last executing test programs: 3m56.518018383s ago: executing program 3 (id=18074): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff09, 0x0) 3m56.471098456s ago: executing program 3 (id=18075): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x58139000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x6, 0x4) 3m56.423812973s ago: executing program 3 (id=18076): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) read(r0, 0x0, 0x0) 3m56.379110647s ago: executing program 3 (id=18078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x70bdab, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) fcntl$lock(r0, 0x40f, &(0x7f0000000000)={0x0, 0x0, 0x71, 0x2}) 3m56.334209602s ago: executing program 3 (id=18080): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 3m56.287899798s ago: executing program 3 (id=18082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 3m40.15440206s ago: executing program 32 (id=18082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2m14.018262446s ago: executing program 4 (id=20079): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x6, 0x402, 0x5, 0x5, 0x1100cc1, 0x9, 0x6, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x6, 0x5, 0x41, 0xe, 0x1a448, 0x3fb, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xa79e, 0x3, 0xd0, 0xfffff5e1, 0x20000001, 0xfce]}) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000600)={0xe67, 0x0}) 2m13.899195433s ago: executing program 4 (id=20082): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) 2m13.727276256s ago: executing program 4 (id=20088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e80"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m13.501191755s ago: executing program 4 (id=20093): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24008024) 2m13.425070557s ago: executing program 4 (id=20095): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 2m13.294350475s ago: executing program 4 (id=20098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x20, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}}, 0x20}}, 0x20000000) 1m56.805481897s ago: executing program 33 (id=20098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x20, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}}, 0x20}}, 0x20000000) 955.112594ms ago: executing program 5 (id=22555): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0) 823.947584ms ago: executing program 1 (id=22560): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) 783.408162ms ago: executing program 5 (id=22561): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 693.734896ms ago: executing program 1 (id=22563): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x408d4) 664.290493ms ago: executing program 2 (id=22564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 663.611631ms ago: executing program 0 (id=22572): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 602.079817ms ago: executing program 5 (id=22565): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) 531.710977ms ago: executing program 2 (id=22566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x778f}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 449.816106ms ago: executing program 5 (id=22567): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000001c0)) 402.580731ms ago: executing program 2 (id=22568): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil], &(0x7f00000000c0), &(0x7f0000000100), 0x2) 400.199695ms ago: executing program 0 (id=22569): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0) 350.738763ms ago: executing program 0 (id=22570): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r0, 0x5401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "568beed00e80a9f8"}) 329.598515ms ago: executing program 1 (id=22571): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8009) sendto$inet(r0, 0x0, 0x0, 0x2000c091, 0x0, 0x0) 296.813256ms ago: executing program 5 (id=22573): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 210.513038ms ago: executing program 2 (id=22574): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r1}) 209.900201ms ago: executing program 1 (id=22582): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r1, @empty}, 0x10) 186.253755ms ago: executing program 0 (id=22575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001}, 0x8) close(r0) 186.150055ms ago: executing program 5 (id=22576): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0x25, &(0x7f0000000340), 0x8) 123.373364ms ago: executing program 1 (id=22577): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) 93.650346ms ago: executing program 2 (id=22578): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) 82.345081ms ago: executing program 0 (id=22579): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x4}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 23.715052ms ago: executing program 1 (id=22580): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x7fff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 9.274107ms ago: executing program 0 (id=22581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) 0s ago: executing program 2 (id=22583): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) kernel console output (not intermixed with test programs): FF.001C: unknown main item tag 0x0 [ 1008.399229][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.407155][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.415385][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.423805][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.432179][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.440279][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.448787][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.456636][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: unknown main item tag 0x0 [ 1008.475993][ T3849] hid-generic 0008:0000:FFFFFBFF.001C: hidraw0: HID v9.86 Device [syz0] on syz1 [ 1008.563847][T19381] fido_id[19381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1009.170748][T19417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19861'. [ 1009.282163][T19428] netlink: 72 bytes leftover after parsing attributes in process `syz.1.19864'. [ 1009.669875][T19462] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.19878'. [ 1009.726105][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1009.810544][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1009.991310][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.036894][T19484] program syz.0.19887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.141364][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.279163][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.410638][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.456889][T19506] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1010.509484][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.533776][T19511] tmpfs: User quota inode hardlimit too large. [ 1010.610218][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.664671][T19522] program syz.2.19903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.720626][T19524] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1010.744045][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1010.877276][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1011.103304][T19551] can0: slcan on ptm0. [ 1011.195632][T19549] can0 (unregistered): slcan off ptm0. [ 1011.941469][T19625] netlink: 'syz.2.19936': attribute type 3 has an invalid length. [ 1011.956981][T19625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19936'. [ 1011.966286][T19625] netlink: 'syz.2.19936': attribute type 3 has an invalid length. [ 1011.977609][T19625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19936'. [ 1012.120862][T19634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19939'. [ 1012.197802][ T29] audit: type=1326 audit(960.010:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19637 comm="syz.1.19940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97c639c799 code=0x0 [ 1013.491877][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19951'. [ 1013.557717][T19675] delete_channel: no stack [ 1014.016452][T19679] netlink: 'syz.1.19954': attribute type 13 has an invalid length. [ 1014.024688][T19679] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.19954'. [ 1014.060396][T19681] vivid-000: disconnect [ 1014.066838][T19681] vivid-000: reconnect [ 1014.899064][T19753] sp1: Synchronizing with TNC [ 1014.998667][T19768] netlink: 'syz.4.19991': attribute type 1 has an invalid length. [ 1015.131514][T15128] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1015.156931][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.257785][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.336845][T15128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.363457][T15128] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.369951][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.403409][T15128] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.420395][T15128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.433954][T15128] usb 3-1: Product: syz [ 1015.441159][T15128] usb 3-1: Manufacturer: syz [ 1015.450880][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.454189][T15128] usb 3-1: SerialNumber: syz [ 1015.500718][T15128] cdc_mbim 3-1:1.0: skipping garbage [ 1015.506535][T15128] usb 3-1: selecting invalid altsetting 1 [ 1015.573815][T12229] udevd[12229]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.600560][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20007'. [ 1015.704860][T12229] udevd[12229]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.817433][T12229] udevd[12229]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.918095][T19837] netlink: 'syz.4.20017': attribute type 21 has an invalid length. [ 1015.926603][T12229] udevd[12229]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1015.933861][T19837] netlink: 'syz.4.20017': attribute type 1 has an invalid length. [ 1015.959497][T15128] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 1015.978241][T15128] cdc_mbim 3-1:1.0: bind() failure [ 1016.018770][T15128] usb 3-1: USB disconnect, device number 69 [ 1016.082788][T12229] udevd[12229]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1016.216572][ T9538] udevd[9538]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 1016.545298][T19887] tipc: Enabled bearer , priority 10 [ 1016.556003][T19888] netlink: 'syz.1.20035': attribute type 11 has an invalid length. [ 1016.743581][T19900] program syz.2.20041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.964826][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20049'. [ 1017.041958][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20050'. [ 1017.131695][T15129] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1017.293631][T15129] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.301706][T15129] usb 3-1: config 0 has no interface number 0 [ 1017.309202][T15129] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.322295][T15129] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.347900][T15129] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1017.363578][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.381461][T15129] usb 3-1: config 0 descriptor?? [ 1017.409928][ T6235] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1017.572016][ T6235] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.582709][ T6235] usb 2-1: config 0 has no interface number 0 [ 1017.590500][ T6235] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.609076][ T6235] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.619023][ T6235] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1017.628199][ T6235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.640626][ T6235] usb 2-1: config 0 descriptor?? [ 1017.873995][T15129] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.001D/input/input167 [ 1018.090701][ T6235] prodikeys 0003:041E:2801.001E: item fetching failed at offset 5/7 [ 1018.109146][ T6235] prodikeys 0003:041E:2801.001E: hid parse failed [ 1018.117390][ T6235] prodikeys 0003:041E:2801.001E: probe with driver prodikeys failed with error -22 [ 1018.163429][T15129] holtek_kbd 0003:04D9:A055.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 1018.212416][T15129] usb 3-1: USB disconnect, device number 70 [ 1018.262759][T20004] fido_id[20004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1018.347187][ T6218] usb 2-1: USB disconnect, device number 56 [ 1019.173793][T20082] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1019.219407][T20087] netlink: 774 bytes leftover after parsing attributes in process `syz.4.20088'. [ 1019.249657][T20087] netlink: 52 bytes leftover after parsing attributes in process `syz.4.20088'. [ 1019.339795][T20095] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1019.908014][T20129] program syz.1.20103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1020.439963][T20159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20114'. [ 1020.474381][T20159] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20114'. [ 1021.114170][T20181] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 1021.463710][T15129] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1021.485147][T15128] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1021.624110][T15129] usb 2-1: Using ep0 maxpacket: 16 [ 1021.631449][T15129] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.643744][T15129] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.654266][T15129] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1021.663733][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.678802][T15128] usb 3-1: Using ep0 maxpacket: 16 [ 1021.697089][T15128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.711698][T15128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.721608][T15128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1021.735053][T15128] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1021.744340][T15128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.762674][T15128] usb 3-1: config 0 descriptor?? [ 1022.128035][T15129] mcp2221 0003:04D8:00DD.001F: item fetching failed at offset 4/5 [ 1022.138603][T15129] mcp2221 0003:04D8:00DD.001F: can't parse reports [ 1022.145256][T15129] mcp2221 0003:04D8:00DD.001F: probe with driver mcp2221 failed with error -22 [ 1022.208567][T15128] hid_parser_main: 159 callbacks suppressed [ 1022.208591][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.222345][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.231185][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.239313][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.248414][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.256121][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.263391][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.271459][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.279429][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.286860][T15128] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1022.304119][T15128] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0020/input/input168 [ 1022.350695][ T6299] usb 2-1: USB disconnect, device number 57 [ 1022.357861][T15128] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1022.482787][T15128] usb 3-1: USB disconnect, device number 71 [ 1022.494740][T20213] fido_id[20213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1023.083223][T20241] tipc: Enabling of bearer rejected, failed to enable media [ 1023.142180][ T29] audit: type=1326 audit(970.247:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.2.20128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f4dd9c799 code=0x0 [ 1024.931083][T20291] netlink: 'syz.0.20150': attribute type 4 has an invalid length. [ 1025.159332][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20155'. [ 1025.612130][T20331] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1025.612130][T20331] The task syz.1.20166 (20331) triggered the difference, watch for misbehavior. [ 1026.323502][T20349] devpts: Bad value for 'max' [ 1027.518370][T20398] input input169: cannot allocate more than FF_MAX_EFFECTS effects [ 1028.476655][T20436] netlink: 'syz.1.20211': attribute type 2 has an invalid length. [ 1028.762958][T20451] netlink: 'syz.1.20219': attribute type 29 has an invalid length. [ 1028.765646][T20454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20220'. [ 1028.783044][T20451] netlink: 'syz.1.20219': attribute type 29 has an invalid length. [ 1028.801337][T20454] netlink: 43 bytes leftover after parsing attributes in process `syz.2.20220'. [ 1028.822625][T20454] netlink: 'syz.2.20220': attribute type 5 has an invalid length. [ 1028.839942][T20460] mac80211_hwsim hwsim3 4: renamed from wlan1 [ 1028.843965][T20454] netlink: 43 bytes leftover after parsing attributes in process `syz.2.20220'. [ 1029.044062][T20469] lo speed is unknown, defaulting to 1000 [ 1029.207781][ T6218] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1029.332193][T20469] wg0 speed is unknown, defaulting to 1000 [ 1029.368118][ T6218] usb 3-1: Using ep0 maxpacket: 16 [ 1029.385744][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.405190][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.425622][ T6218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.451331][ T6218] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1029.470337][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.488088][ T6218] usb 3-1: config 0 descriptor?? [ 1029.957590][ T6218] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1029.967819][ T6218] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 1029.977276][ T6218] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 1030.013885][ T6218] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1030.038123][ T6218] microsoft 0003:045E:07DA.0021: no inputs found [ 1030.052701][ T6218] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 1030.200530][T15128] usb 3-1: USB disconnect, device number 72 [ 1030.850681][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20228'. [ 1031.003494][T20524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20230'. [ 1031.777062][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1031.784105][ T6068] Bluetooth: hci0: command 0x1003 tx timeout [ 1032.092382][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20246'. [ 1032.302355][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20250'. [ 1032.861718][T20603] netlink: 'syz.2.20264': attribute type 21 has an invalid length. [ 1032.897872][T15128] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1033.069404][T15128] usb 2-1: Using ep0 maxpacket: 16 [ 1033.080643][T15128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.091573][T15128] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1033.102641][T15128] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1033.111926][T15128] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1033.120159][T15128] usb 2-1: Manufacturer: syz [ 1033.128086][T15128] usb 2-1: config 0 descriptor?? [ 1033.304329][T15128] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1033.363546][T20594] netlink: 17223 bytes leftover after parsing attributes in process `syz.1.20261'. [ 1033.375369][ T6235] usb 2-1: USB disconnect, device number 58 [ 1033.467762][T15128] usb 3-1: Using ep0 maxpacket: 32 [ 1033.480224][T15128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.503943][T15128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.524946][T15128] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1033.534919][T15128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.548128][T15128] usb 3-1: config 0 descriptor?? [ 1034.006874][T15128] koneplus 0003:1E7D:2D51.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 1034.205215][T15128] koneplus 0003:1E7D:2D51.0022: couldn't init struct koneplus_device [ 1034.227646][T15128] koneplus 0003:1E7D:2D51.0022: couldn't install mouse [ 1034.250539][T15128] koneplus 0003:1E7D:2D51.0022: probe with driver koneplus failed with error -71 [ 1034.280897][T15128] usb 3-1: USB disconnect, device number 73 [ 1034.748478][T15129] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1034.922219][T15129] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1034.941567][T15129] usb 2-1: config 0 has no interface number 0 [ 1034.956680][T15129] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1034.980347][T15129] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1035.007727][T15129] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1035.032073][T15129] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1035.056945][T15129] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1035.090055][T15129] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1035.112729][T15129] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1035.132729][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.159561][T15129] usb 2-1: config 0 descriptor?? [ 1035.176843][T20655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1035.184280][T20655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1035.202748][T15129] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1035.262410][T15128] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1035.433418][T15128] usb 3-1: Using ep0 maxpacket: 32 [ 1035.437523][T15129] usb 2-1: USB disconnect, device number 59 [ 1035.457486][T15128] usb 3-1: config 9 has an invalid interface number: 61 but max is 0 [ 1035.472083][T15129] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1035.475656][T15128] usb 3-1: config 9 has no interface number 0 [ 1035.502884][T15128] usb 3-1: config 9 interface 61 has no altsetting 0 [ 1035.523298][T15128] usb 3-1: New USB device found, idVendor=0ccd, idProduct=005a, bcdDevice=ba.e3 [ 1035.532798][T15128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.551389][T15128] usb 3-1: Product: syz [ 1035.559445][T15128] usb 3-1: Manufacturer: syz [ 1035.572001][T15128] usb 3-1: SerialNumber: syz [ 1036.025129][T15128] dvb-usb: found a 'Terratec Cinergy DT XS Diversity' in warm state. [ 1036.063404][T15128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1036.079862][T15128] dvbdev: DVB: registering new adapter (Terratec Cinergy DT XS Diversity) [ 1036.091295][T15128] usb 3-1: media controller created [ 1036.110584][T15128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.178843][T15128] DVB: Unable to find symbol dib7000p_attach() [ 1036.197601][T15128] dvb-usb: no frontend was attached by 'Terratec Cinergy DT XS Diversity' [ 1036.211089][T15128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1036.221936][T15128] dvbdev: DVB: registering new adapter (Terratec Cinergy DT XS Diversity) [ 1036.249586][T15128] usb 3-1: media controller created [ 1036.307585][T15128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.326714][ T6068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.347149][ T6068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.355461][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20281'. [ 1036.356111][ T6068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.382093][ T6068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.390107][ T6068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.429050][T15128] DVB: Unable to find symbol dib7000p_attach() [ 1036.446274][T15128] dvb-usb: no frontend was attached by 'Terratec Cinergy DT XS Diversity' [ 1036.524557][T20694] lo speed is unknown, defaulting to 1000 [ 1036.558698][T15128] rc_core: IR keymap rc-dib0700-rc5 not found [ 1036.568594][T15128] Registered IR keymap rc-empty [ 1036.584142][T15128] dvb-usb: could not initialize remote control. [ 1036.603562][T15128] dvb-usb: Terratec Cinergy DT XS Diversity successfully initialized and connected. [ 1036.631081][T15128] usb 3-1: USB disconnect, device number 74 [ 1036.763970][T15128] dvb-usb: Terratec Cinergy DT XS Diversity successfully deinitialized and disconnected. [ 1036.950529][T20694] wg0 speed is unknown, defaulting to 1000 [ 1037.109325][T20756] program syz.0.20290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.352437][T20776] netlink: 'syz.2.20296': attribute type 27 has an invalid length. [ 1037.363447][ T127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.613208][ T127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.695307][T20804] netlink: 88 bytes leftover after parsing attributes in process `syz.1.20304'. [ 1037.756836][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20305'. [ 1037.771261][ T127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.933779][ T127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.208600][T20694] chnl_net:caif_netlink_parms(): no params data found [ 1038.604071][T20694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.620678][T20694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.620826][ T6068] Bluetooth: hci0: command tx timeout [ 1038.632036][T20694] bridge_slave_0: entered allmulticast mode [ 1038.648933][T20694] bridge_slave_0: entered promiscuous mode [ 1038.667656][ T127] bridge_slave_1: left allmulticast mode [ 1038.682622][ T127] bridge_slave_1: left promiscuous mode [ 1038.693021][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.704201][ T127] bridge_slave_0: left allmulticast mode [ 1038.720012][ T127] bridge_slave_0: left promiscuous mode [ 1038.726293][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.009223][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.061535][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.103052][ T127] bond0 (unregistering): Released all slaves [ 1039.112908][T20694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.120787][T20694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.128209][T20694] bridge_slave_1: entered allmulticast mode [ 1039.136088][T20694] bridge_slave_1: entered promiscuous mode [ 1039.146605][T20951] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.20327'. [ 1039.171550][T20951] bridge: RTM_NEWNEIGH with invalid ether address [ 1039.178943][ T127] tipc: Left network mode [ 1039.290138][T20694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.329659][T20694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.551865][T20694] team0: Port device team_slave_0 added [ 1039.566757][T20694] team0: Port device team_slave_1 added [ 1039.901969][T20694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.918272][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.945038][T20694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.059192][T20694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.083548][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.161713][T20694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.392372][T20694] hsr_slave_0: entered promiscuous mode [ 1040.399862][T20694] hsr_slave_1: entered promiscuous mode [ 1040.407808][T20694] debugfs: 'hsr0' already exists in 'hsr' [ 1040.413670][T20694] Cannot create hsr debugfs directory [ 1040.433918][ T127] hsr_slave_0: left promiscuous mode [ 1040.461916][ T127] hsr_slave_1: left promiscuous mode [ 1040.478991][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.493814][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.518380][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.528104][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.561438][ T127] veth1_macvtap: left promiscuous mode [ 1040.584348][ T127] veth0_macvtap: left promiscuous mode [ 1040.599257][ T127] veth1_vlan: left promiscuous mode [ 1040.608938][ T127] veth0_vlan: left promiscuous mode [ 1040.789538][ T127] pim6reg9 (unregistering): left allmulticast mode [ 1040.845377][ T6068] Bluetooth: hci0: command tx timeout [ 1041.025641][ T127] team0 (unregistering): Port device team_slave_1 removed [ 1041.043158][ T127] team0 (unregistering): Port device team_slave_0 removed [ 1041.488396][ T127] IPVS: stop unused estimator thread 0... [ 1041.719242][T21196] netlink: 'syz.2.20354': attribute type 10 has an invalid length. [ 1041.774353][T21201] netlink: 'syz.2.20354': attribute type 10 has an invalid length. [ 1041.782538][T21201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20354'. [ 1041.818246][T21201] batadv0: entered promiscuous mode [ 1041.823664][T21201] batadv0: entered allmulticast mode [ 1041.832322][T21201] bridge0: port 2(batadv0) entered blocking state [ 1041.839277][T21201] bridge0: port 2(batadv0) entered disabled state [ 1041.895654][T20694] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1041.945958][T20694] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1041.981284][T20694] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1042.026118][T20694] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1042.289957][ T127] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1042.301898][ T127] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1042.347036][T20694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.384000][T20694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.404667][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.404838][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.418000][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.418130][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.905132][ T29] audit: type=1326 audit(988.721:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.2.20359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4dd9c799 code=0x7fc00000 [ 1042.975126][T20694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.080731][ T6068] Bluetooth: hci0: command tx timeout [ 1043.346434][T21293] pim6reg: entered allmulticast mode [ 1043.374540][T21293] pim6reg: left allmulticast mode [ 1043.408473][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20377'. [ 1043.605644][T21313] program syz.1.20381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.656650][T20694] veth0_vlan: entered promiscuous mode [ 1043.765874][T20694] veth1_vlan: entered promiscuous mode [ 1043.902039][T20694] veth0_macvtap: entered promiscuous mode [ 1043.963693][T20694] veth1_macvtap: entered promiscuous mode [ 1044.042628][T20694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.085012][T20694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.121518][ T523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.132984][ T523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.178916][ T523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.214437][ T523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.498796][ T523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.520736][ T523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.566254][ T523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.580133][ T523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.761644][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1045.294796][ T6068] Bluetooth: hci0: command tx timeout [ 1045.439105][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1045.503631][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1045.552886][T21421] netlink: 'syz.0.20423': attribute type 1 has an invalid length. [ 1045.561489][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20423'. [ 1045.572037][T21421] netlink: 'syz.0.20423': attribute type 1 has an invalid length. [ 1045.679182][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1045.753777][T21432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.906808][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.008703][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.070997][T21455] genirq: Flags mismatch irq 2. 