000462.089:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27898 comm="syz.9.9599" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 753.095106][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9612'. [ 753.099426][T27925] netlink: 'syz.5.9612': attribute type 18 has an invalid length. [ 753.104391][T27925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9612'. [ 753.230646][T27931] bpf: Bad value for 'uid' [ 753.822472][ T1472] usb 13-1: new full-speed USB device number 17 using dummy_hcd [ 753.974891][ T1472] usb 13-1: config 0 has no interfaces? [ 753.977238][ T1472] usb 13-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 753.980685][ T1472] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.985943][ T1472] usb 13-1: config 0 descriptor?? [ 754.198676][T16989] usb 13-1: USB disconnect, device number 17 [ 754.280542][T27962] macvlan0: entered promiscuous mode [ 754.286730][T27962] netlink: 'syz.5.9627': attribute type 1 has an invalid length. [ 754.300422][T27962] netlink: 'syz.5.9627': attribute type 2 has an invalid length. [ 754.722152][ T6061] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 754.916747][ T6061] usb 6-1: unable to get BOS descriptor or descriptor too short [ 754.927604][ T6061] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 754.942355][ T6061] usb 6-1: can't read configurations, error -71 [ 755.872290][T21306] usb 14-1: new full-speed USB device number 18 using dummy_hcd [ 756.034442][T21306] usb 14-1: config 0 has no interfaces? [ 756.037399][T21306] usb 14-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 756.042927][T21306] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.049087][T21306] usb 14-1: config 0 descriptor?? [ 756.116331][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9653'. [ 756.182178][ T6061] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 756.310826][T18915] usb 14-1: USB disconnect, device number 18 [ 756.352049][ T6061] usb 6-1: Using ep0 maxpacket: 32 [ 756.360660][ T6061] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 756.365217][ T6061] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 756.370038][ T6061] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 756.375446][ T6061] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 756.383858][ T6061] usb 6-1: config 0 interface 0 has no altsetting 0 [ 756.389003][ T6061] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 756.393194][ T6061] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 756.396648][ T6061] usb 6-1: Product: syz [ 756.398696][ T6061] usb 6-1: Manufacturer: syz [ 756.400793][ T6061] usb 6-1: SerialNumber: syz [ 756.406862][ T6061] usb 6-1: config 0 descriptor?? [ 756.419365][ T6061] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 756.426540][ T6061] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 756.643774][T28009] ldusb 6-1:0.0: Write buffer overflow, 64987 bytes dropped [ 756.700982][T18915] usb 6-1: USB disconnect, device number 28 [ 756.702093][T28009] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 756.702193][ C3] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 756.711641][T18915] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 758.116469][T28077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 758.120178][T28077] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 758.125901][T28077] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 758.426525][T28089] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9681'. [ 759.636098][T28148] input: syz0 as /devices/virtual/input/input55 [ 759.652618][T18915] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 759.685215][T28151] netlink: 'syz.8.9711': attribute type 3 has an invalid length. [ 759.688937][T28151] netlink: 72 bytes leftover after parsing attributes in process `syz.8.9711'. [ 759.726864][T28153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9712'. [ 759.734510][T28153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9712'. [ 759.738725][T28153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9712'. [ 759.817177][T18915] usb 6-1: config 0 has no interfaces? [ 759.819895][T18915] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 759.825832][T18915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.862586][T18915] usb 6-1: config 0 descriptor?? [ 760.009640][T28164] can0: slcan on pty30. [ 760.074130][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 760.142067][T21066] Bluetooth: hci5: command 0x0c1a tx timeout [ 760.146153][ T5985] Bluetooth: hci6: command 0x0c1a tx timeout [ 760.154602][ T6061] usb 6-1: USB disconnect, device number 29 [ 760.159261][T28171] loop4: detected capacity change from 0 to 524287936 [ 760.223729][T28162] can0 (unregistered): slcan off pty30. [ 761.271677][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9746'. [ 761.278909][T28240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9746'. [ 761.332759][T18915] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 761.487575][T18915] usb 6-1: config 0 has no interfaces? [ 761.491058][T18915] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 761.498149][T18915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.505488][T18915] usb 6-1: config 0 descriptor?? [ 761.722456][ T6049] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 761.734967][T28259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9755'. [ 761.780242][T18915] usb 6-1: USB disconnect, device number 30 [ 761.867446][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 761.867475][ T40] audit: type=1326 audit(2000000471.409:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.882835][ T6049] usb 13-1: Using ep0 maxpacket: 32 [ 761.888848][ T6049] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 761.891954][ T40] audit: type=1326 audit(2000000471.409:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.895948][ T6049] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 761.912151][ T40] audit: type=1326 audit(2000000471.409:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.918559][ T6049] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 761.922530][ T40] audit: type=1326 audit(2000000471.409:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.922595][ T40] audit: type=1326 audit(2000000471.409:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.922640][ T40] audit: type=1326 audit(2000000471.409:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.922681][ T40] audit: type=1326 audit(2000000471.409:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 761.922726][ T40] audit: type=1326 audit(2000000471.409:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 761.922770][ T40] audit: type=1326 audit(2000000471.419:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 761.922812][ T40] audit: type=1326 audit(2000000471.419:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28263 comm="syz.9.9756" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 762.005919][ T6049] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 762.013324][ T6049] usb 13-1: config 0 interface 0 has no altsetting 0 [ 762.018630][ T6049] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 762.023732][ T6049] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 762.027755][ T6049] usb 13-1: Product: syz [ 762.029665][ T6049] usb 13-1: Manufacturer: syz [ 762.032760][ T6049] usb 13-1: SerialNumber: syz [ 762.038775][ T6049] usb 13-1: config 0 descriptor?? [ 762.048596][ T6049] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 762.056886][ T6049] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 762.157816][T28268] bpf: Bad value for 'uid' [ 762.255504][T28255] ldusb 13-1:0.0: Write buffer overflow, 64987 bytes dropped [ 762.318212][T28255] ldusb 13-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 762.318490][T21306] usb 13-1: USB disconnect, device number 18 [ 762.322821][ C0] ldusb 13-1:0.0: usb_submit_urb failed (-19) [ 762.334676][T21306] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 762.455921][T28276] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 763.143552][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9771'. [ 763.461409][T28317] netlink: 'syz.8.9779': attribute type 1 has an invalid length. [ 763.708054][T28320] debugfs: 'ttyS3' already exists in 'caif_serial' [ 763.720894][T28324] overlayfs: upper fs does not support tmpfile. [ 764.148656][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.016012][T28375] netlink: 'syz.1.9802': attribute type 10 has an invalid length. [ 765.019417][T28375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9802'. [ 765.027340][T28375] bridge0: port 3(dummy0) entered blocking state [ 765.030886][T28375] bridge0: port 3(dummy0) entered disabled state [ 765.037895][T28375] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 765.183083][T21306] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 765.255517][T28391] batadv_slave_0: entered promiscuous mode [ 765.259034][T28390] batadv_slave_0: left promiscuous mode [ 765.310586][T28393] loop9: detected capacity change from 0 to 7 [ 765.316380][ C2] blk_print_req_error: 11 callbacks suppressed [ 765.316400][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.324149][ C2] buffer_io_error: 10 callbacks suppressed [ 