last executing test programs: 6m2.819743694s ago: executing program 0 (id=269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 6m2.499590488s ago: executing program 0 (id=271): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x8910, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "d7c1ed55e1ae00ba994409ef44039c19e2c6be"}) 6m1.641293071s ago: executing program 0 (id=275): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/rcu_normal', 0x149a82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x4000000000008, 0x12) 6m1.263680682s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 6m0.969484138s ago: executing program 0 (id=280): unshare(0x2000400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 6m0.452770161s ago: executing program 0 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005"], 0x90}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 5m59.851644043s ago: executing program 32 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005"], 0x90}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 3m26.569135839s ago: executing program 4 (id=1542): setreuid(0x0, 0xee01) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 3m26.207996577s ago: executing program 4 (id=1546): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) unshare(0x20040600) fcntl$setown(r0, 0x8, 0x0) 3m25.864123005s ago: executing program 4 (id=1550): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000145c0)={0x2020}, 0x2020) 3m25.540704893s ago: executing program 4 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x0, 0xc, @l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880) 3m25.307337509s ago: executing program 4 (id=1561): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 3m25.148171876s ago: executing program 4 (id=1563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x5, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 3m9.866757579s ago: executing program 33 (id=1563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x5, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 32.480310784s ago: executing program 1 (id=3432): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001200970226bd700000000000072a"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 32.310724451s ago: executing program 1 (id=3435): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16, @ANYRES16], 0x0) 30.754850366s ago: executing program 6 (id=3442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r1, r0, 0x0, r0}, 0x10) 29.961397517s ago: executing program 6 (id=3446): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff}, 0x10) write(r0, &(0x7f0000001dc0)="240000001a005f0214f9f407000904001f00000000040000000000000800040001000000", 0x24) 29.597088494s ago: executing program 6 (id=3447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) 29.591834432s ago: executing program 2 (id=3448): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x1000) read$dsp(r0, &(0x7f0000000240)=""/71, 0x47) 28.388871925s ago: executing program 2 (id=3450): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) write(r0, 0x0, 0x0) 28.281364191s ago: executing program 2 (id=3451): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="445d111ed198a51712c1cf9b0305e2fad802f40d708f52fcc86440127873c7bd2985a2021f50fdf163f3f36339210420006fe3bd381425d69b3138ce66b122760b3d9d1e14f8c64f980d69e13f2d08ec41d0fd86d2f84ecc0374900781ac7cbaf5c09ba45a3f39fca46239d8ad5b708cf2bffa9d380e70c9221de387adaa0c2d7f92c67e079cd2de755eb9580c198fc2ed82da1a69a454958e9f35182e979de7", 0xa0}, {&(0x7f0000000400)="5337af4d37c7adb6d6cb3f7f98b92e09092d5c7415177a9cd3da82e3d016951b38f322e790f71d574ab6f0f55da79e9be6367af78a2a99ce494c06ab6144fd46b235b7780ddf1f6af0800b74e4158db300"/91, 0x5b}, {&(0x7f0000000480)="b6ae74bc9b26f973d11dcf989fff5593a05408418f3766219596b3496f166298fa94641c2bbb3b8ee85c1a41b5c619db83ed3251501b5e941cdc644e99023dd745c33d084e945262a6131970d18fb811da043a175abed72f32e469898ca92a0613ad6c9aae722ae602a34417b3e382f9bc1bc186e6625d661423da9a6122d1350a9c71b015fe55a9a8e377c586de0da69bb5639bafef9fcc1667e277c5c9816831f5d27dc48f3c5d89", 0xa9}, {&(0x7f0000000540)="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", 0x65d}], 0x4) 28.174461425s ago: executing program 2 (id=3452): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x100000000) 28.097669049s ago: executing program 2 (id=3453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001880)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) kexec_load(0x5, 0x0, 0x0, 0x2) 22.855147866s ago: executing program 5 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x40) 22.84499342s ago: executing program 1 (id=3459): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000640)={0xd2, 0x6, 0x0, 0x8003}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000520001000000000e000000001c"], 0x18}}, 0x0) 22.837865874s ago: executing program 2 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 22.80198866s ago: executing program 6 (id=3461): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.155095968s ago: executing program 1 (id=3464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000340)='O', 0x1}, {0x0}], 0x2) 21.531160084s ago: executing program 1 (id=3466): syz_emit_ethernet(0x1c9, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x193, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') 21.171223595s ago: executing program 1 (id=3468): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 20.907591558s ago: executing program 6 (id=3469): syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 20.627879738s ago: executing program 6 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00p'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 20.424225994s ago: executing program 3 (id=3472): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, &(0x7f0000000040)=0x7fffffffffffffff, r1, 0x0, 0x807, 0x2) 20.207942543s ago: executing program 3 (id=3473): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000c80)={@multicast2, @broadcast}, 0xc) 19.962026863s ago: executing program 3 (id=3474): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x3e, 0x0, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0) 19.716457179s ago: executing program 3 (id=3475): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x2040400) getpeername$packet(r0, 0x0, 0x0) 19.51969232s ago: executing program 3 (id=3476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000240)='sys_enter\x00', r0, 0x0, 0x8a}, 0x22) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5e, 0xdc) 16.659026647s ago: executing program 3 (id=3477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) 16.576801345s ago: executing program 5 (id=3478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), 0x9) 16.249732485s ago: executing program 5 (id=3479): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000007340)={0x1, &(0x7f0000007300)=[{0x3dca, 0x4}]}) 15.82198519s ago: executing program 5 (id=3480): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)='\x00', 0x1}], 0x2, 0x8, 0x0) 15.55537186s ago: executing program 5 (id=3481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x38}, 0x2, 0x34005}, 0x0) 15.321589219s ago: executing program 5 (id=3482): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe, 0x8, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 7.571528808s ago: executing program 34 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 5.989096861s ago: executing program 35 (id=3468): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 4.576183876s ago: executing program 36 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00p'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.052760489s ago: executing program 37 (id=3477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) 0s ago: executing program 38 (id=3482): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe, 0x8, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) kernel console output (not intermixed with test programs): [ 367.211592][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.211636][ T5923] usb 3-1: config 0 has no interface number 0 [ 367.232625][ T5923] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 367.232657][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.232679][ T5923] usb 3-1: Product: syz [ 367.232691][ T5923] usb 3-1: Manufacturer: syz [ 367.232706][ T5923] usb 3-1: SerialNumber: syz [ 367.305602][ T5923] usb 3-1: config 0 descriptor?? [ 367.454338][T10753] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 367.568889][ T5923] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 367.582759][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.583181][ T5923] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 367.583235][ T5923] usb 3-1: media controller created [ 367.591148][T10759] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1916'. [ 367.646803][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.096680][ T5935] usb 3-1: USB disconnect, device number 31 [ 369.543282][T10807] xt_l2tp: v2 sid > 0xffff: 1114112 [ 370.032484][ T5934] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 370.180186][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/69.tmp-b7:5' failed: Read-only file system [ 370.219708][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.219758][ T5934] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 370.219784][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.267729][ T5934] usb 2-1: config 0 descriptor?? [ 370.625567][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/69.tmp-b7:5' failed: Read-only file system [ 370.735500][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/69.tmp-b7:5' failed: Read-only file system [ 370.759392][ T5934] lenovo 0003:04B3:3100.003B: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 370.809676][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 370.851902][T10839] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 370.966375][ T5935] usb 2-1: USB disconnect, device number 18 [ 371.241888][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'. [ 371.369871][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 371.418377][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 371.626744][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 371.817430][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 372.494806][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 372.835962][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 373.696583][T10923] sctp: [Deprecated]: syz.5.1990 (pid 10923) Use of int in max_burst socket option. [ 373.696583][T10923] Use struct sctp_assoc_value instead [ 374.395583][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1998'. [ 374.575149][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 374.575193][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 374.885821][T10955] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 375.270991][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 375.777636][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 375.846832][T10983] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 375.846854][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 375.893339][ T5845] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 376.023439][T10986] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2020'. [ 376.157742][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 376.362316][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 376.420907][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 376.652591][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 376.993496][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 377.340857][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 377.582190][T11036] netlink: 'syz.1.2042': attribute type 3 has an invalid length. [ 377.883562][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 378.191352][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 378.503979][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 378.866500][T11081] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.2060'. [ 379.565424][T11100] program syz.2.2068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.112124][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 380.321692][ T5942] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 380.416616][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 380.484483][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 380.500148][ T5942] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 380.500182][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.500204][ T5942] usb 2-1: Product: syz [ 380.500219][ T5942] usb 2-1: Manufacturer: syz [ 380.500235][ T5942] usb 2-1: SerialNumber: syz [ 380.521210][ T5942] usb 2-1: config 0 descriptor?? [ 380.555395][ T5942] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 380.813507][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 381.025901][ T5942] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 381.209989][ T5923] usb 2-1: USB disconnect, device number 19 [ 381.238892][ T5923] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 381.239710][ T5923] visor 2-1:0.0: device disconnected [ 381.306839][T10621] udevd[10621]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 381.402359][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2087'. [ 381.405387][T11161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2090'. [ 381.405409][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2090'. [ 381.629860][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 381.810607][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 381.965515][T11178] random: crng reseeded on system resumption [ 382.577303][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 382.910718][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 383.195119][T11216] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2109'. [ 383.230126][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 383.562331][ T5935] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 383.602494][T11229] IPVS: ip_vs_edit_dest(): server weight less than zero [ 383.739692][T11237] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2117'. [ 383.757552][ T5935] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.757580][ T5935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.759183][ T5935] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 383.759212][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 383.759234][ T5935] usb 6-1: SerialNumber: syz [ 383.922199][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.922283][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.048408][ T5935] usb 6-1: 0:2 : does not exist [ 384.160291][ T5935] usb 6-1: USB disconnect, device number 18 [ 384.192206][ T5923] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 384.361127][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.361166][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 384.361212][ T5923] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 384.361238][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.409081][T10505] udevd[10505]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.478294][ T5923] usb 3-1: config 0 descriptor?? [ 384.479724][T11240] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 384.755670][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 384.929817][ T5923] lenovo 0003:17EF:60FE.003C: unknown main item tag 0x0 [ 384.974723][ T5923] lenovo 0003:17EF:60FE.003C: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 385.149544][ T5940] usb 3-1: USB disconnect, device number 32 [ 385.456068][T11273] fido_id[11273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 385.788128][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 386.093359][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 386.131345][T11299] tmpfs: Cannot disable swap on remount [ 386.391557][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 386.663328][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 386.834634][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 387.128089][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 387.383501][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 