last executing test programs: 2.199855742s ago: executing program 3 (id=6564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readahead(r0, 0x7ff, 0x5) 2.134172955s ago: executing program 3 (id=6566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0x4}]}) 1.931680168s ago: executing program 3 (id=6569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.901430606s ago: executing program 1 (id=6570): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x125) preadv(r0, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/237, 0xed}], 0x1, 0x3, 0x6f72) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1) 999.965657ms ago: executing program 3 (id=6571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0x7, &(0x7f00000019c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f0000001a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000021a40)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000021ac0)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000021bc0), &(0x7f0000021c00)}, 0x2a) 996.267559ms ago: executing program 1 (id=6572): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self\x00', &(0x7f0000000100), 0x100) 843.683276ms ago: executing program 3 (id=6573): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getxattr(0x0, 0x0, 0x0, 0x0) 843.32331ms ago: executing program 1 (id=6575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 843.273276ms ago: executing program 2 (id=6576): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='- 0 -', 0x5) 471.980328ms ago: executing program 3 (id=6578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f0000000700)="b0", 0x1, 0x0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0x0, 0x10}, 0xc) 427.555815ms ago: executing program 2 (id=6580): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz0\x00', {0x41, 0x1, 0x1, 0x1}, 0x1, [0xfa, 0x200021, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0xad18e27c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x200a, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50008, 0x1, 0x8000, 0x601f, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) 303.516265ms ago: executing program 1 (id=6582): socket$vsock_stream(0x28, 0x1, 0x0) setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 303.246838ms ago: executing program 0 (id=6583): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000000)={0x0, 0xa83c, 0x40, 0x0, 0x23b, 0x0, 0x0}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 280.483949ms ago: executing program 2 (id=6584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000300)={0x1, 0x114000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0x3000, 0xe62225efbea71b61}) 266.651389ms ago: executing program 1 (id=6585): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000100)={0x2, 0x194}, &(0x7f0000000140)=0x8) 256.934122ms ago: executing program 0 (id=6586): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4059}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x3c}}, 0x0) 188.44346ms ago: executing program 0 (id=6588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000001880)={0xa, 0x4e23, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001640)="ea", 0x1}], 0x1}}, {{&(0x7f0000001680)={0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001700)='|', 0x1}], 0x1}}], 0x2, 0x240408d1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000001740)="020000000980ffff", 0x8) 120.274802ms ago: executing program 1 (id=6589): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000100)=0x1) futex(r0, 0x80, 0x1, &(0x7f0000000180)={0x77359400}, r0, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) 120.112286ms ago: executing program 2 (id=6590): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10a0, 0x1, 0x0, 0x6, 0x0, 0xe17}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 119.505338ms ago: executing program 2 (id=6591): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f0800080000000002170003800500000099db3500b0406700000000548593223487ee891c0ebf0798", 0x3c) 94.274528ms ago: executing program 0 (id=6592): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)={0x84}, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) 25.96022ms ago: executing program 0 (id=6593): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) setsockopt$sock_int(r0, 0x1, 0x40, &(0x7f0000000140)=0x84, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 24.373516ms ago: executing program 2 (id=6594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000ac0)='base=0x100000 size=0x1', 0x16) 0s ago: executing program 0 (id=6595): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='test,0x8000000000000000,0x1000', 0x1e) kernel console output (not intermixed with test programs): 0 [ 142.221345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.221580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.223012][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.652719][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 142.654402][T10698] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2190'. [ 142.956997][T10720] jffs2: notice: (10720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.174725][T10750] batadv0: entered promiscuous mode [ 143.174830][T10750] macvlan2: entered promiscuous mode [ 143.174951][T10750] macvlan2: entered allmulticast mode [ 143.174960][T10750] batadv0: entered allmulticast mode [ 143.179089][T10750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.251403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.251593][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.251609][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.251703][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.253091][T10762] [U]  [ 143.253113][T10762] [U] K{ [ 143.253236][T10762] [U] T 1ŠFFˊ`GJǘGO/MC [ 143.253889][T10762] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 143.254120][T10762] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 143.256251][T10762] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 143.257490][T10762] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 143.257767][T10762] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 143.258020][T10762] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 143.258580][T10762] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 143.260944][T10762] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 143.294527][T10762] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 143.294564][T10762] [U] 22Ʃ۩X?0;3U [ 143.294889][T10762] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 143.294999][T10762] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 143.295092][T10762] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 143.295149][T10762] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 143.295293][T10762] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 143.295306][T10762] [U] EC [ 143.295441][T10762] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 143.304852][T10759] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 143.663187][T10813] program syz.0.2246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.728483][T10821] Bluetooth: ISO socket layer initialized [ 143.949438][T10840] netlink: 'syz.2.2260': attribute type 9 has an invalid length. [ 143.949458][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 144.006746][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.355695][T10872] ALSA: seq fatal error: cannot create timer (-22) [ 145.497986][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'. [ 145.582280][ T1160] rpcbind: server 127.0.0.1 not responding, timed out [ 145.594460][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 145.735645][ T29] kernel write not supported for file /uinput (pid: 29 comm: kworker/1:0) [ 145.790249][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 145.819761][T10917] usb usb9: usbfs: process 10917 (syz.1.2296) did not claim interface 20 before use [ 145.885580][T10925] ovs-dp0: entered promiscuous mode [ 146.381428][ C1] net_ratelimit: 8 callbacks suppressed [ 146.381450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.382417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.900636][ T5917] kernel read not supported for file /vcs (pid: 5917 comm: kworker/3:5) [ 147.090742][T10969] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 147.136064][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.148542][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.208384][T10975] batadv_slave_0: entered promiscuous mode [ 147.208399][T10975] batadv_slave_0: entered allmulticast mode [ 147.227280][T10981] ovs-dp0: entered promiscuous mode [ 147.295617][T10990] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2329'. [ 147.368383][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2334'. [ 147.412119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.412450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.182003][T11073] tmpfs: Cannot change global quota limit on remount [ 148.314223][T11090] bridge0: entered allmulticast mode [ 148.413993][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 149.800429][T11164] openvswitch: netlink: Missing key (keys=40, expected=100) [ 149.843744][T11169] ubi0: attaching mtd0 [ 150.063845][ T37] rpcbind: server 127.0.0.1 not responding, timed out [ 150.096723][T11195] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.276642][T11216] Bluetooth: MGMT ver 1.23 [ 150.786894][ C1] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 150.786949][ C1] sr 2:0:0:0: [sr0] tag#29 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 151.054894][T11276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2462'. [ 151.302214][T11292] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 151.313737][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 151.499469][T11310] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 151.499498][T11310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.550196][ T1032] kernel write not supported for file /input/event2 (pid: 1032 comm: kworker/0:3) [ 151.626881][ T1032] kernel write not supported for file /amidi2 (pid: 1032 comm: kworker/0:3) [ 151.670914][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 151.697643][T11333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2489'. [ 153.128216][T11429] xt_IDLETIMER: label is empty or not nul-terminated [ 154.279630][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 154.330298][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 154.712362][T11531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2581'. [ 154.740115][T11534] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.886638][ T5751] Bluetooth: hci3: link tx timeout [ 154.886655][ T5751] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.936491][T11556] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.673122][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 156.760738][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'. [ 156.943174][ T5743] Bluetooth: hci3: command 0x0405 tx timeout [ 157.772314][T11755] logitech-hidpp-device 0005:046D:B012.0008: received hid++ report of bad size (4096) [ 157.778844][ T24] logitech-hidpp-device 0005:046D:B012.0008: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 157.859385][T11759] fido_id[11759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.061882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.132104][ T5852] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 158.302042][ T5852] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 158.303342][ T5852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.306269][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 158.306290][ T5852] usb 7-1: Product: syz [ 158.306301][ T5852] usb 7-1: Manufacturer: syz [ 158.321295][ T5852] usb 7-1: selecting invalid altsetting 1 [ 158.321723][ T5852] dvb_ttusb_budget: ttusb_init_controller: error [ 158.321735][ T5852] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 158.384526][ T5852] DVB: Unable to find symbol cx22700_attach() [ 158.403523][ T5852] DVB: Unable to find symbol tda10046_attach() [ 158.403536][ T5852] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 158.520311][ T5852] usb 7-1: USB disconnect, device number 4 [ 158.971751][T11806] Invalid logical block size (73728) [ 159.210803][ T42] audit: type=1326 audit(1792400638.460:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.213455][ T42] audit: type=1326 audit(1792400638.470:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.218482][ T42] audit: type=1326 audit(1792400638.470:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.218956][ T42] audit: type=1326 audit(1792400638.470:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.218994][ T42] audit: type=1326 audit(1792400638.470:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.219030][ T42] audit: type=1326 audit(1792400638.470:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.219786][ T42] audit: type=1326 audit(1792400638.470:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.226827][ T42] audit: type=1326 audit(1792400638.480:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.229286][ T42] audit: type=1326 audit(1792400638.480:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 159.229449][ T42] audit: type=1326 audit(1792400638.480:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.0.2713" exe="/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 160.637142][T11902] netlink: 'syz.1.2753': attribute type 2 has an invalid length. [ 