last executing test programs: 2m24.650477406s ago: executing program 1 (id=1227): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2m24.539147351s ago: executing program 1 (id=1236): r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xc}) 2m24.456490172s ago: executing program 1 (id=1229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090e2bbd7000ffdbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000", @ANYRES32=0x0, @ANYBLOB="10002e"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2m24.367810121s ago: executing program 1 (id=1231): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000280)) 2m24.273475394s ago: executing program 1 (id=1241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 2m24.014239331s ago: executing program 1 (id=1243): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000180)) 2m23.247785474s ago: executing program 2 (id=1246): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000006340)=0x2, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 2m23.181424927s ago: executing program 2 (id=1247): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m23.010293625s ago: executing program 2 (id=1248): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0x15, "7062b6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m21.340728411s ago: executing program 2 (id=1257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0x40082104, &(0x7f00000003c0)) 2m20.410070199s ago: executing program 2 (id=1259): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 2m20.333464841s ago: executing program 2 (id=1260): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004580)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000}}], 0x1, 0x40000) 2m8.944014679s ago: executing program 32 (id=1243): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000180)) 2m5.25653402s ago: executing program 33 (id=1260): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004580)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000}}], 0x1, 0x40000) 1.529795905s ago: executing program 0 (id=3008): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000001540)=0x6) 1.383322714s ago: executing program 0 (id=3009): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) 1.224677705s ago: executing program 0 (id=3012): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x10000000) 1.077384983s ago: executing program 0 (id=3015): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000193c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) 1.067115629s ago: executing program 3 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x3c, r1, 0x25, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.02272492s ago: executing program 4 (id=3017): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x8) 953.833863ms ago: executing program 0 (id=3018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000000000000000000000000000001400020002000000ffffffff00000000000000000d0001007564503a73"], 0x54}}, 0x0) 898.248824ms ago: executing program 3 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d000100"], 0x34}}, 0x0) 846.240986ms ago: executing program 0 (id=3020): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 803.274893ms ago: executing program 4 (id=3021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x2040}, 0x54) 801.907203ms ago: executing program 5 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 699.918263ms ago: executing program 3 (id=3023): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000056d000/0x4000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x0, 0x58}) 646.751781ms ago: executing program 5 (id=3024): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimes(0x0, &(0x7f00000002c0)) 548.004962ms ago: executing program 4 (id=3025): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000240)={0x20, r1, 0x0, 0x0, 0x0}) 537.874989ms ago: executing program 3 (id=3026): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000080)=""/252, 0xfc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001400)) 531.284368ms ago: executing program 5 (id=3027): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x80044704, 0x20001100) 402.00811ms ago: executing program 5 (id=3028): r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 309.691412ms ago: executing program 4 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x20000010) 304.035878ms ago: executing program 3 (id=3030): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16, 0x0}) 235.634452ms ago: executing program 5 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 139.565943ms ago: executing program 4 (id=3032): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 111.541023ms ago: executing program 3 (id=3033): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2400, 0x4) 90.574261ms ago: executing program 5 (id=3034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x431, 0x0, 0x20003, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0x20040884) 0s ago: executing program 4 (id=3035): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) listen(r0, 0xf) kernel console output (not intermixed with test programs): ests per chain, 57600 per kthread [ 173.591933][ T982] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 173.762828][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 173.785692][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.821859][ T982] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 173.830955][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.863352][ T982] usb 4-1: config 0 descriptor?? [ 174.237060][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1244'. [ 174.247652][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1244'. [ 174.297410][ T982] thrustmaster 0003:044F:B304.001C: item fetching failed at offset 5/7 [ 174.325178][ T982] thrustmaster 0003:044F:B304.001C: parse failed [ 174.342431][ T982] thrustmaster 0003:044F:B304.001C: probe with driver thrustmaster failed with error -22 [ 174.510130][ T10] usb 4-1: USB disconnect, device number 16 [ 174.559100][ T8594] overlayfs: workdir and upperdir must be separate subtrees [ 174.891952][ T982] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 175.063610][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.091720][ T982] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 175.100816][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.134811][ T982] usb 3-1: config 0 descriptor?? [ 175.320673][ T5832] hid-generic 0000:0000:0000.001D: unknown main item tag 0x4 [ 175.348665][ T5832] hid-generic 0000:0000:0000.001D: unknown main item tag 0x2 [ 175.366991][ T5832] hid-generic 0000:0000:0000.001D: unknown main item tag 0x3 [ 175.403452][ T5832] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 175.554940][ T8603] fido_id[8603]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.604869][ T982] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.001E/input/input19 [ 175.648126][ T8607] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 175.648126][ T8607] 4&I:#5o63ю.l%wC [ 175.648126][ T8607] ?" [ 175.668521][ T8607] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 175.694247][ T8607] CUSE: DEVNAME unspecified [ 175.702830][ T982] uclogic 0003:28BD:0933.001E: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 175.775880][ T982] usb 3-1: USB disconnect, device number 15 [ 175.912527][ T8608] fido_id[8608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 176.694216][ T30] audit: type=1326 audit(1750931513.480:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bced8e929 code=0x7fc00000 [ 177.180201][ T30] audit: type=1326 audit(1750931513.960:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7258e929 code=0x7fc00000 [ 177.211977][ T2155] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 177.384161][ T2155] usb 4-1: Using ep0 maxpacket: 16 [ 177.404656][ T2155] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 177.441860][ T2155] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.481756][ T2155] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.494269][ T2155] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.510211][ T2155] usb 4-1: config 7 interface 0 has no altsetting 0 [ 177.517197][ T2155] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 177.529815][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.009853][ T2155] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.001F/input/input20 [ 178.083310][ T2155] kye 0003:0458:5010.001F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 178.217301][ T10] usb 4-1: USB disconnect, device number 17 [ 178.289945][ T8625] fido_id[8625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 180.451902][ T2155] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 180.634105][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.665383][ T2155] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 180.691136][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.735873][ T2155] usb 4-1: config 0 descriptor?? [ 181.162467][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 181.196815][ T2155] itetech 0003:258A:6A88.0020: unknown main item tag 0x2 [ 181.216067][ T2155] itetech 0003:258A:6A88.0020: reserved main item tag 0xe [ 181.239324][ T2155] itetech 0003:258A:6A88.0020: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 181.399070][ T2155] usb 4-1: USB disconnect, device number 18 [ 181.455923][ T8649] fido_id[8649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 182.318322][ T8663] vivid-000: disconnect [ 182.325221][ T8662] vivid-000: reconnect [ 182.742288][ T982] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 182.789318][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/72.tmp-b7:8' failed: Read-only file system [ 182.875555][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/72.tmp-b7:8' failed: Read-only file system [ 182.929888][ T982] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 182.950393][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/72.tmp-b7:8' failed: Read-only file system [ 182.961585][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.984110][ T982] usb 4-1: config 0 descriptor?? [ 183.014438][ T982] pwc: Philips SPC 900NC USB webcam detected. [ 183.599854][ T982] pwc: recv_control_msg error -71 req 02 val 2b00 [ 183.621516][ T982] pwc: recv_control_msg error -71 req 02 val 2700 [ 183.658635][ T982] pwc: recv_control_msg error -71 req 04 val 1600 [ 183.668823][ T982] pwc: recv_control_msg error -71 req 02 val 2c00 [ 183.693167][ T982] pwc: recv_control_msg error -71 req 04 val 1000 [ 183.705380][ T982] pwc: recv_control_msg error -71 req 04 val 1300 [ 183.734121][ T982] pwc: recv_control_msg error -71 req 04 val 1400 [ 183.743274][ T8681] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 183.754795][ T982] pwc: recv_control_msg error -71 req 02 val 2000 [ 183.786901][ T982] pwc: recv_control_msg error -71 req 02 val 2100 [ 183.802310][ T982] pwc: recv_control_msg error -71 req 06 val 0600 [ 183.821787][ T982] pwc: recv_control_msg error -71 req 04 val 1500 [ 183.835441][ T982] pwc: recv_control_msg error -71 req 02 val 2500 [ 183.856251][ T982] pwc: recv_control_msg error -71 req 02 val 2400 [ 183.882295][ T982] pwc: recv_control_msg error -71 req 02 val 2600 [ 183.895414][ T982] pwc: recv_control_msg error -71 req 02 val 2900 [ 183.916012][ T982] pwc: recv_control_msg error -71 req 02 val 2800 [ 183.935843][ T982] pwc: recv_control_msg error -71 req 04 val 1100 [ 183.960568][ T982] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.982991][ T982] pwc: Registered as video103. [ 183.990495][ T982] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 184.061171][ T982] usb 4-1: USB disconnect, device number 19 [ 184.915870][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 186.167984][ T8731] program syz.0.