388.761099][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 389.007404][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 389.326545][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 389.443105][T11402] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 389.443123][T11402] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 389.443136][T11402] overlayfs: missing 'lowerdir' [ 390.933144][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 391.142176][T11457] mkiss: ax0: crc mode is auto. [ 391.172111][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 391.573048][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 391.874862][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 392.167421][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2235'. [ 392.185441][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 392.226457][T11498] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2237'. [ 392.358496][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 392.471841][ T5942] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 392.555186][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 392.635740][ T5942] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 392.635771][ T5942] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 392.635791][ T5942] usb 3-1: config 0 has no interface number 0 [ 392.635841][ T5942] usb 3-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.635870][ T5942] usb 3-1: config 0 interface 30 has no altsetting 0 [ 392.635907][ T5942] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 392.635932][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.662595][ T5942] usb 3-1: config 0 descriptor?? [ 392.764278][ T5942] usb 3-1: unknown interface protocol 0x41, assuming v1 [ 392.764307][ T5942] usb 3-1: 30:2 : does not exist [ 392.877650][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 392.983686][ T5942] usb 3-1: USB disconnect, device number 33 [ 393.320631][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 393.493672][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 393.621399][T11536] netlink: 'syz.6.2256': attribute type 5 has an invalid length. [ 393.785859][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 393.811711][ T5935] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 393.965296][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.965332][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.965373][ T5935] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 393.965398][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.970875][ T5935] usb 4-1: config 0 descriptor?? [ 394.186954][T11551] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 394.250759][T11554] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 394.321992][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 394.327386][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 394.352104][ T976] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 394.451588][ T5935] bigben 0003:146B:0902.003D: unexpected rdesc, please submit for review [ 394.472396][ T5935] bigben 0003:146B:0902.003D: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 394.472455][ T5935] bigben 0003:146B:0902.003D: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 394.472481][ T5935] bigben 0003:146B:0902.003D: no output report found [ 394.524496][ T976] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 394.524531][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.568110][ T976] usb 6-1: config 0 descriptor?? [ 394.672323][ T5942] usb 4-1: USB disconnect, device number 35 [ 394.705590][T11562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.705753][T11562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.706232][T11562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.706318][T11562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.706631][T11562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.706718][T11562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.707022][T11562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.707103][T11562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.707406][T11562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.803365][ T976] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 394.852808][T11556] fido_id[11556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 395.007867][ T976] [drm:udl_init] *ERROR* Selecting channel failed [ 395.094289][ T976] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 395.094335][ T976] [drm] Initialized udl on minor 2 [ 395.142158][ T976] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 395.150801][ T976] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 395.216028][ T5942] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 395.216655][ T5942] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 395.219282][ T976] usb 6-1: USB disconnect, device number 19 [ 395.669834][T11572] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2274'. [ 395.971210][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 396.074500][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2280'. [ 396.245493][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 396.294590][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 396.571776][ T5935] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 396.690832][T11606] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 396.690859][T11606] UDF-fs: Scanning with blocksize 512 failed [ 396.734186][ T5935] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 396.734244][ T5935] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 396.734275][ T5935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.734312][ T5935] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 396.734336][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.739300][T11606] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 396.739325][T11606] UDF-fs: Scanning with blocksize 1024 failed [ 396.740360][T11606] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 396.740380][T11606] UDF-fs: Scanning with blocksize 2048 failed [ 396.740822][T11606] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 396.740839][T11606] UDF-fs: Scanning with blocksize 4096 failed [ 396.746678][ T5935] usb 6-1: config 0 descriptor?? [ 397.203659][ T5935] kye 0003:0458:501B.003E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 397.241603][ T976] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 397.242807][ T5935] kye 0003:0458:501B.003E: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.5-1/input0 [ 397.242841][ T5935] kye 0003:0458:501B.003E: tablet-enabling feature report not found [ 397.242859][ T5935] kye 0003:0458:501B.003E: tablet enabling failed [ 397.391630][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 397.395359][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.395393][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.395434][ T976] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 397.395458][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.423699][ T5935] usb 6-1: USB disconnect, device number 20 [ 397.454908][T11622] fido_id[11622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:501B.003E/report_descriptor': No such device [ 397.511834][ T976] usb 2-1: config 0 descriptor?? [ 397.654692][ T38] audit: type=1326 audit(1758337841.229:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.654753][ T38] audit: type=1326 audit(1758337841.229:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.683890][ T38] audit: type=1326 audit(1758337841.259:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.683965][ T38] audit: type=1326 audit(1758337841.259:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.684020][ T38] audit: type=1326 audit(1758337841.259:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.692557][ T38] audit: type=1326 audit(1758337841.259:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.865051][ T38] audit: type=1326 audit(1758337841.439:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.867322][ T38] audit: type=1326 audit(1758337841.439:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11626 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358576ec29 code=0x7ffc0000 [ 397.938453][T11629] veth3: entered promiscuous mode [ 397.955460][ T976] ft260 0003:0403:6030.003F: unbalanced collection at end of report description [ 397.956320][ T976] ft260 0003:0403:6030.003F: failed to parse HID [ 397.956443][ T976] ft260 0003:0403:6030.003F: probe with driver ft260 failed with error -22 [ 398.077059][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 398.164738][ T976] usb 2-1: USB disconnect, device number 20 [ 398.471714][ T5935] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 398.624670][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.624811][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.624856][ T5935] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 398.624881][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.652472][ T5935] usb 4-1: config 0 descriptor?? [ 399.204611][ T5935] stadia 0003:18D1:9400.0040: unexpected long global item [ 399.205451][ T5935] stadia 0003:18D1:9400.0040: parse failed [ 399.205526][ T5935] stadia 0003:18D1:9400.0040: probe with driver stadia failed with error -22 [ 399.362973][ T976] usb 4-1: USB disconnect, device number 36 [ 399.587382][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 399.807814][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.068443][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.072156][ T38] audit: type=1326 audit(1758337843.649:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11666 comm="syz.6.2317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc85031ec29 code=0x0 [ 400.225304][T11676] comedi: No check for data length of config insn id 1003 is implemented [ 400.225324][T11676] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 400.225338][T11676] comedi: Assuming n=15 is correct [ 400.346242][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.606999][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.711791][ T5934] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 400.745261][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.861678][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 400.864488][ T5934] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 400.871195][ T5934] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 400.871228][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.871249][ T5934] usb 4-1: Product: syz [ 400.871264][ T5934] usb 4-1: Manufacturer: syz [ 400.871280][ T5934] usb 4-1: SerialNumber: syz [ 400.906037][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 400.914133][ T5934] usb 4-1: config 0 descriptor?? [ 400.933146][T11696] mkiss: ax0: crc mode is auto. [ 400.977156][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 400.977220][ T5934] usb 4-1: setting power ON [ 400.977241][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 401.015478][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.022076][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 401.022147][ T5934] usb 4-1: media controller created [ 401.170187][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.282497][ T5934] usb 4-1: selecting invalid altsetting 6 [ 401.282523][ T5934] usb 4-1: digital interface selection failed (-22) [ 401.282550][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 401.286466][ T5934] usb 4-1: setting power OFF [ 401.286492][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 401.286511][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 401.286526][ T5934] (NULL device *): no alternate interface [ 401.502348][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 401.536966][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 401.557138][ T5934] usb 4-1: USB disconnect, device number 37 [ 402.005104][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 402.235207][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 402.599547][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 402.654386][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 402.855970][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 403.153973][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 403.632899][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 403.975602][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 404.269532][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 404.893505][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 404.893536][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 405.084933][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 406.615108][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 406.646895][T11895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2411'. [ 406.886854][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 407.153174][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 407.481617][ T5923] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 407.654754][ T5923] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 407.654784][ T5923] usb 6-1: config 0 has no interface number 0 [ 407.654834][ T5923] usb 6-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.654863][ T5923] usb 6-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.656440][ T5923] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 407.656470][ T5923] usb 6-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 407.656492][ T5923] usb 6-1: Manufacturer: syz [ 407.693270][ T5923] usb 6-1: config 0 descriptor?? [ 408.167464][ T5923] uclogic 0003:5543:0522.0041: unbalanced delimiter at end of report description [ 408.168353][ T5923] uclogic 0003:5543:0522.0041: parse failed [ 408.168465][ T5923] uclogic 0003:5543:0522.0041: probe with driver uclogic failed with error -22 [ 408.353347][ T976] usb 6-1: USB disconnect, device number 21 [ 409.079088][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 409.305365][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 409.366590][ T38] audit: type=1326 audit(1758337852.939:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11983 comm="syz.5.2443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb87343ec29 code=0x0 [ 410.231653][ T5942] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 410.330034][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 410.408190][ T5942] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 410.408222][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.408243][ T5942] usb 4-1: config 0 has no interface number 0 [ 410.408312][ T5942] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 410.408338][ T5942] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.454112][ T5942] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 410.454160][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.454186][ T5942] usb 4-1: Product: syz [ 410.454204][ T5942] usb 4-1: Manufacturer: syz [ 410.454221][ T5942] usb 4-1: SerialNumber: syz [ 410.489805][ T5942] usb 4-1: config 0 descriptor?? [ 410.597474][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 410.625181][T12023] [U] „ [ 410.665487][T12026] erspan0: entered promiscuous mode [ 410.671144][T12026] erspan0: left promiscuous mode [ 410.807891][ T5942] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 410.865994][ T5942] usb 4-1: USB disconnect, device number 38 [ 410.982848][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 411.216906][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 411.457981][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 411.788069][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 411.951956][ T5923] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 411.980451][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 412.102677][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 412.105139][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.105175][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.105201][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.105247][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 412.105272][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.168507][ T5923] usb 