last executing test programs: 7m46.000416528s ago: executing program 1 (id=12259): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(0x3) 7m45.908117926s ago: executing program 1 (id=12263): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0x27, 0x4c21, 0x1, @remote, 0x7}, 0x1c) 7m45.855973568s ago: executing program 1 (id=12265): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3}, 0x7}], 0x3, 0x2, &(0x7f0000000c00)={0x0, 0x3938700}) 7m45.762414565s ago: executing program 1 (id=12268): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 7m45.651327452s ago: executing program 1 (id=12271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 7m45.562771975s ago: executing program 1 (id=12274): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x9, 0x722, 0x6, 0x7, 0x82, 0x27, 0x38, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 7m30.5400334s ago: executing program 32 (id=12274): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x9, 0x722, 0x6, 0x7, 0x82, 0x27, 0x38, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 4m41.072988012s ago: executing program 2 (id=16202): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) 4m40.876985008s ago: executing program 2 (id=16204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x18}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) 4m40.818158456s ago: executing program 2 (id=16206): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 4m40.704851857s ago: executing program 2 (id=16209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m40.67654045s ago: executing program 2 (id=16212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 4m40.602553468s ago: executing program 2 (id=16214): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) 4m25.491183184s ago: executing program 33 (id=16214): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) 3m44.160031645s ago: executing program 5 (id=17259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3m44.133804671s ago: executing program 5 (id=17260): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x64, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d900"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m44.07083796s ago: executing program 5 (id=17261): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) 3m44.000919842s ago: executing program 5 (id=17262): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x40210}, 0x1c, 0x0}}], 0x1, 0x0) 3m43.997839275s ago: executing program 5 (id=17263): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 3m43.942602818s ago: executing program 5 (id=17265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 3m28.86147385s ago: executing program 34 (id=17265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 7.311801744s ago: executing program 4 (id=20955): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x27744301c852fef0}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 7.164235239s ago: executing program 4 (id=20959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "f4bccf586b5f3b0e7b6c155aed1116bd4c34dae2782f0a8869abaf184ee6e562296395ad1f3287225c0c16903aa0c87ae17b13685a5fed65569153bdfc1e39a8ba4809e40d4bf5f3280656e4fa99b739"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) 7.038620794s ago: executing program 4 (id=20961): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}, @hopopts={{0x18, 0x29, 0x3b, {0x85}}}], 0x30}, 0x810) 6.967529622s ago: executing program 4 (id=20962): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 6.898624824s ago: executing program 4 (id=20964): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x805, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 6.028029935s ago: executing program 4 (id=20977): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x1c) 5.809950733s ago: executing program 35 (id=20977): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, 0x1c) 3.34045345s ago: executing program 0 (id=21016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 3.124769278s ago: executing program 0 (id=21019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455ca, 0x2) 2.554052435s ago: executing program 3 (id=21025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.39606971s ago: executing program 3 (id=21027): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.320205288s ago: executing program 3 (id=21028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d00}]}) 2.122402222s ago: executing program 3 (id=21029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 1.987625005s ago: executing program 3 (id=21030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.916043187s ago: executing program 3 (id=21031): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x9, 0x5, 0x128c, 0x1, 'syz0\x00', 0x1}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.493622175s ago: executing program 6 (id=21032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) 1.286626643s ago: executing program 6 (id=21033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000140)={0x7}) 846.921399ms ago: executing program 6 (id=21034): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a}, 0x1, 0x0, 0x0, 0x4008005}, 0x4048080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b28, &(0x7f0000000040)) 730.954511ms ago: executing program 0 (id=21035): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = socket(0x40000000015, 0x805, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x420a}, {r1, 0x6328}], 0x2, 0x0, 0x0, 0x0) 611.194502ms ago: executing program 0 (id=21036): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 589.554453ms ago: executing program 6 (id=21037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 428.089651ms ago: executing program 0 (id=21038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) 354.107869ms ago: executing program 6 (id=21039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 237.699214ms ago: executing program 7 (id=20979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 136.113343ms ago: executing program 0 (id=21040): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 87.942734ms ago: executing program 6 (id=21041): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xc1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 0s ago: executing program 7 (id=21042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x81400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000000)) kernel console output (not intermixed with test programs): [T21803] netlink: zone id is out of range [ 799.884250][T21803] netlink: zone id is out of range [ 799.955746][ T29] audit: type=1326 audit(2000000188.509:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.4.18097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2bb99c799 code=0x0 [ 800.984814][T21865] binder: BINDER_SET_CONTEXT_MGR already set [ 801.000093][T21865] binder: 21864:21865 ioctl 40046207 0 returned -16 [ 801.606016][ T29] audit: type=1326 audit(2000000190.197:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.3.18122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff922b9c799 code=0x0 [ 801.863748][ T29] audit: type=1326 audit(2000000190.473:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.4.18129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2bb99c799 code=0x0 [ 802.516836][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18133'. [ 803.223838][T21965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18147'. [ 803.661974][T21998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18160'. [ 803.970999][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18166'. [ 804.304326][ T29] audit: type=1326 audit(2000000192.961:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.4.18175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2bb99c799 code=0x0 [ 804.426383][T22043] net_ratelimit: 2 callbacks suppressed [ 804.426400][T22043] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 805.010112][ T5326] udevd[5326]: symlink '../../loop2' '/dev/disk/by-diskseq/83.tmp-b7:2' failed: Read-only file system [ 805.182077][T22087] netlink: 'syz.4.18199': attribute type 10 has an invalid length. [ 805.202113][T22087] team0: Port device dummy0 added [ 805.210439][T22087] netlink: 'syz.4.18199': attribute type 10 has an invalid length. [ 805.239621][T22087] team0: Port device dummy0 removed [ 805.252842][T22087] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 805.733052][T22121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18214'. [ 805.745629][T22121] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18214'. [ 805.755423][T22121] netlink: 'syz.3.18214': attribute type 5 has an invalid length. [ 805.763975][T22121] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18214'. [ 806.676452][T22148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.444290][T22230] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 2, id = 0 [ 808.444703][T22227] IPVS: stopping backup sync thread 22230 ... [ 808.574948][T22241] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 808.641801][T22245] xt_policy: too many policy elements [ 808.699825][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.412064][T22295] veth1_macvtap: left promiscuous mode [ 809.418689][T22295] macsec0: entered allmulticast mode [ 809.430201][T22295] veth1_macvtap: entered promiscuous mode [ 809.436796][T22295] veth1_macvtap: entered allmulticast mode [ 809.443053][T22295] macsec0: left allmulticast mode [ 809.448892][T22295] veth1_macvtap: left allmulticast mode [ 809.993282][T22321] IPVS: stopping backup sync thread 5013 ... [ 810.175534][ T29] audit: type=1326 audit(2000000198.919:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.217954][ T29] audit: type=1326 audit(2000000198.919:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.265361][ T29] audit: type=1326 audit(2000000198.939:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.290434][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18305'. [ 810.290603][ T29] audit: type=1326 audit(2000000198.939:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.324486][ T29] audit: type=1326 audit(2000000198.950:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.348897][ T29] audit: type=1326 audit(2000000198.990:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.380424][ T29] audit: type=1326 audit(2000000198.990:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.403589][ T29] audit: type=1326 audit(2000000198.990:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.428585][ T29] audit: type=1326 audit(2000000198.990:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.460553][ T29] audit: type=1326 audit(2000000198.990:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7ffc0000 [ 810.529883][ T808] Process accounting resumed [ 810.558694][T22350] netlink: 'syz.4.18310': attribute type 21 has an invalid length. [ 810.588514][T22348] Process accounting resumed [ 810.599574][T22350] netlink: 'syz.4.18310': attribute type 1 has an invalid length. [ 810.903932][ T10] Process accounting resumed [ 810.939267][T22380] Process accounting resumed [ 811.288719][T22406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.878960][T22425] xt_l2tp: wrong L2TP version: 0 [ 812.049093][T22439] program syz.0.18346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.077651][ T5326] udevd[5326]: symlink '../../loop2' '/dev/disk/by-diskseq/83.tmp-b7:2' failed: Read-only file system [ 812.173470][T22449] sg_write: data in/out 397789/272 bytes for SCSI command 0x0-- guessing data in; [ 812.173470][T22449] program syz.6.18349 not setting count and/or reply_len properly [ 813.104714][T22516] tipc: Enabling of bearer rejected, failed to enable media [ 813.326551][T22536] overlayfs: conflicting lowerdir path [ 813.424962][T22542] tipc: Enabled bearer , priority 10 [ 813.662868][T22555] program syz.3.18396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.201047][ T808] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 814.247568][T22597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18416'. [ 814.299819][T22599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18417'. [ 814.310272][T22599] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 814.371162][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 814.382489][ T808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.401773][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 814.412317][ T808] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 814.424598][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.440406][ T808] usb 4-1: Product: syz [ 814.445804][ T808] usb 4-1: Manufacturer: syz [ 814.450865][ T808] usb 4-1: SerialNumber: syz [ 814.460226][ T808] usb 4-1: config 0 descriptor?? [ 814.527997][ T10] tipc: Node number set to 2130706433 [ 814.673799][T22618] vivid-001: disconnect [ 814.703651][T22618] vivid-001: reconnect [ 814.840311][ T808] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input103 [ 815.085744][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 815.100748][ T808] imon:send_packet: packet tx failed (-71) [ 815.123079][ T808] imon 4-1:0.0: panel buttons/knobs setup failed [ 815.211756][ T808] rc_core: IR keymap rc-imon-pad not found [ 815.217640][ T808] Registered IR keymap rc-empty [ 815.233154][ T808] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 815.257004][ T808] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 815.268081][ T808] imon:send_packet: packet tx failed (-71) [ 815.292553][ T808] imon 4-1:0.0: remote input dev register failed [ 815.309417][ T808] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 815.470676][ T808] imon 4-1:0.0: unable to initialize intf0, err 0 [ 815.477291][ T808] imon:imon_probe: failed to initialize context! [ 815.490450][ T808] imon 4-1:0.0: unable to register, err -19 [ 815.504524][ T808] usb 4-1: USB disconnect, device number 114 [ 816.005058][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 816.034432][T22719] tipc: MTU too low for tipc bearer [ 816.090783][T22721] sg_write: data in/out 430556/144 bytes for SCSI command 0x0-- guessing data in; [ 816.090783][T22721] program syz.6.18459 not setting count and/or reply_len properly [ 816.165261][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 816.188107][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.212805][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.230129][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.240567][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 816.254960][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 816.265390][T22729] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18461'. [ 816.282624][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 