765.324168][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.332207][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.336599][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.340850][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.345928][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.349393][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.353302][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.353805][T21306] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.356949][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.360886][T21306] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.364918][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.367943][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.370635][T21306] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.373970][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.387335][T21306] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.394330][T21306] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.398610][T21306] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.404161][T21306] usb 10-1: Product: syz [ 765.406027][T21306] usb 10-1: Manufacturer: syz [ 765.406215][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.412024][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.415830][T28393] ldm_validate_partition_table(): Disk read failed. [ 765.419691][T21306] cdc_wdm 10-1:1.0: skipping garbage [ 765.423070][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.424551][T21306] cdc_wdm 10-1:1.0: skipping garbage [ 765.426760][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.431791][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.433446][T21306] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 765.435883][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.439277][T21306] cdc_wdm 10-1:1.0: Unknown control protocol [ 765.445769][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.449701][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.454625][T28393] Dev loop9: unable to read RDB block 0 [ 765.457735][T28393] loop9: unable to read partition table [ 765.460518][T28393] loop9: partition table beyond EOD, truncated [ 765.465388][T28393] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 765.631827][T28406] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.748767][T28411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.753700][T28411] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 765.756256][T28411] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 766.013085][T28427] netlink: 88 bytes leftover after parsing attributes in process `syz.8.9824'. [ 766.021956][ T1472] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 766.172728][ T1472] usb 14-1: Using ep0 maxpacket: 32 [ 766.176856][ T1472] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 766.180623][ T1472] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 766.185524][ T1472] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 766.190208][ T1472] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 766.196047][ T1472] usb 14-1: config 0 interface 0 has no altsetting 0 [ 766.200891][ T1472] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 766.204704][ T1472] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 766.207922][ T1472] usb 14-1: Product: syz [ 766.209485][ T1472] usb 14-1: Manufacturer: syz [ 766.211489][ T1472] usb 14-1: SerialNumber: syz [ 766.215542][ T1472] usb 14-1: config 0 descriptor?? [ 766.222209][ T1472] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 766.227100][ T1472] ldusb 14-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 766.301938][T16989] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 766.462021][T16989] usb 13-1: Using ep0 maxpacket: 8 [ 766.466946][T16989] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.471944][T16989] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.476377][T16989] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.481018][T16989] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.490366][T16989] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 766.491578][T21306] usb 14-1: USB disconnect, device number 19 [ 766.494467][T16989] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.506782][T21306] ldusb 14-1:0.0: LD USB Device #1 now disconnected [ 766.723023][T16989] usb 13-1: GET_CAPABILITIES returned 0 [ 766.725661][T16989] usbtmc 13-1:16.0: can't read capabilities [ 767.752280][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 767.822046][T21066] Bluetooth: hci5: command 0x0c1a tx timeout [ 767.822046][ T5985] Bluetooth: hci6: command 0x0c1a tx timeout [ 768.763991][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 768.765359][ T6049] usb 10-1: USB disconnect, device number 25 [ 768.766787][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 768.771918][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 768.778692][ T1340] usb 13-1: USB disconnect, device number 19 [ 769.024592][T28448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.028344][T28448] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 769.031232][T28448] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 769.103235][T28458] input: syz1 as /devices/virtual/input/input56 [ 769.612233][ T6049] usb 14-1: new full-speed USB device number 20 using dummy_hcd [ 769.766984][ T6049] usb 14-1: config 0 has no interfaces? [ 769.772544][ T6049] usb 14-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 769.778342][ T6049] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.785757][ T6049] usb 14-1: config 0 descriptor?? [ 770.074600][T21306] usb 14-1: USB disconnect, device number 20 [ 770.455774][T21306] kernel write not supported for file /input/event2 (pid: 21306 comm: kworker/3:3) [ 770.942176][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 770.972916][T28526] kvm: kvm [28524]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 771.102050][T21066] Bluetooth: hci5: command 0x0c1a tx timeout [ 771.104538][ T5985] Bluetooth: hci6: command 0x0c1a tx timeout [ 771.272438][ T6049] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 771.431444][ T6049] usb 10-1: Using ep0 maxpacket: 8 [ 771.436271][ T6049] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 771.442970][ T6049] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.447507][ T6049] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.451578][ T6049] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.457395][ T6049] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.464014][ T6049] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.467696][ T6049] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.672424][T28560] netlink: 'syz.8.9883': attribute type 8 has an invalid length. [ 771.688367][ T6049] usb 10-1: GET_CAPABILITIES returned 0 [ 771.691412][ T6049] usbtmc 10-1:16.0: can't read capabilities [ 771.761159][T28562] batadv0: entered promiscuous mode [ 771.765664][T28562] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 771.770164][T28562] batadv0: left promiscuous mode [ 771.908399][ T6049] usb 10-1: USB disconnect, device number 26 [ 772.004909][T28570] tipc: Started in network mode [ 772.007310][T28570] tipc: Node identity ac1414aa, cluster identity 4711 [ 772.010643][T28570] tipc: New replicast peer: 100.1.1.1 [ 772.013348][T28570] tipc: Enabled bearer , priority 5 [ 772.497697][T28587] can0: slcan on ttyS3. [ 772.604178][T28587] can0 (unregistered): slcan off ttyS3. [ 772.645350][T28593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.652969][T28593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 772.663045][T28593] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 773.020502][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9916'. [ 773.142092][ T1340] tipc: Node number set to 2886997162 [ 773.201228][T28619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 773.205265][T28619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 773.208258][T28619] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 773.722217][T28628] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 774.781458][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9927'. [ 775.197019][ T5319] Bluetooth: hci1: command 0x0c1a tx timeout [ 775.262109][ T5319] Bluetooth: hci6: command 0x0c1a tx timeout [ 775.262174][T21064] Bluetooth: hci5: command 0x0c1a tx timeout [ 775.741906][T21066] Bluetooth: hci0: command 0x1003 tx timeout [ 775.742888][ T5985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 775.917351][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9942'. [ 776.236549][ T40] kauditd_printk_skb: 275 callbacks suppressed [ 776.236562][ T40] audit: type=1326 audit(2000000485.779:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 776.263168][ T40] audit: type=1326 audit(2000000485.779:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 776.275580][ T40] audit: type=1326 audit(2000000485.779:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 776.285862][ T40] audit: type=1326 audit(2000000485.779:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 776.296036][ T40] audit: type=1326 audit(2000000485.779:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 776.306539][ T40] audit: type=1326 audit(2000000485.789:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 776.316637][ T40] audit: type=1326 audit(2000000485.789:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 776.327305][ T40] audit: type=1326 audit(2000000485.789:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 776.339587][ T40] audit: type=1326 audit(2000000485.789:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 776.349525][ T40] audit: type=1326 audit(2000000485.789:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.9.9950" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefe8 code=0x7ffc0000 [ 777.083218][T28742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9962'. [ 777.086579][T28742] netlink: 'syz.8.9962': attribute type 25 has an invalid length. [ 777.089415][T28742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9962'. [ 777.351907][ T5985] Bluetooth: hci6: command 0x0c1a tx timeout [ 777.896741][T28777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9979'. [ 