2-1: config 0 descriptor?? [ 412.351038][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 412.576891][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 412.615433][ T5923] ryos 0003:1E7D:31CE.0042: global environment stack underflow [ 412.615458][ T5923] ryos 0003:1E7D:31CE.0042: item 0 2 1 11 parsing failed [ 412.616299][ T5923] ryos 0003:1E7D:31CE.0042: parse failed [ 412.616373][ T5923] ryos 0003:1E7D:31CE.0042: probe with driver ryos failed with error -22 [ 412.895768][ T5923] usb 2-1: USB disconnect, device number 21 [ 413.018197][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 413.053894][T12088] netlink: 'syz.5.2482': attribute type 10 has an invalid length. [ 413.619872][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2486'. [ 413.706677][T12088] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 413.744707][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.427964][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 414.687123][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 415.019323][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 415.149527][T12159] tipc: Enabled bearer , priority 10 [ 415.306573][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 415.406738][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 415.656125][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 415.656152][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 415.656181][T12178] netlink: 'syz.2.2522': attribute type 14 has an invalid length. [ 415.656197][T12178] netlink: 'syz.2.2522': attribute type 13 has an invalid length. [ 415.961205][T12191] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 415.961236][T12191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 415.980240][T12191] vhci_hcd vhci_hcd.0: Device attached [ 416.163699][ T5942] vhci_hcd: vhci_device speed not set [ 416.225376][ T5942] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 416.402054][ T1797] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 416.564504][ T1797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.564560][ T1797] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 416.564587][ T1797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.581730][ T5923] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 416.613439][ T1797] usb 2-1: config 0 descriptor?? [ 416.752792][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 416.771225][ T5923] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 416.771285][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.771364][ T5923] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 416.771390][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.771413][ T5923] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 416.825403][ T5923] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 416.831992][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.832089][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.832113][ T5923] usb 3-1: SerialNumber: syz [ 416.930507][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 416.945398][ T5923] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 416.968482][ T5923] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 417.089560][ T1797] lenovo 0003:17EF:6062.0043: unknown main item tag 0x1 [ 417.114273][ T1797] lenovo 0003:17EF:6062.0043: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 417.160180][ T5964] usb 3-1: USB disconnect, device number 34 [ 417.310935][ T5940] usb 2-1: USB disconnect, device number 22 [ 417.338696][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 417.448277][T12218] netlink: 'syz.3.2540': attribute type 29 has an invalid length. [ 417.452624][T12218] netlink: 'syz.3.2540': attribute type 29 has an invalid length. [ 417.537703][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 417.658828][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 417.889450][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 418.199933][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 419.031770][T12192] vhci_hcd: connection reset by peer [ 419.038257][ T161] vhci_hcd: stop threads [ 419.039239][ T161] vhci_hcd: release socket [ 419.041232][ T161] vhci_hcd: disconnect device [ 419.571410][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 419.688763][T12277] sd 0:0:1:0: device reset [ 419.920877][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 420.079417][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 420.246848][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 421.421686][ T5942] vhci_hcd: vhci_device speed not set [ 421.950629][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 422.258233][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 422.428074][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 422.441736][ T976] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 422.591734][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 422.608270][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.610029][ T976] usb 3-1: config 4 interface 0 has no altsetting 0 [ 422.624290][ T976] usb 3-1: string descriptor 0 read error: -22 [ 422.624410][ T976] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 422.624439][ T976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 422.691134][ T976] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 422.699902][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 422.750259][ T976] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 422.750707][ T976] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 422.750762][ T976] usb 3-1: media controller created [ 422.832968][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.934258][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 422.956330][ T976] zl10353_read_register: readreg error (reg=127, ret==0) [ 423.162532][ T976] usb 3-1: USB disconnect, device number 35 [ 423.257458][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 423.549004][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 423.611914][ T5923] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 423.761565][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 423.763973][ T5923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.764003][ T5923] usb 4-1: config 0 has no interface number 0 [ 423.764053][ T5923] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.764081][ T5923] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.764106][ T5923] usb 4-1: config 0 interface 1 has no altsetting 0 [ 423.764142][ T5923] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 423.764167][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.843113][ T5923] usb 4-1: config 0 descriptor?? [ 424.213439][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 424.283991][ T5923] chicony 0003:04F2:0418.0044: item fetching failed at offset 0/4 [ 424.286109][ T5923] chicony 0003:04F2:0418.0044: Chicony hid parse failed: -22 [ 424.286193][ T5923] chicony 0003:04F2:0418.0044: probe with driver chicony failed with error -22 [ 424.302055][ T976] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 424.455282][ T976] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.455312][ T976] usb 2-1: config 0 has no interface number 0 [ 424.455369][ T976] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 424.455394][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.471976][ T976] usb 2-1: config 0 descriptor?? [ 424.498457][ T976] usb 2-1: selecting invalid altsetting 1 [ 424.507909][ T5923] usb 4-1: USB disconnect, device number 39 [ 424.519059][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 424.519080][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 424.789142][ T976] DVB: Unable to find symbol cx22700_attach() [ 424.845740][ T976] DVB: Unable to find symbol tda10046_attach() [ 424.845759][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 424.857612][ T976] usb 2-1: USB disconnect, device number 23 [ 425.132282][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 425.276258][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 425.314627][T12437] binder: 12435:12437 ioctl 400c620e 200000000000 returned -22 [ 425.712983][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 425.746053][T12452] erspan0: entered promiscuous mode [ 425.764315][T12452] erspan0: left promiscuous mode [ 426.962716][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 427.271951][ T5935] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 427.388325][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 427.432357][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 427.447626][ T5935] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 427.447658][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.447680][ T5935] usb 6-1: Product: syz [ 427.447695][ T5935] usb 6-1: Manufacturer: syz [ 427.447711][ T5935] usb 6-1: SerialNumber: syz [ 427.470496][T12498] erspan0: entered promiscuous mode [ 427.498307][ T5935] r8152-cfgselector 6-1: Unknown version 0x0000 [ 427.498333][ T5935] r8152-cfgselector 6-1: config 0 descriptor?? [ 427.515423][T12498] erspan0: left promiscuous mode [ 427.738991][ T5935] r8152-cfgselector 6-1: Needed 1 retries to read version [ 427.739045][ T5935] r8152-cfgselector 6-1: Unknown version 0x0000 [ 427.740426][ T5935] r8152-cfgselector 6-1: bad CDC descriptors [ 427.843115][ T38] audit: type=1326 audit(1758337871.419:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12501 comm="syz.1.2673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20ff41ec29 code=0x0 [ 427.969098][ T5935] r8152-cfgselector 6-1: USB disconnect, device number 22 [ 428.472195][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 428.701015][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 429.745806][ T38] audit: type=1326 audit(1758337873.319:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752309][ T38] audit: type=1326 audit(1758337873.319:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752365][ T38] audit: type=1326 audit(1758337873.319:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752411][ T38] audit: type=1326 audit(1758337873.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752452][ T38] audit: type=1326 audit(1758337873.319:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752496][ T38] audit: type=1326 audit(1758337873.319:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752551][ T38] audit: type=1326 audit(1758337873.319:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.752597][ T38] audit: type=1326 audit(1758337873.329:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12545 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 429.997798][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 430.186410][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 430.303685][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2695'. [ 430.324145][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 430.510167][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 430.687099][T12574] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 430.687161][T12574] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 430.687215][T12574] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 430.687268][T12574] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 430.687321][T12574] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 430.687445][T12574] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 430.687498][T12574] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 430.687559][T12574] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 431.419756][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 431.491603][ T5942] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 431.649860][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.649898][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.649940][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 431.649965][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.697136][ T5942] usb 2-1: config 0 descriptor?? [ 432.338626][ T5942] usb 2-1: USB disconnect, device number 24 [ 432.722298][ T5935] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 432.744121][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 432.879461][ T5935] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 432.879493][ T5935] usb 3-1: config 0 has no interface number 0 [ 432.879663][ T5935] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 432.879695][ T5935] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.887014][ T5935] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 432.887055][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.887076][ T5935] usb 3-1: Product: syz [ 432.887092][ T5935] usb 3-1: Manufacturer: syz [ 432.887107][ T5935] usb 3-1: SerialNumber: syz [ 432.904589][ T5935] usb 3-1: config 0 descriptor?? [ 432.906183][T12611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 432.917743][ T5935] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 432.946070][ T5935] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 433.374697][ T5942] usb 3-1: USB disconnect, device number 36 [ 433.419830][ T5942] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 433.420768][ T5942] cyberjack 3-1:0.69: device disconnected [ 433.770752][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 434.059542][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 434.342370][ T5935] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 434.492830][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 434.499873][ T5935] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 434.507495][ T5935] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 434.507533][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.507557][ T5935] usb 6-1: Product: syz [ 434.507574][ T5935] usb 6-1: Manufacturer: syz [ 434.507592][ T5935] usb 6-1: SerialNumber: syz [ 434.552428][ T5935] usb 6-1: config 0 descriptor?? [ 434.558491][ T5935] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 434.558562][ T5935] usb 6-1: setting power ON [ 434.558582][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 434.615492][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.617161][ T5935] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 434.617223][ T5935] usb 6-1: media controller created [ 434.780727][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.981688][ T5935] usb 6-1: selecting invalid altsetting 6 [ 434.981713][ T5935] usb 6-1: digital interface selection failed (-22) [ 434.981730][ T5935] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 434.983109][ T5935] usb 6-1: setting power OFF [ 434.983133][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 434.983152][ T5935] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 434.983165][ T5935] (NULL device *): no alternate interface [ 435.107076][T12642] bridge1: entered promiscuous mode [ 435.107119][T12642] bridge1: entered allmulticast mode [ 435.196175][T12642] team0: Port device bridge1 added [ 435.315752][ T5935] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 435.352791][ T5935] usb 6-1: USB disconnect, device number 23 [ 435.580418][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 435.819354][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 436.077340][ T38] audit: type=1326 audit(1758337879.649:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.078455][ T38] audit: type=1326 audit(1758337879.649:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.116862][ T38] audit: type=1326 audit(1758337879.689:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.116933][ T38] audit: type=1326 audit(1758337879.689:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.117073][ T38] audit: type=1326 audit(1758337879.689:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.117127][ T38] audit: type=1326 audit(1758337879.689:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.117180][ T38] audit: type=1326 audit(1758337879.689:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.117233][ T38] audit: type=1326 audit(1758337879.689:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12663 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 436.301953][ T976] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 