160.700953][T11904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.701098][T11904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.749659][T11904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.754926][T11904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.754987][T11904] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.757412][T11904] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.764895][T11904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.764959][T11904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.779068][T11904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.784320][T11904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.785079][T11904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.984494][T11942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 161.244926][T11968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2781'. [ 161.421948][T11990] team0: Device xfrm0 is of different type [ 161.682052][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.682081][ T1032] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 161.732815][T12004] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 161.732835][T12004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.845631][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 161.846519][ T29] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 161.846536][ T29] usb 5-1: config 0 has no interface number 0 [ 161.846560][ T29] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.848173][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.848187][ T29] usb 5-1: Product: syz [ 161.848194][ T29] usb 5-1: Manufacturer: syz [ 161.848201][ T29] usb 5-1: SerialNumber: syz [ 161.849571][ T29] usb 5-1: config 0 descriptor?? [ 161.856474][ T1032] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 161.856495][ T1032] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 161.857226][ T29] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 161.860295][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.860319][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.860333][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.866533][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.866559][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.866572][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.867428][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.867450][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.867462][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.868342][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.868378][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.868399][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.869307][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.869340][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.869352][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.870184][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.870206][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.870222][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.871059][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.871084][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.871096][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.871950][ T1032] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.871971][ T1032] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.871984][ T1032] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.875162][ T1032] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 161.875184][ T1032] usb 8-1: Product: syz [ 161.875196][ T1032] usb 8-1: Manufacturer: syz [ 161.875209][ T1032] usb 8-1: SerialNumber: syz [ 161.881632][ T1032] usb 8-1: config 0 descriptor?? [ 161.895297][ T1032] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 162.701770][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.781690][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.781710][ T5750] Bluetooth: hci0: command 0x0c24 tx timeout [ 162.851427][ T5750] Bluetooth: hci3: command 0x0405 tx timeout [ 163.331457][ T5750] Bluetooth: hci4: command 0x1003 tx timeout [ 163.331559][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.420161][ T5751] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 164.132080][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 164.135798][ T24] usb 5-1: USB disconnect, device number 6 [ 164.141777][ T5852] usb 8-1: USB disconnect, device number 5 [ 164.151630][ T24] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 164.161345][ T5852] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 164.521632][T12047] binder: 12046:12047 ioctl 4018620d 0 returned -22 [ 164.521967][T12047] binder: 12046:12047 ioctl c0306201 80000180 returned -11 [ 164.720372][T12053] bond1: invalid ARP target 0.0.0.0 specified for addition [ 164.720390][T12053] bond1: option arp_ip_target: invalid value (0) [ 164.746585][T12053] bond1 (unregistering): Released all slaves [ 164.848217][T12064] netlink: Invalid conntrack helper [ 164.848250][T12064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.861530][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.861557][ T5751] Bluetooth: hci0: command 0x0c24 tx timeout [ 164.942479][ T5750] Bluetooth: hci3: command 0x0405 tx timeout [ 165.942509][T12149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.942634][T12149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.946475][T12149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.946554][T12149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.157874][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 166.200116][T12189] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2879'. [ 166.200141][T12189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'. [ 166.402257][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 166.402276][ T42] audit: type=1326 audit(1792400645.660:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.402320][ T42] audit: type=1326 audit(1792400645.660:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.404744][ T42] audit: type=1326 audit(1792400645.660:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.404889][ T42] audit: type=1326 audit(1792400645.660:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.405066][ T42] audit: type=1326 audit(1792400645.660:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.405624][ T42] audit: type=1326 audit(1792400645.660:157): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.405732][ T42] audit: type=1326 audit(1792400645.660:158): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.406231][ T42] audit: type=1326 audit(1792400645.660:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.406363][ T42] audit: type=1326 audit(1792400645.660:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.407410][ T42] audit: type=1326 audit(1792400645.660:161): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2889" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 166.711872][ T29] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 166.862586][ T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 166.864091][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.864118][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.864156][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.866899][ T29] usb 5-1: config 0 descriptor?? [ 166.871187][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 166.872443][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 166.875237][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 166.875920][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 166.875955][ T29] usb 5-1: media controller created [ 166.877249][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.893841][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 166.893903][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.899026][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input24 [ 166.903733][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 166.903750][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.048176][T12227] [U] V3Fپ"S/4:XTZWTLW= [ 167.049380][T12227] [U] J"E:" [ 167.081938][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 167.081971][ T29] dvb-usb: error while querying for an remote control event. [ 167.087921][ T5852] usb 5-1: USB disconnect, device number 7 [ 167.131789][ T5852] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.304232][T12239] batadv_slave_1: entered promiscuous mode [ 167.496911][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 167.496935][T12255] netlink: 'syz.2.2911': attribute type 14 has an invalid length. [ 167.518102][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'. [ 167.518129][T12257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2912'. [ 167.522104][ T5605] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.522143][ T5605] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.522171][ T5605] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.522199][ T5605] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.835187][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 167.862296][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 167.972756][ T5751] Bluetooth: hci3: command 0x0405 tx timeout [ 167.972793][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.972815][ T5751] Bluetooth: hci0: command 0x0c24 tx timeout [ 167.981944][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.030657][T12293] binder_alloc: binder_alloc_mmap_handler: 12292 80ffd000-81000000 already mapped failed -16 [ 168.674485][T12342] tmpfs: Cannot disable swap on remount [ 168.819959][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2962'. [ 169.095664][T12382] raw_sendmsg: syz.3.2972 forgot to set AF_INET. Fix it! [ 169.219283][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 169.480524][T12420] tmpfs: Too few inodes for current use [ 169.635120][T12437] Invalid source name [ 169.635133][T12437] UBIFS error (pid: 12437): cannot open "./file0", error -22 [ 169.862423][T12466] loop7: detected capacity change from 0 to 7 [ 169.929683][T12466] Dev loop7: unable to read RDB block 7 [ 169.929706][T12466] loop7: unable to read partition table [ 169.929801][T12466] loop7: partition table beyond EOD, truncated [ 169.929820][T12466] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 170.049362][T12484] tmpfs: Using encoding : utf8-12.1.0 [ 170.051576][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.161599][T12497] netlink: 'syz.2.3027': attribute type 7 has an invalid length. [ 170.161620][T12497] netlink: 'syz.2.3027': attribute type 13 has an invalid length. [ 170.464842][T12525] xt_l2tp: invalid flags combination: 0 [ 170.759070][T12546] tipc: Enabled bearer , priority 21 [ 170.876977][T12557] xt_socket: unknown flags 0xfa [ 170.926479][T12565] netlink: 'syz.2.3058': attribute type 21 has an invalid length. [ 171.184406][T12583] __nla_validate_parse: 5 callbacks suppressed [ 171.184420][T12583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3068'. [ 171.184430][T12583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3068'. [ 171.184438][T12583] netlink: 'syz.2.3068': attribute type 5 has an invalid length. [ 171.184446][T12583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3068'. [ 171.188913][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'. [ 171.188942][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'. [ 171.529148][T12619] comedi comedi2: comedi_test: 320 microvolt, 1616 microsecond waveform attached [ 171.722921][T12638] syz.3.3094(12638): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 171.744852][T12640] dummy0: entered promiscuous mode [ 171.745572][T12639] dummy0: left promiscuous mode [ 172.411002][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 172.419658][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 172.419830][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 172.419931][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 172.420022][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 173.018111][T12759] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 173.018136][T12759] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 173.692664][T12796] support for the xor transformation has been removed. [ 174.360038][T12844] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 174.366617][T12834] ipvlan2: entered allmulticast mode [ 174.366638][T12834] ip6gretap0: entered allmulticast mode [ 174.489698][T12852] jffs2: notice: (12852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.925433][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 174.925446][ T42] audit: type=1326 audit(1792400654.180:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.925578][ T42] audit: type=1326 audit(1792400654.180:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.927501][ T42] audit: type=1326 audit(1792400654.180:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.927542][ T42] audit: type=1326 audit(1792400654.180:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.927579][ T42] audit: type=1326 audit(1792400654.180:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.928231][ T42] audit: type=1326 audit(1792400654.180:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.928407][ T42] audit: type=1326 audit(1792400654.180:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 174.928623][ T42] audit: type=1326 audit(1792400654.180:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.3213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 175.170483][T12903] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 175.375694][T12919] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 175.614504][T12933] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 176.069325][T12970] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 176.531369][T13013] __nla_validate_parse: 41 callbacks suppressed [ 176.531388][T13013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3275'. [ 