816.303036][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.315843][ T10] usb 4-1: config 0 descriptor?? [ 816.759730][ T10] hid-thrustmaster 0003:044F:B65D.0045: item fetching failed at offset 4/5 [ 816.776826][T22760] netlink: 108 bytes leftover after parsing attributes in process `syz.6.18470'. [ 816.788191][ T10] hid-thrustmaster 0003:044F:B65D.0045: parse failed with error -22 [ 816.810437][ T10] hid-thrustmaster 0003:044F:B65D.0045: probe with driver hid-thrustmaster failed with error -22 [ 816.854486][T22762] hub 9-0:1.0: USB hub found [ 816.870053][T22762] hub 9-0:1.0: 1 port detected [ 816.955895][ T10] usb 4-1: USB disconnect, device number 115 [ 817.672520][ T808] kernel read not supported for file /video37 (pid: 808 comm: kworker/1:2) [ 817.979355][ T10] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 818.132060][ T10] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.147487][ T10] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.158125][ T10] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.173999][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 818.180997][ T10] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 818.190536][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.213500][ T10] usb 4-1: config 0 descriptor?? [ 818.648455][ T10] holtek 0003:1241:5015.0046: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 818.661178][ T10] holtek 0003:1241:5015.0046: no inputs found [ 818.828468][ T10] usb 4-1: USB disconnect, device number 116 [ 819.168819][T22915] netlink: 'syz.4.18518': attribute type 1 has an invalid length. [ 819.177652][T22915] nbd: error processing sock list [ 819.223693][T22918] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 819.232311][T22918] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.717370][T29445] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 819.898301][T29445] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 819.908312][T29445] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 819.918274][T29445] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 819.929029][T29445] usb 4-1: config 220 has no interface number 2 [ 819.936451][T29445] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 819.951307][T29445] usb 4-1: config 220 interface 0 has no altsetting 0 [ 819.958968][T29445] usb 4-1: config 220 interface 76 has no altsetting 0 [ 819.966897][T29445] usb 4-1: config 220 interface 1 has no altsetting 0 [ 819.976575][T29445] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 819.986032][T29445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.994188][T29445] usb 4-1: Product: syz [ 819.999144][T29445] usb 4-1: Manufacturer: syz [ 820.004317][T29445] usb 4-1: SerialNumber: syz [ 820.227194][T29445] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 820.238223][T29445] uvcvideo 4-1:220.0: No valid video chain found. [ 820.245756][T29445] usb 4-1: selecting invalid altsetting 0 [ 820.293125][T29445] usb 4-1: selecting invalid altsetting 0 [ 820.300460][T29445] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 820.320228][T29445] usb 4-1: USB disconnect, device number 117 [ 821.032201][T23018] trusted_key: encrypted_key: key trusted:syz not found [ 821.441608][T23050] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 821.535851][ T5923] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 821.696899][ T5923] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 821.705188][ T5923] usb 4-1: config 1 has no interface number 0 [ 821.711762][ T5923] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 821.723597][ T5923] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 821.734016][ T5923] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.747397][ T5923] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 821.756799][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.765149][ T5923] usb 4-1: Product: syz [ 821.769389][ T5923] usb 4-1: Manufacturer: syz [ 821.774024][ T5923] usb 4-1: SerialNumber: syz [ 821.782039][T23039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.845429][T23067] smc: net device bond0 applied user defined pnetid SYZ2 [ 821.972506][T23073] netlink: 'syz.0.18574': attribute type 4 has an invalid length. [ 821.981919][T23073] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18574'. [ 822.000094][T23039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 822.227729][ T5923] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 822.416879][ T5923] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 822.425430][ T5923] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 822.433549][ T5923] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 822.440812][ T5923] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 822.455074][ T5923] usb 4-1: USB disconnect, device number 118 [ 822.464993][ T5923] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 822.522133][ T5923] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 823.245487][T23132] netlink: 19 bytes leftover after parsing attributes in process `syz.3.18589'. [ 823.312932][T23134] program syz.3.18590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.364223][T23135] program syz.3.18590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.385779][T23135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 825.423704][T23272] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18641'. [ 825.434203][T23272] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18641'. [ 825.644626][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 825.803885][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 825.812426][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 825.822460][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.835404][ T10] usb 4-1: Product: syz [ 825.839706][ T10] usb 4-1: Manufacturer: syz [ 825.844878][ T10] usb 4-1: SerialNumber: syz [ 825.852809][ T10] usb 4-1: config 0 descriptor?? [ 826.075626][ T10] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 826.475905][ T10] usb write operation failed. (-71) [ 826.485169][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 826.508197][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 826.516024][ T10] usb 4-1: media controller created [ 826.524002][ T10] usb read operation failed. (-71) [ 826.533103][ T10] usb write operation failed. (-71) [ 826.547801][ T10] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 826.592393][ T10] usb 4-1: USB disconnect, device number 119 [ 827.285845][T23395] vxcan0: tx address claim with dlc 0 [ 827.630532][T23422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 827.803138][T23427] sctp: [Deprecated]: syz.4.18688 (pid 23427) Use of int in max_burst socket option deprecated. [ 827.803138][T23427] Use struct sctp_assoc_value instead [ 827.954025][T23447] netlink: 'syz.4.18694': attribute type 10 has an invalid length. [ 827.962327][T23447] netlink: 152 bytes leftover after parsing attributes in process `syz.4.18694'. [ 827.982688][T23447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 828.115145][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18697'. [ 828.871419][ T5923] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 829.022187][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 829.029963][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 829.039163][ T5923] usb 4-1: config 9 has an invalid interface number: 166 but max is 0 [ 829.047479][ T5923] usb 4-1: config 9 has no interface number 0 [ 829.053748][ T5923] usb 4-1: config 9 interface 166 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 829.064865][ T5923] usb 4-1: config 9 interface 166 has no altsetting 0 [ 829.074175][ T5923] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=bb.5e [ 829.083535][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.091715][ T5923] usb 4-1: Product: syz [ 829.095877][ T5923] usb 4-1: Manufacturer: syz [ 829.100575][ T5923] usb 4-1: SerialNumber: syz [ 829.317389][ T5923] kvaser_usb 4-1:9.166: error -ENODEV: Cannot get usb endpoint(s) [ 829.335439][ T5923] usb 4-1: USB disconnect, device number 120 [ 830.264495][T23530] sctp: [Deprecated]: syz.3.18720 (pid 23530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 830.264495][T23530] Use struct sctp_sack_info instead [ 831.131047][T23538] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 831.141253][T23538] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 831.158075][T23538] overlayfs: failed to get uuid (5084/file0, err=-13); falling back to uuid=null. [ 832.032628][T23616] netlink: 164 bytes leftover after parsing attributes in process `syz.6.18748'. [ 832.654664][T23664] netlink: 236 bytes leftover after parsing attributes in process `syz.6.18768'. [ 832.675326][T23664] netlink: 236 bytes leftover after parsing attributes in process `syz.6.18768'. [ 832.934050][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 833.238862][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18784'. [ 833.885821][ T5923] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 833.969794][T23745] tipc: New replicast peer: 255.255.255.255 [ 833.986825][T23745] tipc: Enabled bearer , priority 10 [ 834.045744][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 834.053450][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.064944][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.075410][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.082358][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 834.091947][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.120202][ T5923] usb 4-1: config 0 descriptor?? [ 834.538029][ T5923] hid (null): nested delimiters [ 834.723800][T23770] loop7: detected capacity change from 0 to 7 [ 834.739672][ T5326] buffer_io_error: 10 callbacks suppressed [ 834.739692][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.752136][ T5923] usb 4-1: USB disconnect, device number 121 [ 834.759873][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.770833][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.780598][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.789346][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.818373][T23775] Invalid logical block size (6) [ 834.825262][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.833647][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.841670][ T5326] ldm_validate_partition_table(): Disk read failed. [ 834.849216][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.858972][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.867411][ T5326] Buffer I/O error on dev loop7, logical block 0, async page read [ 834.875473][ T5326] Dev loop7: unable to read RDB block 0 [ 834.881736][ T5326] loop7: unable to read partition table [ 834.888034][ T5326] loop7: partition table beyond EOD, truncated [ 834.895115][T23770] ldm_validate_partition_table(): Disk read failed. [ 834.903862][T23770] Dev loop7: unable to read RDB block 0 [ 834.909596][T23770] loop7: unable to read partition table [ 834.916784][T23770] loop7: partition table beyond EOD, truncated [ 834.928541][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/84.tmp-b7:7' failed: Read-only file system [ 834.939820][T23770] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 834.969253][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/84.tmp-b7:7' failed: Read-only file system [ 835.004458][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/84.tmp-b7:7' failed: Read-only file system [ 835.039872][T23784] input: syz0 as /devices/virtual/input/input105 [ 836.440607][ T808] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 836.611089][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 836.622668][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.632461][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 836.643494][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 836.656575][ T808] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 836.665996][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.674398][ T808] usb 4-1: Product: syz [ 836.678739][ T808] usb 4-1: Manufacturer: syz [ 836.689316][ T808] usb 4-1: SerialNumber: syz [ 836.700880][ T808] usb 4-1: config 0 descriptor?? [ 836.914512][ T808] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 837.082414][T23866] netlink: 'syz.4.18833': attribute type 31 has an invalid length. [ 837.092323][T23866] netlink: 'syz.4.18833': attribute type 1 has an invalid length. [ 837.102124][T23866] bridge0: port 1(bridge_slave_0) entered learning state [ 837.117030][ T10] usb 4-1: USB disconnect, device number 122 [ 839.813959][T23990] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 840.148247][T24006] overlayfs: workdir and upperdir must be separate subtrees [ 840.425708][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/86.tmp-b7:8' failed: Read-only file system [ 840.470871][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/86.tmp-b7:8' failed: Read-only file system [ 840.497528][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/86.tmp-b7:8' failed: Read-only file system [ 840.523981][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/86.tmp-b7:8' failed: Read-only file system [ 840.622274][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18887'. [ 841.373834][T24042] sctp: [Deprecated]: syz.0.18892 (pid 24042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.373834][T24042] Use struct sctp_sack_info instead [ 841.621881][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 841.621901][ T29] audit: type=1326 audit(2000000230.534:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24062 comm="syz.6.18898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab00b9c799 code=0x0 [ 842.064973][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18910'. [ 842.523514][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18922'. [ 842.567947][T24141] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.575775][T24141] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.690800][T24146] tipc: Enabling of bearer rejected, already enabled [ 843.161083][T24181] kvm: kvm [24177]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 843.625827][ T4224] block nbd1: Receive control failed (result -32) [ 844.185378][T24239] bridge_slave_1: entered promiscuous mode [ 844.349393][T24247] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 848.422209][T24373] lo speed is unknown, defaulting to 1000 [ 848.578343][T24410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19004'. [ 848.680572][ T5923] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 848.840937][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 848.854012][ T5923] usb 4-1: config 0 has no