777.902191][T28777] netlink: 'syz.8.9979': attribute type 2 has an invalid length. [ 778.095563][T28785] netlink: 256 bytes leftover after parsing attributes in process `syz.8.9983'. [ 778.451561][T28798] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 778.962281][T28828] tipc: Started in network mode [ 778.969582][T28828] tipc: Node identity , cluster identity 4711 [ 778.973222][T28828] tipc: Failed to set node id, please configure manually [ 778.974187][T28830] 9p: Invalid gid '0x00000000ffffffff' [ 778.976583][T28828] tipc: Enabling of bearer rejected, failed to enable media [ 779.243695][T28846] netlink: 'syz.5.10010': attribute type 1 has an invalid length. [ 779.350770][ T6049] kernel write not supported for file /sequencer (pid: 6049 comm: kworker/1:3) [ 780.179858][T28898] binder: 28895:28898 ioctl c0306201 0 returned -14 [ 780.258813][T28905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10037'. [ 780.705136][ T6049] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 780.872556][ T6049] usb 14-1: Using ep0 maxpacket: 8 [ 780.880141][ T6049] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 780.890171][ T6049] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.910330][ T6049] pvrusb2: Hardware description: Terratec Grabster AV400 [ 780.914226][ T6049] pvrusb2: ********** [ 780.915685][ T6049] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 780.919983][ T6049] pvrusb2: Important functionality might not be entirely working. [ 780.924473][ T6049] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 780.928199][ T6049] pvrusb2: ********** [ 781.060203][T28935] can0: slcan on pty22. [ 781.104278][ T2511] pvrusb2: Invalid write control endpoint [ 781.172590][ T2511] pvrusb2: Invalid write control endpoint [ 781.174711][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 781.177892][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 781.180513][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 781.185872][ T2511] pvrusb2: Device being rendered inoperable [ 781.189065][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 781.195131][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 781.206198][ T2511] pvrusb2: Attached sub-driver cx25840 [ 781.208107][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 781.211371][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 781.214783][T28933] can0 (unregistered): slcan off pty22. [ 781.305580][ T1340] usb 14-1: USB disconnect, device number 21 [ 781.981948][ T1472] kernel read not supported for file /dsp1 (pid: 1472 comm: kworker/0:3) [ 782.441056][T29003] kvm: kvm [29001]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 782.705097][T29025] netlink: 'syz.1.10085': attribute type 25 has an invalid length. [ 782.709141][T29025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10085'. [ 782.773325][T29028] loop4: detected capacity change from 0 to 524287936 [ 784.421967][ T1472] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 784.591818][T16989] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 784.597326][ T1472] usb 6-1: unable to get BOS descriptor or descriptor too short [ 784.604290][ T1472] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 784.608139][ T1472] usb 6-1: can't read configurations, error -71 [ 784.777677][T16989] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 784.782701][T16989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.785918][T16989] usb 10-1: Product: syz [ 784.787534][T16989] usb 10-1: Manufacturer: syz [ 784.789399][T16989] usb 10-1: SerialNumber: syz [ 784.789628][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10118'. [ 784.823115][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10118'. [ 785.067791][T16989] rtl8150 10-1:1.0: couldn't reset the device [ 785.088036][T16989] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 785.100695][T16989] usb 10-1: USB disconnect, device number 27 [ 785.250429][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10127'. [ 785.315399][ T40] kauditd_printk_skb: 748 callbacks suppressed [ 785.315418][ T40] audit: type=1326 audit(2000000494.859:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.328309][ T40] audit: type=1326 audit(2000000494.859:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.339341][ T40] audit: type=1326 audit(2000000494.859:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.357795][ T40] audit: type=1326 audit(2000000494.859:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.367776][ T40] audit: type=1326 audit(2000000494.859:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.378608][ T40] audit: type=1326 audit(2000000494.859:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.392400][ T40] audit: type=1326 audit(2000000494.869:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.403837][ T40] audit: type=1326 audit(2000000494.869:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.409548][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10132'. [ 785.411982][ T40] audit: type=1326 audit(2000000494.869:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.412809][T29125] sp0: Synchronizing with TNC [ 785.426433][ T40] audit: type=1326 audit(2000000494.869:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.8.10129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 785.426694][T29127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10132'. [ 785.601249][T29136] ubi16: attaching mtd0 [ 785.603922][T29136] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 785.790496][T29146] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 785.960217][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10142'. [ 786.020021][T29159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10145'. [ 787.040647][T29196] overlayfs: upper fs does not support tmpfile. [ 787.309460][T29215] kvm: kvm [29213]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 787.650226][T29237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10182'. [ 787.922569][ T6049] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 788.075536][ T6049] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.082416][ T6049] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.086778][ T6049] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.090559][ T6049] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.099470][ T6049] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.104784][ T6049] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.107423][ T6049] usb 14-1: Product: syz [ 788.108783][ T6049] usb 14-1: Manufacturer: syz [ 788.124783][ T6049] cdc_wdm 14-1:1.0: skipping garbage [ 788.127883][ T6049] cdc_wdm 14-1:1.0: skipping garbage [ 788.139440][ T6049] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 788.144429][ T6049] cdc_wdm 14-1:1.0: Unknown control protocol [ 788.322068][ T1340] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 788.358184][T29283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10204'. [ 788.365999][T29286] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 788.477456][ T1340] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 788.482588][ T1340] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.486052][ T1340] usb 10-1: Product: syz [ 788.487961][ T1340] usb 10-1: Manufacturer: syz [ 788.490092][ T1340] usb 10-1: SerialNumber: syz [ 788.749499][ T1340] rtl8150 10-1:1.0: couldn't reset the device [ 788.752879][ T1340] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 788.768441][ T1340] usb 10-1: USB disconnect, device number 28 [ 788.907499][T29290] bridge0: entered promiscuous mode [ 788.916404][T29290] macvlan2: entered promiscuous mode [ 789.370787][T29303] program syz.1.10212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.742038][T21306] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 789.904316][T21306] usb 10-1: config 0 has no interfaces? [ 789.906926][T21306] usb 10-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 789.910884][T21306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.919616][T21306] usb 10-1: config 0 descriptor?? [ 789.941669][T29322] erspan0: entered promiscuous mode [ 790.210380][T16989] usb 10-1: USB disconnect, device number 29 [ 790.689771][ T1340] usb 14-1: USB disconnect, device number 22 [ 791.352608][T29372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.359467][T29372] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.363123][T29372] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 791.423610][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10245'. [ 792.043774][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10257'. [ 792.050444][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10257'. [ 792.135213][T29404] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.139067][T29404] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.338385][T29404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.362074][T29404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.597104][ T171] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.603370][ T171] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.612699][ T171] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.621354][ T171] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.774757][T29431] tipc: Started in network mode [ 792.777167][T29431] tipc: Node identity ac1414aa, cluster identity 4711 [ 792.779856][T29431] tipc: New replicast peer: 100.1.1.1 [ 792.782418][T29431] tipc: Enabled bearer , priority 5 [ 793.113436][T29444] bridge0: port 3(syz_tun) entered disabled state [ 793.137080][T29444] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.257689][T29444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.267966][T29444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.422216][T21066] Bluetooth: hci5: command 0x0c1a tx timeout [ 793.424060][T21064] Bluetooth: hci1: command 0x0c1a tx timeout [ 793.425883][ T5985] Bluetooth: hci6: command 0x0c1a tx timeout [ 793.458189][T29446] can0: slcan on ttyS3. [ 793.465286][T16835] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.472069][T16835] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.492686][T16835] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.498220][T16835] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.573533][T29450] can0 (unregistered): slcan off ttyS3. [ 793.643783][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10282'. [ 793.762072][ T24] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 793.923850][T21306] tipc: Node number set to 2886997162 [ 793.925567][ T24] usb 6-1: config 0 has no interfaces? [ 793.928638][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 793.933013][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.938529][ T24] usb 6-1: config 0 descriptor?? [ 794.210306][T16989] usb 6-1: USB disconnect, device number 33 [ 794.846789][T29481] tipc: Started in network mode [ 794.849646][T29481] tipc: Node identity ac1414aa, cluster identity 4711 [ 794.854263][T29481] tipc: New replicast peer: 100.1.1.1 [ 794.856942][T29481] tipc: Enabled bearer , priority 5 [ 795.020755][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10292'. [ 795.044454][T29489] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 795.350393][T29502] tipc: Enabling of bearer rejected, already enabled [ 795.518889][ T24] usb 13-1: new full-speed USB device number 20 using dummy_hcd [ 795.707643][ T24] usb 13-1: config 0 has no interfaces? [ 795.712223][ T24] usb 13-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 795.716572][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.723840][ T24] usb 13-1: config 0 descriptor?? [ 795.842746][T16989] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 795.861954][ T24] tipc: Node number set to 2886997162 [ 795.993729][T16989] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.997647][T16989] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.002344][T16989] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.006268][T16989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.014722][T16989] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.019214][T16989] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.022843][T16989] usb 6-1: Product: syz [ 796.024663][T16989] usb 6-1: Manufacturer: syz [ 796.033260][T16989] cdc_wdm 6-1:1.0: skipping garbage [ 796.036113][T16989] cdc_wdm 6-1:1.0: skipping garbage [ 796.037908][ T6049] usb 13-1: USB disconnect, device number 20 [ 796.044163][T16989] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 796.048350][T16989] cdc_wdm 6-1:1.0: Unknown control protocol [ 796.593802][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.597590][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.601380][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.605892][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.609092][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.613339][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.617608][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.621414][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.625135][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.627625][T16989] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 796.648197][T16989] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 796.648197][T16989] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 796.767915][T29525] fido_id[29525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 797.839265][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 797.839284][ T40] audit: type=1326 audit(2000000507.379:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.849923][ T40] audit: type=1326 audit(2000000507.379:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.859780][ T40] audit: type=1326 audit(2000000507.389:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.867097][ T40] audit: type=1326 audit(2000000507.389:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.874988][ T40] audit: type=1326 audit(2000000507.389:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.883928][ T40] audit: type=1326 audit(2000000507.389:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.892221][ T40] audit: type=1326 audit(2000000507.389:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cefe8 code=0x7ffc0000 [ 797.899982][ T40] audit: type=1326 audit(2000000507.389:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.907352][ T40] audit: type=1326 audit(2000000507.389:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 797.915073][ T40] audit: type=1326 audit(2000000507.389:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.8.10324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 798.532525][ T6049] usb 13-1: new full-speed USB device number 21 using dummy_hcd [ 798.613365][ T6061] usb 6-1: USB disconnect, device number 34 [ 798.685831][ T6049] usb 13-1: config 0 has no interfaces? [ 798.689635][ T6049] usb 13-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 798.696626][ T6049] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.715211][ T6049] usb 13-1: config 0 descriptor?? [ 798.993232][ T29] usb 13-1: USB disconnect, device number 21 [ 799.983476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 800.512591][ T29] usb 14-1: new low-speed USB device number 23 using dummy_hcd [ 800.667683][ T29] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 800.671588][ T29] usb 14-1: config 0 has no interface number 0 [ 800.675700][ T29] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 800.683863][ T29] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 800.689135][ T29] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 800.695716][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.708423][ T29] usb 14-1: config 0 descriptor?? [ 800.712783][T29642] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 800.721944][ T29] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 800.933328][ T29] usb 14-1: USB disconnect, device number 23 [ 800.936306][ C1] iowarrior 14-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 801.002345][ T24] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 801.184564][ T24] usb 6-1: config 0 has no interfaces? [ 801.187020][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 801.190137][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.195303][ T24] usb 6-1: config 0 descriptor?? [ 801.457198][ T24] usb 6-1: USB disconnect, device number 35 [ 801.797765][T29667] 9p: Invalid gid '0x00000000ffffffff' [ 802.448848][T29686] tipc: Enabling of bearer rejected, already enabled [ 802.462251][ T1472] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 802.625746][ T1472] usb 14-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 802.629207][ T1472] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.632313][ T1472] usb 14-1: Product: syz [ 802.633764][ T1472] usb 14-1: Manufacturer: syz [ 802.635709][ T1472] usb 14-1: SerialNumber: syz [ 802.839356][T29697] tipc: Enabling of bearer rejected, already enabled [ 802.908490][ T1472] rtl8150 14-1:1.0: couldn't reset the device [ 802.911392][ T1472] rtl8150 14-1:1.0: probe with driver rtl8150 failed with error -5 [ 802.923073][ T1472] usb 14-1: USB disconnect, device number 24 [ 804.106862][T29731] sp0: Synchronizing with TNC [ 804.120288][T29731] [U] [ 806.147478][ T5985] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 806.275309][T29748] tipc: Enabling of bearer rejected, already enabled [ 808.622061][ T5985] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 809.088725][T29806] sp0: Synchronizing with TNC [ 809.097436][T29806] [U] [ 809.337486][ T29] hid_parser_main: 6 callbacks suppressed [ 809.337506][ T29] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 809.350026][ T29] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 809.494323][T29830] sp0: Synchronizing with TNC [ 809.500376][T29820] fido_id[29820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 809.508282][T29830] [U] [ 810.362374][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 810.362391][ T40] audit: type=1326 audit(2000000519.899:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.398651][ T40] audit: type=1326 audit(2000000519.899:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.411543][ T40] audit: type=1326 audit(2000000519.909:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.422622][ T40] audit: type=1326 audit(2000000519.909:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.431926][ T40] audit: type=1326 audit(2000000519.909:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.444026][ T40] audit: type=1326 audit(2000000519.909:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 810.453057][ T40] audit: type=1326 audit(2000000519.909:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 810.471806][ T40] audit: type=1326 audit(2000000519.909:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 810.485653][ T40] audit: type=1326 audit(2000000519.909:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 810.496104][ T40] audit: type=1326 audit(2000000519.909:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29836 comm="syz.5.10444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdefe8 code=0x7ffc0000 [ 810.957768][T29852] kvm: kvm [29851]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 811.022067][ T5985] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 811.023720][T21064] Bluetooth: hci0: command 0xfc11 tx timeout [ 811.443713][T29883] kvm: kvm [29882]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 