176.569047][T13017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.772087][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 177.185730][T13058] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 177.412307][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3300'. [ 178.097178][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 178.405977][ T42] audit: type=1804 audit(1792400657.660:186): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3329" name="/newroot/792/bus" dev="tmpfs" ino=4035 res=1 errno=0 [ 178.406182][ T42] audit: type=1800 audit(1792400657.660:187): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3329" name="bus" dev="tmpfs" ino=4035 res=0 errno=0 [ 178.605976][T13147] [U] [ 178.606013][T13147] [U] [ 178.606041][T13147] [U] [ 178.606067][T13147] [U] [ 178.606093][T13147] [U] [ 178.606118][T13147] [U] [ 178.606145][T13147] [U] [ 178.606178][T13147] [U] [ 178.606219][T13147] [U] [ 178.606249][T13147] [U] [ 178.606278][T13147] [U] [ 178.606306][T13147] [U] [ 178.606333][T13147] [U] [ 178.606361][T13147] [U] [ 178.606388][T13147] [U] [ 178.606414][T13147] [U] [ 178.606450][T13147] [U] [ 178.606477][T13147] [U] [ 178.606504][T13147] [U] [ 178.606531][T13147] [U] [ 178.606558][T13147] [U] [ 178.606585][T13147] [U] [ 178.606611][T13147] [U] [ 178.606635][T13147] [U] [ 178.606670][T13147] [U] [ 178.606697][T13147] [U] [ 178.606724][T13147] [U] [ 178.606751][T13147] [U] [ 178.606776][T13147] [U] [ 178.606802][T13147] [U] [ 178.606830][T13147] [U] [ 178.606857][T13147] [U] [ 178.606893][T13147] [U] [ 178.606920][T13147] [U] [ 178.606946][T13147] [U] [ 178.606973][T13147] [U] [ 178.606999][T13147] [U] [ 178.607026][T13147] [U] [ 178.607049][T13147] [U] [ 178.607072][T13147] [U] [ 178.607102][T13147] [U] [ 178.607124][T13147] [U] [ 178.607146][T13147] [U] [ 178.607174][T13147] [U] [ 178.607199][T13147] [U] [ 178.607224][T13147] [U] [ 178.607251][T13147] [U] [ 178.607278][T13147] [U] [ 178.607312][T13147] [U] [ 178.607338][T13147] [U] [ 178.607364][T13147] [U] [ 178.607391][T13147] [U] [ 178.607418][T13147] [U] [ 178.607445][T13147] [U] [ 178.607471][T13147] [U] [ 178.607497][T13147] [U] [ 178.607533][T13147] [U] [ 178.607559][T13147] [U] [ 178.607584][T13147] [U] [ 178.607610][T13147] [U] [ 178.607636][T13147] [U] [ 178.607659][T13147] [U] [ 178.607682][T13147] [U] [ 178.607705][T13147] [U] [ 178.607738][T13147] [U] [ 178.607758][T13147] [U] [ 178.607776][T13147] [U] [ 178.607808][T13147] [U] [ 178.607826][T13147] [U] [ 178.607842][T13147] [U] [ 178.607859][T13147] [U] [ 178.607875][T13147] [U] [ 178.613631][T13147] [U] [ 178.613653][T13147] [U] [ 178.613669][T13147] [U] [ 178.613686][T13147] [U] [ 178.613701][T13147] [U] [ 178.613716][T13147] [U] [ 178.613730][T13147] [U] [ 178.613745][T13147] [U] [ 178.613764][T13147] [U] [ 178.613779][T13147] [U] [ 178.613793][T13147] [U] [ 178.613808][T13147] [U] [ 178.613822][T13147] [U] [ 178.613837][T13147] [U] [ 178.613851][T13147] [U] [ 178.613865][T13147] [U] [ 178.613884][T13147] [U] [ 178.613899][T13147] [U] [ 178.613913][T13147] [U] [ 178.613928][T13147] [U] [ 178.613942][T13147] [U] [ 178.613957][T13147] [U] [ 178.613972][T13147] [U] [ 178.613986][T13147] [U] [ 178.614013][T13147] [U] [ 178.614034][T13147] [U] [ 178.614057][T13147] [U] [ 178.614081][T13147] [U] [ 178.614106][T13147] [U] [ 178.614130][T13147] [U] [ 178.614155][T13147] [U] [ 178.614177][T13147] [U] [ 178.614199][T13147] [U] [ 178.614215][T13147] [U] [ 178.614232][T13147] [U] [ 178.614248][T13147] [U] [ 178.614264][T13147] [U] [ 178.614281][T13147] [U] [ 178.614297][T13147] [U] [ 178.614312][T13147] [U] [ 178.614330][T13147] [U] [ 178.614345][T13147] [U] [ 178.614359][T13147] [U] [ 178.614374][T13147] [U] [ 178.614388][T13147] [U] [ 178.614403][T13147] [U] [ 178.614418][T13147] [U] [ 178.649867][T13146] [U] [ 180.039457][T13244] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3385'. [ 180.507155][T13282] ima: policy update failed [ 180.507349][ T42] audit: type=1802 audit(1792400659.760:188): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3401" res=0 errno=0 [ 180.871980][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 180.954801][T13316] program syz.0.3418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.044855][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 181.045703][ T5829] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.046851][ T5829] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 181.046887][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.046909][ T5829] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.046930][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.046951][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.047991][ T5829] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 181.048024][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.048046][ T5829] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.048067][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.048088][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.049148][ T5829] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 181.049181][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.049203][ T5829] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.049224][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.049244][ T5829] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.052948][ T5829] usb 7-1: string descriptor 0 read error: -22 [ 181.053058][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.063583][ T5829] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 183.334923][ T5852] usb 7-1: USB disconnect, device number 5 [ 183.676645][ T5852] kernel write not supported for file /uhid (pid: 5852 comm: kworker/0:4) [ 183.877735][T13344] ipvlan3: entered allmulticast mode [ 183.877756][T13344] team0: entered allmulticast mode [ 183.877768][T13344] team_slave_0: entered allmulticast mode [ 183.877785][T13344] team_slave_1: entered allmulticast mode [ 183.880277][T13344] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 184.065707][T13362] ubi0: attaching mtd0 [ 184.065726][T13362] ubi0 error: ubi_attach_mtd_dev: bad VID header (12402) or data offsets (12466) [ 184.170696][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3446'. [ 184.284122][T13386] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 185.152968][T13419] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 185.777254][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 185.778599][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 186.085872][T13485] ./dev/sda1: Can't open blockdev [ 186.304521][T13500] hugetlbfs: Bad value '' for mount option 'size' [ 186.304521][T13500] [ 186.589569][T13530] binder: 13529:13530 ioctl 400c620e 80000100 returned -22 [ 186.628866][T13534] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.628889][T13534] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.677606][T13534] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.677632][T13534] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.720167][T13534] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.720204][T13534] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.814862][T13534] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.814900][T13534] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.964266][ T5816] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.964299][ T5816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.982028][ T5816] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.982059][ T5816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.982090][ T5816] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.982112][ T5816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.982140][ T5816] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.982162][ T5816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.005529][T13569] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3540'. [ 187.195662][T13580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.197695][ T5750] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 189.261538][ T5751] Bluetooth: hci0: command 0x0c24 tx timeout [ 189.261579][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.261602][ T5750] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 189.263415][T13580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.263513][T13580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.263593][T13580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.353536][T13664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3578'. [ 189.354459][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 189.511777][ T5738] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 189.546503][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3588'. [ 189.692517][ T5738] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 189.693636][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.693657][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.693674][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 189.695478][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.695495][ T5738] usb 5-1: Product: syz [ 189.695504][ T5738] usb 5-1: Manufacturer: syz [ 189.695514][ T5738] usb 5-1: SerialNumber: syz [ 189.697749][ T5738] usb 5-1: config 0 descriptor?? [ 189.698869][T13614] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.771320][ T5738] rc_core: IR keymap rc-streamzap not found [ 189.771334][ T5738] Registered IR keymap rc-empty [ 189.773063][ T5738] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 189.778514][ T5738] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 189.819251][T13706] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 189.877238][T13711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.927240][ T5738] usb 5-1: USB disconnect, device number 8 [ 189.992801][T13714] ptrace attach of "/syz-executor exec"[13715] was attempted by "/syz-executor exec"[13714] [ 190.043749][T13719] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.043772][T13719] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.218085][ T42] audit: type=1326 audit(1792400669.470:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.219927][ T42] audit: type=1326 audit(1792400669.470:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.220838][ T42] audit: type=1326 audit(1792400669.470:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.224942][ T42] audit: type=1326 audit(1792400669.470:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.224987][ T42] audit: type=1326 audit(1792400669.470:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.226359][ T42] audit: type=1326 audit(1792400669.480:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.226594][ T42] audit: type=1326 audit(1792400669.480:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.228145][ T42] audit: type=1326 audit(1792400669.480:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.228914][ T42] audit: type=1326 audit(1792400669.480:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.229029][ T42] audit: type=1326 audit(1792400669.480:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.2.3611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 190.648674][T13758] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.648710][T13758] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.730329][T13758] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.730367][T13758] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.777959][T13758] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.777983][T13758] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.781714][T13767] tipc: Started in network mode [ 190.781725][T13767] tipc: Node identity , cluster identity 4711 [ 190.781732][T13767] tipc: Failed to set node id, please configure manually [ 190.781750][T13767] tipc: Enabling of bearer rejected, failed to enable media [ 190.821022][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3629'. [ 190.862855][T13758] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.862878][T13758] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.984728][ T5816] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.984761][ T5816] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.021881][ T5605] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.021914][ T5605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.021947][ T5605] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.021967][ T5605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.021992][ T5605] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.022014][ T5605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.120274][T13789] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 191.178234][T13792] No buffer was provided with the request [ 191.341537][ T5751] Bluetooth: hci0: command 0x0c24 tx timeout [ 191.341573][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.342007][ T5750] Bluetooth: hci3: command 0x0405 tx timeout [ 191.428861][T13808] Invalid ELF header magic: != ELF [ 191.696977][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'. [ 191.696998][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3654'. [ 193.079148][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'. [ 193.106760][T13872] bond1: Invalid ad_actor_system MAC address. [ 193.106781][T13872] bond1: option ad_actor_system: invalid value (2441565757) [ 193.108286][T13872] bond1 (unregistering): Released all slaves [ 193.243565][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 193.243590][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 193.277493][T13885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.278411][T13885] team0: Device macvlan2 is already an upper device of the team interface [ 193.508877][T13903] syz.1.3691 (13903): drop_caches: 