interfaces? [ 848.865724][ T5923] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.887574][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.913585][ T5923] usb 4-1: config 0 descriptor?? [ 849.103697][T24438] tap0: tun_chr_ioctl cmd 1074025675 [ 849.109299][T24438] tap0: persist enabled [ 849.180724][ T4940] usb 4-1: USB disconnect, device number 123 [ 849.234391][T24451] program syz.4.19019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.517234][T24470] netlink: 14532 bytes leftover after parsing attributes in process `syz.4.19027'. [ 850.186175][T24515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.629132][T24546] Invalid/unusable pipe [ 850.686505][T24549] netlink: 'syz.0.19059': attribute type 83 has an invalid length. [ 850.729438][T24553] netlink: 'syz.3.19061': attribute type 1 has an invalid length. [ 850.737601][T24553] netlink: 'syz.3.19061': attribute type 2 has an invalid length. [ 850.746998][T24553] netlink: 'syz.3.19061': attribute type 1 has an invalid length. [ 850.948022][T24569] netlink: 'syz.3.19066': attribute type 22 has an invalid length. [ 850.959308][T24569] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.19066'. [ 851.325267][T24593] vxcan0: tx address claim with dest, not broadcast [ 851.661404][T24624] input: syz1 as /devices/virtual/input/input108 [ 851.848063][ T808] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 852.030451][ T808] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 852.057469][ T808] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 852.077399][ T808] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 852.094283][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.885314][ T10] kernel read not supported for file /radio0 (pid: 10 comm: kworker/0:1) [ 853.144521][ T808] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 853.165736][ T808] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input109 [ 853.236823][ T808] input: failed to attach handler kbd to device input109, error: -5 [ 853.274983][ T808] usb 4-1: USB disconnect, device number 124 [ 853.859518][T24745] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 853.864585][T24745] @0: renamed from bond_slave_1 (while UP) [ 854.169798][T24757] netlink: 84 bytes leftover after parsing attributes in process `syz.3.19133'. [ 854.232364][T24759] loop5: detected capacity change from 0 to 7 [ 854.263805][T24759] Dev loop5: unable to read RDB block 7 [ 854.278775][T24759] loop5: AHDI p1 [ 854.286066][T24759] loop5: partition table partially beyond EOD, truncated [ 854.323415][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/88.tmp-b7:5' failed: Read-only file system [ 854.374953][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/88.tmp-b7:5' failed: Read-only file system [ 854.422049][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/88.tmp-b7:5' failed: Read-only file system [ 854.465816][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/88.tmp-b7:5' failed: Read-only file system [ 854.839561][T24780] input: syz0 as /devices/virtual/input/input110 [ 855.148034][T24801] netlink: 'syz.3.19147': attribute type 11 has an invalid length. [ 855.719207][T24830] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19157'. [ 855.976847][T24853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.130671][T24865] netlink: 128 bytes leftover after parsing attributes in process `syz.6.19167'. [ 856.786740][T24914] program syz.3.19188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.739581][T24937] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 857.763692][T24937] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 857.778380][T24937] overlayfs: failed to set uuid (363/file0, err=-13); falling back to uuid=null. [ 857.972893][T24954] input: syz1 as /devices/virtual/input/input111 [ 858.113300][ T29] audit: type=1400 audit(2000000253.035:141): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 858.269700][T24976] netlink: 7986 bytes leftover after parsing attributes in process `syz.6.19215'. [ 858.986439][T25018] netlink: 'syz.4.19230': attribute type 10 has an invalid length. [ 858.998295][T25018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19230'. [ 859.358207][T25043] loop7: detected capacity change from 0 to 7 [ 859.510438][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/90.tmp-b7:7' failed: Read-only file system [ 859.539052][ C1] blk_print_req_error: 10 callbacks suppressed [ 859.539077][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 859.555981][ C1] buffer_io_error: 28 callbacks suppressed [ 859.556003][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 860.559987][T25130] C: renamed from team_slave_0 (while UP) [ 860.569204][T25130] netlink: 'syz.3.19275': attribute type 1 has an invalid length. [ 860.581385][T25130] netlink: 116 bytes leftover after parsing attributes in process `syz.3.19275'. [ 862.082740][T25152] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 863.035530][ T4940] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 863.195391][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 863.202600][ T4940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.212995][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.224296][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.236562][ T4940] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.246382][ T4940] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.261116][ T4940] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.270550][ T4940] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.278754][ T4940] usb 4-1: Manufacturer: syz [ 863.286867][ T4940] usb 4-1: config 0 descriptor?? [ 863.568353][ T4940] rc_core: IR keymap rc-hauppauge not found [ 863.577551][ T4940] Registered IR keymap rc-empty [ 863.582696][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.605798][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.636930][ T4940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 863.664761][ T4940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input112 [ 863.682303][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.706069][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.726284][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.745464][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.765437][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.786481][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.825638][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.848781][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.875482][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.896918][ T4940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.922774][ T4940] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 863.932127][ T4940] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.028954][ T5927] usb 4-1: USB disconnect, device number 125 [ 864.690798][T25283] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 865.159471][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/91.tmp-b7:5' failed: Read-only file system [ 865.189551][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/91.tmp-b7:5' failed: Read-only file system [ 865.213120][ T5326] udevd[5326]: symlink '../../loop5' '/dev/disk/by-diskseq/91.tmp-b7:5' failed: Read-only file system [ 865.981047][ T29] audit: type=1326 audit(2000000260.905:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25341 comm="syz.3.19342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff922b9c799 code=0x0 [ 866.197064][T25352] binder: 25351:25352 ioctl 40046205 0 returned -22 [ 866.978685][T25365] [U] [ 866.982735][T25365] [U] [ 866.985528][T25365] [U] [ 866.988327][T25365] [U] [ 866.995597][T25365] [U] [ 866.998472][T25365] [U] [ 867.001176][T25365] [U] [ 867.003869][T25365] [U] [ 867.007975][T25365] [U] [ 867.010677][T25365] [U] [ 867.013346][T25365] [U] [ 867.016272][T25365] [U] [ 867.021830][T25365] [U] [ 867.024548][T25365] [U] [ 867.027246][T25365] [U] [ 867.029960][T25365] [U] [ 867.048896][T25365] [U] [ 867.051658][T25365] [U] [ 867.054360][T25365] [U] [ 867.057060][T25365] [U] [ 867.068484][T25365] [U] [ 867.071326][T25365] [U] [ 867.074037][T25365] [U] [ 867.076856][T25365] [U] [ 867.084098][T25365] [U] [ 867.086848][T25365] [U] [ 867.089567][T25365] [U] [ 867.092280][T25365] [U] [ 867.097216][T25365] [U] [ 867.099993][T25365] [U] [ 867.102721][T25365] [U] [ 867.105443][T25365] [U] [ 867.109129][T25365] [U] [ 867.111864][T25365] [U] [ 867.114668][T25365] [U] [ 867.117554][T25365] [U] [ 867.121274][T25365] [U] [ 867.123992][T25365] [U] [ 867.126696][T25365] [U] [ 867.129474][T25365] [U] [ 867.133498][T25365] [U] [ 867.136221][T25365] [U] [ 867.138915][T25365] [U] [ 867.141603][T25365] [U] [ 867.184592][T25365] [U] [ 867.187350][T25365] [U] [ 867.190118][T25365] [U] [ 867.192842][T25365] [U] [ 867.222069][T25365] [U] [ 867.224820][T25365] [U] [ 867.227523][T25365] [U] [ 867.230221][T25365] [U] [ 867.240268][T25365] [U] [ 867.243090][T25365] [U] [ 867.245968][T25365] [U] [ 867.248749][T25365] [U] [ 867.273567][T25365] [U] [ 867.276327][T25365] [U] [ 867.279031][T25365] [U] [ 867.281904][T25365] [U] [ 867.294186][T25365] [U] [ 867.296934][T25365] [U] [ 867.299641][T25365] [U] [ 867.302424][T25365] [U] [ 867.321957][T25365] [U] [ 867.324699][T25365] [U] [ 867.327416][T25365] [U] [ 867.330125][T25365] [U] [ 867.333489][T25365] [U] [ 867.336210][T25365] [U] [ 867.338913][T25365] [U] [ 867.341613][T25365] [U] [ 867.351347][T25365] [U] [ 867.354077][T25365] [U] [ 867.356782][T25365] [U] [ 867.359485][T25365] [U] [ 867.362809][T25365] [U] [ 867.365523][T25365] [U] [ 867.368217][T25365] [U] [ 867.370915][T25365] [U] [ 867.373917][T25365] [U] [ 867.376655][T25365] [U] [ 867.379369][T25365] [U] [ 867.382074][T25365] [U] [ 867.386340][T25365] [U] [ 867.389064][T25365] [U] [ 867.391762][T25365] [U] [ 867.394544][T25365] [U] [ 867.398412][T25365] [U] [ 867.401151][T25365] [U] [ 867.404033][T25365] [U] [ 867.406735][T25365] [U] [ 867.410733][T25365] [U] [ 867.413455][T25365] [U] [ 867.416155][T25365] [U] [ 867.418889][T25365] [U] [ 867.423255][T25365] [U] [ 867.425988][T25365] [U] [ 867.428671][T25365] [U] [ 867.431350][T25365] [U] [ 867.438192][T25365] [U] [ 867.440911][T25365] [U] [ 867.443781][T25365] [U] [ 867.446546][T25365] [U] [ 867.450726][T25365] [U] [ 867.453447][T25365] [U] [ 867.456232][T25365] [U] [ 867.458913][T25365] [U] [ 867.463017][T25365] [U] [ 867.465728][T25365] [U] [ 867.468423][T25365] [U] [ 867.471113][T25365] [U] [ 867.474327][T25365] [U] [ 867.477044][T25365] [U] [ 867.479735][T25365] [U] [ 867.482429][T25365] [U] [ 867.503039][T25365] [U] [ 867.505872][T25365] [U] [ 867.508763][T25365] [U] [ 867.511456][T25365] [U] [ 867.515455][T25365] [U] [ 867.518176][T25365] [U] [ 867.520866][T25365] [U] [ 867.523565][T25365] [U] [ 867.527798][T25365] [U] [ 867.530507][T25365] [U] [ 867.533187][T25365] [U] [ 867.550161][T25364] [U] [ 867.871623][T25410] sctp: [Deprecated]: syz.0.19368 (pid 25410) Use of int in max_burst socket option. [ 867.871623][T25410] Use struct sctp_assoc_value instead [ 867.943064][T25417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19371'. [ 868.536566][T25446] kvm_intel: kvm [25445]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 868.814922][ T4224] Bluetooth: hci3: unexpected subevent 0x0a length: 232 > 30 [ 868.823379][ T4224] Bluetooth: hci3: ACL packet too small [ 869.653720][T25525] loop6: detected capacity change from 0 to 7 [ 869.691608][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.701394][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.726253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.731820][T25531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19413'. [ 869.735930][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.739655][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.763670][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.793519][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.803317][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.811710][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.821505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.832095][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.841810][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.853851][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.863654][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.873537][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.883243][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.895462][ T5326] ldm_validate_partition_table(): Disk read failed. [ 869.910709][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.920452][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.929702][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.939416][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.952636][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.958471][ T5326] Dev loop6: unable to read RDB block 0 [ 869.969619][ T5326] loop6: unable to read partition table [ 869.980396][ T5326] loop6: partition table beyond EOD, truncated [ 870.011824][T25525] ldm_validate_partition_table(): Disk read failed. [ 870.026046][T25525] Dev loop6: unable to read RDB block 0 [ 870.033077][T25525] loop6: unable to read partition table [ 870.043310][T25525] loop6: partition table beyond EOD, truncated [ 870.050421][T25525] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 870.060998][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 870.138072][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 870.165762][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 870.200427][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 870.962275][T25467] block nbd2: Receive control failed (result -32) [ 871.522359][T25586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19432'. [ 871.565020][T25588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19433'. [ 871.606274][T25590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19434'. [ 871.705915][T25596] netlink: 'syz.3.19437': attribute type 2 has an invalid length. [ 871.713957][T25596] netlink: 'syz.3.19437': attribute type 4 has an invalid length. [ 871.991791][ T29] audit: type=1326 audit(2000000266.915:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.4.19429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bb99c799 code=0x7fc00000 [ 872.045926][T25613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19443'. [ 872.055253][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19443'. [ 872.195304][ T5923] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 872.365430][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 