436.457597][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.457628][ T976] usb 3-1: config 0 has no interface number 0 [ 436.457678][ T976] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 436.457703][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.464412][ T976] usb 3-1: config 0 descriptor?? [ 436.514962][ T976] usb 3-1: selecting invalid altsetting 1 [ 436.515155][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 436.515169][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 436.625576][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 436.645300][ T976] DVB: Unable to find symbol cx22700_attach() [ 436.705232][ T976] DVB: Unable to find symbol tda10046_attach() [ 436.705248][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 436.758654][ T976] usb 3-1: USB disconnect, device number 37 [ 437.015187][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 437.048415][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 437.051711][ T5935] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 437.160289][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 437.214201][ T5935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.214230][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.214285][ T5935] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.219793][ T5935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.219826][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.219849][ T5935] usb 2-1: Product: syz [ 437.219866][ T5935] usb 2-1: Manufacturer: syz [ 437.219882][ T5935] usb 2-1: SerialNumber: syz [ 437.308418][ T5935] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 437.308477][ T5935] cdc_ncm 2-1:1.0: bind() failure [ 437.359723][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 437.542271][ T976] usb 2-1: USB disconnect, device number 25 [ 437.769993][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 437.929343][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 438.242313][T12715] net_ratelimit: 1053 callbacks suppressed [ 438.242340][T12715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.242430][T12715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.242841][T12715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.243018][T12715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.243432][T12715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.243524][T12715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.243852][T12715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.243974][T12715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.244288][T12715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.244371][T12715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.309734][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 438.385089][T12718] delete_channel: no stack [ 438.714686][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 439.141619][ T1797] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 439.295996][ T1797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.296028][ T1797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.307060][ T1797] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.307098][ T1797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 439.307124][ T1797] usb 2-1: SerialNumber: syz [ 439.482107][ T976] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 439.584368][ T1797] usb 2-1: 0:2 : does not exist [ 439.636957][ T976] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 439.636990][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.637039][ T976] usb 3-1: config 0 has no interface number 0 [ 439.637092][ T976] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 439.637117][ T976] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.672680][ T1797] usb 2-1: USB disconnect, device number 26 [ 439.702209][ T976] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 439.702243][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.702265][ T976] usb 3-1: Product: syz [ 439.702281][ T976] usb 3-1: Manufacturer: syz [ 439.702296][ T976] usb 3-1: SerialNumber: syz [ 439.797951][ T976] usb 3-1: config 0 descriptor?? [ 440.030394][ T976] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 440.048051][ T976] usb 3-1: USB disconnect, device number 38 [ 440.061986][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 440.063210][T10505] udevd[10505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.345298][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 440.533336][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 440.739494][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 440.827119][T12754] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2785'. [ 440.827151][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2785'. [ 440.827168][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 441.069721][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 441.981294][T12790] Bluetooth: MGMT ver 1.23 [ 442.171878][ T5844] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 442.331673][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 442.334776][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.334811][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.334836][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.334884][ T5844] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.334909][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.403502][ T5844] usb 2-1: config 0 descriptor?? [ 442.777740][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 442.839630][ T5844] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 442.858327][ T5844] microsoft 0003:045E:07DA.0046: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 442.858362][ T5844] microsoft 0003:045E:07DA.0046: no inputs found [ 442.858377][ T5844] microsoft 0003:045E:07DA.0046: could not initialize ff, continuing anyway [ 443.080497][ T5844] usb 2-1: USB disconnect, device number 27 [ 443.139027][T12821] devtmpfs: Too few inodes for current use [ 443.163667][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 443.209822][T12822] tmpfs: Bad value for 'mpol' [ 443.426797][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 443.628493][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 443.704474][T12834] vlan2: entered promiscuous mode [ 443.973292][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 444.170819][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 444.331271][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 444.443856][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 444.760610][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 444.998799][ T1797] IPVS: starting estimator thread 0... [ 445.064367][T12881] net_ratelimit: 1052 callbacks suppressed [ 445.064391][T12881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.084801][T12882] IPVS: using max 6 ests per chain, 14400 per kthread [ 445.106936][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 445.362694][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.362777][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.422281][T12892] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 445.422343][T12892] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 445.422440][T12892] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 445.422581][T12892] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 445.422636][T12892] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 445.422700][T12892] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 445.422871][T12892] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 445.422923][T12892] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 445.422979][T12892] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 445.423086][T12892] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 445.423139][T12892] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 445.423192][T12892] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 445.423294][T12892] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 445.423348][T12892] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 445.423398][T12892] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 445.423446][T12892] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 445.423499][T12892] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 445.423552][T12892] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 445.432097][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 445.583435][ T38] audit: type=1326 audit(1758337889.159:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.587156][ T38] audit: type=1326 audit(1758337889.159:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.587228][ T38] audit: type=1326 audit(1758337889.159:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.587276][ T38] audit: type=1326 audit(1758337889.159:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.587325][ T38] audit: type=1326 audit(1758337889.159:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.588921][ T38] audit: type=1326 audit(1758337889.159:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.588984][ T38] audit: type=1326 audit(1758337889.159:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.589033][ T38] audit: type=1326 audit(1758337889.159:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12895 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab26fec29 code=0x7ffc0000 [ 445.925407][T12903] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2854'. [ 446.891664][ T1797] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 447.044777][ T1797] usb 3-1: Using ep0 maxpacket: 32 [ 447.047378][ T1797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.047411][ T1797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.049419][ T1797] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.049455][ T1797] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 447.049478][ T1797] usb 3-1: Manufacturer: syz [ 447.073657][ T1797] usb 3-1: config 0 descriptor?? [ 447.080907][ T1797] hub 3-1:0.0: USB hub found [ 447.309846][ T1797] hub 3-1:0.0: 1 port detected [ 447.524476][ T1797] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 447.524505][ T1797] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 447.555556][ T1797] usbhid 3-1:0.0: can't add hid device: -71 [ 447.555693][ T1797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 447.585803][ T1797] usb 3-1: USB disconnect, device number 39 [ 447.796991][T12938] syz.6.2873 (12938) used greatest stack depth: 16248 bytes left [ 448.001006][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 448.147206][T12956] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 448.275684][T12960] sock: sock_set_timeout: `syz.2.2883' (pid 12960) tries to set negative timeout [ 448.282170][T12961] tipc: Enabling not permitted [ 448.282213][T12961] tipc: Enabling of bearer rejected, failed to enable media [ 448.743017][T12971] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 448.774899][T12975] netlink: 'syz.3.2888': attribute type 1 has an invalid length. [ 449.366749][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 449.593811][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 449.796090][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 449.980320][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 450.370926][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 450.754997][T13040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2920'. [ 451.016436][T13048] netlink: 'syz.3.2924': attribute type 9 has an invalid length. [ 451.016461][T13048] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.2924'. [ 451.016600][T13048] openvswitch: netlink: Message has 5 unknown bytes. [ 451.181679][T13056] netlink: 'syz.6.2927': attribute type 31 has an invalid length. [ 451.193218][T13051] vlan4: entered promiscuous mode [ 451.193246][T13051] macvtap0: entered promiscuous mode [ 451.500533][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 451.712603][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2937'. [ 451.714151][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 452.036987][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 452.321917][ T1797] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 452.366504][T13095] macsec1: entered promiscuous mode [ 452.447839][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.475110][ T1797] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.475151][ T1797] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.475194][ T1797] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.475231][ T1797] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 452.475257][ T1797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.483933][ T1797] usb 6-1: config 0 descriptor?? [ 452.920860][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.920899][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.920927][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.920955][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.920982][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.921010][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.921038][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.921065][ T1797] holtek_mouse 0003:04D9:A067.0047: unknown main item tag 0x0 [ 452.942782][ T1797] holtek_mouse 0003:04D9:A067.0047: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 453.149956][ T1797] usb 6-1: USB disconnect, device number 24 [ 453.219341][T13107] fido_id[13107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 453.468672][T13119] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 453.853348][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.030423][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.214283][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.522250][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.742050][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.817157][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 454.941348][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 455.203525][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 455.296123][ T38] audit: type=1326 audit(1758337898.859:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.296207][ T38] audit: type=1326 audit(1758337898.869:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.314509][ T38] audit: type=1326 audit(1758337898.879:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.333115][ T38] audit: type=1326 audit(1758337898.899:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.344253][ T38] audit: type=1326 audit(1758337898.909:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.373708][ T38] audit: type=1326 audit(1758337898.929:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ff41ec29 code=0x7ffc0000 [ 455.493493][T13182] tipc: Enabled bearer , priority 2 [ 455.611749][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 455.755042][T13190] netlink: 79 bytes leftover after parsing attributes in process `syz.5.2991'. [ 455.755284][T13190] netlink: 79 bytes leftover after parsing attributes in process `syz.5.2991'. [ 456.036690][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 456.912404][ T5935] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 457.081229][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 457.081266][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 457.081322][ T5935] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.00 [ 457.081347][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.142390][ T5935] usb 2-1: config 0 descriptor?? [ 457.144379][T13218] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 457.320945][T13237] usb usb8: usbfs: process 13237 (syz.3.3014) did not claim interface 0 before use [ 457.635358][ T5935] corsair-psu 0003:1B1C:1C23.0048: unbalanced collection at end of report description [ 457.636367][ T5935] corsair-psu 0003:1B1C:1C23.0048: probe with driver corsair-psu failed with error -22 [ 457.852086][ T5935] usb 2-1: USB disconnect, device number 28 [ 458.272114][ T1797] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 458.389600][ T5845] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 458.421961][ T1797] usb 4-1: Using ep0 maxpacket: 