00200000 (aio_iiro_16) vs. 00200000 (pcl816) [ 1046.076466][T21456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20438'. [ 1046.190292][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.329265][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.378293][T21481] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.20448'. [ 1046.446603][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.740562][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1046.763845][T21505] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20456'. [ 1046.795054][T21507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20457'. [ 1047.167877][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1047.316387][T15129] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1047.502303][T21552] tipc: Enabling of bearer rejected, failed to enable media [ 1047.513327][T15129] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.524666][T15129] usb 3-1: config 0 has no interface number 0 [ 1047.531350][T15129] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.547036][T15129] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.559856][T15129] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1047.571672][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.585120][T15129] usb 3-1: config 0 descriptor?? [ 1048.027539][T21575] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1048.030641][T15129] prodikeys 0003:041E:2801.0023: item fetching failed at offset 5/7 [ 1048.051456][T15129] prodikeys 0003:041E:2801.0023: hid parse failed [ 1048.060300][T15129] prodikeys 0003:041E:2801.0023: probe with driver prodikeys failed with error -22 [ 1048.260011][T15129] usb 3-1: USB disconnect, device number 75 [ 1048.758478][T21621] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1049.159377][ T6218] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1049.327252][ T6218] usb 3-1: Using ep0 maxpacket: 16 [ 1049.333919][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.344963][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.354968][ T6218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1049.368179][ T6218] usb 3-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1049.377419][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.388494][ T6218] usb 3-1: config 0 descriptor?? [ 1049.834918][ T6218] magicmouse 0003:05AC:0323.0024: unknown main item tag 0x4 [ 1049.844167][ T6218] magicmouse 0003:05AC:0323.0024: unknown main item tag 0x3 [ 1049.851781][ T6218] magicmouse 0003:05AC:0323.0024: item fetching failed at offset 35/41 [ 1049.860563][ T6218] magicmouse 0003:05AC:0323.0024: magicmouse hid parse failed [ 1049.868231][ T6218] magicmouse 0003:05AC:0323.0024: probe with driver magicmouse failed with error -22 [ 1050.054728][ T6218] usb 3-1: USB disconnect, device number 76 [ 1050.122845][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.203498][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.249475][T21671] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1050.351397][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.489464][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.565969][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.630735][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.735748][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.829926][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1050.916599][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1051.021014][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1051.263359][T21749] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 2 out of range (1000000..45000000) [ 1052.019528][T21798] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1052.432852][T21829] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 2 out of range (1000000..45000000) [ 1052.456659][ T6299] Process accounting resumed [ 1052.481555][T21831] Process accounting resumed [ 1053.211031][T21883] netlink: 'syz.5.20583': attribute type 21 has an invalid length. [ 1053.890858][ T29] audit: type=1326 audit(998.996:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.2.20599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f4dd9c799 code=0x0 [ 1054.570380][T21970] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1054.945488][T21989] block nbd1: not configured, cannot reconfigure [ 1055.703220][T15129] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1055.713211][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1055.871324][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1055.891122][T15129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.905068][T15129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.932102][T15129] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1055.953928][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1055.975085][T15129] usb 3-1: SerialNumber: syz [ 1056.107386][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1056.240522][T15129] usb 3-1: 0:2 : does not exist [ 1056.281614][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1056.421482][T15129] usb 3-1: USB disconnect, device number 77 [ 1056.508974][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1056.534672][T20732] udevd[20732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.735221][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1056.883991][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1057.037658][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1057.169376][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1057.270300][T22137] netlink: 'syz.0.20655': attribute type 27 has an invalid length. [ 1057.382972][T22146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20665'. [ 1057.679978][T22168] netlink: 88 bytes leftover after parsing attributes in process `syz.5.20663'. [ 1058.217777][T22203] netlink: 'syz.1.20682': attribute type 1 has an invalid length. [ 1058.500023][T22219] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20678'. [ 1059.210096][ T29] audit: type=1326 audit(1003.960:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22256 comm="syz.1.20690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97c639c799 code=0x0 [ 1060.671645][T22297] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1060.783140][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 1060.790180][ T6068] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1061.155350][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1061.292704][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1061.444190][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1061.487803][T22362] pim6reg: entered allmulticast mode [ 1061.519618][T22362] pim6reg: left allmulticast mode [ 1061.540405][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1061.655203][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1062.147844][T22411] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1062.573248][ T29] audit: type=1326 audit(1007.111:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22375 comm="syz.5.20720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c99c799 code=0x7fc00000 [ 1062.663916][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1062.714215][T22443] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1062.768260][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1062.886938][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1062.974700][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1063.092823][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/78.tmp-b7:5' failed: Read-only file system [ 1063.359261][T22476] tmpfs: Bad value for 'nr_inodes' [ 1063.978883][T22512] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1064.016032][T22514] IPVS: Scheduler module ip_vs_noe not found [ 1064.522362][ T6235] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1064.706603][ T6235] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1064.720306][ T6235] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.730726][ T6235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1064.737749][ T6235] usb 3-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 1064.747266][ T6235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.757285][ T6235] usb 3-1: config 0 descriptor?? [ 1064.812497][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1064.971430][ T6299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1065.139249][ T6299] usb 6-1: Using ep0 maxpacket: 16 [ 1065.145950][ T6299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.156979][ T6299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.167026][ T6299] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1065.176337][ T6299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.186714][ T6299] usb 6-1: config 0 descriptor?? [ 1065.204674][ T6235] wacom 0003:056A:0144.0025: unbalanced collection at end of report description [ 1065.214289][ T6235] wacom 0003:056A:0144.0025: parse failed [ 1065.220190][ T6235] wacom 0003:056A:0144.0025: probe with driver wacom failed with error -22 [ 1065.423538][T15129] usb 3-1: USB disconnect, device number 78 [ 1065.630380][ T6299] hid-multitouch 0003:1FD2:6007.0026: item fetching failed at offset 1/5 [ 1065.639783][ T6299] hid-multitouch 0003:1FD2:6007.0026: probe with driver hid-multitouch failed with error -22 [ 1065.849270][T15129] usb 6-1: USB disconnect, device number 2 [ 1065.991190][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1066.060789][T22612] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.20799'. [ 1066.156368][ T29] audit: type=1326 audit(1010.474:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.1.20803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c639c799 code=0x0 [ 1066.436906][T22638] rdma_op ffff888029b961f0 conn xmit_rdma 0000000000000000 [ 1066.502253][ T127] wlan1: Trigger new scan to find an IBSS to join [ 1066.835988][T22658] comedi comedi3: s526: I/O port conflict (0x4f27,64) [ 1067.452040][T22707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20842'. [ 1067.462721][T22707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20842'. [ 1067.528085][ T6228] kernel write not supported for file /input/mouse0 (pid: 6228 comm: kworker/1:7) [ 1067.666394][T22722] netlink: 165 bytes leftover after parsing attributes in process `syz.2.20846'. [ 1068.049399][ T6228] libceph: connect (1)[c::]:6789 error -101 [ 1068.064300][ T6228] libceph: mon0 (1)[c::]:6789 connect error [ 1068.104434][ T6228] libceph: connect (1)[c::]:6789 error -101 [ 1068.112913][ T6228] libceph: mon0 (1)[c::]:6789 connect error [ 1068.376466][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1068.389848][T15129] libceph: connect (1)[c::]:6789 error -101 [ 1068.396482][T15129] libceph: mon0 (1)[c::]:6789 connect error [ 1068.439879][ T6228] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1068.551271][T22785] netlink: 165 bytes leftover after parsing attributes in process `syz.1.20869'. [ 1068.599629][ T6228] usb 3-1: Using ep0 maxpacket: 16 [ 1068.608461][ T6228] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1068.617957][ T6228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.634864][ T6228] usb 3-1: config 0 descriptor?? [ 1068.648655][T22790] tmpfs: Bad value for 'nr_inodes' [ 1068.650545][ T6228] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1068.843027][T22747] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1068.871996][T22749] ceph: No mds server is up or the cluster is laggy [ 1068.942384][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1068.959178][T15129] libceph: connect (1)[c::]:6789 error -101 [ 1068.969043][T15129] libceph: mon0 (1)[c::]:6789 connect error [ 1069.206598][T15129] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1069.253830][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20883'. [ 1069.299814][ T6228] gspca_sonixj: reg_w1 err -71 [ 1069.309087][ T6228] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1069.310055][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20892'. [ 1069.323089][ T6228] usb 3-1: USB disconnect, device number 79 [ 1069.377028][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1069.401907][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1069.415956][T15129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1069.426990][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1069.439685][T15129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1069.456539][T15129] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1069.466238][T15129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.474415][T15129] usb 2-1: Product: syz [ 1069.481650][T15129] usb 2-1: Manufacturer: syz [ 1069.486841][T15129] usb 2-1: SerialNumber: syz [ 1069.498168][T15129] usb 2-1: config 0 descriptor?? [ 1069.508551][T15129] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1069.605457][ T6228] kernel read not supported for file /mdstat (pid: 6228 comm: kworker/1:7) [ 1069.766955][T15129] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1069.870013][T22873] Bluetooth: MGMT ver 1.23 [ 1069.943389][T15129] usb 2-1: USB disconnect, device number 60 [ 1069.995868][ T6299] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1070.081397][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1070.176946][ T6299] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.186016][ T6299] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 1070.195199][ T6299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.205411][ T6299] usb 6-1: config 0 descriptor?? [ 1070.217193][ T6299] pwc: Samsung MPC-C30 USB webcam detected. [ 1070.609569][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20905'. [ 1070.858141][ T6299] pwc: recv_control_msg error -71 req 02 val 2700 [ 1070.872103][ T6299] pwc: recv_control_msg error -71 req 04 val 1700 [ 1070.882099][ T6299] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1070.889591][ T6299] pwc: recv_control_msg error -71 req 04 val 1000 [ 1070.896348][ T6299] pwc: recv_control_msg error -71 req 04 val 1300 [ 1070.902917][ T6235] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1070.910910][ T6299] pwc: recv_control_msg error -71 req 04 val 1400 [ 1070.917914][ T6299] pwc: recv_control_msg error -71 req 02 val 2000 [ 1070.925040][ T6299] pwc: recv_control_msg error -71 req 02 val 2100 [ 1070.932438][ T6299] pwc: recv_control_msg error -71 req 02 val 2200 [ 1070.939455][ T6299] pwc: recv_control_msg error -71 req 06 val 0600 [ 1070.946456][ T6299] pwc: recv_control_msg error -71 req 04 val 1500 [ 1070.953356][ T6299] pwc: recv_control_msg error -71 req 02 val 2500 [ 1070.960073][ T6299] pwc: recv_control_msg error -71 req 02 val 2400 [ 1070.966983][ T6299] pwc: recv_control_msg error -71 req 02 val 2600 [ 1070.973774][ T6299] pwc: recv_control_msg error -71 req 02 val 2900 [ 1070.981091][ T6299] pwc: recv_control_msg error -71 req 02 val 2800 [ 1070.988275][ T6299] pwc: recv_control_msg error -71 req 04 val 1100 [ 1070.995109][ T6299] pwc: recv_control_msg error -71 req 04 val 1200 [ 1071.004675][ T6299] pwc: Registered as video103. [ 1071.014142][ T6299] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input172 [ 1071.053256][ T6299] usb 6-1: USB disconnect, device number 3 [ 1071.080488][ T6235] usb 3-1: Using ep0 maxpacket: 16 [ 1071.087864][ T6235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1071.097294][ T6235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.107834][ T6235] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1071.120940][ T6235] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1071.132322][ T6235] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1071.141501][ T6235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.149620][ T6235] usb 3-1: Product: syz [ 1071.153761][ T6235] usb 3-1: Manufacturer: syz [ 1071.158423][ T6235] usb 3-1: SerialNumber: syz [ 1071.183636][ T6235] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input173 [ 1071.273459][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1071.393023][ T6235] bcm5974 3-1:1.0: could not read from device [ 1071.466576][ T6235] input: failed to attach handler mousedev to device input173, error: -5 [ 1071.494149][ T6235] usb 3-1: USB disconnect, device number 80 [ 1071.740763][T15129] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1071.786814][ T35] wlan1: Trigger new scan to find an IBSS to join [ 1071.903787][T15129] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1071.913541][T15129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.923794][T15129] usb 2-1: Product: syz [ 1071.928047][T15129] usb 2-1: Manufacturer: syz [ 1071.933102][T15129] usb 2-1: SerialNumber: syz [ 1071.941317][T15129] usb 2-1: config 0 descriptor?? [ 1072.365717][T23008] tipc: Enabling of bearer rejected, failed to enable media [ 1072.393205][ T3849] libceph: connect (1)[c::]:6789 error -22 [ 1072.399863][ T3849] libceph: mon0 (1)[c::]:6789 connect error [ 1072.411250][ T3849] libceph: connect (1)[c::]:6789 error -22 [ 1072.417750][ T3849] libceph: mon0 (1)[c::]:6789 connect error [ 1072.603443][T15129] usb 2-1: Firmware version (0.0) predates our first public release. [ 1072.611842][T15129] usb 2-1: Please update to version 0.2 or newer [ 1072.661569][T15129] usb 2-1: USB disconnect, device number 61 [ 1072.699506][ T6228] libceph: connect (1)[c::]:6789 error -22 [ 1072.699864][ T6299] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1072.705541][ T6228] libceph: mon0 (1)[c::]:6789 connect error [ 1072.753761][ T523] wlan1: Creating new IBSS network, BSSID ce:00:35:64:03:b1 [ 1072.871772][ T6299] usb 6-1: Using ep0 maxpacket: 16 [ 1072.884553][ T6299] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1072.897463][ T6299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.907941][ T6299] usb 6-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1072.921563][ T6299] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1072.932263][ T6299] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1072.941706][T23044] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.20936'. [ 1072.951113][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.959467][ T6299] usb 6-1: Product: syz [ 1072.963670][ T6299] usb 6-1: Manufacturer: syz [ 1072.968338][ T6299] usb 6-1: SerialNumber: syz [ 1072.989203][ T6299] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input174 [ 1073.214916][ T6299] bcm5974 6-1:1.0: could not read from device [ 1073.256788][T23010] ceph: No mds server is up or the cluster is laggy [ 1073.274484][T15129] libceph: connect (1)[c::]:6789 error -22 [ 1073.286104][ T6299] input: failed to attach handler mousedev to device input174, error: -5 [ 1073.290270][T15129] libceph: mon0 (1)[c::]:6789 connect error [ 1073.342967][ T6299] usb 6-1: USB disconnect, device number 4 [ 1074.126079][T23133] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.20969'. [ 1074.281845][T23147] random: crng reseeded on system resumption [ 1074.300238][T23149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20977'. [ 1074.431642][T23157] vivid-007: disconnect [ 1074.458614][T23156] vivid-007: reconnect [ 1074.610234][T23171] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20988'. [ 1074.870086][T23188] loop5: detected capacity change from 0 to 7 [ 1074.890520][T23193] vivid-007: disconnect [ 1074.903338][T23192] vivid-007: reconnect [ 1074.960108][T23188] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1074.978092][T23188] loop5: partition table partially beyond EOD, truncated [ 1074.998987][T23188] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1075.026017][T23202] netlink: 76 bytes leftover after parsing attributes in process `syz.1.21001'. [ 1075.039510][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1075.073609][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1075.093584][T20732] udevd[20732]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1075.114932][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1075.158699][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1075.243845][T23216] netlink: 100 bytes leftover after parsing attributes in process `syz.5.21005'. [ 1075.343585][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 1075.404371][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 1075.440157][T23230] netlink: 76 bytes leftover after parsing attributes in process `syz.5.21013'. [ 1075.507693][T23236] loop5: detected capacity change from 0 to 7 [ 1075.572816][ T5192] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1075.580264][ T5192] loop5: partition table partially beyond EOD, truncated [ 1075.588002][ T5192] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1075.630609][T23236] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1075.645902][T23236] loop5: partition table partially beyond EOD, truncated [ 1075.658468][T23248] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1075.674216][T23236] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1075.767671][ T5192] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1075.783881][ T5192] loop5: partition table partially beyond EOD, truncated [ 1075.798324][ T5192] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1075.864573][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/83.tmp-b7:5' failed: Read-only file system [ 1075.912664][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/83.tmp-b7:5' failed: Read-only file system [ 1075.972392][T20732] udevd[20732]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1076.158783][T23284] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1076.491124][ T29] audit: type=1326 audit(1020.175:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.0.21034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f959c799 code=0x7fc00000 [ 1077.537921][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21075'. [ 1077.854906][T15129] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1078.043029][T15129] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1078.063188][T15129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.073639][T15129] usb 2-1: Product: syz [ 1078.081316][T15129] usb 2-1: Manufacturer: syz [ 1078.089647][T15129] usb 2-1: SerialNumber: syz [ 1078.116966][T15129] usb 2-1: config 0 descriptor?? [ 1078.327524][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1078.438871][T23433] lo speed is unknown, defaulting to 1000 [ 1078.451321][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1078.461125][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1078.599316][ T6228] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1078.619132][T23433] wg0 speed is unknown, defaulting to 1000 [ 1078.781516][ T6228] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1078.796737][T15129] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1078.810198][ T6228] usb 6-1: config 0 has no interface number 0 [ 1078.816720][T15129] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1078.824830][ T6228] usb 6-1: config 0 interface 4 has no altsetting 0 [ 1078.831574][T15129] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1078.840408][ T6228] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1078.857006][T15129] usb 2-1: USB disconnect, device number 62 [ 1078.863061][ T6228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.895547][ T6228] usb 6-1: config 0 descriptor?? [ 1078.962723][ T6228] cp210x 6-1:0.4: cp210x converter detected [ 1079.361156][T23484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21100'. [ 1079.371983][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1079.381822][ T6228] cp210x 6-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 1079.403366][ T6228] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1079.425520][ T6228] usb 6-1: USB disconnect, device number 5 [ 1079.437180][ T6228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1079.447288][ T6228] cp210x 6-1:0.4: device disconnected [ 1079.488042][T23501] xt_bpf: check failed: parse error [ 1079.589774][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1080.029018][ T6047] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1080.222449][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.236241][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.247776][ T6047] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1080.260863][ T6047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.273257][ T6047] usb 2-1: config 0 descriptor?? [ 1080.475799][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1080.536352][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1080.591814][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1080.706518][T12229] udevd[12229]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1080.712901][ T6047] hid (null): report_id 0 is invalid [ 1080.737636][ T6047] hid-steam 0003:28DE:1102.0027: report_id 0 is invalid [ 1080.745718][ T6047] hid-steam 0003:28DE:1102.0027: item 0 1 1 8 parsing failed [ 1080.754685][ T6047] hid-steam 0003:28DE:1102.0027: steam_probe:parse of hid interface failed [ 1080.764749][ T6047] hid-steam 0003:28DE:1102.0027: probe with driver hid-steam failed with error -22 [ 1080.778328][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1080.929034][ T6228] usb 2-1: USB disconnect, device number 63 [ 1080.942673][ T6047] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1081.102075][ T6047] usb 3-1: Using ep0 maxpacket: 32 [ 1081.108634][ T6047] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1081.116835][ T6047] usb 3-1: config 0 has no interface number 0 [ 1081.125064][ T6047] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1081.134195][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.142186][ T6047] usb 3-1: Product: syz [ 1081.146674][ T6047] usb 3-1: Manufacturer: syz [ 1081.151792][ T6047] usb 3-1: SerialNumber: syz [ 1081.158500][ T6047] usb 3-1: config 0 descriptor?? [ 1081.543469][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1081.633588][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1081.756737][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1081.801341][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1081.817655][ T6047] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1081.832787][ T6047] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1081.842473][ T6047] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1081.853687][ T6047] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1081.870720][ T6047] usb 3-1: USB disconnect, device number 81 [ 1081.917985][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1083.285794][ T6299] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1083.392158][T15129] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1083.467263][ T6299] usb 2-1: Using ep0 maxpacket: 16 [ 1083.485745][ T6299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.505818][ T6299] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1083.519421][ T6299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.541887][ T6299] usb 2-1: config 0 descriptor?? [ 1083.569349][T15129] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1083.585746][T15129] usb 3-1: config 0 has no interface number 0 [ 1083.604007][T15129] usb 3-1: config 0 interface 4 has no altsetting 0 [ 1083.617145][T15129] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1083.626367][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.638450][T15129] usb 3-1: config 0 descriptor?? [ 1083.646019][T15129] cp210x 3-1:0.4: cp210x converter detected [ 1083.787510][ T6228] usb 2-1: USB disconnect, device number 64 [ 1083.935595][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1084.075374][T15129] cp210x 3-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 1084.092286][T15129] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1084.105385][T15129] usb 3-1: USB disconnect, device number 82 [ 1084.117481][T15129] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1084.128817][T15129] cp210x 3-1:0.4: device disconnected [ 1084.255883][ T6299] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1084.416587][ T6299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1084.427996][ T6299] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 0.f0 [ 1084.437356][ T6299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.445444][ T6299] usb 2-1: Product: syz [ 1084.450022][ T6299] usb 2-1: Manufacturer: syz [ 1084.454653][ T6299] usb 2-1: SerialNumber: syz [ 1084.661041][T23804] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1084.699677][ T6299] gm12u320 2-1:9.