872.372350][ T5923] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 872.381115][ T5923] usb 4-1: config 0 has no interface number 0 [ 872.387740][ T5923] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.403511][ T5923] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.415636][ T5923] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 872.425381][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.435492][ T5923] usb 4-1: config 0 descriptor?? [ 872.853579][ T5923] hid (null): bogus close delimiter [ 872.859117][ T5923] hid (null): global environment stack underflow [ 872.865777][ T5923] hid (null): unknown global tag 0xc [ 872.871143][ T5923] hid (null): bogus close delimiter [ 872.876608][ T5923] hid (null): report_id 2102703267 is invalid [ 872.883172][ T5923] hid (null): usage index exceeded [ 873.052837][ T4940] usb 4-1: USB disconnect, device number 126 [ 873.235684][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.307314][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.340146][T25669] overlay: ./file0 is not a directory [ 873.394280][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.482482][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.486830][T25681] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 873.596345][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.682386][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.708778][T25697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19467'. [ 873.718588][T25697] netlink: 120 bytes leftover after parsing attributes in process `syz.6.19467'. [ 873.728567][T25697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19467'. [ 873.799082][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.857269][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 873.977277][T25712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19472'. [ 874.018099][T25715] loop8: detected capacity change from 0 to 1 [ 874.039205][T25715] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 874.052177][T25715] loop8: p1 start 540042604 is beyond EOD, truncated [ 874.059822][T25715] loop8: p2 start 1640453368 is beyond EOD, truncated [ 874.068516][T25715] loop8: p3 start 1935506780 is beyond EOD, truncated [ 874.077831][T25715] loop8: p4 start 3893138939 is beyond EOD, truncated [ 874.084876][T25715] loop8: p5 start 287485722 is beyond EOD, truncated [ 874.090101][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19475'. [ 874.091973][T25715] loop8: p6 start 3376667143 is beyond EOD, truncated [ 874.113650][T25715] loop8: p7 start 2111012381 is beyond EOD, truncated [ 874.115528][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19475'. [ 874.120911][T25715] loop8: p8 start 3147612238 is beyond EOD, truncated [ 874.137286][T25715] loop8: p9 start 2252824347 is beyond EOD, truncated [ 874.144112][T25715] loop8: p10 start 489633540 is beyond EOD, truncated [ 874.152022][T25715] loop8: p11 start 1985099615 is beyond EOD, truncated [ 874.159109][T25715] loop8: p12 start 2132828001 is beyond EOD, truncated [ 874.531925][T25746] netlink: 'syz.6.19482': attribute type 9 has an invalid length. [ 874.541005][T25746] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.19482'. [ 874.903883][T25770] tap0: tun_chr_ioctl cmd 1074025672 [ 874.910302][T25770] tap0: ignored: set checksum enabled [ 875.171670][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19496'. [ 875.232058][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 875.525303][ T5927] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 875.583589][ T5923] kernel read not supported for file /3344/net/arp (pid: 5923 comm: kworker/1:5) [ 875.675264][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 875.692272][ T5927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 875.711472][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.735214][ T5927] usb 4-1: Product: syz [ 875.740030][ T5927] usb 4-1: Manufacturer: syz [ 875.744726][ T5927] usb 4-1: SerialNumber: syz [ 875.754564][ T5927] usb 4-1: config 0 descriptor?? [ 875.821426][T25826] netlink: 'syz.4.19504': attribute type 83 has an invalid length. [ 875.967226][ T5927] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 875.982170][ T5927] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 876.002337][ T5927] usb 4-1: USB disconnect, device number 127 [ 876.140992][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.265432][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.338002][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.361510][T25858] block nbd6: not configured, cannot reconfigure [ 876.407958][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.459879][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.529252][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.602507][T25869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.701654][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.774360][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 876.855584][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 877.663947][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19542'. [ 877.751389][T25951] input: syz0 as /devices/virtual/input/input113 [ 878.073438][T25980] nbd: couldn't find a device at index 0 [ 878.126679][ T4940] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 878.296974][ T4940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.299505][T25994] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19557'. [ 878.307759][ T4940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.328232][ T4940] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 878.346945][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.359579][ T4940] usb 4-1: Product: syz [ 878.363786][ T4940] usb 4-1: Manufacturer: syz [ 878.368670][ T4940] usb 4-1: SerialNumber: syz [ 878.407438][ T4940] usb 4-1: config 0 descriptor?? [ 878.429594][ T4940] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 878.461207][ T4940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 878.474516][ T4940] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 878.488789][ T4940] usb 4-1: media controller created [ 878.507990][ T4940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.570630][ T4940] DVB: Unable to find symbol tda10046_attach() [ 878.579885][ T4940] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 878.591653][ T4940] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 879.118459][T26035] __nla_validate_parse: 1 callbacks suppressed [ 879.118473][T26035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19569'. [ 879.240907][ T4940] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 879.280443][ T4940] usb 4-1: USB disconnect, device number 2 [ 880.507119][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 880.646430][T26120] loop8: detected capacity change from 0 to 524287999 [ 880.667078][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 880.688860][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 880.717252][ T5326] buffer_io_error: 26 callbacks suppressed [ 880.717272][ T5326] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 880.733075][ T10] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 880.738962][ T4220] Bluetooth: hci2: command 0x1003 tx timeout [ 880.745738][T25467] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 880.778274][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/97.tmp-b7:8' failed: Read-only file system [ 880.799193][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.831215][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/97.tmp-b7:8' failed: Read-only file system [ 880.831846][ T10] usb 4-1: config 0 descriptor?? [ 880.882608][ T5326] udevd[5326]: symlink '../../loop8' '/dev/disk/by-diskseq/97.tmp-b7:8' failed: Read-only file system [ 881.043136][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.083186][T26141] block nbd4: NBD_DISCONNECT [ 881.152750][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.270961][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.298255][ T10] nintendo 0003:057E:2019.0049: unknown main item tag 0x0 [ 881.307538][ T10] nintendo 0003:057E:2019.0049: unknown main item tag 0x0 [ 881.320155][ T10] nintendo 0003:057E:2019.0049: unknown main item tag 0x0 [ 881.336268][ T10] nintendo 0003:057E:2019.0049: unknown main item tag 0x0 [ 881.347666][ T10] nintendo 0003:057E:2019.0049: unknown main item tag 0x0 [ 881.369796][ T10] nintendo 0003:057E:2019.0049: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 881.411936][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.476853][ T10] nintendo 0003:057E:2019.0049: Failed to get joycon info; ret=-38 [ 881.502951][T26160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.526412][ T10] nintendo 0003:057E:2019.0049: Failed to retrieve controller info; ret=-38 [ 881.556756][ T10] nintendo 0003:057E:2019.0049: Failed to initialize controller; ret=-38 [ 881.558866][ T8207] udevd[8207]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.593668][ T10] nintendo 0003:057E:2019.0049: probe - fail = -38 [ 881.630060][ T10] nintendo 0003:057E:2019.0049: probe with driver nintendo failed with error -38 [ 881.649809][ T10] usb 4-1: USB disconnect, device number 3 [ 881.690221][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.794630][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 881.975700][T26196] cgroup: fork rejected by pids controller in /syz6 [ 882.035517][T26201] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.19617'. [ 882.869067][ T1121] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.064599][ T4220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 883.081012][ T4220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 883.093851][ T4220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 883.112913][ T4220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 883.123391][ T4220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.212687][ T1121] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.263380][T26263] lo speed is unknown, defaulting to 1000 [ 883.351017][ T1121] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.448111][ T1121] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.505347][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 883.580466][T26263] chnl_net:caif_netlink_parms(): no params data found [ 883.667356][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.684520][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 883.701548][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.710768][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.719595][ T10] usb 4-1: Product: syz [ 883.724211][ T10] usb 4-1: Manufacturer: syz [ 883.729477][ T10] usb 4-1: SerialNumber: syz [ 883.842356][T26263] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.850034][T26263] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.866740][T26263] bridge_slave_0: entered allmulticast mode [ 883.875847][T26263] bridge_slave_0: entered promiscuous mode [ 883.891413][T26263] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.899607][T26263] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.907386][T26263] bridge_slave_1: entered allmulticast mode [ 883.916279][T26263] bridge_slave_1: entered promiscuous mode [ 883.956665][T26280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.974704][T26280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.022330][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 884.066169][ T10] usb 4-1: USB disconnect, device number 4 [ 884.073068][T26263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.108817][T26263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.249816][T26263] team0: Port device team_slave_0 added [ 884.257395][ T1121] bridge_slave_1: left allmulticast mode [ 884.264218][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.274101][ T1121] bridge_slave_0: left allmulticast mode [ 884.280080][ T1121] bridge_slave_0: left promiscuous mode [ 884.287023][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.583475][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.605481][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 884.619480][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.646775][ T1121] bond0 (unregistering): Released all slaves [ 884.664150][T26263] team0: Port device team_slave_1 added [ 884.704733][T26263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.712697][T26263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.766760][T26263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.787041][T26263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.794416][T26263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.822015][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 884.828060][T26263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.867558][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 884.876087][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 884.904558][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.925238][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 884.945486][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 884.957373][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.970184][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 884.980224][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.071016][T26263] hsr_slave_0: entered promiscuous mode [ 885.078564][T26263] hsr_slave_1: entered promiscuous mode [ 885.087724][T26263] debugfs: 'hsr0' already exists in 'hsr' [ 885.093671][T26263] Cannot create hsr debugfs directory [ 885.205664][ T10] usb 4-1: usb_control_msg returned -71 [ 885.223877][T25467] Bluetooth: hci2: command tx timeout [ 885.235983][ T10] usbtmc 4-1:16.0: can't read capabilities [ 885.249364][ T10] usb 4-1: USB disconnect, device number 5 [ 885.513159][ T1121] hsr_slave_0: left promiscuous mode [ 885.520576][ T1121] hsr_slave_1: left promiscuous mode [ 885.532186][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.541807][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.550228][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.558140][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.578341][ T1121] veth1_macvtap: left promiscuous mode [ 885.588497][ T1121] veth0_macvtap: left promiscuous mode [ 885.594141][ T1121] veth1_vlan: left promiscuous mode [ 885.599915][ T1121] veth0_vlan: left promiscuous mode [ 886.090948][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 886.117912][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 886.282515][T26617] block nbd3: NBD_DISCONNECT [ 886.573693][T26632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19655'. [ 