32 [ 458.425529][ T1797] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 458.425557][ T1797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.425578][ T1797] usb 4-1: config 0 has no interface number 0 [ 458.425629][ T1797] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 458.425660][ T1797] usb 4-1: config 0 interface 8 has no altsetting 0 [ 458.429462][ T1797] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 458.429495][ T1797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.429517][ T1797] usb 4-1: Product: syz [ 458.429532][ T1797] usb 4-1: Manufacturer: syz [ 458.429548][ T1797] usb 4-1: SerialNumber: syz [ 458.465756][ T1797] usb 4-1: config 0 descriptor?? [ 458.703519][ T1797] ath6kl: Failed to submit usb control message: -71 [ 458.703575][ T1797] ath6kl: unable to send the bmi data to the device: -71 [ 458.703592][ T1797] ath6kl: Unable to send get target info: -71 [ 458.704503][ T1797] ath6kl: Failed to init ath6kl core: -71 [ 458.706010][ T1797] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 458.783653][ T1797] usb 4-1: USB disconnect, device number 40 [ 458.963803][T10766] udevd[10766]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 459.177567][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 459.299199][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 459.311580][ T976] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 459.471244][ T976] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 459.471277][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.471299][ T976] usb 3-1: Product: syz [ 459.471314][ T976] usb 3-1: Manufacturer: syz [ 459.471329][ T976] usb 3-1: SerialNumber: syz [ 459.523448][ T976] usb 3-1: config 0 descriptor?? [ 459.541109][ T976] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 459.657331][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 459.742179][T13303] xt_l2tp: invalid flags combination: 8 [ 460.042468][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 460.171747][ T5923] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 460.191749][ T1797] usb 3-1: USB disconnect, device number 40 [ 460.196848][T13314] sp0: Synchronizing with TNC [ 460.205098][T13316] sp0: Found TNC [ 460.207382][T13310] [U] è` [ 460.236450][ T5209] udevd[5209]: worker [10766] terminated by signal 33 (Unknown signal 33) [ 460.236505][ T5209] udevd[5209]: worker [10766] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/video4linux/video103' [ 460.334612][ T5923] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 460.334646][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.364217][ T5923] usb 2-1: config 0 descriptor?? [ 460.650781][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 460.729013][T13327] loop6: detected capacity change from 0 to 7 [ 460.795474][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.795619][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.829388][ T5923] elecom 0003:056E:00E6.0049: unknown main item tag 0x0 [ 460.829429][ T5923] elecom 0003:056E:00E6.0049: unknown main item tag 0x0 [ 460.829463][ T5923] elecom 0003:056E:00E6.0049: unknown main item tag 0x0 [ 460.829491][ T5923] elecom 0003:056E:00E6.0049: unknown main item tag 0x0 [ 460.829518][ T5923] elecom 0003:056E:00E6.0049: unknown main item tag 0x0 [ 460.834047][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.834090][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.842618][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.842660][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.864470][ T5923] elecom 0003:056E:00E6.0049: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 460.865406][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.865446][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.865810][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.865844][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.866161][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.866258][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.866651][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.866684][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.866813][T13327] ldm_validate_partition_table(): Disk read failed. [ 460.867001][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.867041][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.867311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.867341][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.867673][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.867704][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 460.885481][T13327] Dev loop6: unable to read RDB block 0 [ 460.902910][T13327] loop6: unable to read partition table [ 460.903194][T13327] loop6: partition table beyond EOD, truncated [ 460.903248][T13327] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 461.071619][ T976] usb 2-1: USB disconnect, device number 29 [ 461.149949][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/71.tmp-b7:6' failed: Read-only file system [ 461.234028][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 461.344819][T13331] fido_id[13331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 461.356811][ T38] audit: type=1326 audit(1758337904.929:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.378866][ T38] audit: type=1326 audit(1758337904.949:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.378933][ T38] audit: type=1326 audit(1758337904.949:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.382996][ T38] audit: type=1326 audit(1758337904.959:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.383338][ T38] audit: type=1326 audit(1758337904.959:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.401628][ T38] audit: type=1326 audit(1758337904.959:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 461.401702][ T38] audit: type=1326 audit(1758337904.969:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13338 comm="syz.5.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 462.140119][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 462.231813][T13363] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3073'. [ 462.482719][T13367] mkiss: ax0: crc mode is auto. [ 462.607693][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'. [ 462.740999][T13382] netlink: 'syz.5.3081': attribute type 29 has an invalid length. [ 462.829895][T13384] ucma_write: process 1466 (syz.2.3083) changed security contexts after opening file descriptor, this is not allowed. [ 463.039054][T13393] iso9660: Bad value for 'gid' [ 463.039076][T13393] iso9660: Bad value for 'gid' [ 463.220191][T13400] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 463.237199][T13400] block nbd3: Attempted send on invalid socket [ 463.241931][ T976] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 463.394825][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.394864][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 463.394910][ T976] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 463.394936][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.446182][ T976] usb 6-1: config 0 descriptor?? [ 463.447270][T13391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 463.950608][ T976] gembird 0003:11FF:3331.004A: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.5-1/input0 [ 464.100794][ T976] usb 6-1: USB disconnect, device number 25 [ 464.196619][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 464.246532][T13425] fido_id[13425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 464.495310][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 464.685904][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 464.815631][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 464.968760][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 465.200112][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 465.234940][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 465.446624][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 465.531226][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 465.717262][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 465.916948][T13486] netlink: 'syz.5.3127': attribute type 21 has an invalid length. [ 465.916975][T13486] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3127'. [ 465.917075][T13486] netlink: 'syz.5.3127': attribute type 4 has an invalid length. [ 465.917090][T13486] netlink: 'syz.5.3127': attribute type 5 has an invalid length. [ 465.917105][T13486] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3127'. [ 466.321894][T13499] tipc: Enabling of bearer rejected, already enabled [ 466.690228][T13511] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 466.690228][T13511] program syz.3.3139 not setting count and/or reply_len properly [ 466.811967][ T976] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 466.961561][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 466.967111][ T976] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 466.967144][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.967166][ T976] usb 2-1: Product: syz [ 466.967182][ T976] usb 2-1: Manufacturer: syz [ 466.967197][ T976] usb 2-1: SerialNumber: syz [ 467.027119][ T976] usb 2-1: config 0 descriptor?? [ 467.047161][ T976] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 467.685201][ T976] gspca_stk1135: reg_w 0x3 err -71 [ 467.686283][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686296][ T976] gspca_stk1135: Sensor write failed [ 467.686329][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686339][ T976] gspca_stk1135: Sensor write failed [ 467.686369][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686377][ T976] gspca_stk1135: Sensor read failed [ 467.686410][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686419][ T976] gspca_stk1135: Sensor read failed [ 467.686426][ T976] gspca_stk1135: Detected sensor type unknown (0x0) [ 467.686465][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686475][ T976] gspca_stk1135: Sensor read failed [ 467.686507][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686517][ T976] gspca_stk1135: Sensor read failed [ 467.686560][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686570][ T976] gspca_stk1135: Sensor write failed [ 467.686603][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 467.686612][ T976] gspca_stk1135: Sensor write failed [ 467.686708][ T976] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 467.717733][ T976] usb 2-1: USB disconnect, device number 30 [ 468.354964][ T5923] hid-generic 0001:0009:0001.004B: item fetching failed at offset 0/4 [ 468.355805][ T5923] hid-generic 0001:0009:0001.004B: probe with driver hid-generic failed with error -22 [ 468.575428][T13552] netlink: 'syz.3.3158': attribute type 7 has an invalid length. [ 468.575452][T13552] netlink: 'syz.3.3158': attribute type 8 has an invalid length. [ 469.233427][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 469.327954][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 469.352302][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'. [ 469.352340][T13572] tipc: Started in network mode [ 469.352365][T13572] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 469.352419][T13572] tipc: Enabling of bearer rejected, failed to enable media [ 469.506548][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 469.704716][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3172'. [ 469.726658][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 469.750037][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 470.074351][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 470.329596][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 470.423501][T13603] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3182'. [ 470.505697][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 470.671361][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 470.771555][ T5942] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 470.879493][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 470.924212][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.924268][ T5942] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 470.924294][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.937921][ T5942] usb 6-1: config 0 descriptor?? [ 471.456546][ T5942] uclogic 0003:5543:0522.004C: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 471.600026][ T5923] usb 6-1: USB disconnect, device number 26 [ 471.873260][T13622] fido_id[13622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 472.467363][T13641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 472.771804][ T5923] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 472.925843][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.925896][ T5923] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 472.925922][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.941658][ T5923] usb 3-1: config 0 descriptor?? [ 473.439855][ T5923] nintendo 0003:057E:200E.004D: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 473.495980][ T5923] nintendo 0003:057E:200E.004D: Failed charging grip handshake [ 473.496006][ T5923] nintendo 0003:057E:200E.004D: Failed to initialize controller; ret=-110 [ 473.570465][ T5923] nintendo 0003:057E:200E.004D: probe - fail = -110 [ 473.570629][ T5923] nintendo 0003:057E:200E.004D: probe with driver nintendo failed with error -110 [ 473.617682][ T5923] usb 3-1: USB disconnect, device number 41 [ 474.021682][ T5935] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 474.216602][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.216666][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 474.216691][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.269685][ T5935] usb 4-1: config 0 descriptor?? [ 474.414587][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 474.561701][ T976] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 474.696974][ T5935] microsoft 0003:045E:00F9.004E: unbalanced delimiter at end of report description [ 474.697784][ T5935] microsoft 0003:045E:00F9.004E: parse failed [ 474.697892][ T5935] microsoft 0003:045E:00F9.004E: probe with driver microsoft failed with error -22 [ 474.726486][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 474.744442][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 474.748393][ T976] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 474.748424][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.748445][ T976] usb 3-1: Product: syz [ 474.748460][ T976] usb 3-1: Manufacturer: syz [ 474.748476][ T976] usb 3-1: SerialNumber: syz [ 474.802171][ T976] usb 3-1: config 0 descriptor?? [ 474.879417][T12740] udevd[12740]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 474.904332][ T5935] usb 4-1: USB disconnect, device number 41 [ 475.143188][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 475.149725][T13694] tipc: Started in network mode [ 475.149758][T13694] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 475.156254][T13694] tipc: Enabled bearer , priority 10 [ 475.226216][ T976] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 475.325608][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 475.427216][ T976] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 475.427744][ T976] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 475.442987][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 475.488690][ T976] usb 3-1: USB disconnect, device number 42 [ 475.730007][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 475.741945][ T5935] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 475.794418][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 475.909296][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.909332][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.909358][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.909403][ T5935] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 475.909428][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.010643][ T5935] usb 6-1: config 0 descriptor?? [ 476.045303][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 476.261921][ T5919] tipc: Node number set to 10136234 [ 476.376449][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 476.613652][ T5935] elo 0003:04E7:0030.004F: reserved main item tag 0xe [ 476.613691][ T5935] elo 0003:04E7:0030.004F: item fetching failed at offset 8/9 [ 476.614540][ T5935] elo 0003:04E7:0030.004F: parse failed [ 476.614651][ T5935] elo 0003:04E7:0030.004F: probe with driver elo failed with error -22 [ 476.845865][ T5935] usb 6-1: USB disconnect, device number 27 [ 476.936864][T10621] udevd[10621]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 477.281943][ T976] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 477.445113][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.445166][ T976] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 477.445191][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.484131][ T976] usb 3-1: config 0 descriptor?? [ 477.982731][ T976] nintendo 0003:057E:200E.0050: unbalanced delimiter at end of report description [ 477.983573][ T976] nintendo 0003:057E:200E.0050: HID parse failed [ 477.990907][ T976] nintendo 0003:057E:200E.0050: probe - fail = -22 [ 477.991031][ T976] nintendo 0003:057E:200E.0050: probe with driver nintendo failed with error -22 [ 478.165417][ T5935] usb 3-1: USB disconnect, device number 43 [ 478.449211][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 478.671845][ T5935] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 478.824494][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 478.824549][ T5935] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 478.824575][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.848205][ T5935] usb 6-1: config 0 descriptor?? [ 479.320272][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0051: unknown main item tag 0x0 [ 479.364450][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0051: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.5-1/input0 [ 479.557514][ T5935] usb 6-1: USB disconnect, device number 28 [ 479.809850][T13798] fido_id[13798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 479.818406][T13802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.943877][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 480.256258][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 480.389645][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 480.523660][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 480.588058][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 480.863294][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 481.030803][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 481.089881][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 481.266326][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 481.394769][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.443285][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 481.789396][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.376902][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.595022][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.757083][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.932091][ T45] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 483.129628][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.129666][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.129710][ T45] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 483.129736][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.183831][ T45] usb 2-1: config 0 descriptor?? [ 483.204331][T13882] netlink: 'syz.5.3307': attribute type 1 has an invalid length. [ 483.204359][T13882] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3307'. [ 483.204377][T13882] netlink: 'syz.5.3307': attribute type 1 has an invalid length. [ 483.204392][T13882] netlink: 'syz.5.3307': attribute type 2 has an invalid length. [ 483.397535][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3310'. [ 483.629028][ T45] cp2112 0003:10C4:EA90.0052: item fetching failed at offset 5/7 [ 483.629852][ T45] cp2112 0003:10C4:EA90.0052: parse failed [ 483.630007][ T45] cp2112 0003:10C4:EA90.0052: probe with driver cp2112 failed with error -22 [ 483.865314][ T45] usb 2-1: USB disconnect, device number 31 [ 484.164207][ T976] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 484.314342][ T976] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 484.314408][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.315982][ T976] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 484.316012][ T976] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 484.316034][ T976] usb 3-1: Manufacturer: syz [ 484.387604][ T976] usb 3-1: config 0 descriptor?? [ 484.521732][ T976] rc_core: IR keymap rc-hauppauge not found [ 484.521756][ T976] Registered IR keymap rc-empty [ 484.523775][ T976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 484.527383][ T976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 484.893410][T13919] rc rc0: two consecutive events of type space [ 485.096598][ T976] usb 3-1: USB disconnect, device number 44 [ 485.172361][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 485.367408][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 485.604669][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 485.786625][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 485.948161][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 486.088606][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 486.100888][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 486.418751][T10505] udevd[10505]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 486.467758][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 486.762875][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 487.063442][T13995] veth0_to_bond: entered allmulticast mode [ 488.552252][ T38] audit: type=1326 audit(1758337932.129:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.3.3382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ab26fec29 code=0x0 [ 488.954582][ T59] Bluetooth: hci3: link tx timeout [ 488.955073][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 489.513780][ T5919] syz_tun: tun_net_xmit 110 [ 489.639236][T14070] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3397'. [ 489.639262][T14070] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3397'. [ 490.013844][ T5935] syz_tun: tun_net_xmit 110 [ 490.059994][T14076] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 490.149226][T14076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 490.339823][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3406'. [ 490.399212][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 490.472028][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 490.647029][T10537] udevd[10537]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 490.842923][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 491.031734][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 491.085002][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 491.323407][T10505] udevd[10505]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 491.356960][T14121] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3421'. [ 491.484651][T14125] Bluetooth: MGMT ver 1.23 [ 491.613521][ T5935] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 491.699142][T14130] ip6gretap1: entered allmulticast mode [ 491.764437][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.764480][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.764527][ T5935] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 491.764552][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.787869][ T5935] usb 6-1: config 0 descriptor?? [ 492.223263][T14145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.312263][ T5935] hid-picolcd 0003:04D8:C002.0053: No report with id 0x11 found [ 492.431917][ T45] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 492.436542][ T5935] usb 6-1: USB disconnect, device number 29 [ 492.581658][ T976] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 492.581806][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 492.617784][ T45] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 492.617820][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.617842][ T45] usb 4-1: Product: syz [ 492.617859][ T45] usb 4-1: Manufacturer: syz [ 492.617875][ T45] usb 4-1: SerialNumber: syz [ 492.669723][ T45] usb 4-1: config 0 descriptor?? [ 492.695251][ T45] gspca_main: sq905-2.14.0 probing 2770:9120 [ 492.739661][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.739691][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.741158][ T976] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.741252][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.741277][ T976] usb 2-1: SerialNumber: syz [ 493.229489][ T976] usb 2-1: 0:2 : does not exist [ 493.230991][ T976] usb 2-1: unit 255 not found! [ 493.586263][ T45] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 493.586368][ T45] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 493.715700][ T45] usb 4-1: USB disconnect, device number 42 [ 493.846140][ T38] audit: type=1326 audit(1758337937.419:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.898107][ T38] audit: type=1326 audit(1758337937.469:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.898167][ T38] audit: type=1326 audit(1758337937.469:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.898216][ T38] audit: type=1326 audit(1758337937.469:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.998860][ T38] audit: type=1326 audit(1758337937.569:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.998925][ T38] audit: type=1326 audit(1758337937.569:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 493.998974][ T38] audit: type=1326 audit(1758337937.569:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14157 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87343ec29 code=0x7ffc0000 [ 494.199811][ T976] usb 2-1: USB disconnect, device number 32 [ 494.260261][T12740] udevd[12740]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 494.353868][T10621] udevd[10621]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 494.467394][T10505] udevd[10505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.739074][T10537] udevd[10537]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 494.961730][ T976] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 495.116418][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 495.116457][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 495.116484][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 495.120684][ T976] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 495.120714][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.120736][ T976] usb 4-1: Product: syz [ 495.120752][ T976] usb 4-1: Manufacturer: syz [ 495.120767][ T976] usb 4-1: SerialNumber: syz [ 495.232799][ T976] usb 4-1: config 0 descriptor?? [ 495.234715][T14168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.235534][T14168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.290001][ T976] usb 4-1: ucan: probing device on interface #0 [ 495.901973][ T976] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 495.973307][ T976] usb 4-1: USB disconnect, device number 43 [ 496.722135][T14191] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 496.722159][T14191] netlink: 'syz.3.3456': attribute type 1 has an invalid length. [ 496.722173][T14191] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3456'. [ 499.931445][ C0] sched: DL replenish lagged too much [ 502.010780][T14201] udevd[14201]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 502.011931][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 502.056423][T14205] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 502.299307][T14201] udevd[14201]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 503.186293][T14215] xfs: Unexpected value for 'discard' [ 503.730479][T14201] udevd[14201]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 503.996738][T14201] udevd[14201]: symlink '../../loop6' '/dev/disk/by-diskseq/72.tmp-b7:6' failed: Read-only file system [ 504.124457][T14225] dummy0: entered promiscuous mode [ 504.125034][T14225] macsec1: entered promiscuous mode [ 504.687539][T14231] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3474'. [ 506.812513][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.812600][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.704689][T14225] dummy0: left promiscuous mode [ 508.185018][T14241] udevd[14241]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 508.395164][T14241] udevd[14241]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 508.817922][T14245] udevd[14245]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 509.041819][T14245] udevd[14245]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 509.284792][T14245] udevd[14245]: symlink '../../loop5' '/dev/disk/by-diskseq/70.tmp-b7:5' failed: Read-only file system [ 518.225034][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 518.240472][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 518.256015][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 518.282870][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 518.287169][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.615266][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 519.656330][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 519.659053][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 519.660493][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 519.683860][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 520.359336][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.402022][ T59] Bluetooth: hci5: command tx timeout [ 521.096984][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 521.133873][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 521.137272][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 521.166344][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 521.167197][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 521.752950][ T59] Bluetooth: hci6: command tx timeout [ 522.471792][ T59] Bluetooth: hci5: command tx timeout [ 523.271777][ T59] Bluetooth: hci7: command tx timeout [ 523.832234][ T59] Bluetooth: hci6: command tx timeout [ 524.555720][ T5845] Bluetooth: hci5: command tx timeout [ 524.622395][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 524.653410][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 524.656507][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 524.683247][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 524.690121][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 525.351772][ T59] Bluetooth: hci7: command tx timeout [ 525.784707][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 525.806507][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 525.821281][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 525.838616][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 525.861736][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 525.912547][ T5843] Bluetooth: hci6: command tx timeout [ 526.632082][ T5843] Bluetooth: hci5: command tx timeout [ 526.792153][ T5843] Bluetooth: hci8: command tx timeout [ 527.431947][ T5843] Bluetooth: hci7: command tx timeout [ 527.911873][ T59] Bluetooth: hci9: command tx timeout [ 527.991908][ T59] Bluetooth: hci6: command tx timeout [ 528.871822][ T59] Bluetooth: hci8: command tx timeout [ 529.512282][ T59] Bluetooth: hci7: command tx timeout [ 530.002316][ T59] Bluetooth: hci9: command tx timeout [ 530.952071][ T59] Bluetooth: hci8: command tx timeout [ 532.071750][ T59] Bluetooth: hci9: command tx timeout [ 533.032344][ T59] Bluetooth: hci8: command tx timeout [ 534.152081][ T59] Bluetooth: hci9: command tx timeout [ 566.772578][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.238518][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.238603][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.366072][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.713742][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.763167][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.769072][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.770412][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.771276][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 