812.213283][T29906] netlink: 'syz.9.10477': attribute type 4 has an invalid length. [ 812.217377][T29906] netlink: 'syz.9.10477': attribute type 1 has an invalid length. [ 812.221203][T29906] netlink: 'syz.9.10477': attribute type 3 has an invalid length. [ 812.226939][T29906] netlink: 184 bytes leftover after parsing attributes in process `syz.9.10477'. [ 812.233207][T29906] NCSI netlink: No device for ifindex 830110067 [ 812.591415][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10487'. [ 812.598576][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10487'. [ 813.099831][T29948] netlink: 62967 bytes leftover after parsing attributes in process `syz.8.10494'. [ 813.146761][T29951] loop5: detected capacity change from 0 to 7 [ 813.335754][T29951] Dev loop5: unable to read RDB block 7 [ 813.341939][T29951] loop5: unable to read partition table [ 813.343938][T29951] loop5: partition table beyond EOD, truncated [ 813.346481][T29954] Invalid logical block size (-1) [ 813.352638][T29951] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 814.113183][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10524'. [ 814.118849][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10524'. [ 815.122068][T30026] block nbd2: server does not support multiple connections per device. [ 815.138646][T30026] block nbd2: shutting down sockets [ 815.372809][T30047] loop9: detected capacity change from 0 to 7 [ 815.377195][ C0] blk_print_req_error: 10 callbacks suppressed [ 815.377213][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.384412][ C0] buffer_io_error: 10 callbacks suppressed [ 815.384433][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.393008][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.397492][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.402335][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.406558][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.410343][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.414375][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.423573][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.428463][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.433008][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.437002][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.441124][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.447233][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.451628][T30047] ldm_validate_partition_table(): Disk read failed. [ 815.485130][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.488221][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.491148][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.494375][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.497301][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.500689][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.505056][T30047] Dev loop9: unable to read RDB block 0 [ 815.507998][T30047] loop9: unable to read partition table [ 815.510705][T30047] loop9: partition table beyond EOD, truncated [ 815.513475][T30047] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 816.144158][T30059] netlink: 'syz.8.10544': attribute type 10 has an invalid length. [ 816.148848][T30059] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10544'. [ 816.155655][T30059] dummy0: entered promiscuous mode [ 816.164522][T30059] bridge0: port 4(dummy0) entered blocking state [ 816.167631][T30059] bridge0: port 4(dummy0) entered disabled state [ 816.170876][T30059] dummy0: entered allmulticast mode [ 816.380327][ T6061] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 816.557526][ T6061] usb 10-1: Using ep0 maxpacket: 8 [ 816.596693][ T6061] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 816.600985][ T6061] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.623784][ T6061] pvrusb2: Hardware description: Terratec Grabster AV400 [ 816.626532][ T6061] pvrusb2: ********** [ 816.627942][ T6061] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 816.631366][ T6061] pvrusb2: Important functionality might not be entirely working. [ 816.634775][ T6061] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 816.638834][ T6061] pvrusb2: ********** [ 816.825536][ T2511] pvrusb2: Invalid write control endpoint [ 816.875108][T30078] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.965274][ T2511] pvrusb2: Invalid write control endpoint [ 816.973029][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 816.977443][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 816.981662][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 816.993890][ T2511] pvrusb2: Device being rendered inoperable [ 816.998825][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 817.003477][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 817.008817][ T2511] pvrusb2: Attached sub-driver cx25840 [ 817.011631][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 817.017230][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 817.028820][ T6061] usb 10-1: USB disconnect, device number 30 [ 817.268791][T30092] netlink: 'syz.9.10558': attribute type 10 has an invalid length. [ 817.271484][T30092] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10558'. [ 817.275492][T30092] bridge0: port 3(dummy0) entered blocking state [ 817.278275][T30092] bridge0: port 3(dummy0) entered disabled state [ 817.284474][T30092] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 818.017312][ T40] kauditd_printk_skb: 1781 callbacks suppressed [ 818.017328][ T40] audit: type=1326 audit(2000000527.559:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.029856][ T40] audit: type=1326 audit(2000000527.569:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.037914][ T40] audit: type=1326 audit(2000000527.579:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.067020][ T40] audit: type=1326 audit(2000000527.579:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.084280][ T40] audit: type=1326 audit(2000000527.579:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.102780][ T40] audit: type=1326 audit(2000000527.589:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.110595][ T40] audit: type=1326 audit(2000000527.589:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709efe8 code=0x7ffc0000 [ 818.118454][ T40] audit: type=1326 audit(2000000527.589:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.127809][ T40] audit: type=1326 audit(2000000527.589:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 818.137527][ T40] audit: type=1326 audit(2000000527.589:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30117 comm="syz.1.10579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 819.741081][T30152] netlink: 'syz.8.10591': attribute type 4 has an invalid length. [ 819.748447][T30152] netlink: 'syz.8.10591': attribute type 1 has an invalid length. [ 819.754532][T30152] netlink: 'syz.8.10591': attribute type 3 has an invalid length. [ 819.757944][T30152] netlink: 184 bytes leftover after parsing attributes in process `syz.8.10591'. [ 819.767176][T30152] NCSI netlink: No device for ifindex 830110067 [ 819.832147][T30160] program syz.8.10586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.393129][T30184] bridge0: entered promiscuous mode [ 820.396229][T30184] macvlan4: entered promiscuous mode [ 821.525807][T30215] macvlan2: entered promiscuous mode [ 821.528202][T30215] bridge0: entered promiscuous mode [ 821.912053][ T6061] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 822.065933][ T6061] usb 13-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 822.068976][ T6061] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.071639][ T6061] usb 13-1: Product: syz [ 822.073180][ T6061] usb 13-1: Manufacturer: syz [ 822.074999][ T6061] usb 13-1: SerialNumber: syz [ 822.319006][ T6061] rtl8150 13-1:1.0: couldn't reset the device [ 822.321557][ T6061] rtl8150 13-1:1.0: probe with driver rtl8150 failed with error -5 [ 822.329268][ T6061] usb 13-1: USB disconnect, device number 22 [ 823.112312][ T5985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 823.291289][T30241] block nbd2: server does not support multiple connections per device. [ 823.316951][T30241] block nbd2: shutting down sockets [ 823.419173][T30263] sctp: [Deprecated]: syz.5.10636 (pid 30263) Use of int in maxseg socket option. [ 823.419173][T30263] Use struct sctp_assoc_value instead [ 823.892401][T30288] block nbd2: server does not support multiple connections per device. [ 823.902862][T30288] block nbd2: shutting down sockets [ 825.142102][T30317] block nbd2: server does not support multiple connections per device. [ 825.147133][T30317] block nbd2: shutting down sockets [ 825.282491][T21064] Bluetooth: hci0: sending frame failed (-49) [ 825.287819][ T5985] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 825.584692][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 828.062015][T21064] Bluetooth: hci0: command 0x1003 tx timeout [ 828.069182][ T5985] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 828.766146][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10736'. [ 829.317613][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10749'. [ 829.725325][T30541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10761'. [ 830.135732][T30560] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 831.577171][T16989] kernel read not supported for file /dsp (pid: 16989 comm: kworker/0:5) [ 831.698197][T30619] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10798'. [ 831.717679][T30619] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10798'. [ 831.721656][T30619] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10798'. [ 831.731641][T30619] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10798'. [ 