886.607329][T26632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19655'. [ 887.213046][T26663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19662'. [ 887.300828][T25467] Bluetooth: hci2: command tx timeout [ 887.346688][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 887.538062][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.550422][ T5923] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 887.571552][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.597389][ T5923] usb 4-1: config 0 descriptor?? [ 887.628769][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 888.032963][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 888.217460][T26263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 888.258452][T26263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 888.279293][ T5923] pwc: recv_control_msg error -71 req 02 val 2c00 [ 888.297469][T26263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 888.297753][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 888.348821][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 888.365303][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 888.369382][T26263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 888.388240][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 888.405421][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 888.414353][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 888.441067][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 888.457765][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 888.476856][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 888.486911][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 888.498232][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 888.517341][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 888.539096][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 888.569294][ T5923] pwc: Registered as video103. [ 888.594780][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input114 [ 888.654937][ T5923] usb 4-1: USB disconnect, device number 6 [ 888.868372][T26263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.968646][T26263] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.030471][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.037747][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.084878][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.092146][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.376126][T25467] Bluetooth: hci2: command tx timeout [ 889.834529][T26263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.032843][T26822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.301887][T26263] veth0_vlan: entered promiscuous mode [ 890.321500][T26263] veth1_vlan: entered promiscuous mode [ 890.393049][T26263] veth0_macvtap: entered promiscuous mode [ 890.408045][T26263] veth1_macvtap: entered promiscuous mode [ 890.457177][T26263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.480767][T26263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.506354][ T1121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.517276][ T1121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.534375][ T1121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.554225][ T1121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.580810][T26849] hugetlbfs: syz.4.19701 (26849): Using mlock ulimits for SHM_HUGETLB is obsolete [ 890.832529][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.848009][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.933224][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.941891][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.090266][T26870] netlink: 'syz.4.19706': attribute type 10 has an invalid length. [ 891.106996][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 891.166848][T26870] team0: Port device netdevsim0 added [ 891.231295][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 891.327877][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 891.436774][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 891.461021][T25467] Bluetooth: hci2: command tx timeout [ 891.469072][T26897] netlink: 'syz.6.19713': attribute type 25 has an invalid length. [ 891.491913][T26897] netlink: 92 bytes leftover after parsing attributes in process `syz.6.19713'. [ 891.507203][T26896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.629111][ T8207] udevd[8207]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 891.895435][ T4946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 892.066976][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.078785][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.089393][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 892.103448][ T4946] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 892.112722][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.123401][ T4946] usb 4-1: config 0 descriptor?? [ 892.522400][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 892.551789][ T4946] steelseries 0003:1038:1410.004A: not enough fields in HID_OUTPUT_REPORT 0 [ 892.579488][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 892.741241][ T4946] usb 4-1: USB disconnect, device number 7 [ 892.967096][T26962] netlink: 10 bytes leftover after parsing attributes in process `syz.0.19727'. [ 893.433765][T26977] netlink: 'syz.3.19732': attribute type 10 has an invalid length. [ 894.636564][ T5923] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 894.787022][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 894.798409][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.808359][ T5923] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 894.818849][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.829014][ T5923] usb 4-1: config 0 descriptor?? [ 895.245725][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.253344][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.261160][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.268479][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.276136][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.283358][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.290621][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.299017][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.306229][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.313422][ T5923] petalynx 0003:18B1:0037.004B: unknown main item tag 0x0 [ 895.321287][ T5923] petalynx 0003:18B1:0037.004B: unknown global tag 0xd [ 895.328418][ T5923] petalynx 0003:18B1:0037.004B: item 0 4 1 13 parsing failed [ 895.336682][ T5923] petalynx 0003:18B1:0037.004B: parse failed [ 895.342786][ T5923] petalynx 0003:18B1:0037.004B: probe with driver petalynx failed with error -22 [ 895.457348][ T5923] usb 4-1: USB disconnect, device number 8 [ 895.635391][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 895.714483][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 895.750665][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 895.781892][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19739'. [ 895.797216][T27020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19739'. [ 895.962618][T27036] netlink: 'syz.6.19742': attribute type 10 has an invalid length. [ 896.029394][T27036] team0: Port device netdevsim0 added [ 896.186518][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 896.309473][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 896.387407][T27064] tipc: Enabling of bearer rejected, already enabled [ 896.560209][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 896.754624][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 896.851993][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 896.965994][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 897.029687][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 897.112731][T27113] can0: slcan on ptm0. [ 897.145013][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 897.247282][T27113] can0 (unregistered): slcan off ptm0. [ 897.250849][T27128] netlink: 180 bytes leftover after parsing attributes in process `syz.4.19772'. [ 897.404800][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 897.720162][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 898.172830][T27173] cgroup: fork rejected by pids controller in /syz3 [ 898.603339][T27204] netlink: 'syz.0.19790': attribute type 83 has an invalid length. [ 899.275464][T27240] trusted_key: encrypted_key: keyword 'uew' not recognized [ 900.887752][T27390] netlink: 'syz.4.19832': attribute type 2 has an invalid length. [ 900.898375][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19832'. [ 901.050824][T27411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19834'. [ 901.648926][T27478] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19843'. [ 901.908853][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19852'. [ 902.489902][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 902.696828][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 902.802042][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 902.891765][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 903.040011][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 903.140524][T27587] tmpfs: Invalid gid '0x00000000ffffffff' [ 903.725322][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 903.885386][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 903.892807][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.905638][ T5927] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 903.914763][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.923783][ T5927] usb 4-1: Product: syz [ 903.928214][ T5927] usb 4-1: Manufacturer: syz [ 903.932859][ T5927] usb 4-1: SerialNumber: syz [ 903.941717][ T5927] usb 4-1: config 0 descriptor?? [ 903.954143][ T5927] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 904.761599][ T5927] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 904.772070][ T5927] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 904.790291][ T5927] usb 4-1: USB disconnect, device number 9 [ 906.136441][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 906.178236][ T29] audit: type=1800 audit(2000000301.105:144): pid=27629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19881" name="file0" dev="tmpfs" ino=27334 res=0 errno=0 [ 906.294910][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 906.427128][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 906.478344][T27697] veth0_vlan: entered allmulticast mode [ 906.617695][T27705] veth0_vlan: left promiscuous mode [ 906.626800][T27705] veth0_vlan: entered promiscuous mode [ 906.724064][T27813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.799367][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 906.880646][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 907.358911][T27870] netlink: 'syz.3.19924': attribute type 2 has an invalid length. [ 907.370044][T27870] netlink: 'syz.3.19924': attribute type 11 has an invalid length. [ 907.381566][T27870] netlink: 112 bytes leftover after parsing attributes in process `syz.3.19924'. [ 907.433711][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19926'. [ 907.837153][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 907.938741][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 908.840704][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 908.882038][T27938] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 908.888156][T27938] syzkaller0: owner set to 774 [ 911.045072][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19988'. [ 911.236843][T28262] netlink: 'syz.3.19994': attribute type 83 has an invalid length. [ 911.471530][T28278] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.20001'. [ 911.896551][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 912.297012][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 912.465805][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 912.475338][ T10] usb 4-1: config 0 has no interfaces? [ 912.487567][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 912.500427][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.509186][ T10] usb 4-1: Product: syz [ 912.513822][ T10] usb 4-1: Manufacturer: syz [ 912.518936][ T10] usb 4-1: SerialNumber: syz [ 912.526992][ T10] usb 4-1: config 0 descriptor?? [ 912.744772][ T808] usb 4-1: USB disconnect, device number 10 [ 912.851441][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 912.878239][T25467] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 912.889868][T25467] CPU: 0 UID: 0 PID: 25467 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.889901][T25467] Tainted: [L]=SOFTLOCKUP [ 912.889908][T25467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.889922][T25467] Workqueue: hci2 hci_rx_work [ 912.889956][T25467] Call Trace: [ 912.889965][T25467] [ 912.889975][T25467] dump_stack_lvl+0xe8/0x150 [ 912.890003][T25467] sysfs_create_dir_ns+0x271/0x2a0 [ 912.890031][T25467] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 912.890056][T25467] ? do_raw_spin_unlock+0xf5/0x210 [ 912.890080][T25467] kobject_add_internal+0x62b/0xd00 [ 912.890108][T25467] kobject_add+0x163/0x240 [ 912.890135][T25467] ? __pfx_kobject_add+0x10/0x10 [ 912.890156][T25467] ? _raw_spin_unlock+0x28/0x50 [ 912.890185][T25467] ? get_device_parent+0x366/0x3a0 [ 912.890212][T25467] device_add+0x408/0xb70 [ 912.890238][T25467] hci_conn_add_sysfs+0xd5/0x210 [ 912.890266][T25467] le_conn_complete_evt+0xf1d/0x1430 [ 912.890297][T25467] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 912.890316][T25467] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 912.890337][T25467] ? __pfx___mutex_lock+0x10/0x10 [ 912.890355][T25467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 912.890379][T25467] ? skb_pull_data+0xfb/0x200 [ 912.890406][T25467] hci_le_conn_complete_evt+0x187/0x470 [ 912.890436][T25467] hci_event_packet+0x7af/0x12c0 [ 912.890469][T25467] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 912.890491][T25467] ? __pfx_hci_event_packet+0x10/0x10 [ 912.890529][T25467] ? kcov_remote_start+0x49a/0x7a0 [ 912.890552][T25467] ? hci_send_to_monitor+0xe2/0x590 [ 912.890579][T25467] hci_rx_work+0x3ee/0x1040 [ 912.890613][T25467] ? process_one_work+0x8bb/0x1780 [ 912.890637][T25467] process_one_work+0x9ab/0x1780 [ 912.890681][T25467] ? __pfx_process_one_work+0x10/0x10 [ 912.890702][T25467] ? do_raw_spin_lock+0x12b/0x2f0 [ 912.890737][T25467] worker_thread+0xba8/0x11e0 [ 912.890762][T25467] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 912.890787][T25467] ? __kthread_parkme+0x7a/0x1f0 [ 912.890805][T25467] ? __kthread_parkme+0x19c/0x1f0 [ 912.890827][T25467] kthread+0x388/0x470 [ 912.890847][T25467] ? __pfx_worker_thread+0x10/0x10 [ 912.890861][T25467] ? __pfx_kthread+0x10/0x10 [ 912.890882][T25467] ret_from_fork+0x51e/0xb90 [ 912.890906][T25467] ? __pfx_ret_from_fork+0x10/0x10 [ 912.890923][T25467] ? __switch_to+0xc7d/0x1450 [ 912.890945][T25467] ? __pfx_kthread+0x10/0x10 [ 912.890964][T25467] ret_from_fork_asm+0x1a/0x30 [ 912.891003][T25467] [ 912.891701][T25467] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 913.161155][T25467] Bluetooth: hci2: failed to register connection device [ 913.298183][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 913.322853][ T13] Bluetooth: hci3: Frame reassembly failed (-90) [ 913.776404][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 913.896695][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 914.004096][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 914.186474][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 914.396168][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 914.423252][T28430] sctp: [Deprecated]: syz.6.20055 (pid 28430) Use of int in max_burst socket option deprecated. [ 914.423252][T28430] Use struct sctp_assoc_value instead [ 914.880071][T28452] overlay: filesystem on ./file1 is read-only [ 915.303060][T25467] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 915.444061][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 915.656064][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 915.828896][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 916.078646][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 916.196252][T28619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20078'. [ 917.138074][T28687] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.20103'. [ 917.164344][ T3484] tipc: Subscription rejected, illegal request [ 917.265499][T28696] Bluetooth: hci3: Frame reassembly failed (-84) [ 917.313384][ T3484] Bluetooth: hci3: Frame reassembly failed (-84) [ 918.284367][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.309927][T28735] netlink: 'syz.6.20116': attribute type 2 has an invalid length. [ 918.384113][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.477476][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.550495][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.696792][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.748707][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.807091][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.883800][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 918.952362][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 919.091932][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 919.296801][ T4220] Bluetooth: hci3: command 0x1003 tx timeout [ 919.312723][T25467] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 919.723092][ T4940] IPVS: starting estimator thread 0... [ 919.825344][T28920] IPVS: using max 32 ests per chain, 76800 per kthread [ 920.053071][ T5923] hid_parser_main: 45 callbacks suppressed [ 920.053091][ T5923] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 920.074773][ T5923] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 920.102327][ T5923] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 920.194721][T28950] fido_id[28950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 920.578034][T28983] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20162'. [ 922.513285][ T1110] Bluetooth: hci3: Frame reassembly failed (-84) [ 923.404032][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20226'. [ 923.555477][ T4940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 923.591259][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 923.705251][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 923.711565][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 923.729048][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.742150][ T4940] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 923.756215][ T4940] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 923.766360][ T4940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.778431][ T4940] usb 4-1: config 0 descriptor?? [ 924.192353][ T4940] nintendo 0003:057E:2019.004D: unknown main item tag 0x0 [ 924.200201][ T4940] nintendo 0003:057E:2019.004D: unknown main item tag 0x0 [ 924.207968][ T4940] nintendo 0003:057E:2019.004D: unknown main item tag 0x0 [ 924.215998][ T4940] nintendo 0003:057E:2019.004D: unknown main item tag 0x0 [ 924.223335][ T4940] nintendo 0003:057E:2019.004D: unknown main item tag 0x0 [ 924.238584][ T4940] nintendo 0003:057E:2019.004D: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 924.305568][ T4940] nintendo 0003:057E:2019.004D: Failed to get joycon info; ret=-38 [ 924.313865][ T4940] nintendo 0003:057E:2019.004D: Failed to retrieve controller info; ret=-38 [ 924.323179][ T4940] nintendo 0003:057E:2019.004D: Failed to initialize controller; ret=-38 [ 924.340722][ T4940] nintendo 0003:057E:2019.004D: probe - fail = -38 [ 924.347977][ T4940] nintendo 0003:057E:2019.004D: probe with driver nintendo failed with error -38 [ 924.390245][ T5927] usb 4-1: USB disconnect, device number 11 [ 924.575494][ T4220] Bluetooth: hci3: command 0xfc11 tx timeout [ 924.581799][T25467] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 924.681023][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 925.100957][T29311] netlink: 'syz.3.20239': attribute type 27 has an invalid length. [ 925.109329][T29311] netlink: 'syz.3.20239': attribute type 4 has an invalid length. [ 925.117528][T29311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20239'. [ 925.251076][T29319] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20243'. [ 926.011469][T29459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20258'. [ 926.183574][T29468] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 926.191612][T29468] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 926.564007][T29589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.743073][T29701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20274'. [ 927.025336][ T4940] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 927.175655][ T4940] usb 4-1: Using ep0 maxpacket: 32 [ 927.183737][ T4940] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 927.199683][ T4940] usb 4-1: config 0 has no interface number 0 [ 927.208606][ T4940] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 927.225400][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.233560][ T4940] usb 4-1: Product: syz [ 927.238416][ T4940] usb 4-1: Manufacturer: syz [ 927.243032][ T4940] usb 4-1: SerialNumber: syz [ 927.252112][ T4940] usb 4-1: config 0 descriptor?? [ 927.267667][ T4940] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 927.468050][ T4940] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 927.481575][ T4940] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 927.688759][T29749] netlink: 26332 bytes leftover after parsing attributes in process `syz.0.20288'. [ 927.767945][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 927.799173][T29755] program syz.6.20289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.885705][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 927.886906][ T5927] usb 4-1: USB disconnect, device number 12 [ 927.932317][ T8207] udevd[8207]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 927.973573][T29764] kvm: kvm [29762]: vcpu257, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xcd [ 928.025248][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 928.099072][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 928.119995][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 928.138453][ T5927] quatech2 4-1:0.51: device disconnected [ 928.203987][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 928.249555][T29796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.343121][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 928.421200][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 928.651834][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 928.695749][T29833] macvlan1: entered promiscuous mode [ 928.712115][T29833] macvlan1: entered allmulticast mode [ 928.720170][T29833] veth1_vlan: entered allmulticast mode [ 928.946951][ T29] audit: type=1326 audit(2000000323.875:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29844 comm="syz.3.20314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7fc00000 [ 931.380064][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.709462][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 931.797431][T30291] loop4: detected capacity change from 0 to 65536 [ 931.863187][T30291] loop4: detected capacity change from 65536 to 523370496 [ 931.935025][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 931.972540][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 931.997078][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 932.020451][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 932.111186][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 932.183807][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 932.234745][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 932.318757][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 932.919622][T30366] veth1_virt_wifi: entered allmulticast mode [ 932.926913][T30366] veth1_virt_wifi: left allmulticast mode [ 933.306375][T25467] Bluetooth: hci2: link tx timeout [ 933.316714][T25467] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 933.696403][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 933.743294][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 933.894822][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 933.973115][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.036896][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.087634][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.130503][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.190974][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.263174][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.355094][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 934.655897][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20382'. [ 935.385355][ T4220] Bluetooth: hci2: command 0x0406 tx timeout [ 935.902153][T30554] veth1_macvtap: left promiscuous mode [ 935.908923][T30554] macsec0: entered promiscuous mode [ 935.944218][T30554] veth1_macvtap: entered promiscuous mode [ 935.965772][T30554] macsec0: left promiscuous mode [ 938.053528][T30678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.153734][T30690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20453'. [ 938.400631][ T29] audit: type=1800 audit(2000000333.325:146): pid=30710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20461" name="file1" dev="tmpfs" ino=28281 res=0 errno=0 [ 938.735022][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 938.807262][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 938.851597][ T29] audit: type=1326 audit(2000000333.775:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30730 comm="syz.3.20467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff922b9c799 code=0x7fc00000 [ 938.967515][T30849] serio: Serial port ttyS3 [ 939.006376][ T29] audit: type=1326 audit(2000000333.935:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.0.20475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd388f9c799 code=0x0 [ 939.024450][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 939.355330][ T4946] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 939.505373][ T4946] usb 4-1: Using ep0 maxpacket: 32 [ 939.512901][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.524749][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.563722][ T4946] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 939.573188][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.584074][ T4946] usb 4-1: config 0 descriptor?? [ 939.868431][T30967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20478'. [ 939.898316][ T29] audit: type=1326 audit(2000000334.825:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.6.20476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48859c799 code=0x7fc00000 [ 939.978311][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 939.983007][T30975] tipc: Started in network mode [ 940.000595][T30975] tipc: Node identity ac14140f, cluster identity 4711 [ 940.014752][ T4946] nintendo 0003:057E:200E.004E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 940.029392][T30975] tipc: New replicast peer: 255.255.255.255 [ 940.037589][T30975] tipc: Enabled bearer , priority 10 [ 940.057582][T30975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20480'. [ 940.068617][T30975] tipc: Disabling bearer [ 940.085549][ T4946] nintendo 0003:057E:200E.004E: Failed charging grip handshake [ 940.109693][ T4946] nintendo 0003:057E:200E.004E: Failed to initialize controller; ret=-110 [ 940.137217][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 940.168804][ T4946] nintendo 0003:057E:200E.004E: probe - fail = -110 [ 940.177891][ T4946] nintendo 0003:057E:200E.004E: probe with driver nintendo failed with error -110 [ 940.207784][ T5927] usb 4-1: USB disconnect, device number 13 [ 940.272785][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 940.273114][T30995] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20482'. [ 940.333593][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 940.387653][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 940.484456][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 940.985334][ T4946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 941.137595][ T4946] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 941.150220][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.161299][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.171404][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 941.185997][ T4946] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 941.196511][ T4946] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 941.204736][ T4946] usb 4-1: Manufacturer: syz [ 941.213134][ T4946] usb 4-1: config 0 descriptor?? [ 941.571202][ T4170] udevd[4170]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 941.631294][ T4946] appleir 0003:05AC:8243.004F: unknown main item tag 0x0 [ 941.666999][ T4946] appleir 0003:05AC:8243.004F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 941.861216][ T5923] usb 4-1: USB disconnect, device number 14 [ 942.031029][T31050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.865594][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 943.918092][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 