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.724438][ T982] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 186.917129][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 186.934608][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.960234][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.980217][ T982] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 187.001693][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.041353][ T982] usb 4-1: config 0 descriptor?? [ 187.475562][ T982] smartjoyplus 0003:0925:8866.0021: item fetching failed at offset 4/5 [ 187.499278][ T982] smartjoyplus 0003:0925:8866.0021: parse failed [ 187.511744][ T982] smartjoyplus 0003:0925:8866.0021: probe with driver smartjoyplus failed with error -22 [ 187.697225][ T982] usb 4-1: USB disconnect, device number 20 [ 188.354227][ T8752] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 188.373358][ T8752] overlayfs: missing 'lowerdir' [ 189.396432][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.502169][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.513850][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.528572][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.539277][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.551045][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.566940][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.602608][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.693123][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.021303][ T49] bridge_slave_1: left allmulticast mode [ 190.028487][ T49] bridge_slave_1: left promiscuous mode [ 190.040626][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.076954][ T49] bridge_slave_0: left allmulticast mode [ 190.084681][ T49] bridge_slave_0: left promiscuous mode [ 190.090502][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.308683][ T8779] Bluetooth: MGMT ver 1.23 [ 190.989688][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.042705][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.059201][ T49] bond0 (unregistering): Released all slaves [ 191.254291][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 191.276309][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 191.331733][ T49] tipc: Disabling bearer [ 191.338188][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 191.347726][ T49] tipc: Left network mode [ 191.631822][ T5833] Bluetooth: hci0: command tx timeout [ 191.661973][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 192.469857][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 192.516236][ T8827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1350'. [ 192.566421][ T49] hsr_slave_0: left promiscuous mode [ 192.636647][ T49] hsr_slave_1: left promiscuous mode [ 192.654799][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.685260][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.729645][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.747673][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.763570][ T8832] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 192.823868][ T49] veth1_macvtap: left promiscuous mode [ 192.834023][ T49] veth0_macvtap: left promiscuous mode [ 192.862024][ T49] veth1_vlan: left promiscuous mode [ 192.867463][ T49] veth0_vlan: left promiscuous mode [ 193.349380][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.368934][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.380350][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.390805][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.399424][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.441724][ T5832] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.583049][ T10] IPVS: starting estimator thread 0... [ 193.612261][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 193.636439][ T5832] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 193.651686][ T5832] usb 4-1: config 0 has an invalid interface number: 253 but max is -1 [ 193.669080][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.680520][ T5832] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 193.682071][ T8849] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.691063][ T5832] usb 4-1: config 0 has no interface number 0 [ 193.712139][ T5833] Bluetooth: hci0: command tx timeout [ 193.712696][ T5832] usb 4-1: config 0 interface 253 altsetting 2 has an endpoint descriptor with address 0x57, changing to 0x7 [ 193.736750][ T5832] usb 4-1: config 0 interface 253 altsetting 2 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 193.736787][ T5832] usb 4-1: config 0 interface 253 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0 [ 193.765136][ T5832] usb 4-1: config 0 interface 253 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.765173][ T5832] usb 4-1: config 0 interface 253 has no altsetting 0 [ 193.789171][ T5832] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=35.be [ 193.799193][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.799222][ T5832] usb 4-1: Product: syz [ 193.799238][ T5832] usb 4-1: Manufacturer: syz [ 193.799254][ T5832] usb 4-1: SerialNumber: syz [ 193.806230][ T5832] usb 4-1: config 0 descriptor?? [ 193.815446][ T5832] usbhid 4-1:0.253: couldn't find an input interrupt endpoint [ 194.061021][ T49] team0 (unregistering): Port device team_slave_1 removed [ 194.094165][ T5832] usb 4-1: USB disconnect, device number 21 [ 194.152796][ T49] team0 (unregistering): Port device team_slave_0 removed [ 194.450353][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456815][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.295906][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.303575][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.318523][ T8766] bridge_slave_0: entered allmulticast mode [ 195.327233][ T8766] bridge_slave_0: entered promiscuous mode [ 195.369973][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.377686][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.385634][ T8766] bridge_slave_1: entered allmulticast mode [ 195.402327][ T8766] bridge_slave_1: entered promiscuous mode [ 195.471969][ T5833] Bluetooth: hci3: command tx timeout [ 195.548797][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.565423][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.649261][ T8766] team0: Port device team_slave_0 added [ 195.676069][ T8766] team0: Port device team_slave_1 added [ 195.779115][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.786681][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.820229][ T5833] Bluetooth: hci0: command tx timeout [ 195.827103][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.863638][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.870624][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.902218][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.097943][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.158901][ T8766] hsr_slave_0: entered promiscuous mode [ 196.177929][ T8766] hsr_slave_1: entered promiscuous mode [ 196.185271][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.198244][ T8766] Cannot create hsr debugfs directory [ 196.229717][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.250595][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 196.372576][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.457820][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.568472][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.590284][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.601157][ T8843] bridge_slave_0: entered allmulticast mode [ 196.616797][ T8843] bridge_slave_0: entered promiscuous mode [ 196.647289][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.654599][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.663061][ T8843] bridge_slave_1: entered allmulticast mode [ 196.671257][ T8843] bridge_slave_1: entered promiscuous mode [ 196.810586][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.836279][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.989146][ T8843] team0: Port device team_slave_0 added [ 197.012478][ T49] bridge_slave_1: left allmulticast mode [ 197.018238][ T49] bridge_slave_1: left promiscuous mode [ 197.029493][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.041289][ T49] bridge_slave_0: left allmulticast mode [ 197.048676][ T49] bridge_slave_0: left promiscuous mode [ 197.054921][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.500549][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.519711][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.530899][ T49] bond0 (unregistering): Released all slaves [ 197.550928][ T8843] team0: Port device team_slave_1 added [ 197.556776][ T5833] Bluetooth: hci3: command tx timeout [ 197.646730][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.654943][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.680954][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.693207][ T49] tipc: Left network mode [ 197.697373][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.704748][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.738248][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.873064][ T5833] Bluetooth: hci0: command tx timeout [ 197.884218][ T8843] hsr_slave_0: entered promiscuous mode [ 197.890563][ T8843] hsr_slave_1: entered promiscuous mode [ 197.897540][ T8843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.906190][ T8843] Cannot create hsr debugfs directory [ 197.949703][ T8766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.961542][ T8766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.013785][ T8766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.060279][ T8766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.086842][ T49] hsr_slave_0: left promiscuous mode [ 198.094255][ T49] hsr_slave_1: left promiscuous mode [ 198.100416][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.109560][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.119003][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.126953][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.148298][ T49] veth1_macvtap: left promiscuous mode [ 198.155268][ T49] veth0_macvtap: left promiscuous mode [ 198.162659][ T49] veth1_vlan: left promiscuous mode [ 198.168063][ T49] veth0_vlan: left promiscuous mode [ 198.340189][ T8918] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 198.340189][ T8918] 4&I:#5o63ю.l%wC [ 198.340189][ T8918] ?" [ 