4 [ 193.890947][T13936] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 193.894602][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.233549][T13962] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.3721' resets device [ 194.816244][T13988] netlink: 'syz.1.3732': attribute type 1 has an invalid length. [ 195.460778][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 195.461103][T14012] xt_cgroup: path and classid specified [ 195.674422][T14023] netlink: 'syz.0.3749': attribute type 2 has an invalid length. [ 195.674446][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'. [ 195.885491][T14040] tipc: MTU too low for tipc bearer [ 196.255790][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3774'. [ 196.255816][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3774'. [ 196.721608][T14132] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 196.877835][T14147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.184073][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'. [ 197.373136][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3823'. [ 197.373188][T14179] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3823'. [ 197.373199][T14179] tipc: Invalid UDP bearer configuration [ 197.373229][T14179] tipc: Enabling of bearer rejected, failed to enable media [ 197.571463][ T5750] Bluetooth: hci3: command 0x0405 tx timeout [ 197.612068][T14198] vlan4: entered promiscuous mode [ 197.612084][T14198] dummy0: entered promiscuous mode [ 197.612327][T14198] vlan4: entered allmulticast mode [ 197.612336][T14198] dummy0: entered allmulticast mode [ 197.808163][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 197.808175][ T42] audit: type=1326 audit(1792400677.060:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.808244][ T42] audit: type=1326 audit(1792400677.060:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840668][ T42] audit: type=1326 audit(1792400677.090:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840716][ T42] audit: type=1326 audit(1792400677.090:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840770][ T42] audit: type=1326 audit(1792400677.090:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840806][ T42] audit: type=1326 audit(1792400677.090:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840842][ T42] audit: type=1326 audit(1792400677.090:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 197.840877][ T42] audit: type=1326 audit(1792400677.090:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.3841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 198.033788][T14236] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 198.090729][ T42] audit: type=1400 audit(1792400677.340:227): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14245 comm="syz.0.3855" [ 198.381426][ T5738] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.442680][T14272] program syz.3.3866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.531437][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 198.532184][ T5738] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 198.533105][ T5738] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.533121][ T5738] usb 6-1: config 0 has no interface number 0 [ 198.534821][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.534837][ T5738] usb 6-1: Product: syz [ 198.534846][ T5738] usb 6-1: Manufacturer: syz [ 198.534856][ T5738] usb 6-1: SerialNumber: syz [ 198.536640][ T5738] usb 6-1: config 0 descriptor?? [ 198.543295][ T5738] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 198.543315][ T5738] usb 6-1: selecting invalid altsetting 1 [ 198.543327][ T5738] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 198.549064][ T5738] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.549295][ T5738] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 198.549329][ T5738] usb 6-1: media controller created [ 198.558123][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.114513][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 199.353475][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3885'. [ 199.506569][T14327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3892'. [ 199.669614][ T5738] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 199.670458][ T5738] zl10353_read_register: readreg error (reg=127, ret==-110) [ 199.724411][ T5738] usb 6-1: USB disconnect, device number 6 [ 199.810404][T14355] netlink: 'syz.3.3906': attribute type 29 has an invalid length. [ 199.810982][T14355] netlink: 'syz.3.3906': attribute type 29 has an invalid length. [ 199.964386][T14373] fuse: Bad value for 'fd' [ 200.220326][T14411] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 200.299215][T14418] IPVS: Scheduler module ip_vs_mh not found [ 200.314858][T14425] random: crng reseeded on system resumption [ 200.841868][T14476] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 201.065803][T14499] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 201.167895][T14503] netlink: 'syz.2.3975': attribute type 5 has an invalid length. [ 201.326813][ T42] audit: type=1326 audit(1792400680.580:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.1.3984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 201.355080][T14522] o2cb: This node has not been configured. [ 201.355090][T14522] o2cb: Cluster check failed. Fix errors before retrying. [ 201.355108][T14522] (syz.2.3982,14522,1):user_dlm_register:674 ERROR: status = -22 [ 201.355122][T14522] (syz.2.3982,14522,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 201.717429][T14559] __nla_validate_parse: 1 callbacks suppressed [ 201.717448][T14559] netlink: 63 bytes leftover after parsing attributes in process `syz.0.4002'. [ 201.717461][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 201.928484][T14580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4011'. [ 202.605396][T14646] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 202.605415][T14646] CUSE: unknown device info "ٮ,<_eF" [ 202.605422][T14646] CUSE: unknown device info "3ܟ,̘" [ 202.605430][T14646] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 202.605438][T14646] CUSE: unknown device info " [ 202.605438][T14646] fzXS! [ 202.605438][T14646] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 202.605450][T14646] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 202.605461][T14646] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 202.605468][T14646] CUSE: zero length info key specified [ 203.240726][T14671] netlink: 'syz.0.4055': attribute type 3 has an invalid length. [ 203.240745][T14671] netlink: 'syz.0.4055': attribute type 1 has an invalid length. [ 203.240755][T14671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4055'. [ 203.254848][T14673] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.904766][T14739] pimreg: entered allmulticast mode [ 203.990277][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 204.029485][T14751] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 204.029485][T14751] program syz.2.4091 not setting count and/or reply_len properly [ 204.110622][T14761] scsi_nl_rcv_msg: discarding partial message [ 204.162158][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 204.163325][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 204.350370][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'. [ 204.361365][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.460790][T14805] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4118'. [ 204.512131][T14812] pimreg: entered allmulticast mode [ 204.514392][T14809] syz.0.4121 (14809) used obsolete PPPIOCDETACH ioctl [ 204.718710][T14843] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 205.073642][T14883] CacheFiles: Failed to register: -2 [ 205.130158][T14891] usb 1-1: USB disconnect, device number 2 [ 205.174258][T14896] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4160'. [ 205.202737][T14898] usb usb1: usbfs: process 14898 (syz.1.4158) did not claim interface 0 before use [ 205.589111][T14939] random: crng reseeded on system resumption [ 205.625982][T14944] fuse: Invalid rootmode [ 205.712194][T14954] netlink: 'syz.1.4187': attribute type 18 has an invalid length. [ 205.901333][T14975] [U]  [ 206.186534][T15008] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 206.186553][T15008] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 207.026070][T15067] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 207.177827][T15084] sg_write: data in/out 19942/44 bytes for SCSI command 0x32-- guessing data in; [ 207.177827][T15084] program syz.2.4250 not setting count and/or reply_len properly [ 207.605204][T15136] __nla_validate_parse: 7 callbacks suppressed [ 207.605218][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 207.728221][T15156] netlink: 'syz.0.4285': attribute type 8 has an invalid length. [ 207.963212][T15174] usb usb1: usbfs: process 15174 (syz.2.4295) did not claim interface 0 before use [ 208.240815][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 208.240832][ T42] audit: type=1400 audit(1792400687.490:236): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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ublk_ctrl_add_dev: invalid recovery flags 10 [ 208.634381][T15210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4312'. [ 208.783499][T15226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.815782][T15228] CIFS: Unable to determine destination address [ 208.983825][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'. [ 208.983863][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 209.359054][T15250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4332'. [ 209.391707][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4333'. [ 209.395796][T15253] netlink: 'syz.0.4341': attribute type 2 has an invalid length. [ 209.507755][T15264] loop3: detected capacity change from 0 to 7 [ 209.510845][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.510895][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.511906][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.511947][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.512531][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.512567][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.512746][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.512777][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.512942][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.512970][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.513971][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.514006][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.514183][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.514242][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.514290][T15264] ldm_validate_partition_table(): Disk read failed. [ 209.514399][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.514454][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.514618][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.514648][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.514763][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.514792][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.514942][T15264] Dev loop3: unable to read RDB block 0 [ 209.515620][T15264] loop3: unable to read partition table [ 209.515783][T15264] loop3: partition table beyond EOD, truncated [ 209.519463][T15264] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 209.639441][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4342'. [ 210.216765][T15313] netlink: 'syz.1.4361': attribute type 4 has an invalid length. [ 210.216812][T15313] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4361'. [ 210.501481][T15339] ipvlan2: entered promiscuous mode [ 210.502800][T15339] bridge0: port 3(ipvlan2) entered blocking state [ 210.502945][T15339] bridge0: port 3(ipvlan2) entered disabled state [ 210.503041][T15339] ipvlan2: entered allmulticast mode [ 210.503054][T15339] bridge0: entered allmulticast mode [ 210.505652][T15339] ipvlan2: left allmulticast mode [ 210.505666][T15339] bridge0: left allmulticast mode [ 210.611421][ T5750] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 210.611656][ T5750] Bluetooth: hci0: command 0x0c24 tx timeout [ 210.648869][ T42] audit: type=1326 audit(1792400689.900:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.649071][ T42] audit: type=1326 audit(1792400689.900:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.652763][ T42] audit: type=1326 audit(1792400689.910:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.653900][ T42] audit: type=1326 audit(1792400689.910:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.653941][ T42] audit: type=1326 audit(1792400689.910:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.653976][ T42] audit: type=1326 audit(1792400689.910:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.654136][ T42] audit: type=1326 audit(1792400689.910:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.654648][ T42] audit: type=1326 audit(1792400689.910:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 210.654819][ T42] audit: type=1326 audit(1792400689.910:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.1.4376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 211.036141][T15373] genirq: Flags mismatch irq 2. 