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 1084.713254][ T6299] gm12u320 2-1:9.0: probe with driver gm12u320 failed with error -5 [ 1084.725134][ T6299] usb-storage 2-1:9.0: USB Mass Storage device detected [ 1084.747494][ T6299] usb-storage 2-1:9.0: device ignored [ 1084.831444][ T6299] usb 2-1: USB disconnect, device number 65 [ 1085.022526][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1085.224619][T23854] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1085.543634][T23879] netlink: 'syz.1.21212': attribute type 1 has an invalid length. [ 1085.565260][T23879] nbd: error processing sock list [ 1085.841534][T23906] netlink: 'syz.1.21221': attribute type 1 has an invalid length. [ 1085.841915][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1085.849597][T23906] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.21221'. [ 1085.965680][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1086.015369][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1086.066009][ T6047] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1086.238219][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.249328][ T6047] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.262350][ T6047] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1086.271709][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.279845][T15129] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1086.288892][ T6047] usb 3-1: config 0 descriptor?? [ 1086.441186][T15129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.452243][T15129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.462189][T15129] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1086.471376][T15129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.482343][T15129] usb 6-1: config 0 descriptor?? [ 1086.729267][ T6047] hid (null): unknown global tag 0xd [ 1086.738159][ T6047] kye 0003:0458:5019.0028: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1086.752906][ T6047] kye 0003:0458:5019.0028: unknown main item tag 0x0 [ 1086.759682][ T6047] kye 0003:0458:5019.0028: unknown main item tag 0x0 [ 1086.766562][ T6047] kye 0003:0458:5019.0028: unknown main item tag 0x0 [ 1086.773843][ T6047] kye 0003:0458:5019.0028: unknown main item tag 0x0 [ 1086.780832][ T6047] kye 0003:0458:5019.0028: unknown global tag 0xd [ 1086.788379][ T6047] kye 0003:0458:5019.0028: item 0 1 1 13 parsing failed [ 1086.796179][ T6047] kye 0003:0458:5019.0028: parse failed [ 1086.802331][ T6047] kye 0003:0458:5019.0028: probe with driver kye failed with error -22 [ 1086.920998][T15129] hid (null): report_id 0 is invalid [ 1086.931526][T15129] hid-steam 0003:28DE:1102.0029: report_id 0 is invalid [ 1086.938530][T15129] hid-steam 0003:28DE:1102.0029: item 0 1 1 8 parsing failed [ 1086.946322][ T6047] usb 3-1: USB disconnect, device number 83 [ 1086.959100][T15129] hid-steam 0003:28DE:1102.0029: steam_probe:parse of hid interface failed [ 1086.968911][T15129] hid-steam 0003:28DE:1102.0029: probe with driver hid-steam failed with error -22 [ 1087.144812][T15129] usb 6-1: USB disconnect, device number 6 [ 1087.736079][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1087.964029][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1088.077422][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1088.151600][T23995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21245'. [ 1088.164144][T23995] netlink: 'syz.1.21245': attribute type 6 has an invalid length. [ 1088.173627][T23995] netlink: 'syz.1.21245': attribute type 5 has an invalid length. [ 1088.185905][T23995] netlink: 'syz.1.21245': attribute type 4 has an invalid length. [ 1088.338214][T24009] netlink: 'syz.2.21252': attribute type 1 has an invalid length. [ 1088.686073][T24039] netlink: 'syz.0.21262': attribute type 1 has an invalid length. [ 1088.694157][T24039] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1088.921286][T15129] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1089.051928][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1089.105141][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1089.136139][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.155395][T15129] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1089.175328][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.196858][T15129] usb 2-1: config 0 descriptor?? [ 1089.214277][T15129] hub 2-1:0.0: USB hub found [ 1089.374517][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1089.427680][T15129] hub 2-1:0.0: 1 port detected [ 1089.483895][T24082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21278'. [ 1089.498753][T24082] netlink: 'syz.0.21278': attribute type 2 has an invalid length. [ 1089.506708][T24082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21278'. [ 1089.647230][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1089.675264][T15129] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1089.695670][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1089.696603][T15129] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1089.736892][T15129] usbhid 2-1:0.0: can't add hid device: -71 [ 1089.752234][T15129] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1089.808845][T15129] usb 2-1: USB disconnect, device number 66 [ 1089.817784][ T9538] udevd[9538]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1090.754122][T15129] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1090.870751][ T6047] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1090.905011][T24190] xt_policy: too many policy elements [ 1090.914771][T15129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.925790][T15129] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1090.935096][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.945942][T15129] usb 3-1: config 0 descriptor?? [ 1091.044240][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1091.055473][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.065315][ T6047] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1091.074618][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.086576][ T6047] usb 6-1: config 0 descriptor?? [ 1091.106665][ T6047] hub 6-1:0.0: USB hub found [ 1091.324375][ T6047] hub 6-1:0.0: 1 port detected [ 1091.388300][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.396322][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.403807][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.411345][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.422117][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.429738][T15129] dragonrise 0003:0079:0006.002A: unknown main item tag 0x0 [ 1091.441942][T15129] dragonrise 0003:0079:0006.002A: hidraw0: USB HID v7f.fd Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 1091.453650][T15129] dragonrise 0003:0079:0006.002A: no inputs found [ 1091.461559][T15129] dragonrise 0003:0079:0006.002A: force feedback init failed [ 1091.538248][ T6047] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1091.545169][ T6047] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1091.559724][ T6047] usbhid 6-1:0.0: can't add hid device: -71 [ 1091.566020][ T6047] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1091.596294][ T6047] usb 6-1: USB disconnect, device number 7 [ 1091.600936][T15129] usb 3-1: USB disconnect, device number 84 [ 1092.143032][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1092.356421][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1092.493604][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1092.585295][T20732] udevd[20732]: symlink '../../loop5' '/dev/disk/by-diskseq/84.tmp-b7:5' failed: Read-only file system [ 1092.610760][T15129] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1092.611372][T24263] Invalid logical block size (4) [ 1092.753650][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21337'. [ 1092.763478][T24273] netlink: 'syz.5.21337': attribute type 2 has an invalid length. [ 1092.772278][T24273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21337'. [ 1092.788535][T15129] usb 2-1: Using ep0 maxpacket: 8 [ 1092.795331][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.807505][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.830187][T15129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1092.854833][T15129] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1092.873645][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.896159][T15129] usb 2-1: config 0 descriptor?? [ 1093.361864][T15129] hid_parser_main: 226 callbacks suppressed [ 1093.361888][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x4 [ 1093.400556][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x6 [ 1093.415351][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.437500][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.453723][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.463221][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.480981][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.497025][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.512249][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.534242][T15129] elecom 0003:056E:00FE.002B: unknown main item tag 0x0 [ 1093.581213][T15129] elecom 0003:056E:00FE.002B: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 1093.623900][T15129] usb 2-1: USB disconnect, device number 67 [ 1093.701460][T24350] overlayfs: workdir and upperdir must be separate subtrees [ 1093.762692][T24338] fido_id[24338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1093.868221][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21360'. [ 1094.175138][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21373'. [ 1094.244824][T24394] 9p: p9: multiple sources not supported [ 1094.259013][ T6047] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1094.321103][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21378'. [ 1094.441437][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1094.451698][ T6047] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1094.462734][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1094.473151][ T6047] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1094.483411][ T6047] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1094.492490][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.502565][ T6047] usb 6-1: config 0 descriptor?? [ 1094.631740][T15129] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1094.728543][ T6047] hdpvr 6-1:0.0: firmware version 0x3c dated H"LlrߧLˆPmg"̓_-he/} [ 1094.740869][ T6047] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1094.806588][T15129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.818732][ T6228] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1094.826394][T15129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1094.839447][T15129] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1094.849330][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.859566][T15129] usb 2-1: config 0 descriptor?? [ 1095.004621][ T6228] usb 3-1: Using ep0 maxpacket: 8 [ 1095.011763][ T6228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.023151][ T6228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.035934][ T6228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1095.049447][ T6228] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1095.058952][ T6228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.070044][ T6228] usb 3-1: config 0 descriptor?? [ 1095.193739][ T6047] hdpvr 6-1:0.0: Could not setup controls [ 1095.200653][ T6047] hdpvr 6-1:0.0: registering videodev failed [ 1095.220403][ T6047] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1095.234120][ T6047] usb 6-1: USB disconnect, device number 8 [ 1095.301611][T15129] hid (null): unknown global tag 0xd [ 1095.311371][T15129] kye 0003:0458:5019.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1095.322706][T15129] kye 0003:0458:5019.002C: unknown global tag 0xd [ 1095.329289][T15129] kye 0003:0458:5019.002C: item 0 1 1 13 parsing failed [ 1095.336942][T15129] kye 0003:0458:5019.002C: parse failed [ 1095.342574][T15129] kye 0003:0458:5019.002C: probe with driver kye failed with error -22 [ 1095.517962][ T6228] elecom 0003:056E:00FE.002D: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 1095.537247][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1095.548324][ T6047] usb 2-1: USB disconnect, device number 68 [ 1095.761418][ T6228] usb 3-1: USB disconnect, device number 85 [ 1095.918621][T24495] 9p: p9: multiple sources not supported [ 1096.035727][T24500] netlink: 60 bytes leftover after parsing attributes in process `syz.5.21397'. [ 1096.047806][T24500] netlink: 60 bytes leftover after parsing attributes in process `syz.5.21397'. [ 1096.734861][T24543] overlayfs: missing 'lowerdir' [ 1097.967502][T24637] program syz.1.21460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.157267][T24650] overlayfs: workdir and upperdir must be separate subtrees [ 1099.307142][T24750] program syz.5.21505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1099.593221][T24766] lo speed is unknown, defaulting to 1000 [ 1099.854541][ T6047] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1099.920703][T24791] binder: 24790:24791 ioctl c0306201 200000000080 returned -22 [ 1100.023812][ T6047] usb 2-1: Using ep0 maxpacket: 32 [ 1100.039819][ T6047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.072735][ T6047] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.101511][T24766] wg0 speed is unknown, defaulting to 1000 [ 1100.113794][ T6047] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1100.138524][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.154940][ T6047] usb 2-1: Product: syz [ 1100.162659][ T6047] usb 2-1: Manufacturer: syz [ 1100.175758][ T6047] usb 2-1: SerialNumber: syz [ 1100.195399][ T6047] usb 2-1: config 0 descriptor?? [ 1100.395438][T24835] overlayfs: workdir and upperdir must be separate subtrees [ 1100.594333][ T6047] usb 2-1: USB disconnect, device number 69 [ 1101.909634][T24931] wireguard: wg0: Could not create IPv4 socket [ 1102.195417][T24951] xt_l2tp: v2 tid > 0xffff: 2031748 [ 1103.003657][T25018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21613'. [ 1103.013819][T25018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21613'. [ 1103.114081][T15129] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1103.286734][T15129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.297538][T15129] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1103.307497][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.323046][T15129] usb 2-1: config 0 descriptor?? [ 1103.562483][T15129] usb 2-1: string descriptor 0 read error: -71 [ 1103.819043][T25078] xt_l2tp: v2 tid > 0xffff: 2031748 [ 1104.123472][T25108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21643'. [ 1104.136967][T25108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21643'. [ 1104.330522][T15129] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 1104.666262][ T29] audit: type=1326 audit(1046.625:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25137 comm="syz.2.21665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f4dd9c799 code=0x0 [ 1104.759668][T15129] usb 2-1: USB disconnect, device number 70 [ 1104.770679][ T523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.997106][T25161] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1105.005596][T25161] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1105.320097][T15129] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1105.512404][T15129] usb 6-1: Using ep0 maxpacket: 8 [ 1105.523953][T15129] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1105.536116][T15129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.557166][T15129] usb 6-1: Product: syz [ 1105.565770][T15129] usb 6-1: Manufacturer: syz [ 1105.574005][T15129] usb 6-1: SerialNumber: syz [ 1105.589752][T15129] usb 6-1: config 0 descriptor?? [ 1105.821133][T15129] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1105.936033][T25207] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.21682'. [ 