198.369966][ T8918] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 198.397516][ T8918] CUSE: DEVNAME unspecified [ 198.948168][ T49] team0 (unregistering): Port device team_slave_1 removed [ 198.989259][ T49] team0 (unregistering): Port device team_slave_0 removed [ 199.635425][ T5833] Bluetooth: hci3: command tx timeout [ 199.792496][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 199.814190][ T6307] udevd[6307]: symlink '../../loop8' '/dev/disk/by-diskseq/74.tmp-b7:8' failed: Read-only file system [ 199.833709][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 199.879508][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/74.tmp-b7:8' failed: Read-only file system [ 199.952753][ T5833] Bluetooth: hci0: command tx timeout [ 199.988562][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/74.tmp-b7:8' failed: Read-only file system [ 200.042502][ T8953] vivid-000: disconnect [ 200.047710][ T8952] vivid-000: reconnect [ 200.118552][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.173035][ T8843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.236462][ T8843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.275227][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.292535][ T8843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.328091][ T49] IPVS: stop unused estimator thread 0... [ 200.334328][ T8843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.352991][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.360214][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.380668][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.387906][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.619709][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.676590][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.707537][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.714761][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.750552][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.758390][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.988416][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.321454][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.651389][ T8766] veth0_vlan: entered promiscuous mode [ 201.712314][ T5833] Bluetooth: hci3: command tx timeout [ 201.720738][ T8766] veth1_vlan: entered promiscuous mode [ 201.785816][ T8766] veth0_macvtap: entered promiscuous mode [ 201.813709][ T8766] veth1_macvtap: entered promiscuous mode [ 201.870790][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.895995][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.946980][ T2974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.961263][ T2974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.985224][ T2974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.998687][ T2974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.111182][ T8843] veth0_vlan: entered promiscuous mode [ 202.168839][ T8843] veth1_vlan: entered promiscuous mode [ 202.180614][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.202218][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.288951][ T8843] veth0_macvtap: entered promiscuous mode [ 202.295689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.306937][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.307591][ T8843] veth1_macvtap: entered promiscuous mode [ 202.363346][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.381177][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.415554][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.424706][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.484526][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.502491][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.684945][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.707173][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.769385][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.777976][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.511796][ T2155] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.660899][ T9054] syz.4.1390 uses obsolete (PF_INET,SOCK_PACKET) [ 203.709642][ T2155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.745115][ T2155] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 203.759435][ T2155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.776730][ T2155] usb 6-1: config 0 descriptor?? [ 204.179457][ T9067] sp0: Synchronizing with TNC [ 204.211026][ T9066] [U] [ 204.241093][ T2155] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0022/input/input22 [ 204.333502][ T2155] uclogic 0003:28BD:0933.0022: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 204.562145][ T2155] usb 6-1: USB disconnect, device number 2 [ 204.566284][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 204.635424][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 205.256656][ T9099] overlayfs: failed to resolve 'TޠYCQ?': -2 [ 205.558316][ T9109] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 205.604200][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 206.136178][ T9127] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 208.301683][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/76.tmp-b7:0' failed: Read-only file system [ 208.395019][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/76.tmp-b7:0' failed: Read-only file system [ 208.450756][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/76.tmp-b7:0' failed: Read-only file system [ 208.554217][ T9209] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1443'. [ 208.596667][ T9207] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1443'. [ 208.697931][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.737733][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.756094][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.772152][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.800843][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.824634][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.843752][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.863980][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.882615][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.925513][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: unknown main item tag 0x0 [ 208.946187][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 208.967972][ T5950] hid-generic 0008:0000:FFFFFBFF.0023: hidraw0: HID v9.86 Device [syz0] on syz1 [ 209.178596][ T9224] fido_id[9224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.338701][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 209.408007][ T9235] devtmpfs: Too few inodes for current use [ 209.587624][ T9243] nbd: must specify a device to reconfigure [ 209.608538][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 209.857771][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 210.358864][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 210.588126][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 210.868653][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 210.996837][ T9289] netlink: 'syz.4.1476': attribute type 4 has an invalid length. [ 211.041831][ T9289] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1476'. [ 211.373505][ T9299] mkiss: ax0: crc mode is auto. [ 211.762874][ T9317] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1482'. [ 211.801938][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1482'. [ 211.873385][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.873954][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 212.363031][ T5950] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 212.452232][ T9340] CUSE: DEVNAME unspecified [ 212.579895][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.614944][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.661782][ T5950] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 212.670876][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.725755][ T5950] usb 4-1: config 0 descriptor?? [ 213.294200][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 213.318974][ T9367] mkiss: ax0: crc mode is auto. [ 213.359852][ T5950] hid-led 0003:27B8:01ED.0024: probe with driver hid-led failed with error -71 [ 213.430486][ T5950] usb 4-1: USB disconnect, device number 22 [ 213.645227][ T9379] netlink: 'syz.4.1507': attribute type 3 has an invalid length. [ 213.682348][ T9379] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 213.720165][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 213.912811][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 214.151021][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 214.296864][ T9395] netlink: set zone limit has 4 unknown bytes [ 214.389141][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 214.531144][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 214.705503][ T9402] Invalid ELF header magic: != ELF [ 214.795357][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 215.006801][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 215.310535][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 215.533876][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 216.184875][ T9466] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1541'. [ 216.219646][ T9466] netlink: 'syz.0.1541': attribute type 5 has an invalid length. [ 216.902033][ T9496] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1553'. [ 217.090600][ T9504] netlink: 'syz.3.1555': attribute type 33 has an invalid length. [ 217.118573][ T9504] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1555'. [ 217.210060][ T982] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 217.375110][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.403398][ T982] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.449455][ T982] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.480090][ T982] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.516641][ T982] usb 6-1: Manufacturer: syz [ 217.539013][ T982] usb 6-1: config 0 descriptor?? [ 217.789300][ T982] usb 6-1: USB disconnect, device number 3 [ 218.271145][ T9539] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1566'. [ 218.346072][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 218.772914][ T9561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.779647][ T9561] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.792318][ T9561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.798904][ T9561] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.812026][ T9561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.818522][ T9561] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.829977][ T9561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.836492][ T9561] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.871851][ T9561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 219.219211][ T30] audit: type=1326 audit(1750931556.000:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.4.1573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1778e929 code=0x0 [ 219.266021][ T2155] IPVS: starting estimator thread 0... [ 219.362609][ T9573] IPVS: using max 23 ests per chain, 55200 per kthread [ 219.394789][ T9578] ucma_write: process 105 (syz.5.1580) changed security contexts after opening file descriptor, this is not allowed. [ 220.044736][ T2155] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.207685][ T2155] usb 6-1: Using ep0 maxpacket: 8 [ 220.239092][ T2155] usb 6-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 220.267079][ T2155] usb 6-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 220.296278][ T2155] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 220.318019][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 220.318019][ T2155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.536591][ T2155] usb 6-1: string descriptor 0 read error: -71 [ 220.565006][ T2155] usb 6-1: Found UVC 0.00 device (2833:0201) [ 220.576588][ T2155] usb 6-1: No valid video chain found. [ 220.596836][ T2155] usb 6-1: USB disconnect, device number 4 [ 221.100704][ T30] audit: type=1326 audit(1750931557.