832.707965][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10814'. [ 832.712437][T30656] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10814'. [ 832.944925][T30671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10820'. [ 833.097649][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 833.097698][ T40] audit: type=1326 audit(2000000542.639:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.109144][ T40] audit: type=1326 audit(2000000542.639:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.118751][ T40] audit: type=1326 audit(2000000542.649:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.126538][ T40] audit: type=1326 audit(2000000542.649:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.134807][ T40] audit: type=1326 audit(2000000542.649:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.142370][ T40] audit: type=1326 audit(2000000542.649:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.150812][ T40] audit: type=1326 audit(2000000542.649:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.160594][ T40] audit: type=1326 audit(2000000542.649:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30683 comm="syz.8.10825" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70cefcc code=0x7ffc0000 [ 833.182826][T30690] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 833.188809][T30690] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 833.198606][T30690] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 833.674898][T30697] Invalid source name [ 834.144318][T30720] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 834.152522][T30720] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 834.156840][T30720] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 834.967086][T30755] __nla_validate_parse: 3 callbacks suppressed [ 834.967106][T30755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10858'. [ 834.975241][T30755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10858'. [ 834.989935][T30755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10858'. [ 834.995249][T30755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10858'. [ 835.278652][ T6049] kernel read not supported for file /dsp (pid: 6049 comm: kworker/1:3) [ 835.390186][T30780] pim6reg: entered allmulticast mode [ 835.401415][T30780] team0: entered allmulticast mode [ 835.404600][T30780] team_slave_0: entered allmulticast mode [ 835.407978][T30780] team_slave_1: entered allmulticast mode [ 835.815899][T30806] pim6reg: entered allmulticast mode [ 835.823638][T30808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10881'. [ 835.836129][T30808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10881'. [ 835.841316][T30806] team0: entered allmulticast mode [ 835.843984][T30806] team_slave_0: entered allmulticast mode [ 835.846610][T30806] team_slave_1: entered allmulticast mode [ 835.849225][T30808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10881'. [ 835.853630][T30808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10881'. [ 836.156788][ T6061] kernel read not supported for file /swradio3 (pid: 6061 comm: kworker/3:5) [ 836.218774][ T1340] kernel read not supported for file /dsp (pid: 1340 comm: kworker/2:2) [ 836.679494][T30879] input: syz0 as /devices/virtual/input/input58 [ 836.773994][T30886] netlink: 71 bytes leftover after parsing attributes in process `syz.1.10928'. [ 836.775400][T16989] kernel read not supported for file /swradio9 (pid: 16989 comm: kworker/0:5) [ 837.016589][ T40] audit: type=1326 audit(2000000546.559:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.1.10930" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 837.030338][ T40] audit: type=1326 audit(2000000546.559:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.1.10930" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x7ffc0000 [ 837.105365][T30911] netlink: 71 bytes leftover after parsing attributes in process `syz.9.10933'. [ 837.929750][T30963] input: syz0 as /devices/virtual/input/input59 [ 838.182633][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 838.182651][ T40] audit: type=1326 audit(2000000547.719:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.202814][ T40] audit: type=1326 audit(2000000547.719:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="syz.9.10961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.214352][ T40] audit: type=1326 audit(2000000547.719:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="syz.9.10961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.225182][ T40] audit: type=1326 audit(2000000547.719:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.233928][ T40] audit: type=1326 audit(2000000547.719:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.245150][ T40] audit: type=1326 audit(2000000547.729:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.255025][ T40] audit: type=1326 audit(2000000547.729:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="syz.9.10961" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.271662][ T40] audit: type=1326 audit(2000000547.729:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30975 comm="syz.9.10961" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 838.317986][T30981] input: syz0 as /devices/virtual/input/input60 [ 838.712390][ T29] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 838.862229][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 838.868741][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 838.873086][ T29] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 838.879936][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.887445][ T29] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.892302][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.896817][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.902619][ T29] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 838.908926][ T29] usb 10-1: config 168 interface 0 has no altsetting 0 [ 838.914667][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 838.917822][ T29] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 838.922563][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.927474][ T29] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.932231][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.935886][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.939783][ T29] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 838.947063][ T29] usb 10-1: config 168 interface 0 has no altsetting 0 [ 838.951292][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 838.956207][ T29] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 838.959906][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.963952][ T29] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.967741][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.971570][ T29] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.976978][ T29] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 838.982860][ T29] usb 10-1: config 168 interface 0 has no altsetting 0 [ 838.987596][ T29] usb 10-1: string descriptor 0 read error: -22 [ 838.989952][ T29] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 838.994200][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.003674][ T29] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 839.212433][ T29] usb 10-1: USB disconnect, device number 31 [ 839.338533][T31028] netlink: 'syz.9.10994': attribute type 7 has an invalid length. [ 839.339135][T31027] input: syz0 as /devices/virtual/input/input61 [ 839.362225][ T71] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.366833][ T71] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.379391][ T71] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.384120][T19820] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.414788][T31002] adutux: No device or device unplugged -19 [ 839.706866][T31050] input: syz0 as /devices/virtual/input/input62 [ 839.708740][T31052] netlink: 'syz.8.10999': attribute type 7 has an invalid length. [ 839.737659][T19820] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.741836][T19820] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.746496][T19820] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.751084][T19820] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.807614][T31058] loop5: detected capacity change from 0 to 7 [ 840.006538][T31058] Dev loop5: unable to read RDB block 7 [ 840.009792][T31058] loop5: unable to read partition table [ 840.016378][T31058] loop5: partition table beyond EOD, truncated [ 840.021889][T31058] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 842.363166][T31187] __nla_validate_parse: 3 callbacks suppressed [ 842.363186][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11055'. [ 842.471072][T31196] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11063'. [ 842.772261][ T29] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 842.920035][T31215] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11069'. [ 842.929403][T31202] netlink: 75 bytes leftover after parsing attributes in process `syz.9.11073'. [ 842.938987][ T29] usb 14-1: unable to get BOS descriptor or descriptor too short [ 842.947884][ T29] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 842.951231][ T29] usb 14-1: can't read configurations, error -71 [ 843.028627][T31221] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11074'. [ 843.260396][T31234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11080'. [ 843.323031][ T40] audit: type=1800 audit(2000000552.869:3990): pid=31237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11082" name="file0" dev="9p" ino=72876365 res=0 errno=0 [ 843.551925][T31231] nbd2: detected capacity change from 0 to 128 [ 843.579229][T21064] block nbd2: Receive control failed (result -104) [ 843.582577][ T5985] block nbd2: Receive control failed (result -32) [ 844.142471][T16989] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 844.201873][ T1472] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 844.294474][T16989] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 844.300631][T16989] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 844.305391][T16989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.309305][T16989] usb 6-1: Product: syz [ 844.311213][T16989] usb 6-1: Manufacturer: syz [ 844.313359][T16989] usb 6-1: SerialNumber: syz [ 844.318697][T31255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 844.323556][T31255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 844.355660][ T1472] usb 13-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 844.359971][ T1472] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.364359][ T1472] usb 13-1: Product: syz [ 844.366513][ T1472] usb 13-1: Manufacturer: syz [ 844.368690][ T1472] usb 13-1: SerialNumber: syz [ 844.538414][T16989] usb 6-1: USB disconnect, device number 36 [ 844.624672][ T1472] rtl8150 13-1:1.0: couldn't reset the device [ 844.627955][ T1472] rtl8150 13-1:1.0: probe with driver rtl8150 failed with error -5 [ 844.638447][ T1472] usb 13-1: USB disconnect, device number 23 [ 846.204252][T31346] tun0: tun_chr_ioctl cmd 1074025675 [ 846.206685][T31346] tun0: persist disabled [ 846.511171][T31366] mkiss: ax0: crc mode is auto. [ 846.656760][T31374] tun0: tun_chr_ioctl cmd 1074025675 [ 846.659604][T31374] tun0: persist disabled [ 846.816131][T31384] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 847.057021][T31397] netlink: 192 bytes leftover after parsing attributes in process `syz.5.11147'. [ 847.072139][T31397] netlink: 'syz.5.11147': attribute type 2 has an invalid length. [ 847.392201][ T6061] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 847.576901][T31401] netlink: 75 bytes leftover after parsing attributes in process `syz.5.11151'. [ 847.906807][ T6061] usb 10-1: unable to get BOS descriptor or descriptor too short [ 847.913863][ T6061] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 847.918616][ T6061] usb 10-1: can't read configurations, error -71 [ 848.545293][T31430] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 848.547861][T31430] dvmrp1: linktype set to 804 [ 848.624688][T31434] loop4: detected capacity change from 0 to 524287936 [ 848.822967][T31423] nbd3: detected capacity change from 0 to 128 [ 848.878437][ T5985] block nbd3: Receive control failed (result -104) [ 848.887534][T21064] block nbd3: Receive control failed (result -32) [ 848.960936][T31449] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.11172'. [ 849.031064][T31457] kernel read not supported for file /:){{:, (pid: 31457 comm: syz.8.11176) [ 849.042144][ T40] audit: type=1800 audit(2000000558.579:3991): pid=31457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.11176" name=":){{:," dev="mqueue" ino=134078 res=0 errno=0 [ 849.169894][T31470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11182'. [ 849.175733][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11182'. [ 849.180086][T31470] netlink: 'syz.8.11182': attribute type 13 has an invalid length. [ 849.186299][T31470] netlink: 'syz.8.11182': attribute type 14 has an invalid length. [ 849.470621][ T40] audit: type=1326 audit(2000000559.009:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31483 comm="syz.1.11189" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efcc code=0x0 [ 849.483765][T31495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11194'. [ 850.888840][T31573] [ 850.890319][T31573] ====================================================== [ 850.894257][T31573] WARNING: possible circular locking dependency detected [ 850.897323][T31573] syzkaller #0 Tainted: G L [ 850.900518][T31573] ------------------------------------------------------ [ 850.903588][T31573] syz.9.11228/31573 is trying to acquire lock: [ 850.906221][T31573] ffffffff8e9b0700 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 850.911219][T31573] [ 850.911219][T31573] but task is already holding lock: [ 850.915255][T31573] ffffffff8e97e080 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 850.919397][T31573] [ 850.919397][T31573] which lock already depends on the new lock. [ 850.919397][T31573] [ 850.923338][T31573] [ 850.923338][T31573] the existing dependency chain (in reverse order) is: [ 850.927441][T31573] [ 850.927441][T31573] -> #8 (slab_mutex){+.+.}-{4:4}: [ 850.930877][T31573] __mutex_lock+0x1a4/0x1b10 [ 850.933153][T31573] kmem_cache_destroy+0x59/0x180 [ 850.935347][T31573] p9_client_destroy+0x20c/0x3a0 [ 850.937555][T31573] v9fs_session_close+0x49/0x2d0 [ 850.940590][T31573] v9fs_kill_super+0x4d/0xa0 [ 850.943297][T31573] deactivate_locked_super+0xc1/0x1b0 [ 850.946200][T31573] deactivate_super+0xe7/0x110 [ 850.948405][T31573] cleanup_mnt+0x21f/0x450 [ 850.950485][T31573] task_work_run+0x150/0x240 [ 850.952833][T31573] exit_to_user_mode_loop+0x100/0x4a0 [ 850.955297][T31573] __do_fast_syscall_32+0x608/0x950 [ 850.957704][T31573] do_fast_syscall_32+0x32/0x70 [ 850.960057][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 850.963498][T31573] [ 850.963498][T31573] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 850.966832][T31573] cpus_read_lock+0x42/0x170 [ 850.968940][T31573] static_key_slow_inc+0x12/0x30 [ 850.971287][T31573] udp_lib_setsockopt+0x7ca/0x890 [ 850.973908][T31573] udpv6_setsockopt+0xa3/0xb0 [ 850.976435][T31573] do_sock_setsockopt+0xf3/0x1d0 [ 850.979185][T31573] __sys_setsockopt+0x119/0x190 [ 850.981318][T31573] __ia32_sys_setsockopt+0xbc/0x160 [ 850.983660][T31573] __do_fast_syscall_32+0xe7/0x950 [ 850.985969][T31573] do_fast_syscall_32+0x32/0x70 [ 850.988157][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 850.990959][T31573] [ 850.990959][T31573] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 850.994679][T31573] lock_sock_nested+0x41/0xf0 [ 850.997585][T31573] inet_shutdown+0x67/0x410 [ 850.999976][T31573] nbd_mark_nsock_dead+0xae/0x5c0 [ 851.002476][T31573] sock_shutdown+0x16b/0x200 [ 851.004587][T31573] nbd_config_put+0x1eb/0x750 [ 851.006749][T31573] nbd_genl_connect+0xaf8/0x1a40 [ 851.009002][T31573] genl_family_rcv_msg_doit+0x214/0x300 [ 851.011773][T31573] genl_rcv_msg+0x560/0x800 [ 851.014472][T31573] netlink_rcv_skb+0x159/0x420 [ 851.017012][T31573] genl_rcv+0x28/0x40 [ 851.019014][T31573] netlink_unicast+0x585/0x850 [ 851.021179][T31573] netlink_sendmsg+0x8b0/0xda0 [ 851.023366][T31573] ____sys_sendmsg+0x9e1/0xb70 [ 851.025641][T31573] ___sys_sendmsg+0x190/0x1e0 [ 851.027956][T31573] __sys_sendmsg+0x170/0x220 [ 851.030288][T31573] __do_fast_syscall_32+0xe7/0x950 [ 851.032660][T31573] do_fast_syscall_32+0x32/0x70 [ 851.035067][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 851.037971][T31573] [ 851.037971][T31573] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 851.041116][T31573] __mutex_lock+0x1a4/0x1b10 [ 851.043265][T31573] nbd_queue_rq+0x428/0x1080 [ 851.045453][T31573] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 851.048673][T31573] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 851.052682][T31573] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 851.055883][T31573] blk_mq_run_hw_queue+0x23c/0x670 [ 851.058238][T31573] blk_mq_dispatch_list+0x51d/0x1360 [ 851.060648][T31573] blk_mq_flush_plug_list+0x130/0x600 [ 851.063077][T31573] __blk_flush_plug+0x2c4/0x4b0 [ 851.065288][T31573] __submit_bio+0x584/0x6c0 [ 851.067377][T31573] submit_bio_noacct_nocheck+0x543/0xbf0 [ 851.069903][T31573] submit_bio_noacct+0xd18/0x2000 [ 851.072166][T31573] submit_bh_wbc+0x681/0x890 [ 851.074415][T31573] block_read_full_folio+0x4c8/0x8e0 [ 851.077325][T31573] filemap_read_folio+0xfc/0x3b0 [ 851.080121][T31573] do_read_cache_folio+0x2d7/0x6b0 [ 851.082516][T31573] read_part_sector+0xd1/0x370 [ 851.084667][T31573] adfspart_check_ICS+0x91/0x7d0 [ 851.086904][T31573] bdev_disk_changed+0x7a3/0x1250 [ 851.089378][T31573] blkdev_get_whole+0x187/0x290 [ 851.092283][T31573] bdev_open+0x2c7/0xe40 [ 851.094579][T31573] blkdev_open+0x34e/0x4f0 [ 851.096819][T31573] do_dentry_open+0x6d8/0x1660 [ 851.099036][T31573] vfs_open+0x82/0x3f0 [ 851.100984][T31573] path_openat+0x208c/0x31a0 [ 851.103097][T31573] do_file_open+0x20e/0x430 [ 851.105159][T31573] do_sys_openat2+0x10d/0x1e0 [ 851.107340][T31573] __x64_sys_openat+0x12d/0x210 [ 851.110049][T31573] do_syscall_64+0x10b/0xf80 [ 851.112958][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.115839][T31573] [ 851.115839][T31573] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 851.118768][T31573] __mutex_lock+0x1a4/0x1b10 [ 851.120889][T31573] nbd_queue_rq+0xba/0x1080 [ 851.122974][T31573] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 851.125474][T31573] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 851.128461][T31573] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 851.131873][T31573] blk_mq_run_hw_queue+0x23c/0x670 [ 851.134488][T31573] blk_mq_dispatch_list+0x51d/0x1360 [ 851.137068][T31573] blk_mq_flush_plug_list+0x130/0x600 [ 851.139542][T31573] __blk_flush_plug+0x2c4/0x4b0 [ 851.141824][T31573] __submit_bio+0x584/0x6c0 [ 851.144012][T31573] submit_bio_noacct_nocheck+0x543/0xbf0 [ 851.146622][T31573] submit_bio_noacct+0xd18/0x2000 [ 851.149170][T31573] submit_bh_wbc+0x681/0x890 [ 851.151759][T31573] block_read_full_folio+0x4c8/0x8e0 [ 851.154637][T31573] filemap_read_folio+0xfc/0x3b0 [ 851.156899][T31573] do_read_cache_folio+0x2d7/0x6b0 [ 851.159321][T31573] read_part_sector+0xd1/0x370 [ 851.161568][T31573] adfspart_check_ICS+0x91/0x7d0 [ 851.164124][T31573] bdev_disk_changed+0x7a3/0x1250 [ 851.167103][T31573] blkdev_get_whole+0x187/0x290 [ 851.169698][T31573] bdev_open+0x2c7/0xe40 [ 851.171724][T31573] blkdev_open+0x34e/0x4f0 [ 851.173805][T31573] do_dentry_open+0x6d8/0x1660 [ 851.176009][T31573] vfs_open+0x82/0x3f0 [ 851.178023][T31573] path_openat+0x208c/0x31a0 [ 851.180373][T31573] do_file_open+0x20e/0x430 [ 851.182894][T31573] do_sys_openat2+0x10d/0x1e0 [ 851.185468][T31573] __x64_sys_openat+0x12d/0x210 [ 851.187893][T31573] do_syscall_64+0x10b/0xf80 [ 851.190021][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.192650][T31573] [ 851.192650][T31573] -> #3 (set->srcu){.