00200000 (pcl816) vs. 00200000 (pcmmio) [ 211.287974][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 211.289012][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 211.401393][T15410] tmpfs: Cannot change global quota limit on remount [ 211.569985][T15427] [U]  [ 211.569996][T15427] [U] K{ [ 211.570001][T15427] [U] t 1ŠFfˊ`GJgo/mC [ 211.570012][T15427] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 211.570022][T15427] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 211.570037][T15427] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 211.570062][T15427] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 211.570096][T15427] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 211.570106][T15427] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 211.570118][T15427] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 211.570204][T15427] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 211.570213][T15427] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 211.570220][T15427] [U] 22Ʃx?0;3u [ 211.570229][T15427] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 211.570242][T15427] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 211.570249][T15427] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 211.570256][T15427] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 211.570264][T15427] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 211.570271][T15427] [U] ec [ 211.570277][T15427] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 211.573424][T15426] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 211.753878][T15440] Invalid ELF header len 3 [ 214.134812][T15552] batadv_slave_1: entered promiscuous mode [ 214.749629][T15590] pim6reg: entered allmulticast mode [ 215.232315][T15618] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 216.683744][T15688] __nla_validate_parse: 8 callbacks suppressed [ 216.683764][T15688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4537'. [ 216.771290][T15693] jffs2: notice: (15693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 217.766017][T15760] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 218.194650][T15788] nftables ruleset with unbound set [ 218.341837][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 218.435736][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435755][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435767][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435779][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435790][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435802][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435814][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435825][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435836][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.435848][ T10] hid-generic 684B:0002:0002.0009: unknown main item tag 0x0 [ 218.439841][ T10] hid-generic 684B:0002:0002.0009: hidraw0: HID v0.08 Device [syz0] on syz1 [ 218.487137][T15811] fido_id[15811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.516838][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 218.517975][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 218.561358][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 218.561375][ T42] audit: type=1326 audit(1792400697.810:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.1.4599" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746efec code=0x0 [ 219.614030][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4622'. [ 219.673954][T15871] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 220.294544][T15912] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 220.294544][T15912] program syz.1.4644 not setting count and/or reply_len properly [ 220.805906][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 220.805927][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 220.805951][T15935] netlink: 'syz.2.4653': attribute type 18 has an invalid length. [ 220.805963][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 220.807148][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 220.807164][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 220.807182][T15935] netlink: 'syz.2.4653': attribute type 18 has an invalid length. [ 221.657189][T15956] loop5: detected capacity change from 0 to 7 [ 221.831815][T15956] Dev loop5: unable to read RDB block 7 [ 221.831838][T15956] loop5: unable to read partition table [ 221.831924][T15956] loop5: partition table beyond EOD, truncated [ 221.831971][T15956] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 222.046598][T15986] __nla_validate_parse: 1 callbacks suppressed [ 222.046612][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'. [ 222.171916][T15994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.213034][T15997] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 222.250585][ T5816] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 222.284729][T15997] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 222.334168][T16005] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 222.498417][T16019] serio: Serial port ptm0 [ 222.827966][T16040] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 222.828085][T16040] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 222.830791][T16040] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 222.832342][T16040] pcieport 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 223.147149][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 223.147190][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4707'. [ 223.349517][ T117] Bluetooth: hci4: Frame reassembly failed (-84) [ 223.350607][ T117] Bluetooth: hci4: Frame reassembly failed (-84) [ 223.350795][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 223.935006][T16066] loop8: detected capacity change from 0 to 1 [ 223.947934][T16066] Dev loop8: unable to read RDB block 1 [ 223.947967][T16066] loop8: unable to read partition table [ 223.948124][T16066] loop8: partition table beyond EOD, truncated [ 223.948151][T16066] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 224.131747][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.134544][ T5743] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 224.519743][ T29] kernel read not supported for file /dsp (pid: 29 comm: kworker/1:0) [ 224.685526][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4729'. [ 225.209083][T16119] ubi0: attaching mtd0 [ 225.214629][T16119] ubi0: scanning is finished [ 225.214659][T16119] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 225.283704][T16122] scsi_dev_info_list_add_str: bad dev info string 'M' '' '' [ 225.411706][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 225.413666][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 225.450908][T16119] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 225.948762][T16153] blkio.reset_stats is deprecated [ 227.662914][ T5144] kernel read not supported for file /dsp1 (pid: 5144 comm: kworker/2:3) [ 227.893662][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4780'. [ 227.899447][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4780'. [ 228.270261][T16226] nbd: socks must be embedded in a SOCK_ITEM attr [ 228.270551][T16226] block nbd0: shutting down sockets [ 230.136318][T16311] netlink: 'syz.1.4827': attribute type 10 has an invalid length. [ 230.138581][T16311] team0: Device vxcan0 is of different type [ 231.354249][T16328] rnbd_client L213: map_device: Parameters missing [ 231.398223][T16330] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 231.398247][T16330] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 231.398271][T16330] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 231.398286][T16330] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 231.398295][T16330] page dumped because: unmovable page [ 231.398303][T16330] page_owner info is not present (never set?) [ 231.444716][T16334] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4836'. [ 231.602170][T16342] netlink: 'syz.0.4841': attribute type 14 has an invalid length. [ 231.960520][T16360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4849'. [ 232.085332][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4854'. [ 232.086774][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4854'. [ 232.149196][T16373] block nbd3: shutting down sockets [ 232.371326][ T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 232.463405][T16396] batadv_slave_1: entered promiscuous mode [ 232.463864][T16395] batadv_slave_1: left promiscuous mode [ 232.521817][ T58] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.524905][ T58] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.524919][ T58] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.524928][ T58] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.524948][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 232.524961][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 232.527294][ T58] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.527311][ T58] usb 6-1: Product: syz [ 232.527318][ T58] usb 6-1: Manufacturer: syz [ 232.574629][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 232.574647][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 232.580484][ T58] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 232.580501][ T58] cdc_wdm 6-1:1.0: Unknown control protocol [ 232.832367][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 232.832449][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 232.832626][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 232.832636][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 232.832637][ T1032] usb 6-1: USB disconnect, device number 7 [ 232.832643][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 233.824725][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 235.498236][T16548] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 236.513843][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4946'. [ 238.478746][T16642] sd 0:0:0:0: PR command failed: 1026 [ 238.478788][T16642] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 238.478823][T16642] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 240.402232][T16727] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 240.501311][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.651297][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 240.651822][ T29] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 240.652756][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 240.652771][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.652788][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.658957][ T29] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 240.667892][ T29] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 241.396860][ T1475] usb 5-1: USB disconnect, device number 9 [ 241.432741][ T1475] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 241.445569][ T1475] kobil_sct 5-1:1.0: device disconnected [ 241.553420][T16755] ipvlan4: entered allmulticast mode [ 241.553442][T16755] macvlan1: entered allmulticast mode [ 241.553453][T16755] veth1_vlan: entered allmulticast mode [ 241.558186][T16755] batman_adv: batadv0: Adding interface: ipvlan4 [ 241.558202][T16755] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.558228][T16755] batman_adv: batadv0: Interface activated: ipvlan4 [ 242.199889][T16793] bond0: no command found in slaves file - use +ifname or -ifname [ 242.280394][T16800] block2mtd: erasesize must be a divisor of device size [ 243.412169][T16831] scsi_nl_rcv_msg: discarding partial skb [ 244.201339][ T5829] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 244.372041][ T5829] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 244.372980][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 244.373002][ T5829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 244.373020][ T5829] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.373049][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.375829][T16865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.375964][T16865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.378026][ T5829] pl2303 6-1:1.0: pl2303 converter detected [ 244.388203][ T5829] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 244.691791][T16865] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 244.692387][T16865] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 244.692679][T16865] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 244.693218][T16865] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 244.694020][T16865] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 244.963503][T16864] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 244.965443][T16864] pl2303 ttyUSB0: error sending break = -32 [ 244.966396][ T1032] usb 6-1: USB disconnect, device number 8 [ 244.972814][ T1032] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 244.973374][ T1032] pl2303 6-1:1.0: device disconnected [ 245.031326][ T5829] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.192078][ T5829] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 245.193110][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.194527][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.194546][ T5829] usb 5-1: Product: syz [ 245.194558][ T5829] usb 5-1: Manufacturer: syz [ 245.205911][ T5829] navman 5-1:1.0: navman converter detected [ 245.209785][ T5829] usb 5-1: navman converter now attached to ttyUSB0 [ 245.410078][ T5829] usb 5-1: USB disconnect, device number 10 [ 245.421127][ T5829] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 245.422834][ T5829] navman 5-1:1.0: device disconnected [ 245.791008][T16927] block2mtd: illegal erase size [ 247.306865][T16986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5129'. [ 247.497182][T17003] netlink: 'syz.1.5137': attribute type 1 has an invalid length. [ 247.497204][T17003] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5137'. [ 247.497218][T17003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5137'. [ 247.528507][T17005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5139'. [ 248.800498][T17054] rnbd_client L127: Can't parse path i: -93 [ 248.816040][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5162'. [ 248.885459][T17060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.886432][T17060] bond0: (slave bond1): Enslaving as an active interface with an up link [ 249.475449][ T5605] smpboot: CPU 1 is now offline [ 249.933418][T17108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.933581][T17108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 249.959650][T17108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.959758][T17108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.959862][T17108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.969580][T17113] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5188'. [ 250.513324][T17137] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 251.262756][T17175] loop5: detected capacity change from 0 to 7 [ 251.472096][T17178] Invalid logical block size (18350) [ 251.473024][T17175] Dev loop5: unable to read RDB block 7 [ 251.473056][T17175] loop5: unable to read partition table [ 251.473218][T17175] loop5: partition table beyond EOD, truncated [ 251.473247][T17175] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 251.765177][T17193] comedi comedi1: Minor 4 specified more than once! [ 251.971680][ T5743] Bluetooth: hci3: command 0x0405 tx timeout [ 251.971708][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.971724][ T5743] Bluetooth: hci0: command 0x0c24 tx timeout [ 251.971739][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.315865][T17218] aa_policy_admin_capable: cap_mac_admin? 