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.1593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x0 [ 221.474215][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 221.783393][ T5950] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 221.961917][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 221.980760][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.001458][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.020548][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.033662][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.049787][ T6100] udevd[6100]: symlink '../../loop6' '/dev/disk/by-diskseq/71.tmp-b7:6' failed: Read-only file system [ 222.095921][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.136180][ T5950] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.190204][ T5950] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.211833][ T5950] usb 4-1: Manufacturer: syz [ 222.240709][ T5950] usb 4-1: config 0 descriptor?? [ 222.684015][ T5950] rc_core: IR keymap rc-hauppauge not found [ 222.699032][ T5950] Registered IR keymap rc-empty [ 222.714815][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.765036][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.803569][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 222.886989][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 222.891550][ T9683] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1612'. [ 222.912372][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 222.958761][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.001935][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.032276][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.054710][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.091229][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 223.151968][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.171806][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.222708][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.261843][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.293493][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.312336][ T5950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 223.341525][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 223.357729][ T5950] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 223.391230][ T5950] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 223.466100][ T5950] usb 4-1: USB disconnect, device number 23 [ 223.635613][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 223.970763][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.062464][ T982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 224.158190][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.251873][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 224.263123][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 224.299456][ T982] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 224.322379][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.345304][ T982] usb 6-1: config 0 descriptor?? [ 224.427227][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.537343][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.709831][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 224.744523][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.786120][ T982] uclogic 0003:2179:0053.0025: interface is invalid, ignoring [ 224.963009][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 224.998071][ T982] usb 6-1: USB disconnect, device number 5 [ 225.217355][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 225.455915][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 225.645257][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 226.987489][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 227.079331][ T9840] CUSE: zero length info key specified [ 227.174603][ T9845] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.576357][ T9862] random: crng reseeded on system resumption [ 227.613709][ T9862] Restarting kernel threads ... [ 227.629919][ T9862] Done restarting kernel threads. [ 227.798209][ T9871] netlink: 368 bytes leftover after parsing attributes in process `syz.3.1691'. [ 227.843497][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 228.009617][ T9879] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1696'. [ 229.056496][ T9923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1710'. [ 229.531180][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 229.819411][ T9958] tipc: Enabling of bearer rejected, failed to enable media [ 229.829967][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 230.158964][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 231.347679][T10015] usb usb8: usbfs: process 10015 (syz.3.1744) did not claim interface 0 before use [ 231.866924][T10026] "syz.5.1749" (10026) uses obsolete ecb(arc4) skcipher [ 231.878069][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 231.897812][T10036] IPVS: Error joining to the multicast group [ 233.126429][T10075] netlink: 'syz.3.1769': attribute type 12 has an invalid length. [ 233.152610][T10075] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1769'. [ 233.319124][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 233.599360][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 233.836435][T10102] smc: net device bond0 applied user defined pnetid SYZ2 [ 233.841246][T10103] ptrace attach of "./syz-executor exec"[5839] was attempted by ""[10103] [ 234.027021][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 234.115178][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1780'. [ 234.281913][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 234.583945][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 234.700987][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 234.927720][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 235.181559][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 235.464031][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 235.785841][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 235.913420][ T30] audit: type=1326 audit(1750931572.690:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 235.967549][ T30] audit: type=1326 audit(1750931572.690:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 236.041779][ T30] audit: type=1326 audit(1750931572.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 236.111841][ T30] audit: type=1326 audit(1750931572.720:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 236.196499][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 236.244066][ T30] audit: type=1326 audit(1750931572.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 236.352003][ T30] audit: type=1326 audit(1750931572.720:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f1778e929 code=0x7ffc0000 [ 236.670814][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 237.132436][ T982] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 237.295862][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.313137][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.345931][ T982] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 237.365338][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.397038][ T982] usb 5-1: config 0 descriptor?? [ 237.421846][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 237.591810][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 237.661862][ T5832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 237.694072][ T5832] usb 6-1: config 8 has an invalid interface number: 10 but max is 1 [ 237.706873][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 237.718899][ T5832] usb 6-1: config 8 has an invalid interface number: 93 but max is 1 [ 237.752799][ T5832] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 237.781934][ T5832] usb 6-1: config 8 has no interface number 0 [ 237.802367][ T5832] usb 6-1: config 8 has no interface number 1 [ 237.821689][ T5832] usb 6-1: config 8 interface 10 altsetting 3 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 237.839825][ T982] kovaplus 0003:1E7D:2D50.0026: unbalanced delimiter at end of report description [ 237.863997][ T5832] usb 6-1: config 8 interface 10 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 237.881186][ T982] kovaplus 0003:1E7D:2D50.0026: parse failed [ 237.901889][ T982] kovaplus 0003:1E7D:2D50.0026: probe with driver kovaplus failed with error -22 [ 237.907486][ T5832] usb 6-1: config 8 interface 10 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 237.939619][ T5832] usb 6-1: config 8 interface 10 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 237.954782][ T5832] usb 6-1: config 8 interface 10 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 237.969351][ T5832] usb 6-1: config 8 interface 10 has no altsetting 0 [ 238.021227][ T5832] usb 6-1: config 8 interface 93 has no altsetting 0 [ 238.057829][ T24] usb 5-1: USB disconnect, device number 2 [ 238.133251][ T5832] usb 6-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=ed.43 [ 238.155017][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.169533][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 238.171407][ T5832] usb 6-1: Product: syz [ 238.211198][ T5832] usb 6-1: Manufacturer: syz [ 238.231448][ T5832] usb 6-1: SerialNumber: syz [ 238.532174][ T5832] usb 6-1: USB disconnect, device number 6 [ 238.782055][T10258] binder: 10257:10258 ioctl c018620c 200000000140 returned -22 [ 239.287128][T10273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1836'. [ 239.678922][T10291] Invalid logical block size (2) [ 239.806870][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 240.019088][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 240.291554][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 240.511119][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 240.663781][ T2155] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 240.825875][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.844286][ T2155] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 240.871942][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.904838][ T2155] usb 4-1: config 0 descriptor?? [ 241.127295][T10349] random: crng reseeded on system resumption [ 241.331416][ T2155] hid-alps 0003:044E:121E.0027: item fetching failed at offset 0/3 [ 241.374954][ T2155] hid-alps 0003:044E:121E.0027: parse failed [ 241.387877][ T2155] hid-alps 0003:044E:121E.0027: probe with driver hid-alps failed with error -22 [ 241.549919][ T2155] usb 4-1: USB disconnect, device number 24 [ 241.942100][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.108431][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.134694][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.162684][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.186064][ T24] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 242.206273][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.245397][ T24] usb 6-1: config 0 descriptor?? [ 242.722337][ T24] razer 0003:1532:011B.0028: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 242.927125][ T982] usb 6-1: USB disconnect, device number 7 [ 242.982111][T10415] [U]  [ 242.982845][T10409] fido_id[10409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 243.501786][ T5950] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 243.645935][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 243.671886][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 243.698165][ T5950] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 243.711507][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.765801][ T5950] usb 5-1: config 0 descriptor?? [ 243.886695][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 244.117120][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 244.285601][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 244.397508][ T5950] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 244.422379][ T5950] asix 5-1:0.0: probe with driver asix failed with error -71 [ 244.447692][ T5950] usb 5-1: USB disconnect, device number 3 [ 244.550591][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 244.918090][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 245.028879][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 245.230845][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 245.311792][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 245.420387][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 245.489873][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.525977][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.549232][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.568840][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.611766][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.641428][ T24] usb 5-1: config 0 descriptor?? [ 246.106897][ T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 246.153258][ T30] audit: type=1326 audit(1750931582.940:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.3.1918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e33d8e929 code=0x0 [ 246.265078][T10502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.286165][T10502] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.310512][ T24] usb 5-1: USB disconnect, device number 4 [ 246.331191][T10502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.356219][T10502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 246.367361][T10502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.388213][T10502] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.401545][T10502] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.411094][T10502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.420899][T10502] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.434513][T10502] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.669084][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 246.800807][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 247.097972][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 247.221888][ T5950] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 247.302517][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 247.413044][ T5950] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.444254][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.485730][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 247.505908][ T5950] usb 5-1: config 0 descriptor?? [ 247.527425][ T5950] cp210x 5-1:0.0: cp210x converter detected [ 247.632130][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 247.709338][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 247.880178][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1934'. [ 247.903635][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1934'. [ 248.018961][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 248.162789][ T5950] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 248.213990][ T5950] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 248.246372][ T5950] usb 5-1: cp210x converter now attached to ttyUSB0 [ 248.260820][ T5950] usb 5-1: USB disconnect, device number 5 [ 248.344687][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.361959][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 248.379129][ T5950] cp210x 5-1:0.0: device disconnected [ 248.433046][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.434840][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.322599][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 249.566507][T10652] netlink: 'syz.3.1956': attribute type 3 has an invalid length. [ 249.586928][T10653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1955'. [ 249.619002][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1955'. [ 249.711822][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 249.781396][T10659] overlayfs: workdir and upperdir must be separate subtrees [ 249.967497][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 250.141152][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 250.431792][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 250.449717][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 250.515652][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.515853][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.601194][T10693] random: crng reseeded on system resumption [ 250.700023][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 250.899848][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 251.072145][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 251.318231][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 251.336968][ T6100] udevd[6100]: symlink '../../loop8' '/dev/disk/by-diskseq/75.tmp-b7:8' failed: Read-only file system [ 251.547010][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 251.820624][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 252.240784][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 252.591973][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.592285][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.668345][T10780] "syz.0.2003" (10780) uses obsolete ecb(arc4) skcipher [ 253.517008][T10817] IPVS: Scheduler module ip_vs_sip not found [ 253.703024][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 253.861961][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 253.886043][ T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.900058][ T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.914881][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.926937][ T24] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 253.939254][ T24] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 253.951088][ T24] usb 6-1: Product: syz [ 253.963390][ T24] usb 6-1: config 0 descriptor?? [ 254.261704][ T5950] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 254.395196][ T24] waterforce 0003:1044:7A4D.002A: item fetching failed at offset 4/5 [ 254.409498][ T24] waterforce 0003:1044:7A4D.002A: hid parse failed with -22 [ 254.418369][ T24] waterforce 0003:1044:7A4D.002A: probe with driver waterforce failed with error -22 [ 254.433852][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 254.446437][ T5950] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 254.463571][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.476496][ T5950] usb 4-1: config 0 descriptor?? [ 254.622492][ T982] usb 6-1: USB disconnect, device number 8 [ 254.923177][ T5950] aquacomputer_d5next 0003:0C70:F0BD.002B: item fetching failed at offset 0/3 [ 254.943476][ T5950] aquacomputer_d5next 0003:0C70:F0BD.002B: probe with driver aquacomputer_d5next failed with error -22 [ 255.027198][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 255.143801][ T5950] usb 4-1: USB disconnect, device number 25 [ 255.183113][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 255.385561][T10879] netlink: 'syz.5.2048': attribute type 4 has an invalid length. [ 255.416039][T10879] netlink: 'syz.5.2048': attribute type 4 has an invalid length. [ 255.466914][T10879] syz.5.2048 (10879) used greatest stack depth: 19928 bytes left [ 255.877383][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.884189][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.122025][ T30] audit: type=1326 audit(1750931592.900:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bced8e929 code=0x7fc00000 [ 256.205544][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 256.259626][ T30] audit: type=1400 audit(1750931593.040:32): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/" pid=10912 comm="syz.3.2064" [ 256.348956][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 256.436958][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 256.560811][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 256.727656][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 256.797443][ T6307] udevd[6307]: symlink '../../loop7' '/dev/disk/by-diskseq/79.tmp-b7:7' failed: Read-only file system [ 256.862204][ T6100] udevd[6100]: symlink '../../loop7' '/dev/disk/by-diskseq/79.tmp-b7:7' failed: Read-only file system [ 256.929678][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 257.062942][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 258.215690][T10995] usb usb8: usbfs: process 10995 (syz.0.2102) did not claim interface 0 before use [ 258.956203][T11025] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2117'. [ 258.983670][T11025] tipc: Bearer : already 2 bearers with priority 10 [ 259.008828][T11025] tipc: Bearer : trying with adjusted priority [ 259.019239][T11025] tipc: Enabled bearer , priority 9 [ 259.139025][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2122'. [ 259.165893][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2122'. [ 259.261790][ T5950] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.444198][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.492960][ T5950] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 259.516737][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.535624][ T5950] usb 5-1: config 0 descriptor?? [ 259.851183][T11064] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2136'. [ 259.881814][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.948433][T11068] program syz.0.2137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.993085][T11070] netlink: 'syz.3.2138': attribute