1106.077866][ T29] audit: type=1326 audit(1047.958:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.0.21684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89f959c799 code=0x0 [ 1106.253134][T15129] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1106.277878][T15129] usb 6-1: USB disconnect, device number 9 [ 1106.596512][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21694'. [ 1106.774724][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21697'. [ 1106.848324][T25248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.473508][ T6235] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1107.675573][ T6235] usb 2-1: Using ep0 maxpacket: 8 [ 1107.689151][ T6235] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1107.707463][ T6235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.721236][ T6235] usb 2-1: Product: syz [ 1107.729750][ T6235] usb 2-1: Manufacturer: syz [ 1107.739638][ T6235] usb 2-1: SerialNumber: syz [ 1107.753118][ T6235] usb 2-1: config 0 descriptor?? [ 1107.991225][ T6235] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1108.198685][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1108.284007][T15128] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1108.347030][ T6047] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1108.424847][ T6235] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1108.440224][ T6235] usb 2-1: USB disconnect, device number 71 [ 1108.466093][T15128] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1108.474387][T15128] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1108.484952][T15128] usb 6-1: config 0 has no interface number 0 [ 1108.492761][T15128] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 1108.504275][T15128] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.517571][T15128] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1108.525296][T15128] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1108.534943][T15128] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1108.543202][T15128] usb 6-1: Manufacturer: syz [ 1108.548981][ T6047] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.559328][ T6047] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 1108.569399][T15128] usb 6-1: config 0 descriptor?? [ 1108.575108][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.585670][T15128] hub 6-1:0.52: bad descriptor, ignoring hub [ 1108.591923][T15128] hub 6-1:0.52: probe with driver hub failed with error -5 [ 1108.600903][ T6047] usb 3-1: config 0 descriptor?? [ 1108.612078][ T6047] pwc: Samsung MPC-C30 USB webcam detected. [ 1108.809585][T15128] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input175 [ 1109.037024][ T6047] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1109.045545][T25300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.055509][ T6047] pwc: recv_control_msg error -71 req 02 val 2700 [ 1109.067313][T25300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.075284][ T6047] pwc: recv_control_msg error -71 req 04 val 1700 [ 1109.082529][ T6047] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1109.093370][ T6047] pwc: recv_control_msg error -71 req 04 val 1000 [ 1109.102034][ T6047] pwc: recv_control_msg error -71 req 04 val 1300 [ 1109.110288][ T6047] pwc: recv_control_msg error -71 req 04 val 1400 [ 1109.117553][ T6047] pwc: recv_control_msg error -71 req 02 val 2000 [ 1109.124269][ T6047] pwc: recv_control_msg error -71 req 02 val 2100 [ 1109.131579][ T6047] pwc: recv_control_msg error -71 req 02 val 2200 [ 1109.140512][ T6047] pwc: recv_control_msg error -71 req 06 val 0600 [ 1109.147810][ T6047] pwc: recv_control_msg error -71 req 04 val 1500 [ 1109.154630][ T6047] pwc: recv_control_msg error -71 req 02 val 2500 [ 1109.161623][ T6047] pwc: recv_control_msg error -71 req 02 val 2400 [ 1109.168559][ T6047] pwc: recv_control_msg error -71 req 02 val 2600 [ 1109.175898][ T6047] pwc: recv_control_msg error -71 req 02 val 2900 [ 1109.182878][ T6047] pwc: recv_control_msg error -71 req 02 val 2800 [ 1109.190174][ T6047] pwc: recv_control_msg error -71 req 04 val 1100 [ 1109.197021][ T6047] pwc: recv_control_msg error -71 req 04 val 1200 [ 1109.211308][ T6047] pwc: Registered as video103. [ 1109.216465][T15129] usb 6-1: USB disconnect, device number 10 [ 1109.238988][ T6047] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input176 [ 1109.301823][ T6047] usb 3-1: USB disconnect, device number 86 [ 1110.049045][T25404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.21741'. [ 1110.435435][T25432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21755'. [ 1111.203624][ T6228] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1111.257150][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1111.363640][ T6228] usb 2-1: Using ep0 maxpacket: 32 [ 1111.370679][ T6228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.381014][ T6228] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.392259][ T6228] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.402617][ T6228] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.415595][ T6047] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1111.423562][ T6228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1111.431280][ T6228] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1111.440399][ T6228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.450473][ T6228] usb 2-1: config 0 descriptor?? [ 1111.587336][ T6047] usb 6-1: Using ep0 maxpacket: 16 [ 1111.595638][ T6047] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1111.605976][ T6047] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1111.626114][ T6047] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1111.635686][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.644686][ T6047] usb 6-1: Product: syz [ 1111.649720][ T6047] usb 6-1: Manufacturer: syz [ 1111.657726][ T6047] usb 6-1: SerialNumber: syz [ 1111.822240][T25503] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21779'. [ 1111.835254][T25502] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21779'. [ 1111.895717][ T6047] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1111.900396][ T6228] hid_parser_main: 112 callbacks suppressed [ 1111.900419][ T6228] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 1111.914159][ T6047] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1111.926827][ T6228] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 1111.937831][ T6228] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 1111.945527][ T6228] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 1111.954143][ T6228] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 1111.966668][ T6228] corsair-cpro 0003:1B1C:0C10.002E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1112.049636][ T6228] corsair-cpro 0003:1B1C:0C10.002E: probe with driver corsair-cpro failed with error -38 [ 1112.119306][ T6235] usb 2-1: USB disconnect, device number 72 [ 1112.312748][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1112.372532][ T6047] usb 6-1: USB disconnect, device number 11 [ 1112.407905][T20732] udevd[20732]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.476729][ T29] audit: type=1326 audit(1053.953:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.2.21785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4dd9c799 code=0x7fc00000 [ 1112.765130][T25566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21792'. [ 1112.776341][T25566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21792'. [ 1113.015867][T25584] tipc: Started in network mode [ 1113.020911][T25584] tipc: Node identity , cluster identity 4711 [ 1113.031381][T25584] tipc: Failed to obtain node identity [ 1113.038859][T25584] tipc: Enabling of bearer rejected, failed to enable media [ 1113.107126][T25588] netlink: 'syz.1.21802': attribute type 4 has an invalid length. [ 1113.118485][T25588] netlink: 17 bytes leftover after parsing attributes in process `syz.1.21802'. [ 1113.428625][T25605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21810'. [ 1113.441802][T25605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21810'. [ 1113.557854][T25611] tipc: Started in network mode [ 1113.568255][T25611] tipc: Node identity , cluster identity 4711 [ 1113.577453][T25611] tipc: Failed to obtain node identity [ 1113.592350][T25611] tipc: Enabling of bearer rejected, failed to enable media [ 1113.776826][T25625] netlink: 60 bytes leftover after parsing attributes in process `syz.5.21821'. [ 1114.434097][T25678] max out of range [ 1114.476070][ T6047] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1114.495527][T25680] tipc: Enabled bearer , priority 10 [ 1114.647582][ T6047] usb 2-1: Using ep0 maxpacket: 32 [ 1114.664809][ T6047] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 1114.689496][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.707892][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.732109][ T6047] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1114.749182][ T6047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.765042][ T6218] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1114.769860][ T6047] usb 2-1: config 0 descriptor?? [ 1114.947112][ T6218] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1114.957376][ T6218] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1114.984706][ T6218] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1115.004373][ T6218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1115.026547][ T6218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1115.050802][ T6218] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1115.070971][ T6218] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.082496][ T6218] usb 6-1: Product: syz [ 1115.092493][ T6218] usb 6-1: Manufacturer: syz [ 1115.117893][ T6218] cdc_wdm 6-1:1.0: skipping garbage [ 1115.136960][ T6218] cdc_wdm 6-1:1.0: skipping garbage [ 1115.147258][ T6218] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1115.162892][ T6218] cdc_wdm 6-1:1.0: Unknown control protocol [ 1115.269291][ T6047] logitech 0003:046D:C29C.002F: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 1115.450432][ T6047] logitech 0003:046D:C29C.002F: no inputs found [ 1115.481816][ T6047] usb 2-1: USB disconnect, device number 73 [ 1116.181696][ T6218] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1116.352262][ T6218] usb 3-1: Using ep0 maxpacket: 16 [ 1116.361084][ T6218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1116.383127][ T6218] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1116.407926][ T6218] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1116.426882][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.435002][ T6218] usb 3-1: Product: syz [ 1116.439939][ T6218] usb 3-1: Manufacturer: syz [ 1116.444607][ T6218] usb 3-1: SerialNumber: syz [ 1116.682303][ T6218] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1116.690843][ T6218] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1117.141685][ T6218] usb 3-1: USB disconnect, device number 87 [ 1117.178106][T20732] udevd[20732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.309902][T25807] __nla_validate_parse: 1 callbacks suppressed [ 1117.309918][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21879'. [ 1117.424107][T25809] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1117.727211][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1117.738985][ T6218] usb 6-1: USB disconnect, device number 12 [ 1117.886693][T25847] ALSA: mixer_oss: invalid OSS volume '' [ 1118.977346][T25923] nbd: must specify a size in bytes for the device [ 1119.091354][T25933] program syz.2.21931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.288723][T25945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21939'. [ 1119.315225][T25945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21939'. [ 1119.885750][T25982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21954'. [ 1119.983454][T25989] atomic_op ffff88805f55e998 conn xmit_atomic 0000000000000000 [ 1120.371904][T26020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.21969'. [ 1120.395864][ T6235] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1120.576304][ T6235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.607660][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1120.642406][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1120.658244][ T6235] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1120.675630][ T6235] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1120.691152][ T6235] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1120.707434][ T6235] usb 2-1: Manufacturer: syz [ 1120.732060][ T6235] usb 2-1: config 0 descriptor?? [ 1121.086315][ T6235] rc_core: IR keymap rc-hauppauge not found [ 1121.105323][ T6235] Registered IR keymap rc-empty [ 1121.115193][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.126122][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21987'. [ 1121.163994][T26072] nbd: illegal input index -1900544 [ 1121.172135][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.206845][ T6235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1121.264026][ T6235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input177 [ 1121.320685][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.357474][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.416560][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.449925][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.496080][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.535794][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.576579][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.620374][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.653794][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.683132][ T6235] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1121.720542][ T6235] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1121.739134][ T6235] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1121.779451][ T6235] usb 2-1: USB disconnect, device number 74 [ 1122.166188][ T29] audit: type=1326 audit(1063.042:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.0.22004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89f959c799 code=0x0 [ 1122.291282][T26142] vivid-001: disconnect [ 1122.299027][T26140] vivid-001: reconnect [ 1122.532629][T26165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.22012'. [ 1122.687806][ T6218] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1122.696247][T26172] netlink: 'syz.1.22015': attribute type 1 has an invalid length. [ 1122.704423][T26172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1122.761381][T26178] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1122.872146][ T6218] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 1122.885508][ T6218] usb 6-1: config 0 has no interface number 0 [ 1122.912041][ T6218] usb 6-1: config 0 interface 23 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1122.940875][ T6218] usb 6-1: config 0 interface 23 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.953504][ T6218] usb 6-1: config 0 interface 23 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1122.967591][ T6218] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1122.981448][ T6218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.999831][ T6218] usb 6-1: config 0 descriptor?? [ 1123.461692][ T6218] uclogic 0003:28BD:1903.0030: interface is invalid, ignoring [ 1123.707101][ T6218] usb 6-1: USB disconnect, device number 13 [ 1123.778408][T26258] "syz.2.22037" (26258) uses obsolete ecb(arc4) skcipher [ 1124.518731][ T6218] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1124.678760][ T6218] usb 3-1: Using ep0 maxpacket: 32 [ 1124.689270][ T6218] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 58, changing to 7 [ 1124.713300][ T6218] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 209, changing to 7 [ 1124.736075][ T6218] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1124.745591][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.754245][ T6218] usb 3-1: Product: syz [ 1124.758705][ T6218] usb 3-1: Manufacturer: syz [ 1124.763449][ T6218] usb 3-1: SerialNumber: syz [ 1124.955895][ T6228] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1124.964818][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1124.998718][ T6218] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1125.006414][ T6218] usb 3-1: incorrect wMaxPacketSize 0x8 for BADD profile [ 1125.039385][ T6218] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1125.056193][ T6218] usb 3-1: USB disconnect, device number 88 [ 1125.084817][T20732] udevd[20732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.128156][ T6228] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1125.136832][ T6228] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1125.147409][ T6228] usb 2-1: config 0 has no interface number 0 [ 1125.153909][ T6228] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 1125.165290][ T6228] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.179370][ T6228] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1125.187636][ T6228] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1125.197117][ T6228] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1125.205262][ T6228] usb 2-1: Manufacturer: syz [ 1125.212176][ T6228] usb 2-1: config 0 descriptor?? [ 1125.220094][ T6228] hub 2-1:0.52: bad descriptor, ignoring hub [ 1125.226411][ T6228] hub 2-1:0.52: probe with driver hub failed with error -5 [ 1125.276249][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1125.443736][ T6228] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input178 [ 1125.507436][T26348] batadv_slave_0: entered allmulticast mode [ 1125.620791][T26354] sp0: Synchronizing with TNC [ 1125.683457][T26305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.695440][T26305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.820859][ T6228] usb 2-1: USB disconnect, device number 75 [ 1125.991257][ T6047] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1126.150297][ T6047] usb 3-1: Using ep0 maxpacket: 8 [ 1126.167325][ T6047] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1126.184612][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1126.194032][ T6047] usb 3-1: Product: syz [ 1126.198316][ T6047] usb 3-1: Manufacturer: syz [ 1126.202952][ T6047] usb 3-1: SerialNumber: syz [ 1126.221841][ T6047] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1126.432165][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.440389][ T6047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1126.450820][ T6047] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 1126.460090][ T6047] usb 3-1: media controller created [ 1126.465731][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.472663][ T6047] dvb-usb: MAC address reading failed. [ 1126.486793][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.506185][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.514519][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.521583][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.528350][ T6047] usb 3-1: DVB: registering adapter 3 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 1126.538085][ T6047] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 1126.594936][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22078'. [ 1126.629920][ T6228] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1126.672683][ T6047] rc_core: IR keymap rc-twinhan1027 not found [ 1126.678823][ T6047] Registered IR keymap rc-empty [ 1126.689061][ T6047] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1126.702613][ T6047] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input179 [ 1126.717081][ T6047] dvb-usb: schedule remote query interval to 400 msecs. [ 1126.725168][ T6047] vp7045: USB control message 'out' went wrong. [ 1126.732261][ T6047] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 1126.749346][ T6047] usb 3-1: USB disconnect, device number 89 [ 1126.754501][T26444] Bluetooth: MGMT ver 1.23 [ 1126.805883][ T6228] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1126.832499][ T6228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.845351][ T6228] usb 6-1: Product: syz [ 1126.849585][ T6228] usb 6-1: Manufacturer: syz [ 1126.855594][ T6228] usb 6-1: SerialNumber: syz [ 1126.874340][ T6228] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1126.898729][ T6218] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1126.915588][ T6047] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 1127.268405][T26481] CUSE: unknown device info "," [ 1127.275133][T26481] CUSE: unknown device info "" [ 1127.280112][T26481] CUSE: unknown device info "-" [ 1127.285349][T26481] CUSE: unknown device info "" [ 1127.290295][T26481] CUSE: DEVNAME unspecified [ 1127.325499][T26483] netlink: 'syz.2.22091': attribute type 39 has an invalid length. [ 1127.574407][ T6228] usb 6-1: USB disconnect, device number 14 [ 1127.707574][T26520] netlink: 'syz.2.22101': attribute type 2 has an invalid length. [ 1127.715591][T26520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22101'. [ 1128.072282][T26542] sg_write: process 11468 (syz.1.22109) changed security contexts after opening file descriptor, this is not allowed. [ 1128.218774][ T6218] usb 6-1: Service connection timeout for: 256 [ 1128.231921][ T6218] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1128.248044][ T6218] ath9k_htc: Failed to initialize the device [ 1128.259774][ T6228] usb 6-1: ath9k_htc: USB layer deinitialized [ 1128.289568][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1128.574406][T26573] netlink: 'syz.5.22119': attribute type 4 has an invalid length. [ 1128.986378][ T6218] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1129.146335][ T6218] usb 6-1: Using ep0 maxpacket: 32 [ 1129.154148][ T6218] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1129.166014][ T6218] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1129.180595][ T6218] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1129.187325][ T6218] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1129.196801][ T6218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.209541][ T6218] usb 6-1: config 0 descriptor?? [ 1129.666647][ T6218] corsair-psu 0003:1B1C:1C09.0031: unknown main item tag 0x2 [ 1129.680220][ T6218] corsair-psu 0003:1B1C:1C09.0031: item fetching failed at offset 3/5 [ 1129.689499][ T6218] corsair-psu 0003:1B1C:1C09.0031: probe with driver corsair-psu failed with error -22 [ 1129.800177][T26603] binder_alloc: binder_alloc_mmap_handler: 26602 200000735000-200000736000 already mapped failed -16 [ 1129.880493][T26607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.898904][ T6218] usb 6-1: USB disconnect, device number 15 [ 1129.979871][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1130.744204][T26656] hub 9-0:1.0: USB hub found [ 1130.764931][T26656] hub 9-0:1.0: 1 port detected [ 1130.918755][T26667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22156'. [ 1130.990885][T26669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22157'. [ 1131.139317][T26677] tipc: Started in network mode [ 1131.151215][T26677] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1131.169345][T26677] tipc: Enabled bearer , priority 10 [ 1131.267745][T26682] netlink: 'syz.2.22163': attribute type 21 has an invalid length. [ 1131.285981][T26682] netlink: 168 bytes leftover after parsing attributes in process `syz.2.22163'. [ 1131.373441][ T3849] kernel write not supported for file /input/event2 (pid: 3849 comm: kworker/1:0) [ 1131.384187][T26689] program syz.1.22166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.356558][ T3849] tipc: Node number set to 10136234 [ 1133.095343][T26800] ALSA: mixer_oss: invalid OSS volume '' [ 1133.127914][T26802] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.22214'. [ 1133.147777][T26798] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.22214'. [ 1133.392038][ T6047] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1133.552012][ T6047] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.565668][ T6047] usb 6-1: config 0 has no interface number 0 [ 1133.578376][ T6047] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1133.588078][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.597201][ T6047] usb 6-1: Product: syz [ 1133.601573][ T6047] usb 6-1: Manufacturer: syz [ 1133.606737][ T6047] usb 6-1: SerialNumber: syz [ 1133.615300][ T6047] usb 6-1: config 0 descriptor?? [ 1133.634328][T26840] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 1133.738505][T26846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.846117][ T6047] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1133.867173][ T6047] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1133.877925][ T6047] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1133.886450][ T6047] usb 6-1: media controller created [ 1133.898099][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22239'. [ 1133.904093][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.311010][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1134.320252][ T3849] usb 6-1: USB disconnect, device number 16 [ 1134.985190][T26891] binder: 26890:26891 ioctl c00c620f 200000000180 returned -22 [ 1135.288582][ T6047] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1135.316530][T26916] IPVS: Error connecting to the multicast addr [ 1135.461483][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.473790][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.484310][ T6047] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1135.493689][ T6047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.504994][ T6047] usb 2-1: config 0 descriptor?? [ 1135.946523][ T6047] pyra 0003:1E7D:2CF6.0032: item fetching failed at offset 5/7 [ 1135.954682][ T6047] pyra 0003:1E7D:2CF6.0032: parse failed [ 1135.960453][ T6047] pyra 0003:1E7D:2CF6.0032: probe with driver pyra failed with error -22 [ 1136.179371][ T3849] usb 2-1: USB disconnect, device number 76 [ 1136.564062][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22274'. [ 1136.664441][ T6218] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1136.833668][ T6218] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1136.861166][ T6218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.878712][ T6218] usb 6-1: Product: syz [ 1136.883345][ T6218] usb 6-1: Manufacturer: syz [ 1136.890210][ T6218] usb 6-1: SerialNumber: syz [ 1137.251248][T15128] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1137.410821][T15128] usb 3-1: Using ep0 maxpacket: 32 [ 1137.418302][T15128] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1137.429418][T15128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.441857][T15128] usb 3-1: config 0 descriptor?? [ 1137.452664][T15128] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1137.578839][ T6218] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1137.591628][ T6218] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1137.605456][ T6218] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1137.618233][ T6218] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1137.628792][ T6218] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1137.669045][ T6218] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1137.693297][ T6218] usb 6-1: USB disconnect, device number 17 [ 1137.849718][ T523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1138.096223][T15128] gspca_vc032x: reg_w err -71 [ 1138.102670][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.108698][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.114013][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.120528][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.125903][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.131191][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.136543][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.141857][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.148261][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.153702][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.159468][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.164794][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.170224][ T6235] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1138.178498][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.184117][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.190424][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.196174][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.201962][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.207775][T15128] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.213664][T15128] gspca_vc032x: Unknown sensor... [ 1138.218798][T15128] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1138.231098][T15128] usb 3-1: USB disconnect, device number 90 [ 1138.299386][T27070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1138.351577][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1138.366971][ T6235] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1138.386043][ T6235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.391191][T27074] veth1_macvtap: left promiscuous mode [ 1138.400264][T27074] macsec0: entered allmulticast mode [ 1138.404373][ T6235] usb 2-1: config 0 descriptor?? [ 1138.415906][T27054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1138.418778][T27074] veth1_macvtap: entered promiscuous mode [ 1138.429132][T27074] veth1_macvtap: entered allmulticast mode [ 1138.437200][T27074] macsec0: left allmulticast mode [ 1138.443063][T27074] veth1_macvtap: left allmulticast mode [ 1138.884663][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.909384][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.921089][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.930445][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.938027][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.945429][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.953565][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.969606][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.976767][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1138.987415][ T6235] asus 0003:0B05:1ABE.0033: unknown main item tag 0x0 [ 1139.012513][ T6235] asus 0003:0B05:1ABE.0033: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 