943.994567][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 944.665409][T31193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input116 [ 944.912134][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 944.977176][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.083217][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.173926][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.333493][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.394027][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.413770][T31334] binder: 31333:31334 ioctl 400c620e 0 returned -14 [ 945.477937][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 945.905836][T31557] kvm: kvm [31556]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xffffffffffffffff [ 946.465996][T31695] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.20571'. [ 948.150490][T31821] netlink: 'syz.6.20613': attribute type 4 has an invalid length. [ 948.608128][ T29] audit: type=1326 audit(2000000343.525:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31848 comm="syz.3.20622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff922b9c799 code=0x0 [ 948.927397][ T4170] udevd[4170]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 948.964350][T31876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20628'. [ 949.027449][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 949.070151][ T4170] udevd[4170]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 949.162591][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 949.223496][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 949.265668][ T4170] udevd[4170]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 949.326013][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 949.374233][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 949.392651][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 949.405834][ T8207] udevd[8207]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 949.611177][T31923] netlink: 160 bytes leftover after parsing attributes in process `syz.6.20642'. [ 949.809764][T31941] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.20648'. [ 952.445782][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 952.607790][ T5927] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 952.614267][T32387] program syz.4.20687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.628853][ T5927] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 952.641971][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.652337][ T5927] usb 4-1: Product: syz [ 952.665295][ T5927] usb 4-1: Manufacturer: syz [ 952.675425][ T5927] usb 4-1: SerialNumber: syz [ 952.687844][ T5927] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 952.709251][ T5923] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 952.940668][T32373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.978798][T32373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.027774][ T5927] usb 4-1: USB disconnect, device number 15 [ 953.776118][ T5923] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 953.785404][ T5923] ath9k_htc: Failed to initialize the device [ 953.797729][ T5927] usb 4-1: ath9k_htc: USB layer deinitialized [ 953.970593][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 954.016998][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 954.077144][T32498] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.20713'. [ 954.088893][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 954.101487][T32498] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 954.117746][ T5927] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 954.129079][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 954.179748][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 954.199141][T32506] tipc: Enabling of bearer rejected, already enabled [ 954.244777][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 954.274800][ T4170] udevd[4170]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 954.305269][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 954.314708][ T5927] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 954.335018][ T5927] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 954.351051][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.366449][ T5927] usb 4-1: Product: syz [ 954.375600][ T5927] usb 4-1: Manufacturer: syz [ 954.382832][ T5927] usb 4-1: SerialNumber: syz [ 954.414511][ T5927] mos7840 4-1:1.0: missing endpoints [ 954.484134][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 954.500589][ T8207] udevd[8207]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 954.612721][ T5923] usb 4-1: USB disconnect, device number 16 [ 954.633657][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 955.145063][T32574] input: syz1 as /devices/virtual/input/input118 [ 956.511458][ T302] tipc: New replicast peer: 255.255.255.255 [ 956.520047][ T302] tipc: Enabled bearer , priority 10 [ 956.935404][ T5923] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 957.087072][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.098228][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.108207][ T5923] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 957.117406][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.127724][ T5923] usb 4-1: config 0 descriptor?? [ 957.542250][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.549449][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.556619][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.563637][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.570775][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.577845][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.584904][ T5923] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 957.594250][ T5923] cp2112 0003:10C4:EA90.0050: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 957.740787][ T5923] cp2112 0003:10C4:EA90.0050: Part Number: 0x00 Device Version: 0x00 [ 957.942037][ T5923] cp2112 0003:10C4:EA90.0050: error requesting SMBus config [ 957.952876][ T5923] cp2112 0003:10C4:EA90.0050: probe with driver cp2112 failed with error -71 [ 957.967116][ T5923] usb 4-1: USB disconnect, device number 17 [ 958.680652][ T352] netlink: 'syz.0.20771': attribute type 58 has an invalid length. [ 958.974461][ T373] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.20778'. [ 959.043881][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 959.078258][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 959.139763][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 959.299453][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 959.304931][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 959.362517][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 959.441472][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 959.464438][ T4170] udevd[4170]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 959.532159][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 959.558939][ T4170] udevd[4170]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 959.961829][ T443] kvm: kvm [441]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x7 [ 960.087757][ T454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.621995][ T693] block nbd3: Unsupported socket: should be TCP or UNIX. [ 960.683115][ T697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20812'. [ 961.478365][ T741] netlink: 'syz.4.20824': attribute type 12 has an invalid length. [ 961.488698][ T741] netlink: 120 bytes leftover after parsing attributes in process `syz.4.20824'. [ 961.922997][ T772] kvm: kvm [771]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 963.317259][ T873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 963.323840][ T873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 963.365422][ T873] vhci_hcd vhci_hcd.0: Device attached [ 963.605368][ T4940] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 963.842650][ T914] can0: slcan on pty20. [ 963.869026][ T923] netlink: 'syz.6.20861': attribute type 27 has an invalid length. [ 963.876600][ T925] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.20860'. [ 963.882308][ T923] netlink: 'syz.6.20861': attribute type 1 has an invalid length. [ 964.056871][ T912] can0 (unregistered): slcan off pty20. [ 964.101742][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 964.208547][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 964.428129][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 964.508169][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 964.611021][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 964.725092][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 964.728501][ T1105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 964.742942][ T1105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 964.752936][ T1105] vhci_hcd vhci_hcd.0: Device attached [ 964.780913][ T1105] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 964.787606][ T1105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 964.795794][ T1105] vhci_hcd vhci_hcd.0: Device attached [ 964.806124][ T1105] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 964.812868][ T1105] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 964.824076][ T1105] vhci_hcd vhci_hcd.0: Device attached [ 964.844265][ T1105] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 964.851020][ T1105] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 964.860904][ T1105] vhci_hcd vhci_hcd.0: Device attached [ 964.880208][ T1109] vhci_hcd: connection closed [ 964.880288][ T1106] vhci_hcd: connection closed [ 964.885604][ T12] vhci_hcd vhci_hcd.3: stop threads [ 964.896448][ T1112] vhci_hcd: connection closed [ 964.902053][ T1115] vhci_hcd: connection closed [ 964.907961][ T12] vhci_hcd vhci_hcd.3: release socket [ 964.922823][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 964.930095][ T12] vhci_hcd vhci_hcd.3: stop threads [ 964.935695][ T12] vhci_hcd vhci_hcd.3: release socket [ 964.941450][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 964.948056][ T12] vhci_hcd vhci_hcd.3: stop threads [ 964.953575][ T12] vhci_hcd vhci_hcd.3: release socket [ 964.960112][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 964.967129][ T12] vhci_hcd vhci_hcd.3: stop threads [ 964.972484][ T12] vhci_hcd vhci_hcd.3: release socket [ 964.975297][ T4946] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 964.984401][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 965.364465][ T1131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.422381][ T29] audit: type=1326 audit(2000000616.345:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1136 comm="syz.0.20873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd388f9c799 code=0x0 [ 965.462847][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 965.607102][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 965.708240][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 965.870734][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 966.246344][ T874] vhci_hcd: connection reset by peer [ 966.259792][ T13] vhci_hcd vhci_hcd.4: stop threads [ 966.271053][ T13] vhci_hcd vhci_hcd.4: release socket [ 966.283969][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 966.309226][T25467] Bluetooth: hci2: link tx timeout [ 966.742582][ T1295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20891'. [ 967.159975][ T1326] netlink: 188 bytes leftover after parsing attributes in process `syz.0.20902'. [ 967.168201][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20901'. [ 967.593838][ T1363] kvm: kvm [1359]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xb [ 968.727159][ T4940] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 969.128353][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 969.165708][ T4170] udevd[4170]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 969.276720][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 969.316709][ T4170] udevd[4170]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 969.372940][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 969.465405][ T5326] udevd[5326]: symlink '../../loop4' '/dev/disk/by-diskseq/104.tmp-b7:4' failed: Read-only file system [ 969.559634][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 969.630572][ T1617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.681522][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 969.772457][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 969.859148][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 970.609811][ T1765] netlink: 'syz.0.20980': attribute type 12 has an invalid length. [ 970.618392][ T1765] netlink: 120 bytes leftover after parsing attributes in process `syz.0.20980'. [ 970.642316][ T1768] loop4: detected capacity change from 0 to 524287936 [ 970.646802][ T1769] netlink: 'syz.3.20982': attribute type 25 has an invalid length. [ 970.675585][ T1769] netlink: 'syz.3.20982': attribute type 1 has an invalid length. [ 970.695579][ T1769] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.762632][ T1772] Attempt to restore checkpoint with obsolete wellknown handles [ 970.990377][ T4220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 971.010534][ T4220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 971.022530][ T4220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 971.072038][ T4220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 971.081721][ T4220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 971.256742][ T1779] lo speed is unknown, defaulting to 1000 [ 971.889392][ T1982] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 971.966181][ T1779] chnl_net:caif_netlink_parms(): no params data found [ 972.201944][ T1779] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.209734][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.217439][ T1779] bridge_slave_0: entered allmulticast mode [ 972.225446][ T1779] bridge_slave_0: entered promiscuous mode [ 972.234295][ T1779] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.242637][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.250504][ T1779] bridge_slave_1: entered allmulticast mode [ 972.259400][ T1779] bridge_slave_1: entered promiscuous mode [ 972.327001][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21005'. [ 972.361640][ T1779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.383268][ T1779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.457984][ T1779] team0: Port device team_slave_0 added [ 972.475097][ T1779] team0: Port device team_slave_1 added [ 972.553749][ T1779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.570896][ T1779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.621954][ T1779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.654731][ T1779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.676746][ T1779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.719466][ T1779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.894532][ T1779] hsr_slave_0: entered promiscuous mode [ 972.920133][ T1779] hsr_slave_1: entered promiscuous mode [ 972.937036][ T1779] debugfs: 'hsr0' already exists in 'hsr' [ 972.945614][ T1779] Cannot create hsr debugfs directory [ 973.136055][T25467] Bluetooth: hci3: command tx timeout [ 973.440959][ T2234] bpf: Bad value for 'uid' [ 973.556808][ T2254] loop8: detected capacity change from 0 to 1 [ 973.564960][ T2254] Dev loop8: unable to read RDB block 1 [ 973.573789][ T2254] loop8: unable to read partition table [ 973.581483][ T2254] loop8: partition table beyond EOD, truncated [ 973.588566][ T2254] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 973.739540][ T1779] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 973.763134][ T1779] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 973.782869][ T1779] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.800333][ T1779] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.080910][ T1779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.139813][ T1779] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.165688][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.172908][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.192667][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.200028][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.302258][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 974.402144][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 974.517156][ T5326] udevd[5326]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 974.569808][ T1779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.745526][T29445] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 974.787162][ T1779] veth0_vlan: entered promiscuous mode [ 974.801603][ T1779] veth1_vlan: entered promiscuous mode [ 974.844692][ T1779] veth0_macvtap: entered promiscuous mode [ 974.859412][ T1779] veth1_macvtap: entered promiscuous mode [ 974.891914][ T1779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.905486][T29445] usb 4-1: Using ep0 maxpacket: 32 [ 974.928108][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 974.929433][T29445] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 974.958426][T29445] usb 4-1: config 0 has no interface number 0 [ 974.961061][ T1779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.969834][T29445] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 974.987252][T29445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.997830][T29445] usb 4-1: Product: syz [ 975.001572][ T1110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.013207][T29445] usb 4-1: Manufacturer: syz [ 975.018052][T29445] usb 4-1: SerialNumber: syz [ 975.021661][ T1110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.039543][T29445] usb 4-1: config 0 descriptor?? [ 975.048095][ T1110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.070295][T29445] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 975.071735][ T1110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.173258][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 975.216313][ T4220] Bluetooth: hci3: command tx timeout [ 975.283004][T29445] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 975.325854][T29445] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 975.456089][T25467] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 975.494684][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.542255][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.563167][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 975.767697][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.784887][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.870973][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 975.871480][ T5326] udevd[5326]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 975.879273][ T808] usb 4-1: USB disconnect, device number 18 [ 975.936694][ T808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 975.987664][ T808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 976.058143][ T808] quatech2 4-1:0.51: device disconnected [ 976.131609][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system [ 976.221610][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/90.tmp-b7:7' failed: Read-only file system [ 976.272239][ T5326] udevd[5326]: symlink '../../loop7' '/dev/disk/by-diskseq/90.tmp-b7:7' failed: Read-only file system [ 976.440737][ T2398] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 976.453176][ T2398] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 976.461707][ T2398] CPU: 0 UID: 0 PID: 2398 Comm: syz.6.21041 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.472646][ T2398] Tainted: [L]=SOFTLOCKUP [ 976.477005][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.487329][ T2398] RIP: 0010:do_dentry_open+0xaf/0x14e0 [ 976.492803][ T2398] Code: 44 24 28 80 3c 28 00 74 08 4c 89 ff e8 fa 5e ef ff 4c 89 7c 24 20 4d 89 27 4d 8d 7c 24 30 4c 89 f8 48 c1 e8 03 48 89 44 24 58 <80> 3c 28 00 74 08 4c 89 ff e8 e3 5d ef ff 4c 89 7c 24 60 4d 8b 3f [ 976.513139][ T2398] RSP: 0018:ffffc90005cd7638 EFLAGS: 00010206 [ 976.519761][ T2398] RAX: 0000000000000006 RBX: ffff88807b41db60 RCX: 0000000000000000 [ 976.527739][ T2398] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 976.535798][ T2398] RBP: dffffc0000000000 R08: ffff88802b056813 R09: 1ffff1100560ad02 [ 976.544325][ T2398] R10: dffffc0000000000 R11: ffffed100560ad03 R12: 0000000000000000 [ 976.552560][ T2398] R13: 1ffff1100f683b7d R14: ffff88807b41dbe8 R15: 0000000000000030 [ 976.561165][ T2398] FS: 00007fa4867f66c0(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 976.570278][ T2398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.576866][ T2398] CR2: 000000110c463a5c CR3: 00000000711d0000 CR4: 00000000003526f0 [ 976.584927][ T2398] Call Trace: [ 976.588211][ T2398] [ 976.591639][ T2398] ? vfs_open+0x31/0x340 [ 976.596061][ T2398] vfs_open+0x3b/0x340 [ 976.600297][ T2398] ? backing_file_open_user_path+0x12/0x50 [ 976.606530][ T2398] backing_file_open_user_path+0x24/0x50 [ 976.612362][ T2398] backing_tmpfile_open+0x9b/0xf0 [ 976.617379][ T2398] ovl_tmpfile+0x400/0x810 [ 976.621946][ T2398] ? __pfx_ovl_tmpfile+0x10/0x10 [ 976.626887][ T2398] ? _raw_spin_unlock+0x28/0x50 [ 976.631819][ T2398] ? d_alloc+0x144/0x190 [ 976.636054][ T2398] ? mode_strip_sgid+0x6a/0x1b0 [ 976.640888][ T2398] vfs_tmpfile+0x3ff/0x890 [ 976.645319][ T2398] do_tmpfile+0xd3/0x240 [ 976.649556][ T2398] path_openat+0x300d/0x3860 [ 976.654135][ T2398] ? arch_stack_walk+0xfb/0x150 [ 976.659173][ T2398] ? do_getname+0x2e/0x250 [ 976.663757][ T2398] ? stack_trace_save+0xa9/0x100 [ 976.668691][ T2398] ? __pfx_stack_trace_save+0x10/0x10 [ 976.674068][ T2398] ? __futex_wait+0x371/0x420 [ 976.678798][ T2398] ? do_getname+0x2e/0x250 [ 976.683226][ T2398] ? stack_depot_save_flags+0x33/0x810 [ 976.688861][ T2398] ? kasan_save_track+0x3e/0x80 [ 976.693804][ T2398] ? __kasan_slab_alloc+0x6c/0x80 [ 976.698915][ T2398] ? __pfx_path_openat+0x10/0x10 [ 976.704081][ T2398] ? __x64_sys_open+0x11e/0x150 [ 976.708948][ T2398] ? do_syscall_64+0x14d/0xf80 [ 976.713718][ T2398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.719807][ T2398] ? __lock_acquire+0x6b5/0x2cf0 [ 976.724742][ T2398] do_file_open+0x23e/0x4a0 [ 976.729249][ T2398] ? __pfx_do_file_open+0x10/0x10 [ 976.734472][ T2398] ? _raw_spin_unlock+0x28/0x50 [ 976.739673][ T2398] ? alloc_fd+0x64b/0x6c0 [ 976.744100][ T2398] do_sys_openat2+0x113/0x200 [ 976.748777][ T2398] ? __se_sys_futex+0x3a8/0x450 [ 976.753623][ T2398] ? __pfx_do_sys_openat2+0x10/0x10 [ 976.758918][ T2398] ? rcu_is_watching+0x15/0xb0 [ 976.763769][ T2398] __x64_sys_open+0x11e/0x150 [ 976.768537][ T2398] do_syscall_64+0x14d/0xf80 [ 976.773203][ T2398] ? trace_irq_disable+0x3b/0x150 [ 976.778233][ T2398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.784759][ T2398] ? clear_bhb_loop+0x40/0x90 [ 976.789728][ T2398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.795622][ T2398] RIP: 0033:0x7fa48859c799 [ 976.800467][ T2398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.820346][ T2398] RSP: 002b:00007fa4867f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 976.828874][ T2398] RAX: ffffffffffffffda RBX: 00007fa488815fa0 RCX: 00007fa48859c799 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 976.837281][ T2398] RDX: 0000000000000028 RSI: 0000000000551083 RDI: 0000200000000040 [ 976.845333][ T2398] RBP: 00007fa488632c99 R08: 0000000000000000 R09: 0000000000000000 [ 976.853904][ T2398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.861954][ T2398] R13: 00007fa488816038 R14: 00007fa488815fa0 R15: 00007fffa570d0a8 [ 976.869922][ T2398] [ 976.872951][ T2398] Modules linked in: [ 976.878952][ T2398] ---[ end trace 0000000000000000 ]--- [ 976.935407][ T2398] RIP: 0010:do_dentry_open+0xaf/0x14e0 [ 976.950857][ T2398] Code: 44 24 28 80 3c 28 00 74 08 4c 89 ff e8 fa 5e ef ff 4c 89 7c 24 20 4d 89 27 4d 8d 7c 24 30 4c 89 f8 48 c1 e8 03 48 89 44 24 58 <80> 3c 28 00 74 08 4c 89 ff e8 e3 5d ef ff 4c 89 7c 24 60 4d 8b 3f [ 977.057640][ T2398] RSP: 0018:ffffc90005cd7638 EFLAGS: 00010206 [ 977.075368][ T2398] RAX: 0000000000000006 RBX: ffff88807b41db60 RCX: 0000000000000000 [ 977.086500][ T2391] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#2] SMP KASAN PTI [ 977.098631][ T2391] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 977.107244][ T2391] CPU: 0 UID: 0 PID: 2391 Comm: syz.0.21040 Tainted: G D L syzkaller #0 PREEMPT(full) [ 977.118268][ T2391] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 977.123541][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 977.133609][ T2391] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 977.139209][ T2391] Code: 01 00 74 08 4c 89 f7 e8 34 d7 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 977.159091][ T2391] RSP: 0018:ffffc9000d0c79a0 EFLAGS: 00010006 [ 977.165500][ T2391] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 977.173734][ T2391] RDX: 1ffff92001a18f40 RSI: 0000000000000000 RDI: ffff88803892f350 [ 977.181817][ T2391] RBP: ffffc9000d0c7aa0 R08: 0000000000000003 R09: 0000000000000004 [ 977.189878][ T2391] R10: dffffc0000000000 R11: fffff52001a18f50 R12: 0000000000000000 [ 977.197849][ T2391] R13: ffff88803892f350 R14: 0000000000000018 R15: ffffc9000d0c7c20 [ 977.205908][ T2391] FS: 000055557421d500(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 977.215020][ T2391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.221962][ T2391] CR2: 000055f28dd14ee8 CR3: 000000002d1a2000 CR4: 00000000003526f0 [ 977.230133][ T2391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 977.238106][ T2391] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 977.246341][ T2391] Call Trace: [ 977.249700][ T2391] [ 977.252660][ T2391] ? __lock_acquire+0x6b5/0x2cf0 [ 977.257626][ T2391] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 977.262938][ T2391] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.268092][ T2391] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 977.273560][ T2391] rwsem_del_wake_waiter+0x25d/0x2e0 [ 977.278841][ T2391] rwsem_down_write_slowpath+0xa6f/0x1080 [ 977.284667][ T2391] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 977.290549][ T2391] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 977.296718][ T2391] ? futex_wake+0x4ac/0x580 [ 977.301219][ T2391] ? __pfx_futex_wait+0x10/0x10 [ 977.306061][ T2391] ? vm_mmap_pgoff+0x234/0x4f0 [ 977.310816][ T2391] down_write_killable+0x1eb/0x240 [ 977.315941][ T2391] ? __pfx_down_write_killable+0x10/0x10 [ 977.321582][ T2391] ? apparmor_mmap_file+0x197/0x3e0 [ 977.326896][ T2391] ? security_mmap_file+0x4df/0xa20 [ 977.332157][ T2391] vm_mmap_pgoff+0x234/0x4f0 [ 977.336755][ T2391] ? __se_sys_futex+0x3a8/0x450 [ 977.341686][ T2391] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 977.347048][ T2391] ? __pfx___se_sys_futex+0x10/0x10 [ 977.352239][ T2391] ? rcu_is_watching+0x15/0xb0 [ 977.357004][ T2391] ? ksys_mmap_pgoff+0xf3/0x760 [ 977.362049][ T2391] ? __x64_sys_mmap+0x7f/0x140 [ 977.366805][ T2391] do_syscall_64+0x14d/0xf80 [ 977.371440][ T2391] ? trace_irq_disable+0x3b/0x150 [ 977.376477][ T2391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.382548][ T2391] ? clear_bhb_loop+0x40/0x90 [ 977.387247][ T2391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.394703][ T2391] RIP: 0033:0x7fd388f9c502 [ 977.399490][ T2391] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 977.419177][ T2391] RSP: 002b:00007ffc10fd3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 977.427624][ T2391] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd388f9c502 [ 977.435584][ T2391] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 977.443635][ T2391] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 977.451596][ T2391] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc10fd4010 [ 977.459644][ T2391] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 977.467697][ T2391] [ 977.470701][ T2391] Modules linked in: [ 977.474668][ T2391] ---[ end trace 0000000000000000 ]--- [ 977.480104][ T2391] RIP: 0010:do_dentry_open+0xaf/0x14e0 [ 977.485665][ T2391] Code: 44 24 28 80 3c 28 00 74 08 4c 89 ff e8 fa 5e ef ff 4c 89 7c 24 20 4d 89 27 4d 8d 7c 24 30 4c 89 f8 48 c1 e8 03 48 89 44 24 58 <80> 3c 28 00 74 08 4c 89 ff e8 e3 5d ef ff 4c 89 7c 24 60 4d 8b 3f [ 977.505266][ T2391] RSP: 0018:ffffc90005cd7638 EFLAGS: 00010206 [ 977.511328][ T2391] RAX: 0000000000000006 RBX: ffff88807b41db60 RCX: 0000000000000000 [ 977.519296][ T2391] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 977.527253][ T2391] RBP: dffffc0000000000 R08: ffff88802b056813 R09: 1ffff1100560ad02 [ 977.535206][ T2391] R10: dffffc0000000000 R11: ffffed100560ad03 R12: 0000000000000000 [ 977.543260][ T2391] R13: 1ffff1100f683b7d R14: ffff88807b41dbe8 R15: 0000000000000030 [ 977.551506][ T2391] FS: 000055557421d500(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 977.560595][ T2391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.567163][ T2391] CR2: 000055f28dd14ee8 CR3: 000000002d1a2000 CR4: 00000000003526f0 [ 977.575389][ T2391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 977.583537][ T2391] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 977.591606][ T2391] Kernel panic - not syncing: Fatal exception [ 977.597975][ T2391] Kernel Offset: disabled [ 977.602301][ T2391] Rebooting in 86400 seconds..