type 27 has an invalid length. [ 260.045525][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 260.059493][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.076037][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.089000][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.098631][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.132003][ T24] usb 6-1: config 0 descriptor?? [ 260.179375][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 260.202544][ T5950] usb 5-1: USB disconnect, device number 6 [ 260.291461][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 260.430237][T11082] binder: 11081:11082 ioctl 400c620e 2000000014c0 returned -22 [ 260.439534][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 260.550851][ T24] microsoft 0003:045E:07DA.002D: item 0 4 0 8 parsing failed [ 260.566988][ T24] microsoft 0003:045E:07DA.002D: parse failed [ 260.582627][ T24] microsoft 0003:045E:07DA.002D: probe with driver microsoft failed with error -22 [ 260.585695][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 260.694980][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 260.763593][ T24] usb 6-1: USB disconnect, device number 9 [ 261.151852][ T5846] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 261.312288][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 261.322942][ T5846] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 261.351782][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.384772][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 261.412031][ T5846] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 261.421127][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.458987][ T5846] usb 5-1: config 0 descriptor?? [ 261.736861][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 261.836592][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 261.904246][ T5846] samsung 0003:0419:0001.002E: item fetching failed at offset 10/11 [ 261.928588][ T5846] samsung 0003:0419:0001.002E: parse failed [ 261.941952][ T5846] samsung 0003:0419:0001.002E: probe with driver samsung failed with error -22 [ 262.128150][ T5846] usb 5-1: USB disconnect, device number 7 [ 262.174035][T11122] tipc: Started in network mode [ 262.187442][T11122] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 262.200735][T11122] tipc: Enabled bearer , priority 10 [ 262.283887][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2165'. [ 262.489906][T11135] net_ratelimit: 67 callbacks suppressed [ 262.489928][T11135] sock: sock_set_timeout: `syz.5.2169' (pid 11135) tries to set negative timeout [ 262.892355][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 262.913909][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 263.106403][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 263.294948][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 263.311855][ T2155] tipc: Node number set to 4269801514 [ 263.422225][T11165] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2183'. [ 263.619662][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 263.831121][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 264.098202][T11190] Bluetooth: MGMT ver 1.23 [ 264.285046][T11198] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2199'. [ 264.723826][T11214] pimreg3: entered allmulticast mode [ 265.191075][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2215'. [ 265.341445][T11234] netdevsim netdevsim4: Direct firmware load for . [ 265.341445][T11234] failed with error -2 [ 265.383887][T11234] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 265.383887][T11234] [ 265.567285][T11243] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2221'. [ 265.592003][T11243] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2221'. [ 265.615809][T11243] netlink: 'syz.5.2221': attribute type 5 has an invalid length. [ 265.701492][T11243] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2221'. [ 266.332303][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 266.808238][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2231'. [ 267.048213][T11285] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.2235'. [ 267.363533][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 267.371726][ T2155] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 267.469246][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 267.574016][ T2155] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.591205][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 267.616395][ T2155] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.627484][ T2155] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.646892][ T2155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.656155][ T2155] usb 6-1: SerialNumber: syz [ 267.710237][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 267.812714][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 267.884792][ T2155] usb 6-1: 0:2 : does not exist [ 267.949953][ T2155] usb 6-1: USB disconnect, device number 10 [ 267.994367][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 268.074240][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.228907][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 268.359918][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 268.499969][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 269.237924][T11357] lo: MTU too low for tipc bearer [ 269.246983][T11357] tipc: Enabling of bearer rejected, failed to enable media [ 271.371929][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.536062][T11424] netlink: 'syz.5.2301': attribute type 29 has an invalid length. [ 271.567710][T11424] netlink: 'syz.5.2301': attribute type 29 has an invalid length. [ 271.577503][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 271.593090][ T5956] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.607644][ T5956] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.620472][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.641651][ T5956] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 271.661094][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.675209][ T5956] usb 5-1: config 0 descriptor?? [ 272.119798][ T5956] hid_parser_main: 159 callbacks suppressed [ 272.119825][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.151411][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.168627][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.180312][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.191202][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.203546][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.210393][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.219616][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.229325][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.238222][ T5956] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 272.263691][ T5956] kye 0003:0458:0138.002F: collection stack underflow [ 272.290981][ T5956] kye 0003:0458:0138.002F: item 0 0 0 12 parsing failed [ 272.304601][ T5956] kye 0003:0458:0138.002F: parse failed [ 272.310266][ T5956] kye 0003:0458:0138.002F: probe with driver kye failed with error -22 [ 272.348424][ T5956] usb 5-1: USB disconnect, device number 8 [ 273.046628][T11477] tipc: Enabling of bearer rejected, failed to enable media [ 273.580876][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 273.624633][T11504] netlink: 'syz.4.2339': attribute type 29 has an invalid length. [ 273.689711][T11504] netlink: 'syz.4.2339': attribute type 29 has an invalid length. [ 273.720306][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 273.843459][T11511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2341'. [ 273.860838][T11510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2341'. [ 273.997349][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 274.126988][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 274.250723][T11528] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2350'. [ 275.473172][ T30] audit: type=1326 audit(1750931613.250:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab2f8e929 code=0x7ffc0000 [ 275.526278][ T30] audit: type=1326 audit(1750931613.250:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab2f8e929 code=0x7ffc0000 [ 275.554616][ T30] audit: type=1326 audit(1750931613.290:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9ab2f8e929 code=0x7ffc0000 [ 276.481681][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 276.628559][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 276.673769][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.692931][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.721705][ T24] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 276.752175][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.784880][ T24] usb 4-1: config 0 descriptor?? [ 277.001823][ T5950] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 277.171836][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 277.179343][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.190651][ T5950] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 277.200019][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.226515][ T5950] usb 6-1: config 0 descriptor?? [ 277.240090][ T24] hid_mf 0003:0079:1846.0030: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 277.274795][ T2155] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 277.284878][ T24] hid_mf 0003:0079:1846.0030: Invalid report, this should never happen! [ 277.310854][ T24] hid_mf 0003:0079:1846.0030: Force feedback init failed. [ 277.317291][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 277.440706][ T24] usb 4-1: USB disconnect, device number 26 [ 277.452042][ T2155] usb 5-1: Using ep0 maxpacket: 32 [ 277.462499][ T2155] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.470536][ T2155] usb 5-1: config 0 has no interface number 0 [ 277.483719][ T2155] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 277.497138][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 277.515051][ T2155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.538273][ T2155] usb 5-1: Product: syz [ 277.543702][ T2155] usb 5-1: Manufacturer: syz [ 277.548879][ T2155] usb 5-1: SerialNumber: syz [ 277.563581][ T2155] usb 5-1: config 0 descriptor?? [ 277.579115][ T2155] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 277.600192][ T2155] usb 5-1: selecting invalid altsetting 1 [ 277.610617][ T2155] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 277.621212][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 277.640185][ T2155] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.656404][ T2155] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 277.663386][ T5950] hid_parser_main: 643 callbacks suppressed [ 277.663406][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.668279][ T2155] usb 5-1: media controller created [ 277.680960][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.700462][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.708082][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.716692][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.745668][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.754719][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 