1139.044286][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22314'. [ 1139.095369][ T6235] usb 2-1: USB disconnect, device number 77 [ 1139.281413][T27133] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22319'. [ 1139.575792][ T6218] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1139.684711][ T6235] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1139.739596][ T6218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1139.754572][ T6218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1139.765642][ T6218] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1139.776976][ T6218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.790537][ T6218] usb 6-1: config 0 descriptor?? [ 1139.802229][T27135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1139.855979][ T6235] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.864249][ T6235] usb 3-1: config 0 has no interface number 0 [ 1139.870474][ T6235] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.882478][ T6235] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.892658][ T6235] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.909547][ T6235] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1139.919028][ T6235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.931682][ T6235] usb 3-1: config 0 descriptor?? [ 1140.256939][ T6218] logitech 0003:046D:C293.0034: hidraw0: USB HID v7f.fd Device [HID 046d:c293] on usb-dummy_hcd.5-1/input0 [ 1140.269367][ T6218] logitech 0003:046D:C293.0034: no inputs found [ 1140.470015][ T6218] usb 6-1: USB disconnect, device number 18 [ 1140.596017][ T6235] uclogic 0003:28BD:0042.0035: failed retrieving string descriptor #100: -71 [ 1140.605720][ T6235] uclogic 0003:28BD:0042.0035: failed retrieving pen parameters: -71 [ 1140.614278][ T6235] uclogic 0003:28BD:0042.0035: pen probing failed: -71 [ 1140.621710][ T6235] uclogic 0003:28BD:0042.0035: failed probing parameters: -71 [ 1140.629275][ T6235] uclogic 0003:28BD:0042.0035: probe with driver uclogic failed with error -71 [ 1140.642324][ T6235] usb 3-1: USB disconnect, device number 91 [ 1141.240262][T27217] macsec0: entered allmulticast mode [ 1141.246753][T27217] veth1_macvtap: entered allmulticast mode [ 1141.253871][T27217] macsec0: left allmulticast mode [ 1141.259031][T27217] veth1_macvtap: left allmulticast mode [ 1141.644852][ T6047] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1141.826119][ T6047] usb 3-1: Using ep0 maxpacket: 32 [ 1141.833147][ T6047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.843339][ T6047] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.854428][ T6047] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.864428][ T6047] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.877531][ T6047] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1141.884223][ T6047] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1141.893657][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.903717][ T6047] usb 3-1: config 0 descriptor?? [ 1142.349866][ T6047] corsair-cpro 0003:1B1C:0C10.0036: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1142.426264][ T6047] corsair-cpro 0003:1B1C:0C10.0036: probe with driver corsair-cpro failed with error -38 [ 1142.571088][ T6218] usb 3-1: USB disconnect, device number 92 [ 1144.466624][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22388'. [ 1144.605575][T27361] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1145.468829][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22403'. [ 1145.573033][T27395] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1146.057403][T27417] ALSA: mixer_oss: invalid OSS volume '' [ 1146.805535][T27443] ALSA: mixer_oss: invalid OSS volume '' [ 1147.268968][T27478] nbd: must specify a size in bytes for the device [ 1147.465176][T27492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22451'. [ 1147.489498][T27492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22451'. [ 1147.593726][T27502] nbd: must specify a size in bytes for the device [ 1148.293745][T27556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22478'. [ 1148.309761][T27556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22478'. [ 1148.482973][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22491'. [ 1148.540811][T27571] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22485'. [ 1149.217079][T27616] netlink: 96 bytes leftover after parsing attributes in process `syz.1.22497'. [ 1149.499339][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22507'. [ 1149.512093][T27635] nbd: illegal input index -1900544 [ 1150.304461][T27693] netlink: 'syz.0.22526': attribute type 1 has an invalid length. [ 1150.326054][T27693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.579872][T27705] vivid-000: disconnect [ 1150.602002][T27704] vivid-000: reconnect [ 1150.706796][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22535'. [ 1150.729752][T27717] nbd: illegal input index -1900544 [ 1151.147125][ T29] audit: type=1326 audit(1090.217:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27746 comm="syz.2.22553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4dd9c799 code=0x0 [ 1151.563459][T27770] netlink: 'syz.5.22545': attribute type 1 has an invalid length. [ 1151.572352][T27770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.552004][T27829] sp0: Synchronizing with TNC [ 1152.670635][T27842] batadv_slave_0: entered allmulticast mode [ 1152.860823][T27854] ================================================================== [ 1152.868932][T27854] BUG: KASAN: use-after-free in fuse_copy_do+0x193/0x380 [ 1152.875986][T27854] Write of size 2 at addr ffff88807df84fff by task syz.1.22580/27854 [ 1152.884072][T27854] [ 1152.886414][T27854] CPU: 1 UID: 0 PID: 27854 Comm: syz.1.22580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.886445][T27854] Tainted: [L]=SOFTLOCKUP [ 1152.886453][T27854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1152.886465][T27854] Call Trace: [ 1152.886474][T27854] [ 1152.886483][T27854] dump_stack_lvl+0xe8/0x150 [ 1152.886515][T27854] print_report+0xba/0x230 [ 1152.886542][T27854] ? fuse_copy_do+0x193/0x380 [ 1152.886566][T27854] kasan_report+0x117/0x150 [ 1152.886594][T27854] ? fuse_copy_do+0x193/0x380 [ 1152.886622][T27854] kasan_check_range+0x264/0x2c0 [ 1152.886646][T27854] ? fuse_copy_do+0x193/0x380 [ 1152.886668][T27854] __asan_memcpy+0x40/0x70 [ 1152.886689][T27854] fuse_copy_do+0x193/0x380 [ 1152.886715][T27854] fuse_copy_folio+0xefc/0x1b00 [ 1152.886739][T27854] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1152.886766][T27854] ? filemap_add_folio+0x356/0x530 [ 1152.886794][T27854] fuse_dev_do_write+0x2b9d/0x4060 [ 1152.886825][T27854] ? __schedule+0x167b/0x5590 [ 1152.886851][T27854] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1152.886886][T27854] ? update_se+0x91/0x620 [ 1152.886916][T27854] ? aa_file_perm+0x192/0x15e0 [ 1152.886943][T27854] ? aa_file_perm+0x50e/0x15e0 [ 1152.886969][T27854] ? aa_file_perm+0x192/0x15e0 [ 1152.886997][T27854] ? preempt_schedule_thunk+0x16/0x30 [ 1152.887017][T27854] ? preempt_schedule_common+0x82/0xd0 [ 1152.887041][T27854] ? __pfx_aa_file_perm+0x10/0x10 [ 1152.887065][T27854] ? preempt_schedule_thunk+0x16/0x30 [ 1152.887090][T27854] fuse_dev_write+0x177/0x220 [ 1152.887113][T27854] ? __pfx_fuse_dev_write+0x10/0x10 [ 1152.887137][T27854] ? bpf_lsm_file_permission+0x9/0x20 [ 1152.887158][T27854] ? security_file_permission+0x75/0x260 [ 1152.887180][T27854] vfs_write+0x61d/0xb90 [ 1152.887207][T27854] ? __pfx_vfs_write+0x10/0x10 [ 1152.887231][T27854] ? __fget_files+0x2a/0x420 [ 1152.887254][T27854] ksys_write+0x150/0x270 [ 1152.887279][T27854] ? __pfx_ksys_write+0x10/0x10 [ 1152.887305][T27854] do_syscall_64+0x14d/0xf80 [ 1152.887328][T27854] ? trace_irq_disable+0x3b/0x150 [ 1152.887345][T27854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.887363][T27854] ? clear_bhb_loop+0x40/0x90 [ 1152.887384][T27854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.887404][T27854] RIP: 0033:0x7f97c639c799 [ 1152.887423][T27854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.887441][T27854] RSP: 002b:00007f97c7297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1152.887464][T27854] RAX: ffffffffffffffda RBX: 00007f97c6615fa0 RCX: 00007f97c639c799 [ 1152.887479][T27854] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1152.887492][T27854] RBP: 00007f97c6432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1152.887504][T27854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.887515][T27854] R13: 00007f97c6616038 R14: 00007f97c6615fa0 R15: 00007ffee78be478 [ 1152.887537][T27854] [ 1152.887544][T27854] [ 1153.177821][T27854] The buggy address belongs to the physical page: [ 1153.184234][T27854] page: refcount:3 mapcount:0 mapping:ffff88807cf72520 index:0x7 pfn:0x7df84 [ 1153.192980][T27854] memcg:ffff88807bcb4380 [ 1153.197209][T27854] aops:empty_aops ino:1 dentry name(?):"/" [ 1153.203107][T27854] flags: 0xfff00000000005(locked|referenced|node=0|zone=1|lastcpupid=0x7ff) [ 1153.211781][T27854] raw: 00fff00000000005 0000000000000000 dead000000000122 ffff88807cf72520 [ 1153.220350][T27854] raw: 0000000000000007 0000000000000000 00000003ffffffff ffff88807bcb4380 [ 1153.228915][T27854] page dumped because: kasan: bad access detected [ 1153.235305][T27854] page_owner tracks the page as allocated [ 1153.241000][T27854] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 27854, tgid 27853 (syz.1.22580), ts 1152860751280, free_ts 1152756215211 [ 1153.259134][T27854] post_alloc_hook+0x231/0x280 [ 1153.263893][T27854] get_page_from_freelist+0x23a1/0x2440 [ 1153.269431][T27854] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1153.275226][T27854] alloc_pages_mpol+0x232/0x4a0 [ 1153.280066][T27854] alloc_pages_noprof+0xa8/0x190 [ 1153.284992][T27854] folio_alloc_noprof+0x1e/0x30 [ 1153.289831][T27854] filemap_alloc_folio_noprof+0x111/0x470 [ 1153.295544][T27854] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1153.301079][T27854] fuse_dev_do_write+0x298b/0x4060 [ 1153.306178][T27854] fuse_dev_write+0x177/0x220 [ 1153.310867][T27854] vfs_write+0x61d/0xb90 [ 1153.315101][T27854] ksys_write+0x150/0x270 [ 1153.319418][T27854] do_syscall_64+0x14d/0xf80 [ 1153.323996][T27854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.329873][T27854] page last free pid 27843 tgid 27843 stack trace: [ 1153.336353][T27854] free_unref_folios+0xd71/0x1530 [ 1153.341366][T27854] folios_put_refs+0x9ff/0xb40 [ 1153.346120][T27854] free_pages_and_swap_cache+0x2e7/0x5b0 [ 1153.351740][T27854] tlb_flush_mmu+0x6d3/0xa30 [ 1153.356335][T27854] tlb_finish_mmu+0xf9/0x230 [ 1153.360932][T27854] exit_mmap+0x498/0xa10 [ 1153.365161][T27854] __mmput+0x118/0x430 [ 1153.369215][T27854] exit_mm+0x18e/0x250 [ 1153.373274][T27854] do_exit+0x8b9/0x2580 [ 1153.377416][T27854] do_group_exit+0x21b/0x2d0 [ 1153.381992][T27854] __x64_sys_exit_group+0x3f/0x40 [ 1153.387000][T27854] x64_sys_call+0x221a/0x2240 [ 1153.391667][T27854] do_syscall_64+0x14d/0xf80 [ 1153.396252][T27854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.402133][T27854] [ 1153.404442][T27854] Memory state around the buggy address: [ 1153.410052][T27854] ffff88807df84f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.418104][T27854] ffff88807df84f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.426147][T27854] >ffff88807df85000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1153.434188][T27854] ^ [ 1153.438238][T27854] ffff88807df85080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1153.446280][T27854] ffff88807df85100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1153.454323][T27854] ================================================================== [ 1153.478680][T27854] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1153.485924][T27854] CPU: 1 UID: 0 PID: 27854 Comm: syz.1.22580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.496960][T27854] Tainted: [L]=SOFTLOCKUP [ 1153.501292][T27854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1153.511371][T27854] Call Trace: [ 1153.514667][T27854] [ 1153.517609][T27854] vpanic+0x56c/0xa60 [ 1153.521620][T27854] ? __pfx_vpanic+0x10/0x10 [ 1153.526148][T27854] ? __pfx___schedule+0x10/0x10 [ 1153.531024][T27854] panic+0xc5/0xd0 [ 1153.534769][T27854] ? __pfx_panic+0x10/0x10 [ 1153.539216][T27854] ? preempt_schedule_thunk+0x16/0x30 [ 1153.544609][T27854] ? fuse_copy_do+0x193/0x380 [ 1153.549313][T27854] check_panic_on_warn+0x89/0xb0 [ 1153.554275][T27854] ? fuse_copy_do+0x193/0x380 [ 1153.558972][T27854] end_report+0x73/0x180 [ 1153.563232][T27854] ? fuse_copy_do+0x193/0x380 [ 1153.567926][T27854] kasan_report+0x128/0x150 [ 1153.572424][T27854] ? fuse_copy_do+0x193/0x380 [ 1153.577100][T27854] kasan_check_range+0x264/0x2c0 [ 1153.582045][T27854] ? fuse_copy_do+0x193/0x380 [ 1153.586714][T27854] __asan_memcpy+0x40/0x70 [ 1153.591129][T27854] fuse_copy_do+0x193/0x380 [ 1153.595620][T27854] fuse_copy_folio+0xefc/0x1b00 [ 1153.600462][T27854] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1153.606341][T27854] ? filemap_add_folio+0x356/0x530 [ 1153.611439][T27854] fuse_dev_do_write+0x2b9d/0x4060 [ 1153.616543][T27854] ? __schedule+0x167b/0x5590 [ 1153.621225][T27854] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1153.626673][T27854] ? update_se+0x91/0x620 [ 1153.630991][T27854] ? aa_file_perm+0x192/0x15e0 [ 1153.635761][T27854] ? aa_file_perm+0x50e/0x15e0 [ 1153.640513][T27854] ? aa_file_perm+0x192/0x15e0 [ 1153.645270][T27854] ? preempt_schedule_thunk+0x16/0x30 [ 1153.650645][T27854] ? preempt_schedule_common+0x82/0xd0 [ 1153.656100][T27854] ? __pfx_aa_file_perm+0x10/0x10 [ 1153.661133][T27854] ? preempt_schedule_thunk+0x16/0x30 [ 1153.666490][T27854] fuse_dev_write+0x177/0x220 [ 1153.671154][T27854] ? __pfx_fuse_dev_write+0x10/0x10 [ 1153.676339][T27854] ? bpf_lsm_file_permission+0x9/0x20 [ 1153.681696][T27854] ? security_file_permission+0x75/0x260 [ 1153.687317][T27854] vfs_write+0x61d/0xb90 [ 1153.691560][T27854] ? __pfx_vfs_write+0x10/0x10 [ 1153.696333][T27854] ? __fget_files+0x2a/0x420 [ 1153.700911][T27854] ksys_write+0x150/0x270 [ 1153.705227][T27854] ? __pfx_ksys_write+0x10/0x10 [ 1153.710064][T27854] do_syscall_64+0x14d/0xf80 [ 1153.714640][T27854] ? trace_irq_disable+0x3b/0x150 [ 1153.719645][T27854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.725699][T27854] ? clear_bhb_loop+0x40/0x90 [ 1153.730358][T27854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.736250][T27854] RIP: 0033:0x7f97c639c799 [ 1153.740649][T27854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.760285][T27854] RSP: 002b:00007f97c7297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1153.768713][T27854] RAX: ffffffffffffffda RBX: 00007f97c6615fa0 RCX: 00007f97c639c799 [ 1153.776670][T27854] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1153.784628][T27854] RBP: 00007f97c6432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1153.792601][T27854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.800563][T27854] R13: 00007f97c6616038 R14: 00007f97c6615fa0 R15: 00007ffee78be478 [ 1153.808542][T27854] [ 1153.811817][T27854] Kernel Offset: disabled [ 1153.816123][T27854] Rebooting in 86400 seconds..