+.+}-{0:0}: [ 851.195585][T31573] __synchronize_srcu+0xa2/0x300 [ 851.197869][T31573] blk_mq_quiesce_queue+0x149/0x1c0 [ 851.200815][T31573] elevator_switch+0x17b/0x7e0 [ 851.204201][T31573] elevator_change+0x352/0x530 [ 851.206415][T31573] elevator_set_default+0x29e/0x360 [ 851.208811][T31573] blk_register_queue+0x48e/0x630 [ 851.211214][T31573] __add_disk+0x73f/0xe40 [ 851.213242][T31573] add_disk_fwnode+0x118/0x5c0 [ 851.215423][T31573] nbd_dev_add+0x77a/0xb10 [ 851.217755][T31573] nbd_init+0x291/0x2b0 [ 851.220484][T31573] do_one_initcall+0x121/0x750 [ 851.223452][T31573] kernel_init_freeable+0x6ea/0x7b0 [ 851.226018][T31573] kernel_init+0x1f/0x1e0 [ 851.228014][T31573] ret_from_fork+0x72b/0xd50 [ 851.230153][T31573] ret_from_fork_asm+0x1a/0x30 [ 851.232361][T31573] [ 851.232361][T31573] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 851.235600][T31573] __mutex_lock+0x1a4/0x1b10 [ 851.237785][T31573] elevator_change+0x1bc/0x530 [ 851.240070][T31573] elevator_set_none+0x92/0xf0 [ 851.242788][T31573] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 851.246263][T31573] nbd_start_device+0x1a6/0xbd0 [ 851.248712][T31573] nbd_genl_connect+0xff2/0x1a40 [ 851.251043][T31573] genl_family_rcv_msg_doit+0x214/0x300 [ 851.253549][T31573] genl_rcv_msg+0x560/0x800 [ 851.255631][T31573] netlink_rcv_skb+0x159/0x420 [ 851.257948][T31573] genl_rcv+0x28/0x40 [ 851.259938][T31573] netlink_unicast+0x585/0x850 [ 851.262349][T31573] netlink_sendmsg+0x8b0/0xda0 [ 851.265189][T31573] ____sys_sendmsg+0x9e1/0xb70 [ 851.268202][T31573] ___sys_sendmsg+0x190/0x1e0 [ 851.270904][T31573] __sys_sendmsg+0x170/0x220 [ 851.273067][T31573] __do_fast_syscall_32+0xe7/0x950 [ 851.275269][T31573] do_fast_syscall_32+0x32/0x70 [ 851.276986][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 851.279188][T31573] [ 851.279188][T31573] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 851.282481][T31573] blk_alloc_queue+0x610/0x790 [ 851.284434][T31573] blk_mq_alloc_queue+0x174/0x290 [ 851.286512][T31573] __blk_mq_alloc_disk+0x29/0x120 [ 851.289263][T31573] nbd_dev_add+0x492/0xb10 [ 851.291971][T31573] nbd_init+0x291/0x2b0 [ 851.294079][T31573] do_one_initcall+0x121/0x750 [ 851.296117][T31573] kernel_init_freeable+0x6ea/0x7b0 [ 851.298062][T31573] kernel_init+0x1f/0x1e0 [ 851.300027][T31573] ret_from_fork+0x72b/0xd50 [ 851.302056][T31573] ret_from_fork_asm+0x1a/0x30 [ 851.303883][T31573] [ 851.303883][T31573] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 851.306258][T31573] __lock_acquire+0x14b8/0x2630 [ 851.307976][T31573] lock_acquire+0x1b1/0x370 [ 851.309674][T31573] fs_reclaim_acquire+0xc4/0x100 [ 851.311743][T31573] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 851.315173][T31573] kstrdup+0x51/0xe0 [ 851.317782][T31573] kstrdup_const+0x63/0x80 [ 851.320219][T31573] __kmem_cache_create_args+0x118/0x420 [ 851.322292][T31573] bioset_init+0x5ee/0x8a0 [ 851.324173][T31573] mddev_init+0x17c/0x820 [ 851.326099][T31573] md_alloc+0xc7/0x10a0 [ 851.327582][T31573] md_probe+0x73/0xf0 [ 851.329017][T31573] blk_probe_dev+0x149/0x1e0 [ 851.330688][T31573] blk_request_module+0x16/0xc0 [ 851.332197][T31573] blkdev_get_no_open+0x9b/0xf0 [ 851.333765][T31573] bdev_file_open_by_dev+0x70/0x210 [ 851.335652][T31573] swsusp_check+0x72/0x470 [ 851.337322][T31573] software_resume+0x6f/0x330 [ 851.340351][T31573] resume_store+0x248/0x460 [ 851.342882][T31573] kobj_attr_store+0x58/0x80 [ 851.344513][T31573] sysfs_kf_write+0xf2/0x150 [ 851.345966][T31573] kernfs_fop_write_iter+0x3e0/0x5f0 [ 851.347889][T31573] vfs_write+0x6ac/0x1070 [ 851.349479][T31573] ksys_write+0x12a/0x250 [ 851.351087][T31573] __do_fast_syscall_32+0xe7/0x950 [ 851.352922][T31573] do_fast_syscall_32+0x32/0x70 [ 851.354720][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 851.356893][T31573] [ 851.356893][T31573] other info that might help us debug this: [ 851.356893][T31573] [ 851.360339][T31573] Chain exists of: [ 851.360339][T31573] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 851.360339][T31573] [ 851.365500][T31573] Possible unsafe locking scenario: [ 851.365500][T31573] [ 851.368531][T31573] CPU0 CPU1 [ 851.370629][T31573] ---- ---- [ 851.372316][T31573] lock(slab_mutex); [ 851.373867][T31573] lock(cpu_hotplug_lock); [ 851.376142][T31573] lock(slab_mutex); [ 851.378527][T31573] lock(fs_reclaim); [ 851.380062][T31573] [ 851.380062][T31573] *** DEADLOCK *** [ 851.380062][T31573] [ 851.382825][T31573] 9 locks held by syz.9.11228/31573: [ 851.384637][T31573] #0: ffff888026065cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 851.387509][T31573] #1: ffff8880219c6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 851.390466][T31573] #2: ffff888026d5ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 851.393764][T31573] #3: ffff88801cf180f8 (kn->active#79){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 851.397572][T31573] #4: ffffffff8e6a1ec0 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 851.401625][T31573] #5: ffffffff8f311ee0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 851.404793][T31573] #6: ffffffff90160460 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 851.407559][T31573] #7: ffffffff8f2f8dc0 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 851.410530][T31573] #8: ffffffff8e97e080 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 851.413722][T31573] [ 851.413722][T31573] stack backtrace: [ 851.415610][T31573] CPU: 1 UID: 0 PID: 31573 Comm: syz.9.11228 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.415626][T31573] Tainted: [L]=SOFTLOCKUP [ 851.415630][T31573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 851.415743][T31573] Call Trace: [ 851.415839][T31573] [ 851.415845][T31573] dump_stack_lvl+0x100/0x190 [ 851.415860][T31573] print_circular_bug.cold+0x178/0x1c7 [ 851.415879][T31573] check_noncircular+0x146/0x160 [ 851.415899][T31573] __lock_acquire+0x14b8/0x2630 [ 851.415911][T31573] lock_acquire+0x1b1/0x370 [ 851.415921][T31573] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 851.415934][T31573] ? __pfx___mutex_lock+0x10/0x10 [ 851.415953][T31573] fs_reclaim_acquire+0xc4/0x100 [ 851.415966][T31573] ? __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 851.415976][T31573] __kmalloc_node_track_caller_noprof+0xb5/0x850 [ 851.415987][T31573] ? kstrdup_const+0x63/0x80 [ 851.415999][T31573] ? __pfx_snprintf+0x10/0x10 [ 851.416015][T31573] kstrdup+0x51/0xe0 [ 851.416025][T31573] kstrdup_const+0x63/0x80 [ 851.416035][T31573] __kmem_cache_create_args+0x118/0x420 [ 851.416052][T31573] bioset_init+0x5ee/0x8a0 [ 851.416066][T31573] ? __pfx_bioset_init+0x10/0x10 [ 851.416079][T31573] ? kasan_save_track+0x14/0x30 [ 851.416090][T31573] ? __kasan_kmalloc+0xaa/0xb0 [ 851.416100][T31573] ? percpu_ref_init+0x244/0x3f0 [ 851.416196][T31573] mddev_init+0x17c/0x820 [ 851.416214][T31573] md_alloc+0xc7/0x10a0 [ 851.416227][T31573] md_probe+0x73/0xf0 [ 851.416238][T31573] ? __pfx_md_probe+0x10/0x10 [ 851.416249][T31573] blk_probe_dev+0x149/0x1e0 [ 851.416261][T31573] blk_request_module+0x16/0xc0 [ 851.416274][T31573] blkdev_get_no_open+0x9b/0xf0 [ 851.416293][T31573] bdev_file_open_by_dev+0x70/0x210 [ 851.416310][T31573] swsusp_check+0x72/0x470 [ 851.416325][T31573] software_resume+0x6f/0x330 [ 851.416337][T31573] resume_store+0x248/0x460 [ 851.416349][T31573] ? __pfx_resume_store+0x10/0x10 [ 851.416363][T31573] ? find_held_lock+0x2b/0x80 [ 851.416376][T31573] ? sysfs_file_kobj+0xe4/0x290 [ 851.416392][T31573] ? sysfs_file_kobj+0xe4/0x290 [ 851.416408][T31573] ? __pfx_resume_store+0x10/0x10 [ 851.416420][T31573] kobj_attr_store+0x58/0x80 [ 851.416431][T31573] ? __pfx_kobj_attr_store+0x10/0x10 [ 851.416441][T31573] sysfs_kf_write+0xf2/0x150 [ 851.416458][T31573] kernfs_fop_write_iter+0x3e0/0x5f0 [ 851.416473][T31573] ? __pfx_sysfs_kf_write+0x10/0x10 [ 851.416490][T31573] vfs_write+0x6ac/0x1070 [ 851.416502][T31573] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 851.416517][T31573] ? __pfx_vfs_write+0x10/0x10 [ 851.416528][T31573] ? find_held_lock+0x2b/0x80 [ 851.416544][T31573] ksys_write+0x12a/0x250 [ 851.416556][T31573] ? __pfx_ksys_write+0x10/0x10 [ 851.416568][T31573] ? rcu_is_watching+0x12/0xc0 [ 851.416581][T31573] __do_fast_syscall_32+0xe7/0x950 [ 851.416592][T31573] ? lockdep_hardirqs_on+0x78/0x100 [ 851.416608][T31573] do_fast_syscall_32+0x32/0x70 [ 851.416619][T31573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 851.416633][T31573] RIP: 0023:0xf6fcefcc [ 851.416644][T31573] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 851.416655][T31573] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 851.416667][T31573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 851.416674][T31573] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 851.416680][T31573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 851.416687][T31573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 851.416694][T31573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 851.416704][T31573] [ 851.551937][T31573] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 851.554955][T31573] block device autoloading is deprecated and will be removed. [ 851.557269][T31573] PM: Image not found (code -5)