277.758822][ T2155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.771670][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.803180][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.810826][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.819183][ T5950] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 277.837298][ T5950] sunplus 0003:04FC:05D8.0031: hidraw0: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 277.850901][ T2155] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 277.858464][ T2155] zl10353_read_register: readreg error (reg=127, ret==-71) [ 277.893037][ T2155] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 277.906644][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 277.925312][ T5950] usb 6-1: USB disconnect, device number 11 [ 278.058390][ T2155] usb 5-1: USB disconnect, device number 9 [ 278.065446][T11651] fido_id[11651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 278.078444][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 278.434738][ T5950] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 278.619031][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2416'. [ 278.628644][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 278.660648][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.681811][ T5950] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 278.694046][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.717398][ T5950] usb 4-1: config 0 descriptor?? [ 278.813384][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.023674][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.110200][T11688] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2425'. [ 279.180375][ T5950] hid-alps 0003:044E:121E.0032: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0 [ 279.194315][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.326741][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.356154][ T2155] usb 4-1: USB disconnect, device number 27 [ 279.394517][T11691] fido_id[11691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 279.589392][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.730982][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.912057][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 279.991797][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 280.010436][T11715] syz.0.2438: attempt to access beyond end of device [ 280.010436][T11715] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 280.154508][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 280.193582][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.229774][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 280.241206][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.255730][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 280.271726][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.295741][ T24] usb 6-1: config 0 descriptor?? [ 280.369640][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 280.732556][ T24] ft260 0003:0403:6030.0033: item fetching failed at offset 0/2 [ 280.744629][ T24] ft260 0003:0403:6030.0033: failed to parse HID [ 280.752904][ T24] ft260 0003:0403:6030.0033: probe with driver ft260 failed with error -22 [ 280.818711][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 280.951698][ T24] usb 6-1: USB disconnect, device number 12 [ 281.169948][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2460'. [ 281.195129][T11767] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 281.226005][T11767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2460'. [ 281.252423][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'. [ 281.529237][T11779] ALSA: seq fatal error: cannot create timer (-19) [ 281.588278][T11784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2468'. [ 281.725757][ T5832] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.908047][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.932006][ T5832] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.955703][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.984987][ T5832] usb 5-1: config 0 descriptor?? [ 282.011315][ T5832] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 282.101477][ T5832] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.250029][T11807] fido_id[11807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.267980][ T5832] usb 5-1: USB disconnect, device number 10 [ 282.618380][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 282.781673][ T5832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 282.933732][ T5832] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 282.948825][ T5832] usb 5-1: config 0 has no interface number 0 [ 282.956904][ T5832] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 282.971344][ T5832] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.981964][ T2155] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 282.997971][ T5832] usb 5-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 283.007413][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.015778][ T5832] usb 5-1: Product: syz [ 283.019976][ T5832] usb 5-1: Manufacturer: syz [ 283.025239][ T5832] usb 5-1: SerialNumber: syz [ 283.042755][ T5832] usb 5-1: config 0 descriptor?? [ 283.058489][ T5832] HFC-S_USB 5-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 283.152910][ T2155] usb 4-1: Using ep0 maxpacket: 8 [ 283.163126][ T2155] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 283.173055][ T2155] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 283.181527][ T2155] usb 4-1: Product: syz [ 283.187321][ T2155] usb 4-1: Manufacturer: syz [ 283.192262][ T2155] usb 4-1: SerialNumber: syz [ 283.202321][ T2155] usb 4-1: config 0 descriptor?? [ 283.216231][ T2155] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 283.293963][ T5846] usb 5-1: USB disconnect, device number 11 [ 283.820487][ T2155] gspca_zc3xx: reg_w_i err -71 [ 283.841812][ T2155] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 283.881695][ T2155] usb 4-1: USB disconnect, device number 28 [ 283.961076][T11873] netlink: 'syz.5.2511': attribute type 29 has an invalid length. [ 283.978922][T11873] netlink: 'syz.5.2511': attribute type 29 has an invalid length. [ 284.435371][ T982] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 284.603732][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 284.625509][ T982] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 284.641525][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.649778][T11903] syz.5.2526 (11903): /proc/11902/oom_adj is deprecated, please use /proc/11902/oom_score_adj instead. [ 284.665250][ T982] usb 5-1: config 0 descriptor?? [ 284.672887][T11883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.708388][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'. [ 284.759037][T11907] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2528'. [ 284.854097][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2530'. [ 285.011034][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 285.145221][ T982] hid_parser_main: 182 callbacks suppressed [ 285.145245][ T982] kye 0003:0458:0138.0035: unknown main item tag 0x0 [ 285.168597][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 285.192280][ T982] kye 0003:0458:0138.0035: item fetching failed at offset 3/5 [ 285.207808][ T982] kye 0003:0458:0138.0035: parse failed [ 285.217047][ T982] kye 0003:0458:0138.0035: probe with driver kye failed with error -22 [ 285.294114][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 285.366277][ T982] usb 5-1: USB disconnect, device number 12 [ 285.460036][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 285.516308][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 285.701766][ T5950] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 285.851723][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 285.858362][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.869294][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.879441][ T5950] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 285.888870][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.900067][ T5950] usb 6-1: config 0 descriptor?? [ 286.091411][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 286.172609][ T30] audit: type=1326 audit(1750931623.960:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.4.2545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1778e929 code=0xffff0000 [ 286.231361][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 286.359436][ T5950] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0036/input/input26 [ 286.453269][ T5950] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0036/input/input27 [ 286.476716][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 286.613628][ T5950] kye 0003:0458:5012.0036: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 286.684975][ T5950] usb 6-1: USB disconnect, device number 13 [ 286.685524][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 286.858014][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 286.888796][T11957] fido_id[11957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 287.732391][ T5950] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 287.905593][ T5950] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 287.912703][ T30] audit: type=1326 audit(1750931625.690:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 287.931842][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.961692][ T5950] usb 6-1: Product: syz [ 287.979004][ T30] audit: type=1326 audit(1750931625.720:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 287.982412][ T5950] usb 6-1: Manufacturer: syz [ 288.047206][ T5950] usb 6-1: SerialNumber: syz [ 288.051702][ T30] audit: type=1326 audit(1750931625.