579.968044][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 579.999204][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.012353][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.020891][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.037081][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.872179][ T5843] Bluetooth: hci0: command tx timeout [ 581.471220][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.513833][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.518806][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.520179][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.543474][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.151850][ T5843] Bluetooth: hci1: command tx timeout [ 582.952011][ T5843] Bluetooth: hci0: command tx timeout [ 583.671715][ T5843] Bluetooth: hci2: command tx timeout [ 584.241653][ T5843] Bluetooth: hci1: command tx timeout [ 585.031925][ T5843] Bluetooth: hci0: command tx timeout [ 585.087008][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.110431][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.120747][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.154889][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.162632][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.751558][ T5843] Bluetooth: hci2: command tx timeout [ 586.245018][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 586.282126][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 586.286939][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 586.289159][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 586.290686][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 586.312690][ T59] Bluetooth: hci1: command tx timeout [ 587.112452][ T5845] Bluetooth: hci0: command tx timeout [ 587.271824][ T5845] Bluetooth: hci4: command tx timeout [ 587.832431][ T5845] Bluetooth: hci2: command tx timeout [ 588.391948][ T5845] Bluetooth: hci10: command tx timeout [ 588.392729][ T5845] Bluetooth: hci1: command tx timeout [ 589.362367][T14307] Bluetooth: hci4: command tx timeout [ 589.913187][T14307] Bluetooth: hci2: command tx timeout [ 590.471909][T14307] Bluetooth: hci10: command tx timeout [ 591.432392][T14307] Bluetooth: hci4: command tx timeout [ 592.006416][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.087419][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.551950][T14307] Bluetooth: hci10: command tx timeout [ 593.514718][T14307] Bluetooth: hci4: command tx timeout [ 594.632013][T14307] Bluetooth: hci10: command tx timeout [ 610.437805][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.279103][T14307] Bluetooth: hci3: command 0x0405 tx timeout [ 622.247845][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.685761][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.685845][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.405513][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 640.444280][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 640.445941][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 640.448124][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 640.449651][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 641.430219][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 641.456328][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 641.457972][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 641.483451][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 641.490352][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 642.044504][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 642.050066][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 642.067846][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 642.069713][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 642.109377][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 645.679469][T14323] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 645.701995][T14323] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 645.741647][T14323] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 645.743376][T14323] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 645.744259][T14323] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 646.865212][T14330] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 646.888064][T14330] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 646.889581][T14330] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 646.890956][T14330] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 646.915059][T14330] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 667.111124][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.668463][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.120132][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.120222][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.870601][T14333] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 700.923782][T14333] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 700.926659][T14333] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 700.927968][T14333] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 700.929284][T14333] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 702.178184][T14354] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 702.231286][T14354] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 702.241273][T14354] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 702.243584][T14354] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 702.244461][T14354] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 703.429871][T14358] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 703.460850][T14358] Bluetooth: hci0: command 0x0406 tx timeout [ 703.460891][T14358] Bluetooth: hci1: command 0x0406 tx timeout [ 703.482095][T14360] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 703.499442][T14360] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 703.501073][T14360] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 703.522317][T14360] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 706.326327][T14351] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 706.332135][T14351] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 706.352055][T14351] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 706.353422][T14351] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 706.354853][T14351] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 707.267758][T14366] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 707.290550][T14366] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 707.302179][T14366] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 707.309190][T14366] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 707.310187][T14366] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 707.752058][ T39] INFO: task syz.6.3471:14225 blocked for more than 143 seconds. [ 707.752091][ T39] Not tainted syzkaller #0 [ 707.752103][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.752118][ T39] task:syz.6.3471 state:D stack:22664 pid:14225 tgid:14224 ppid:10218 task_flags:0x400140 flags:0x00004006 [ 707.752187][ T39] Call Trace: [ 707.752195][ T39] [ 707.752211][ T39] __schedule+0x16f3/0x4c20 [ 707.752277][ T39] ? __lock_acquire+0xab9/0xd20 [ 707.752311][ T39] ? __pfx___schedule+0x10/0x10 [ 707.752362][ T39] ? schedule+0x91/0x360 [ 707.752398][ T39] schedule+0x165/0x360 [ 707.752434][ T39] schedule_timeout+0x9a/0x270 [ 707.752464][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 707.752510][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.752544][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.752576][ T39] ? wait_for_completion+0x267/0x5d0 [ 707.752612][ T39] wait_for_completion+0x2bf/0x5d0 [ 707.752661][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 707.752703][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 707.752736][ T39] rcu_barrier+0x463/0x570 [ 707.752772][ T39] netdev_run_todo+0x327/0xea0 [ 707.752805][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 707.752850][ T39] rtnl_newlink+0x177b/0x1c70 [ 707.752904][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 707.752933][ T39] ? migrate_enable+0x29c/0x3c0 [ 707.752962][ T39] ? reacquire_held_locks+0x127/0x1d0 [ 707.752995][ T39] ? __pfx_migrate_enable+0x10/0x10 [ 707.753023][ T39] ? __pfx_migrate_enable+0x10/0x10 [ 707.753067][ T39] ? __local_bh_enable+0x23f/0x3d0 [ 707.753095][ T39] ? reacquire_held_locks+0x127/0x1d0 [ 707.753131][ T39] ? __pfx___local_bh_enable+0x10/0x10 [ 707.753168][ T39] ? __local_bh_enable_ip+0x1b2/0x270 [ 707.753197][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.753235][ T39] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 707.753262][ T39] ? dev_hard_start_xmit+0x7f5/0x870 [ 707.753285][ T39] ? __dev_queue_xmit+0x26f/0x3b70 [ 707.753318][ T39] ? __dev_queue_xmit+0x26f/0x3b70 [ 707.753343][ T39] ? __dev_queue_xmit+0x26f/0x3b70 [ 707.753371][ T39] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 707.753402][ T39] ? __lock_acquire+0xab9/0xd20 [ 707.753461][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 707.753492][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 707.753528][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 707.753558][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 707.753586][ T39] ? ref_tracker_free+0x61e/0x7c0 [ 707.753622][ T39] ? __asan_memcpy+0x40/0x70 [ 707.753647][ T39] ? __pfx_ref_tracker_free+0x10/0x10 [ 707.753679][ T39] ? __skb_clone+0x63/0x7a0 [ 707.753713][ T39] netlink_rcv_skb+0x205/0x470 [ 707.753747][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 707.753780][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.753826][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.753894][ T39] netlink_unicast+0x843/0xa10 [ 707.753935][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 707.753966][ T39] ? netlink_sendmsg+0x642/0xb30 [ 707.753996][ T39] ? skb_put+0x11b/0x210 [ 707.754034][ T39] netlink_sendmsg+0x805/0xb30 [ 707.754078][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.754119][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 707.754142][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.754177][ T39] __sock_sendmsg+0x219/0x270 [ 707.754210][ T39] ____sys_sendmsg+0x508/0x820 [ 707.754240][ T39] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.754274][ T39] ? import_iovec+0x74/0xa0 [ 707.754308][ T39] ___sys_sendmsg+0x21f/0x2a0 [ 707.754335][ T39] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.754402][ T39] ? __fget_files+0x2a/0x420 [ 707.754450][ T39] ? __fget_files+0x3a6/0x420 [ 707.754495][ T39] __x64_sys_sendmsg+0x1a1/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 707.754522][ T39] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.754559][ T39] ? rcu_is_watching+0x15/0xb0 [ 707.754599][ T39] ? do_syscall_64+0xbe/0x3b0 [ 707.754627][ T39] do_syscall_64+0xfa/0x3b0 [ 707.754648][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.754681][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.754704][ T39] ? clear_bhb_loop+0x60/0xb0 [ 707.754731][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.754761][ T39] RIP: 0033:0x7fc85031ec29 [ 707.754785][ T39] RSP: 002b:00007fc84e57e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.754810][ T39] RAX: ffffffffffffffda RBX: 00007fc850565fa0 RCX: 00007fc85031ec29 [ 707.754827][ T39] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 707.754842][ T39] RBP: 00007fc8503a1e41 R08: 0000000000000000 R09: 0000000000000000 [ 707.754856][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.754870][ T39] R13: 00007fc850566038 R14: 00007fc850565fa0 R15: 00007ffd3bf1efa8 [ 707.754914][ T39] [ 707.754955][ T39] [ 707.754955][ T39] Showing all locks held in the system: [ 707.754966][ T39] 4 locks held by kworker/0:0/9: [ 707.754979][ T39] #0: ffff888036021938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.755044][ T39] #1: ffff[ 707.755044][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.755123][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.755179][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.755237][ T39] 2 locks held by ksoftirqd/0/15: [ 707.755250][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.755307][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.755363][ T39] 7 locks held by ktimers/0/16: [ 707.755377][ T39] 2 locks held by rcuc/0/20: [ 707.755389][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.755446][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.755506][ T39] 1 lock held by khungtaskd/39: [ 707.755518][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 707.755573][ T39] 4 locks held by kworker/u9:0/59: [ 707.755586][ T39] #0: ffff8880272fa938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.755678][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.755738][ T39] #2: ffff88807af400a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 707.755803][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 707.755877][ T39] 3 locks held by kworker/u8:9/1380: [ 707.755898][ T39] #0: ffff88802f98c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.755959][ T39] #1: ffffc90004fb7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.756021][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 707.756081][ T39] 4 locks held by kworker/u8:12/1436: [ 707.756094][ T39] #0: ffff88814dc34138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.756155][ T39] #1: ffffc900052e7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.756216][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.756274][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.756348][ T39] 3 locks held by kworker/u8:15/3594: [ 707.756362][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.756422][ T39] #1: ffffc9000d357bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.756481][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 707.756537][ T39] 2 locks held by getty/5601: [ 707.756550][ T39] #0: ffff88823bf788a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 707.756616][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 707.756677][ T39] 4 locks held by kworker/u9:2/5843: [ 707.756690][ T39] #0: ffff88803b661938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.756755][ T39] #1: ffffc90004d57bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.756815][ T39] #2: ffff88804a0f80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 707.756878][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 707.756949][ T39] 4 locks held by kworker/u9:3/5845: [ 707.756962][ T39] #0: ffff88806024c138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.757027][ T39] #1: ffffc90004d77bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.757087][ T39] #2: ffff8880585480a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 707.757150][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 707.757213][ T39] 4 locks held by kworker/0:4/5920: [ 707.757420][ T39] #0: ffff88805c20f538 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.757507][ T39] #1: ffffc900051b7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.757572][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.757631][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.757694][ T39] 2 locks held by kworker/0:5/5923: [ 707.757709][ T39] 3 locks held by kworker/0:6/5934: [ 707.757722][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.757784][ T39] #1: ffffc90005297bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.757845][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 707.757921][ T39] 1 lock held by syz.2.3460/14205: [ 707.757935][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 707.757993][ T39] 1 lock held by syz.1.3468/14219: [ 707.758006][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 707.758062][ T39] 2 locks held by syz.6.3471/14225: [ 707.758074][ T39] #0: ffffffff8f1d7e08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 707.758146][ T39] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 707.758201][ T39] 1 lock held by syz.3.3477/14239: [ 707.758214][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 707.758281][ T39] 1 lock held by syz.5.3482/14252: [ 707.758294][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 