1 [ 252.315941][T17218] aa_policy_admin_capable: policy locked? 0 [ 252.316464][T17218] unpack_pdb: unpacking tags [ 252.316514][T17218] unpack_pdb: done unpacking tags [ 252.316542][T17218] unpack_pdb: unpacking tags [ 252.316547][T17218] unpack_pdb: done unpacking tags [ 252.318216][ T42] audit: type=1400 audit(1792400731.570:253): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=17217 comm="syz.0.5235" [ 252.762001][T17243] loop5: detected capacity change from 0 to 7 [ 252.797616][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5255'. [ 252.797651][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5255'. [ 252.798233][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5255'. [ 252.814531][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5255'. [ 252.958346][T17247] Invalid logical block size (18350) [ 252.958458][T17243] Dev loop5: unable to read RDB block 7 [ 252.958544][T17243] loop5: unable to read partition table [ 252.958719][T17243] loop5: partition table beyond EOD, truncated [ 252.961792][T17243] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 253.258150][T17265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1921 instead [ 253.258174][T17265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 253.258187][T17265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 253.258639][T17265] jffs2: notice: (17265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.068646][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.150333][T17317] profile_transition: unconfined exec no attachment [ 254.529000][T17329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 254.586202][T17338] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 254.982106][T17356] aa_policy_admin_capable: cap_mac_admin? 1 [ 254.982119][T17356] aa_policy_admin_capable: policy locked? 0 [ 254.982177][T17356] unpack_pdb: unpacking tags [ 254.982182][T17356] unpack_pdb: done unpacking tags [ 254.982195][T17356] unpack_pdb: unpacking tags [ 254.982199][T17356] unpack_pdb: done unpacking tags [ 254.982382][ T42] audit: type=1400 audit(1792400734.240:254): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=17355 comm="syz.2.5298" [ 255.063083][T17360] netlink: 'syz.1.5300': attribute type 8 has an invalid length. [ 255.171661][T17364] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 255.332806][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.748299][T17387] binder: 17386:17387 ioctl c0306201 0 returned -14 [ 255.998604][T17403] Bluetooth: hci4: Frame reassembly failed (-84) [ 256.068639][ T1032] kernel write not supported for file /slabinfo (pid: 1032 comm: kworker/0:3) [ 256.353647][T17424] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5328'. [ 256.393259][T17426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5329'. [ 256.911041][T17448] loop5: detected capacity change from 0 to 7 [ 257.151979][T17448] Dev loop5: unable to read RDB block 7 [ 257.152047][T17448] loop5: unable to read partition table [ 257.152242][T17448] loop5: partition table beyond EOD, truncated [ 257.152326][T17448] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 257.157778][T17449] Invalid logical block size (18350) [ 257.241683][T17461] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 257.241747][T17461] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 257.434122][ T1032] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 257.584804][ T1032] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 257.585852][ T1032] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 257.585874][ T1032] usb 6-1: config 0 has no interface number 0 [ 257.585904][ T1032] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.587770][ T1032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.587789][ T1032] usb 6-1: Product: syz [ 257.587801][ T1032] usb 6-1: Manufacturer: syz [ 257.587814][ T1032] usb 6-1: SerialNumber: syz [ 257.593582][ T1032] usb 6-1: config 0 descriptor?? [ 257.601141][ T1032] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 257.811430][ T10] usb 6-1: USB disconnect, device number 9 [ 257.814317][ T10] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 258.051512][ T5743] Bluetooth: hci4: command 0xfc11 tx timeout [ 258.051604][ T5750] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 258.288681][T17482] loop5: detected capacity change from 0 to 7 [ 258.413273][T17483] Invalid logical block size (18350) [ 258.413533][T17482] Dev loop5: unable to read RDB block 7 [ 258.413555][T17482] loop5: unable to read partition table [ 258.413647][T17482] loop5: partition table beyond EOD, truncated [ 258.416620][T17482] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 259.953175][T17519] ALSA: mixer_oss: invalid OSS volume '' [ 259.953554][T17519] ALSA: mixer_oss: invalid OSS volume '' [ 260.202467][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5379'. [ 260.292841][ T5828] kernel write not supported for file /uinput (pid: 5828 comm: kworker/3:3) [ 260.508699][T17550] ALSA: mixer_oss: invalid OSS volume '' [ 260.509040][T17550] ALSA: mixer_oss: invalid OSS volume '' [ 260.801741][ T1032] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 260.962851][ T1032] usb 6-1: not running at top speed; connect to a high speed hub [ 260.962882][ T1032] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 260.964032][ T1032] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.964070][ T1032] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 260.964088][ T1032] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 260.964120][ T1032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.003170][ T1032] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 261.008678][ T1032] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 261.019070][ T1032] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 261.032304][ T1032] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 261.032416][ T1032] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 261.037699][ T1032] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 261.079150][T17571] jffs2: notice: (17571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.326137][T17585] netlink: 'syz.3.5399': attribute type 9 has an invalid length. [ 261.410695][ T24] usb 6-1: USB disconnect, device number 10 [ 261.417144][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 261.424995][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 261.434374][ T24] keyspan 6-1:1.0: device disconnected [ 261.764770][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5409'. [ 262.297102][T17622] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input30 [ 262.482534][T17636] Unknown options in mask e346 [ 262.780066][T17647] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5426'. [ 262.866538][T17651] Invalid input. Must be >= 4608 [ 263.391687][T17674] sctp: [Deprecated]: syz.1.5437 (pid 17674) Use of int in maxseg socket option. [ 263.391687][T17674] Use struct sctp_assoc_value instead [ 263.801549][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 263.951313][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 263.953050][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.953518][ T24] usb 5-1: config 0 has no interfaces? [ 263.955267][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.955280][ T24] usb 5-1: Product: syz [ 263.955288][ T24] usb 5-1: Manufacturer: syz [ 263.955295][ T24] usb 5-1: SerialNumber: syz [ 263.956688][ T24] usb 5-1: config 0 descriptor?? [ 264.164292][ T24] usb 5-1: USB disconnect, device number 11 [ 264.521253][T17695] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.862766][T17720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5458'. [ 265.581550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.780584][T17747] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input31 ¹$7\+yrhT [ 266.121572][T17773] jffs2: notice: (17773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 266.543286][ T5750] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 266.870831][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'. [ 266.979584][T17804] sctp: [Deprecated]: syz.2.5496 (pid 17804) Use of int in maxseg socket option. [ 266.979584][T17804] Use struct sctp_assoc_value instead [ 267.869196][T17837] sctp: [Deprecated]: syz.3.5509 (pid 17837) Use of int in maxseg socket option. [ 267.869196][T17837] Use struct sctp_assoc_value instead [ 268.048563][T17842] profile_transition: name lookup ix on error [ 268.602457][T17865] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 268.602613][T17865] syzkaller1: linktype set to 769 [ 268.615318][T17867] vxcan1: tx address claim with different name [ 268.993000][ T5917] input: syz0 as /devices/virtual/misc/uhid/0002:1B1C:0C10.000A/input/input32 [ 269.022986][ T5917] hid-generic 0002:1B1C:0C10.000A: input,hidraw0: HID v0.00 Device [syz0] on syz0 [ 269.045606][T17887] profile_transition: unconfined exec no attachment [ 269.165838][T17887] fido_id[17887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.589146][T17899] profile_transition: unconfined exec no attachment [ 269.646225][T17903] profile_transition: unconfined exec no attachment [ 270.145586][T17931] netlink: 'syz.2.5550': attribute type 4 has an invalid length. [ 270.998576][T17949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5557'. [ 270.998591][T17949] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5557'. [ 272.329783][T18012] profile_transition: unconfined exec no attachment [ 272.349609][T18013] profile_transition: unconfined exec no attachment [ 272.601041][T18029] profile_transition: name lookup ix on error [ 273.210145][T18050] bochs-drm 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 273.831311][ T5750] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 274.913986][T18104] profile_transition: unconfined exec no attachment [ 274.983951][T18109] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 276.154611][ T5750] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 276.603139][T18189] phram: illegal start address [ 277.278524][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5673'. [ 277.634934][ T42] audit: type=1326 audit(1792400756.890:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18224 comm="syz.0.5679" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f05fec code=0x0 [ 277.997825][T18249] usb usb8: usbfs: process 18249 (syz.2.5690) did not claim interface 0 before use [ 278.319081][T18262] aa_policy_admin_capable: cap_mac_admin? 1 [ 278.319100][T18262] aa_policy_admin_capable: policy locked? 0 [ 278.319274][T18262] unpack_pdb: unpacking tags [ 278.319283][T18262] unpack_pdb: done unpacking tags [ 278.319392][ T42] audit: type=1400 audit(1792400757.570:256): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=18261 comm="syz.2.5696" name="p" offset=43 [ 278.319795][T18262] aa_free_profile: aa_free_profile(ffff888045000800) [ 278.447462][T18266] profile_transition: unconfined exec no attachment [ 279.139559][T18303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'. [ 279.140386][T18303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'. [ 281.647492][ T1475] kernel write not supported for file bpf-map (pid: 1475 comm: kworker/2:2) [ 282.287983][T18400] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 282.710114][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'. [ 282.884049][T18437] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 282.884101][T18437] rtrs_client L2834: pathname cannot contain / and . [ 282.965420][T18442] loop4: detected capacity change from 0 to 524287998 [ 283.311073][T18456] sctp: [Deprecated]: syz.3.5783 (pid 18456) Use of int in max_burst socket option. [ 283.311073][T18456] Use struct sctp_assoc_value instead [ 283.318058][T18456] sctp: [Deprecated]: syz.3.5783 (pid 18456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.318058][T18456] Use struct sctp_sack_info instead [ 283.533503][T18466] bond0: option arp_interval: invalid value ( ) [ 283.533527][T18466] bond0: option arp_interval: allowed values 0 - 2147483647 [ 283.905931][T18481] bonding: no command found in bonding_masters - use +ifname or -ifname [ 283.926377][T18483] aa_policy_admin_capable: cap_mac_admin? 1 [ 283.926391][T18483] aa_policy_admin_capable: policy locked? 