707.758360][ T39] 4 locks held by kworker/0:1/14253: [ 707.758374][ T39] 3 locks held by syz-executor/14255: [ 707.758388][ T39] #0: ffff888044438e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 707.758450][ T39] #1: ffff8880444380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 707.758515][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 707.758572][ T39] 3 locks held by syz-executor/14261: [ 707.758586][ T39] #0: ffff888051a20e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 707.758647][ T39] #1: ffff888051a200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 707.758711][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 707.758768][ T39] 2 locks held by syz-executor/14264: [ 707.758781][ T39] #0: ffff88803d908e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 707.758842][ T39] #1: ffff88803d9080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 707.758916][ T39] 4 locks held by syz-executor/14270: [ 707.758930][ T39] #0: ffff88803a65ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 707.758990][ T39] #1: ffff88803a65c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 707.759055][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 707.759112][ T39] #3: ffff8880588c9b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 707.759169][ T39] 4 locks held by kworker/0:10/14276: [ 707.759182][ T39] #0: ffff88805c4ff538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.759249][ T39] #1: ffffc90018427bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.759333][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.759394][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.759457][ T39] 4 locks held by kworker/0:12/14280: [ 707.759483][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.759543][ T39] #1: ffffc90018c37bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.759604][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 707.759661][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 707.759722][ T39] 1 lock held by syz-executor/14288: [ 707.759736][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.759792][ T39] 1 lock held by syz-executor/14293: [ 707.759805][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.759860][ T39] 1 lock held by syz-executor/14296: [ 707.759873][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.759953][ T39] 1 lock held by syz-executor/14300: [ 707.759967][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760022][ T39] 1 lock held by syz-executor/14305: [ 707.760035][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760090][ T39] 4 locks held by kworker/u9:1/14307: [ 707.760103][ T39] #0: ffff888030a53138 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.760168][ T39] #1: ffffc90005747bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.760228][ T39] #2: ffff88802c12c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 707.760293][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 707.760356][ T39] 1 lock held by syz-executor/14315: [ 707.760370][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760426][ T39] 1 lock held by syz-executor/14319: [ 707.760439][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760494][ T39] 1 lock held by syz-executor/14321: [ 707.760508][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760563][ T39] 4 locks held by kworker/u9:4/14323: [ 707.760576][ T39] #0: ffff88807d495938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.760641][ T39] #1: ffffc90004677bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.760700][ T39] #2: ffff888082c680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 707.760759][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 707.760819][ T39] 1 lock held by syz-executor/14327: [ 707.760831][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.760893][ T39] 4 locks held by kworker/u9:5/14330: [ 707.760907][ T39] #0: ffff888023242138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 707.760989][ T39] #1: ffffc90004647bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 707.761049][ T39] #2: ffff88804cd740a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 707.761120][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 707.761182][ T39] 1 lock held by syz-executor/14331: [ 707.761195][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 707.761251][ T39] 5 locks held by kworker/u9:6/14333: [ 707.761264][ T39] #0: ffff88803721f938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.101544][ T39] #1: ffffc90004547bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.101616][ T39] #2: ffff88803c5c0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 708.101678][ T39] #3: ffff88803c5c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 708.101871][ T39] #4: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 708.101958][ T39] 1 lock held by syz-executor/14345: [ 708.101973][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 708.102033][ T39] 5 locks held by kworker/u9:7/14347: [ 708.102048][ T39] #0: ffff888060248138 ((wq_completion)hci0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.102134][ T39] #1: ffffc900042e7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.102196][ T39] #2: ffff8880396fce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 708.102253][ T39] #3: ffff8880396fc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 708.102321][ T39] #4: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 708.102392][ T39] 3 locks held by kworker/u9:8/14351: [ 708.102406][ T39] #0: ffff888054b3e938 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.102470][ T39] #1: ffffc90003fa7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.102535][ T39] #2: ffff8880504ace80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 708.102596][ T39] 4 locks held by kworker/u9:9/14352: [ 708.102610][ T39] #0: ffff88806080e938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.102685][ T39] #1: ffffc9000156fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.102746][ T39] #2: ffff888063ac00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 708.102808][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 708.102901][ T39] 1 lock held by syz-executor/14353: [ 708.102916][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 708.102973][ T39] 4 locks held by kworker/u9:10/14354: [ 708.102986][ T39] #0: ffff8880233cc138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.103071][ T39] #1: ffffc9000123fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.103133][ T39] #2: ffff88803cb300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 708.103193][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 708.103254][ T39] 1 lock held by syz-executor/14357: [ 708.103268][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 708.103324][ T39] 4 locks held by kworker/u9:12/14360: [ 708.103338][ T39] #0: ffff888038fe0938 ((wq_completion)hci9#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.103403][ T39] #1: ffffc900042f7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.103463][ T39] #2: ffff88802506c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 708.103535][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 708.103592][ T39] 1 lock held by syz-executor/14362: [ 708.103605][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 708.103660][ T39] 3 locks held by kworker/u9:13/14364: [ 708.103674][ T39] #0: ffff888035b22938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.103732][ T39] #1: ffffc900057cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.103792][ T39] #2: ffff888053f68e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 708.103848][ T39] 3 locks held by kworker/u9:14/14365: [ 708.103868][ T39] #0: ffff88804d904938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.103932][ T39] #1: ffffc90004577bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.103993][ T39] #2: ffff888024480e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 708.104048][ T39] 4 locks held by kworker/u9:15/14366: [ 708.104062][ T39] #0: ffff88805fc8f138 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 708.104127][ T39] #1: ffffc90004587bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 708.104185][ T39] #2: ffff8880841d40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 708.104242][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 708.104301][ T39] 1 lock held by syz-executor/14369: [ 708.104315][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 708.104375][ T39] [ 708.104381][ T39] ============================================= [ 708.104381][ T39] [ 708.104407][ T39] NMI backtrace for cpu 1 [ 708.104436][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.104462][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.104475][ T39] Call Trace: [ 708.104485][ T39] [ 708.104512][ T39] dump_stack_lvl+0x189/0x250 [ 708.104550][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.104583][ T39] ? __pfx__printk+0x10/0x10 [ 708.104622][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 708.104654][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 708.104684][ T39] ? __pfx__printk+0x10/0x10 [ 708.104713][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 708.104745][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 708.104778][ T39] watchdog+0xf93/0xfe0 [ 708.104813][ T39] ? watchdog+0x1de/0xfe0 [ 708.104848][ T39] kthread+0x70e/0x8a0 [ 708.104892][ T39] ? __pfx_watchdog+0x10/0x10 [ 708.104920][ T39] ? __pfx_kthread+0x10/0x10 [ 708.104959][ T39] ? __pfx_kthread+0x10/0x10 [ 708.104995][ T39] ret_from_fork+0x436/0x7d0 [ 708.105027][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 708.105063][ T39] ? __switch_to_asm+0x39/0x70 [ 708.105083][ T39] ? __switch_to_asm+0x33/0x70 [ 708.105103][ T39] ? __pfx_kthread+0x10/0x10 [ 708.105137][ T39] ret_from_fork_asm+0x1a/0x30 [ 708.105175][ T39] [ 708.105184][ T39] Sending NMI from CPU 1 to CPUs 0: [ 708.105214][ C0] NMI backtrace for cpu 0 [ 708.105229][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.105250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.105262][ C0] RIP: 0010:___slab_alloc+0x4a2/0xdc0 [ 708.105281][ C0] Code: 83 c7 58 be ff ff ff ff e8 2b a6 e3 08 85 c0 0f 84 2e 08 00 00 49 8b 46 10 83 78 28 00 0f 89 b6 08 00 00 8b 43 28 4a 8b 04 38 <49> 89 06 49 83 46 08 08 48 8b 1b 48 83 c3 20 e8 2a bc e3 08 41 89 [ 708.105297][ C0] RSP: 0018:ffffc90000156d00 EFLAGS: 00000282 [ 708.105314][ C0] RAX: ffff888066ae6d80 RBX: ffff888140ec8c80 RCX: 98d2d2d347db7d00 [ 708.105329][ C0] RDX: 0000000000000000 RSI: ffffffff8d21af44 RDI: ffffffff8b621680 [ 708.105342][ C0] RBP: ffffea00019ab900 R08: 0000000000000000 R09: ffffffff8af95c4b [ 708.105355][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 [ 708.105368][ C0] R13: ffffffff91f897d0 R14: ffff8880b88457b0 R15: ffff888066ae70c0 [ 708.105382][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 708.105399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.105411][ C0] CR2: 00007f15cd196038 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 708.105429][ C0] Call Trace: [ 708.105435][ C0] [ 708.105446][ C0] ? kmalloc_reserve+0xbd/0x290 [ 708.105477][ C0] ? kmalloc_reserve+0xbd/0x290 [ 708.105503][ C0] kmem_cache_alloc_node_noprof+0xf2/0x330 [ 708.105534][ C0] kmalloc_reserve+0xbd/0x290 [ 708.105563][ C0] __alloc_skb+0x142/0x2d0 [ 708.105592][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 708.105636][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 708.105664][ C0] ? nft_synproxy_eval_v6+0x160/0x560 [ 708.105684][ C0] ? synproxy_pernet+0x45/0x270 [ 708.105707][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 708.105731][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 708.105753][ C0] ? nf_ip_checksum+0x13c/0x510 [ 708.105775][ C0] nft_synproxy_do_eval+0x345/0x570 [ 708.105814][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 708.105835][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 708.105864][ C0] nft_do_chain+0x409/0x1920 [ 708.105892][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 708.105914][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 708.105948][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 708.105972][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 708.105998][ C0] nft_do_chain_inet+0x25d/0x340 [ 708.106017][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 708.106044][ C0] ? NF_HOOK+0x9a/0x3a0 [ 708.106069][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 708.106089][ C0] nf_hook_slow+0xc2/0x220 [ 708.106119][ C0] NF_HOOK+0x206/0x3a0 [ 708.106145][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 708.106170][ C0] ? NF_HOOK+0x9a/0x3a0 [ 708.106194][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 708.106218][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 708.106245][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 708.106273][ C0] ? skb_dst+0x4f/0xd0 [ 708.106297][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 708.106325][ C0] NF_HOOK+0x30c/0x3a0 [ 708.106350][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 708.106374][ C0] ? NF_HOOK+0x9a/0x3a0 [ 708.106398][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 708.106423][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 708.106455][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 708.106479][ C0] __netif_receive_skb+0x143/0x380 [ 708.106502][ C0] ? rt_spin_unlock+0x65/0x80 [ 708.106528][ C0] ? process_backlog+0x27b/0x900 [ 708.106551][ C0] process_backlog+0x31e/0x900 [ 708.106583][ C0] __napi_poll+0xb6/0x540 [ 708.106614][ C0] net_rx_action+0x707/0xe00 [ 708.106638][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 708.106674][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 708.106720][ C0] handle_softirqs+0x22f/0x710 [ 708.106749][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 708.106778][ C0] run_ktimerd+0xcf/0x190 [ 708.106803][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 708.106829][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 708.106852][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 708.106876][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 708.106898][ C0] smpboot_thread_fn+0x53f/0xa60 [ 708.106921][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 708.106949][ C0] kthread+0x70e/0x8a0 [ 708.106978][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 708.107000][ C0] ? __pfx_kthread+0x10/0x10 [ 708.107030][ C0] ? __pfx_kthread+0x10/0x10 [ 708.107058][ C0] ret_from_fork+0x436/0x7d0 [ 708.107082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 708.107109][ C0] ? __switch_to_asm+0x39/0x70 [ 708.107126][ C0] ? __switch_to_asm+0x33/0x70 [ 708.107142][ C0] ? __pfx_kthread+0x10/0x10 [ 708.107170][ C0] ret_from_fork_asm+0x1a/0x30 [ 708.107197][ C0] [ 708.353409][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 708.353434][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.353463][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.353477][ T39] Call Trace: [ 708.353486][ T39] [ 708.353497][ T39] dump_stack_lvl+0x99/0x250 [ 708.353535][ T39] ? __asan_memcpy+0x40/0x70 [ 708.353561][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.353593][ T39] ? __pfx__printk+0x10/0x10 [ 708.353631][ T39] vpanic+0x281/0x750 [ 708.353667][ T39] ? __pfx_vpanic+0x10/0x10 [ 708.353698][ T39] ? preempt_schedule+0xae/0xc0 [ 708.353733][ T39] ? preempt_schedule_common+0x83/0xd0 [ 708.353773][ T39] panic+0xb9/0xc0 [ 708.353805][ T39] ? __pfx_panic+0x10/0x10 [ 708.353839][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 708.353873][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 708.353914][ T39] watchdog+0xfd2/0xfe0 [ 708.353949][ T39] ? watchdog+0x1de/0xfe0 [ 708.353984][ T39] kthread+0x70e/0x8a0 [ 708.354021][ T39] ? __pfx_watchdog+0x10/0x10 [ 708.354049][ T39] ? __pfx_kthread+0x10/0x10 [ 708.354089][ T39] ? __pfx_kthread+0x10/0x10 [ 708.354123][ T39] ret_from_fork+0x436/0x7d0 [ 708.354156][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 708.354190][ T39] ? __switch_to_asm+0x39/0x70 [ 708.354211][ T39] ? __switch_to_asm+0x33/0x70 [ 708.354230][ T39] ? __pfx_kthread+0x10/0x10 [ 708.354265][ T39] ret_from_fork_asm+0x1a/0x30 [ 708.354303][ T39] [ 708.354783][ T39] Kernel Offset: disabled