0 [ 283.926447][T18483] unpack_pdb: unpacking tags [ 283.926452][T18483] unpack_pdb: done unpacking tags [ 283.926553][T18483] aa_free_profile: aa_free_profile(ffff888027ff5800) [ 283.926657][ T42] audit: type=1400 audit(1792400763.180:257): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=18482 comm="syz.3.5795" name="p" offset=43 [ 284.114837][T18496] aa_policy_admin_capable: cap_mac_admin? 1 [ 284.114851][T18496] aa_policy_admin_capable: policy locked? 0 [ 284.114932][ T42] audit: type=1400 audit(1792400763.370:258): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=18495 comm="syz.3.5801" name="unknown" offset=28 [ 284.114973][T18496] aa_free_profile: aa_free_profile(0000000000000000) [ 284.240611][T18506] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 284.293388][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 284.295329][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 284.693209][T18537] netlink: 'syz.2.5820': attribute type 11 has an invalid length. [ 285.273046][T18568] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5834'. [ 285.330627][T18570] loop4: detected capacity change from 0 to 524287998 [ 285.706227][T18586] overlay: Unknown parameter '/' [ 285.995864][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5851'. [ 286.030611][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 286.098541][T18607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.357515][T18627] kAFS: bad VL server IP address [ 286.899218][T18659] phram: parameter too long [ 287.184540][T18676] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x248b pfn:0x77e24 [ 287.184562][T18676] memcg:ffff88806cea6b82 [ 287.184567][T18676] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 287.184577][T18676] page_type: f2(table) [ 287.184587][T18676] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 287.184597][T18676] raw: 000000000000248b ffff888055d990c0 00000001f2000000 ffff88806cea6b82 [ 287.184604][T18676] page dumped because: unmovable page [ 287.184610][T18676] page_owner tracks the page as allocated [ 287.184615][T18676] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 17854, tgid 17853 (syz.2.5518), ts 268358654727 [ 287.184632][T18676] post_alloc_hook+0xfd/0x120 [ 287.184651][T18676] get_page_from_freelist+0x110d/0x35d0 [ 287.184664][T18676] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 287.184677][T18676] alloc_pages_mpol+0x201/0x550 [ 287.184686][T18676] alloc_pages_noprof+0x1a/0x160 [ 287.184698][T18676] pte_alloc_one+0x1c/0x3d0 [ 287.184714][T18676] __pte_alloc+0x6d/0x380 [ 287.184730][T18676] copy_page_range+0x3b36/0x57c0 [ 287.184741][T18676] dup_mmap+0x1230/0x2370 [ 287.184757][T18676] copy_process+0x5084/0x8430 [ 287.184767][T18676] kernel_clone+0x176/0x9d0 [ 287.184776][T18676] __do_compat_sys_ia32_clone+0xd4/0x120 [ 287.184795][T18676] __do_fast_syscall_32+0x13a/0x8b0 [ 287.184810][T18676] do_fast_syscall_32+0x32/0x70 [ 287.184820][T18676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.184835][T18676] page last free pid 0 tgid 0 ts 268342001762 stack trace: [ 287.184842][T18676] __free_frozen_pages+0x79f/0x10f0 [ 287.184853][T18676] tlb_remove_table_rcu+0x2cf/0x380 [ 287.184863][T18676] rcu_core+0x5f0/0x1260 [ 287.184874][T18676] handle_softirqs+0x1e6/0x9d0 [ 287.184890][T18676] __irq_exit_rcu+0x16a/0x210 [ 287.184906][T18676] irq_exit_rcu+0x9/0x30 [ 287.184915][T18676] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 287.184933][T18676] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.348442][ T10] logitech-hidpp-device 0003:046D:C082.000B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 287.363251][T18690] profile_transition: unconfined exec no attachment [ 287.465714][T18690] fido_id[18690]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.552837][T18701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5895'. [ 287.691320][ T5917] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.841996][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 287.844838][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.844856][ T5917] usb 5-1: Product: syz [ 287.844865][ T5917] usb 5-1: Manufacturer: syz [ 287.844875][ T5917] usb 5-1: SerialNumber: syz [ 287.880819][T18721] profile_transition: unconfined exec no attachment [ 287.954408][T18713] nvme nvme0: rdma connection establishment failed (-512) [ 288.080260][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 288.080302][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 288.080317][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 288.114555][ T5917] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 288.118431][ T5917] usb 5-1: USB disconnect, device number 12 [ 288.144083][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5911'. [ 288.181100][T18733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.482423][T18754] netlink: 'syz.2.5918': attribute type 6 has an invalid length. [ 288.729818][T18776] block2mtd: device name too long [ 289.935752][T18829] netlink: 'syz.3.5954': attribute type 2 has an invalid length. [ 289.935772][T18829] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 289.935785][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5954'. [ 289.935797][T18829] netlink: 'syz.3.5954': attribute type 2 has an invalid length. [ 289.935806][T18829] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 289.935816][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5954'. [ 289.935828][T18829] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 290.125279][T18843] profile_transition: unconfined exec no attachment [ 290.198969][T18833] nvme nvme0: rdma connection establishment failed (-512) [ 291.067873][T18903] profile_transition: unconfined exec no attachment [ 291.184475][T18900] nvme nvme0: rdma connection establishment failed (-512) [ 291.312873][ T24] asus 0005:0B05:8502.000C: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 291.326748][T18910] profile_transition: unconfined exec no attachment [ 291.330558][T18909] netlink: 'syz.0.5991': attribute type 11 has an invalid length. [ 291.330579][T18909] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5991'. [ 291.363568][T18910] fido_id[18910]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.460941][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5994'. [ 291.463730][T18917] profile_transition: unconfined exec no attachment [ 291.490518][T18920] profile_transition: unconfined exec no attachment [ 291.749560][T18931] netlink: Only one type of NAT may be specified [ 291.749593][T18931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.931308][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 292.009675][T18948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 292.081308][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 292.081817][ T5917] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 292.082827][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.082844][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.085082][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.085100][ T5917] usb 5-1: Product: syz [ 292.085111][ T5917] usb 5-1: Manufacturer: syz [ 292.085122][ T5917] usb 5-1: SerialNumber: syz [ 292.088049][ T5917] usb 5-1: config 0 descriptor?? [ 292.102330][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6009'. [ 292.124528][T18952] macvlan0: entered promiscuous mode [ 292.135933][T18952] netlink: 'syz.2.6009': attribute type 2 has an invalid length. [ 292.300471][ T5828] usb 5-1: USB disconnect, device number 13 [ 292.591184][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6020'. [ 292.600680][T18976] macvlan0: entered promiscuous mode [ 292.618179][T18976] netlink: 'syz.3.6020': attribute type 2 has an invalid length. [ 292.988236][T19001] profile_transition: unconfined exec no attachment [ 293.046319][T18991] nvme nvme0: rdma connection establishment failed (-512) [ 293.105399][T19010] ima: policy update failed [ 293.105533][ T42] audit: type=1802 audit(1792400772.360:259): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.1.6037" res=0 errno=0 [ 293.251432][T19023] binder: 19022:19023 unknown command 120 [ 293.251447][T19023] binder: 19022:19023 ioctl c0306201 80000180 returned -22 [ 293.445823][T19034] profile_transition: unconfined exec no attachment [ 293.561990][T19038] profile_transition: unconfined exec no attachment [ 293.630072][T19042] random: crng reseeded on system resumption [ 293.633409][T19033] nvme nvme0: rdma connection establishment failed (-512) [ 293.677347][T19042] Restarting kernel threads ... [ 293.677965][T19042] Done restarting kernel threads. [ 294.696167][T19082] profile_transition: unconfined exec no attachment [ 294.913690][T19104] random: crng reseeded on system resumption [ 294.918710][T19104] Restarting kernel threads ... [ 294.918976][T19104] Done restarting kernel threads. [ 295.657502][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.704338][T19146] sd 0:0:0:0: PR command failed: 1026 [ 295.704364][T19146] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 295.704385][T19146] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 295.791435][T19151] profile_transition: unconfined exec no attachment [ 296.384914][T19180] profile_transition: unconfined exec no attachment [ 296.433984][T19183] profile_transition: unconfined exec no attachment [ 296.572774][T19191] jffs2: notice: (19191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.742986][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6122'. [ 296.925421][ T42] audit: type=1807 audit(1792400776.180:260): UNKNOWN=appr#ise res=0 [ 296.925556][ T42] audit: type=1802 audit(1792400776.180:261): pid=19208 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.3.6127" res=0 errno=0 [ 296.926004][T19207] ima: policy update failed [ 296.926080][ T42] audit: type=1802 audit(1792400776.180:262): pid=19207 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.3.6127" res=0 errno=0 [ 297.101068][T19217] loop6: detected capacity change from 0 to 1 [ 297.112450][T19217] Dev loop6: unable to read RDB block 1 [ 297.112512][T19217] loop6: unable to read partition table [ 297.112607][T19217] loop6: partition table beyond EOD, truncated [ 297.112626][T19217] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 297.366041][T19232] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 297.759115][T19260] profile_transition: unconfined exec no attachment [ 298.332440][ T42] audit: type=1326 audit(1792400777.590:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.332553][ T42] audit: type=1326 audit(1792400777.590:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.334652][ T42] audit: type=1326 audit(1792400777.590:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.364976][ T42] audit: type=1326 audit(1792400777.620:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.365091][ T42] audit: type=1326 audit(1792400777.620:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.371114][ T42] audit: type=1326 audit(1792400777.620:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19297 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71977eb code=0x7ffc0000 [ 298.429990][ T42] audit: type=1326 audit(1792400777.680:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.430097][ T42] audit: type=1326 audit(1792400777.680:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.430161][ T42] audit: type=1326 audit(1792400777.680:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 298.430717][ T42] audit: type=1326 audit(1792400777.680:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19294 comm="syz.3.6168" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa5008 code=0x7ffc0000 [ 298.562107][T19306] bpf: Bad value for 'uid' [ 298.752943][T19327] nvme_fcloop: unknown parameter or missing value 'ww' [ 298.988068][T19346] aa_policy_admin_capable: cap_mac_admin? 1 [ 298.988081][T19346] aa_policy_admin_capable: policy locked? 0 [ 299.108775][T19356] loop6: detected capacity change from 0 to 1 [ 299.114380][T19356] Dev loop6: unable to read RDB block 1 [ 299.114409][T19356] loop6: unable to read partition table [ 299.114608][T19356] loop6: partition table beyond EOD, truncated [ 299.114632][T19356] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 299.398685][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6209'. [ 299.465476][T19387] loop6: detected capacity change from 0 to 1 [ 299.466191][T19387] Dev loop6: unable to read RDB block 1 [ 299.466223][T19387] loop6: unable to read partition table [ 299.466381][T19387] loop6: partition table beyond EOD, truncated [ 299.466397][T19387] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 299.479325][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 299.519897][ T5145] Dev loop6: unable to read RDB block 1 [ 299.519931][ T5145] loop6: unable to read partition table [ 299.520125][ T5145] loop6: partition table beyond EOD, truncated [ 299.897282][T19412] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 300.324176][T19430] sd 0:0:0:0: PR command failed: 1026 [ 300.324207][T19430] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 300.324227][T19430] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 300.352056][T19431] profile_transition: unconfined exec no attachment [ 300.625771][T19440] netlink: 'syz.0.6236': attribute type 10 has an invalid length. [ 300.625788][T19440] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6236'. [ 300.816445][T19455] sda1: Can't mount, would change RO state qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 300.984881][T19459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6246'. [ 301.148080][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6248'. [ 301.149294][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6248'. [ 301.491477][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 301.491936][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 301.812793][T19492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6260'. [ 301.814970][T19491] profile_transition: name lookup ix on error [ 302.605655][T19549] profile_transition: name lookup ix on error [ 303.654143][T19574] profile_transition: name lookup ix on error [ 303.665175][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 303.665188][ T42] audit: type=1326 audit(1792400782.920:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.665295][ T42] audit: type=1326 audit(1792400782.920:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.666811][ T42] audit: type=1326 audit(1792400782.920:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.666834][ T42] audit: type=1326 audit(1792400782.920:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.666853][ T42] audit: type=1326 audit(1792400782.920:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.667811][ T42] audit: type=1326 audit(1792400782.920:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.667927][ T42] audit: type=1326 audit(1792400782.920:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.668098][ T42] audit: type=1326 audit(1792400782.920:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.668806][ T42] audit: type=1326 audit(1792400782.920:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 303.668898][ T42] audit: type=1326 audit(1792400782.920:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=19575 comm="syz.0.6299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x7ffc0000 [ 304.303226][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6317'. [ 306.078013][T19672] batadv_slave_1: Device is already in use. [ 306.429317][T19691] aa_policy_admin_capable: cap_mac_admin? 1 [ 306.429329][T19691] aa_policy_admin_capable: policy locked? 0 [ 306.429384][T19691] unpack_pdb: unpacking tags [ 306.429389][T19691] unpack_pdb: done unpacking tags [ 306.429402][T19691] unpack_pdb: unpacking tags [ 306.429406][T19691] unpack_pdb: done unpacking tags [ 306.429514][T19691] aa_free_profile: aa_free_profile(ffff88801e6f0800) [ 306.715998][T19704] overlayfs: invalid origin (0000) [ 307.327530][T19733] profile_transition: name lookup ix on error [ 307.433094][T19740] bond2 (unregistering): Released all slaves [ 307.494307][T19738] bond0: option mode: unable to set because the bond device has slaves [ 307.613504][T19745] profile_transition: unconfined exec no attachment [ 307.821658][ T12] netdevsim netdevsim10 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.821681][ T12] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.027058][T19767] input: syz0 as /devices/virtual/input/input34 [ 308.139879][T19772] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.139941][T19772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.611607][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 308.617157][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 308.722743][T19796] overlayfs: invalid origin (0000) [ 308.867629][T19802] TCP: TCP_TX_DELAY enabled [ 309.190942][T19818] overlayfs: invalid origin (0000) [ 309.927804][T19840] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 310.446894][T19871] ima: rule for LSM 'u' is undefined [ 310.446976][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 310.446988][ T42] audit: type=1807 audit(1792400789.700:309): action=measure func=FILE_CHECK obj_type=u res=0 [ 310.447103][ T42] audit: type=1802 audit(1792400789.700:310): pid=19871 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.0.6432" res=0 errno=0 [ 310.447605][T19865] ima: policy update failed [ 310.447729][ T42] audit: type=1802 audit(1792400789.700:311): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.0.6432" res=0 errno=0 [ 311.991120][T19964] bond3 (unregistering): Released all slaves [ 312.476128][T19983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.814332][T20000] bond0: (slave bond_slave_0): Releasing backup interface [ 312.901531][ T42] audit: type=1326 audit(1792400792.160:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20004 comm="syz.1.6498" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x0 [ 314.589349][T20067] profile_transition: unconfined exec no attachment [ 314.604440][T20069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6526'. [ 314.878508][T20087] bond0: (slave bond_slave_0): Releasing backup interface [ 314.901311][T20091] team0: No ports can be present during mode change [ 315.160205][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6544'. [ 315.426908][T20117] MTRR 1 not used [ 315.622152][T20123] openvswitch: netlink: Missing key (keys=c0, expected=480) syzkaller syzkaller login: [ 316.595269][T20160] profile_transition: unconfined exec no attachment [ 316.785302][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.534858][T20170] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.646588][T20170] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.704376][T20170] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.762013][T20170] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.871483][ T5605] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.871526][ T5605] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.871557][ T5605] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.884750][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 317.886371][ T1128] ata1.00: configured for UDMA/100 [ 317.912433][ T5605] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.996320][T20184] input: syz0 as /devices/virtual/input/input36 [ 318.294822][T20205] netlink: 'syz.2.6591': attribute type 8 has an invalid length. [ 318.388107][T20214] ioremap: invalid physical address 8000000000000000 [ 318.388169][T20214] ------------[ cut here ]------------ [ 318.388174][T20214] 1 [ 318.388178][T20214] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#0: syz.0.6595/20214 [ 318.398115][T20214] Modules linked in: [ 318.399646][T20214] CPU: 0 UID: 0 PID: 20214 Comm: syz.0.6595 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.403330][T20214] Tainted: [L]=SOFTLOCKUP [ 318.404725][T20214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.407904][T20214] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.410006][T20214] Code: 48 8b 34 24 48 c7 c7 40 2d ec 8b e8 fa 21 01 00 e9 eb 88 99 00 e8 90 8c ea 00 4c 89 ee 48 c7 c7 a0 2b ec 8b e8 e1 21 01 00 90 <0f> 0b 90 e9 cb 88 99 00 e8 73 8c ea 00 41 0f b6 d7 4c 89 ee 48 c7 [ 318.416122][T20214] RSP: 0018:ffffc9000f1a78b8 EFLAGS: 00010286 [ 318.418077][T20214] RAX: 0000000000000032 RBX: 1ffff92001e34f1b RCX: 0000000000000000 [ 318.420607][T20214] RDX: 0000000000000032 RSI: ffffffff81e9bdc9 RDI: fffff52001e34f08 [ 318.423327][T20214] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 318.426237][T20214] R10: 8000000000000000 R11: 0000000000000001 R12: 8000000000000fff [ 318.429418][T20214] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 318.432507][T20214] FS: 0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f53b6b40 [ 318.436084][T20214] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 318.438775][T20214] CR2: 0000000056f4f1fc CR3: 000000007945e000 CR4: 0000000000352ef0 [ 318.442359][T20214] Call Trace: [ 318.443787][T20214] [ 318.445041][T20214] ? register_device+0x1bb/0x6a0 [ 318.447066][T20214] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 318.449529][T20214] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 318.451836][T20214] ? register_device+0x164/0x6a0 [ 318.453895][T20214] register_device+0x1bb/0x6a0 [ 318.455901][T20214] phram_setup+0x3b1/0x4c0 [ 318.457752][T20214] ? __pfx_phram_setup+0x10/0x10 [ 318.459789][T20214] ? trace_contention_end+0x126/0x160 [ 318.462361][T20214] ? param_attr_store+0xec/0x300 [ 318.464437][T20214] ? __pfx___mutex_lock+0x10/0x10 [ 318.466521][T20214] phram_param_call+0xa6/0xd0 [ 318.468511][T20214] param_attr_store+0x199/0x300 [ 318.470527][T20214] ? __pfx_param_attr_store+0x10/0x10 [ 318.472887][T20214] module_attr_store+0x58/0x80 [ 318.474894][T20214] ? __pfx_module_attr_store+0x10/0x10 [ 318.477151][T20214] sysfs_kf_write+0xf2/0x150 [ 318.479101][T20214] kernfs_fop_write_iter+0x3e0/0x5f0 [ 318.481603][T20214] ? __pfx_sysfs_kf_write+0x10/0x10 [ 318.483760][T20214] vfs_write+0x6af/0x1050 [ 318.485584][T20214] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 318.487962][T20214] ? __pfx_vfs_write+0x10/0x10 [ 318.489967][T20214] ? find_held_lock+0x2b/0x80 [ 318.492398][T20214] ksys_write+0x12a/0x250 [ 318.494689][T20214] ? __pfx_ksys_write+0x10/0x10 [ 318.496305][T20214] __do_fast_syscall_32+0x13a/0x8b0 [ 318.498562][T20214] do_fast_syscall_32+0x32/0x70 [ 318.500148][T20214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.502336][T20214] RIP: 0023:0xf7f05fec [ 318.503918][T20214] Code: Unable to access opcode bytes at 0xf7f05fc2. [ 318.505990][T20214] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 318.508603][T20214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 318.511154][T20214] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 318.513718][T20214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.516204][T20214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.518671][T20214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.521169][T20214] [ 318.522397][T20214] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.524661][T20214] CPU: 0 UID: 0 PID: 20214 Comm: syz.0.6595 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.527941][T20214] Tainted: [L]=SOFTLOCKUP [ 318.529281][T20214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.532388][T20214] Call Trace: [ 318.533402][T20214] [ 318.534332][T20214] dump_stack_lvl+0x100/0x190 [ 318.535807][T20214] vpanic+0x553/0x970 [ 318.537076][T20214] ? __pfx_vpanic+0x10/0x10 [ 318.538501][T20214] panic+0xd1/0xe0 [ 318.539701][T20214] ? __pfx_panic+0x10/0x10 [ 318.541106][T20214] check_panic_on_warn.cold+0x19/0x34 [ 318.542774][T20214] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.544650][T20214] __warn.cold+0x191/0x318 [ 318.546066][T20214] __report_bug+0x30f/0x440 [ 318.547517][T20214] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.549382][T20214] ? __pfx___report_bug+0x10/0x10 [ 318.550989][T20214] ? irq_work_queue+0xd1/0x100 [ 318.552511][T20214] ? __wake_up_klogd+0xe5/0x140 [ 318.554051][T20214] ? vprintk_emit+0x1c9/0x6b0 [ 318.555538][T20214] ? __pfx_vprintk_emit+0x10/0x10 [ 318.557138][T20214] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.558991][T20214] report_bug+0xb3/0x220 [ 318.560378][T20214] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.562231][T20214] handle_bug+0x16a/0x2a0 [ 318.563615][T20214] exc_invalid_op+0x17/0x50 [ 318.565062][T20214] asm_exc_invalid_op+0x1a/0x20 [ 318.566585][T20214] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 318.568617][T20214] Code: 48 8b 34 24 48 c7 c7 40 2d ec 8b e8 fa 21 01 00 e9 eb 88 99 00 e8 90 8c ea 00 4c 89 ee 48 c7 c7 a0 2b ec 8b e8 e1 21 01 00 90 <0f> 0b 90 e9 cb 88 99 00 e8 73 8c ea 00 41 0f b6 d7 4c 89 ee 48 c7 [ 318.574562][T20214] RSP: 0018:ffffc9000f1a78b8 EFLAGS: 00010286 [ 318.576413][T20214] RAX: 0000000000000032 RBX: 1ffff92001e34f1b RCX: 0000000000000000 [ 318.578861][T20214] RDX: 0000000000000032 RSI: ffffffff81e9bdc9 RDI: fffff52001e34f08 [ 318.581369][T20214] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 318.583844][T20214] R10: 8000000000000000 R11: 0000000000000001 R12: 8000000000000fff [ 318.586254][T20214] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 318.588726][T20214] ? vprintk_emit+0x1c9/0x6b0 [ 318.590252][T20214] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 318.592116][T20214] ? register_device+0x1bb/0x6a0 [ 318.593684][T20214] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 318.595564][T20214] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 318.597305][T20214] ? register_device+0x164/0x6a0 [ 318.598866][T20214] register_device+0x1bb/0x6a0 [ 318.600416][T20214] phram_setup+0x3b1/0x4c0 [ 318.601827][T20214] ? __pfx_phram_setup+0x10/0x10 [ 318.603385][T20214] ? trace_contention_end+0x126/0x160 [ 318.605159][T20214] ? param_attr_store+0xec/0x300 [ 318.606723][T20214] ? __pfx___mutex_lock+0x10/0x10 [ 318.608319][T20214] phram_param_call+0xa6/0xd0 [ 318.609832][T20214] param_attr_store+0x199/0x300 [ 318.611367][T20214] ? __pfx_param_attr_store+0x10/0x10 [ 318.613068][T20214] module_attr_store+0x58/0x80 [ 318.614575][T20214] ? __pfx_module_attr_store+0x10/0x10 [ 318.616197][T20214] sysfs_kf_write+0xf2/0x150 [ 318.617611][T20214] kernfs_fop_write_iter+0x3e0/0x5f0 [ 318.619279][T20214] ? __pfx_sysfs_kf_write+0x10/0x10 [ 318.620950][T20214] vfs_write+0x6af/0x1050 [ 318.622319][T20214] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 318.624186][T20214] ? __pfx_vfs_write+0x10/0x10 [ 318.625704][T20214] ? find_held_lock+0x2b/0x80 [ 318.627226][T20214] ksys_write+0x12a/0x250 [ 318.628605][T20214] ? __pfx_ksys_write+0x10/0x10 [ 318.630209][T20214] __do_fast_syscall_32+0x13a/0x8b0 [ 318.631908][T20214] do_fast_syscall_32+0x32/0x70 [ 318.633486][T20214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.635466][T20214] RIP: 0023:0xf7f05fec [ 318.636843][T20214] Code: Unable to access opcode bytes at 0xf7f05fc2. [ 318.638922][T20214] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 318.641572][T20214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 318.644721][T20214] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 318.647823][T20214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.650966][T20214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.654104][T20214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.657240][T20214] [ 318.659104][T20214] Kernel Offset: disabled [ 318.660844][T20214] Rebooting in 86400 seconds..