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.065239][ T5950] usb 6-1: config 0 descriptor?? [ 288.110875][ T5950] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 288.146189][ T30] audit: type=1326 audit(1750931625.720:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.218356][ T30] audit: type=1326 audit(1750931625.720:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.274749][ T30] audit: type=1326 audit(1750931625.720:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.297055][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.309813][ T30] audit: type=1326 audit(1750931625.720:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.332078][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.381050][ T30] audit: type=1326 audit(1750931625.720:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.445754][ T30] audit: type=1326 audit(1750931625.720:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e33d8e929 code=0x7fc00000 [ 288.562905][ T5950] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 288.591939][T11993] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 288.601022][T11993] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2568'. [ 288.631885][T11993] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 288.652749][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2568'. [ 288.945340][ T5950] usb 6-1: USB disconnect, device number 14 [ 290.070050][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.209917][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2592'. [ 290.252820][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.378642][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.579737][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.685757][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.784549][ T2155] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 290.794560][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.913373][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 290.951652][ T2155] usb 6-1: Using ep0 maxpacket: 16 [ 290.976013][ T2155] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 290.999080][ T2155] usb 6-1: config 0 has no interface number 0 [ 291.011530][ T2155] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 291.048046][ T2155] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 291.081446][ T2155] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 291.091772][ T2155] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 291.100007][ T2155] usb 6-1: Product: syz [ 291.108040][ T6309] udevd[6309]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 291.119415][ T2155] usb 6-1: Manufacturer: syz [ 291.131459][ T2155] usb 6-1: SerialNumber: syz [ 291.173393][ T2155] usb 6-1: config 0 descriptor?? [ 291.197098][ T2155] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 291.207540][ T2155] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 291.230892][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 291.232261][ T2155] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 291.272179][ T2155] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 291.281723][ T982] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 291.286572][ T2155] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 291.320294][ T2155] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 291.330257][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 291.337213][T12086] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 291.345401][ T2155] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 291.369045][ T2155] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 291.380536][ T2155] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 291.393146][ T2155] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 291.435590][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.449147][ T2155] usb 6-1: USB disconnect, device number 15 [ 291.468143][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 291.493616][ T2155] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 291.504837][ T5832] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 291.508726][ T982] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 291.529554][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.563360][ T2155] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 291.565976][ T982] usb 5-1: config 0 descriptor?? [ 291.606224][ T2155] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 291.644347][ T2155] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 291.656743][ T2155] keyspan 6-1:0.107: device disconnected [ 291.684039][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.706586][ T5832] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 291.717695][ T5832] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 291.736440][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.762330][ T5832] usb 4-1: config 0 descriptor?? [ 292.072883][ T982] kovaplus 0003:1E7D:2D50.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 292.186831][ T5832] Bluetooth: Can't get version to change to load ram patch err [ 292.211136][ T5832] Bluetooth: Loading patch file failed [ 292.225748][ T5832] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 292.249181][ T5832] usb 4-1: USB disconnect, device number 29 [ 292.259273][ T982] kovaplus 0003:1E7D:2D50.0037: couldn't init struct kovaplus_device [ 292.261618][T12103] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2616'. [ 292.288556][ T982] kovaplus 0003:1E7D:2D50.0037: couldn't install mouse [ 292.315420][ T982] kovaplus 0003:1E7D:2D50.0037: probe with driver kovaplus failed with error -71 [ 292.358614][ T982] usb 5-1: USB disconnect, device number 13 [ 292.482734][T12107] program syz.0.2618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.544909][T12112] program syz.0.2618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.573564][T12112] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.201723][ T5846] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 293.256084][ T5950] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 293.352450][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 293.368251][ T5846] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 293.382182][ T5846] usb 6-1: config 0 has no interface number 0 [ 293.407804][ T5846] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.413849][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.437816][ T5846] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 293.452466][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.476383][ T5846] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 293.482022][ T5950] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 293.492558][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.522542][ T5846] usb 6-1: Product: syz [ 293.526865][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.537346][ T5846] usb 6-1: Manufacturer: syz [ 293.552954][ T5846] usb 6-1: SerialNumber: syz [ 293.554980][ T5950] usb 4-1: config 0 descriptor?? [ 293.586223][ T5846] usb 6-1: config 0 descriptor?? [ 293.608155][T12126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.623473][T12126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.871194][T12126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.902570][T12126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 294.008370][ T5950] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 294.031244][ T5950] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 294.078004][ T5950] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0038/input/input29 [ 294.141663][ T5950] cm6533_jd 0003:0D8C:0022.0038: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 294.333150][ T5956] usb 4-1: USB disconnect, device number 30 [ 294.338350][ T5846] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.373038][ T5846] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 294.413742][ T5846] asix 6-1:0.251: probe with driver asix failed with error -71 [ 294.442613][ T5846] usb 6-1: USB disconnect, device number 16 [ 294.556529][T12173] vivid-001: disconnect [ 294.563172][T12172] vivid-001: reconnect [ 295.119257][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 295.179043][T12198] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 295.185880][T12198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 295.241832][T12198] vhci_hcd vhci_hcd.0: Device attached [ 295.474037][ T5950] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 296.191188][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.310597][T12256] netlink: 'syz.3.2688': attribute type 4 has an invalid length. [ 296.651895][ T5846] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 296.805617][ T5846] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 296.814297][ T5846] usb 6-1: config 0 has no interface number 0 [ 296.820431][ T5846] usb 6-1: config 0 interface 41 has no altsetting 0 [ 296.830880][ T5846] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 296.840518][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.849072][ T5846] usb 6-1: Product: syz [ 296.853730][ T2155] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 296.863273][ T5846] usb 6-1: Manufacturer: syz [ 296.868597][ T5846] usb 6-1: SerialNumber: syz [ 296.882466][ T5846] usb 6-1: config 0 descriptor?? [ 297.011751][ T2155] usb 5-1: Using ep0 maxpacket: 8 [ 297.019733][ T2155] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 297.031725][ T2155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.048940][ T2155] usb 5-1: config 0 descriptor?? [ 297.307450][ T5846] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 297.331668][ T5846] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 297.350063][ T5846] usb 6-1: USB disconnect, device number 17 [ 297.478466][ T2155] uclogic 0003:145F:0212.0039: interface is invalid, ignoring [ 297.681319][ T5846] usb 5-1: USB disconnect, device number 14 [ 298.155570][T12200] vhci_hcd: connection reset by peer [ 298.164475][ T12] vhci_hcd: stop threads [ 298.169597][ T12] vhci_hcd: release socket [ 298.181043][ T12] vhci_hcd: disconnect device [ 298.194527][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 298.321020][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 298.361684][ T5846] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 298.456886][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 298.512776][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 298.539928][ T5846] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 298.561671][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.579368][ T5846] usb 6-1: config 0 descriptor?? [ 298.632805][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 298.781335][T12337] binder_alloc: binder_alloc_mmap_handler: 12335 200000735000-200000736000 already mapped failed -16 [ 298.810863][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 298.977943][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 299.029850][ T5846] koneplus 0003:1E7D:2E22.003A: unknown main item tag 0x0 [ 299.071719][ T5846] koneplus 0003:1E7D:2E22.003A: unknown main item tag 0x0 [ 299.078913][ T5846] koneplus 0003:1E7D:2E22.003A: unknown main item tag 0x0 [ 299.120937][ T5846] koneplus 0003:1E7D:2E22.003A: unknown main item tag 0x0 [ 299.135823][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 299.149699][ T5846] koneplus 0003:1E7D:2E22.003A: unknown main item tag 0x0 [ 299.168061][ T5846] koneplus 0003:1E7D:2E22.003A: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 299.283329][ T5846] usb 6-1: USB disconnect, device number 18 [ 299.334244][ T9084] udevd[9084]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 299.351348][T12355] fido_id[12355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 299.398614][T12360] netlink: 'syz.0.2734': attribute type 17 has an invalid length. [ 299.420025][T12360] netlink: 'syz.0.2734': attribute type 16 has an invalid length. [ 299.441936][T12360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2734'. [ 299.567297][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 299.792643][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 299.792673][ T30] audit: type=1326 audit(1750931637.580:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.0.2741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bced8e929 code=0x0 [ 300.161834][ T982] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 300.232929][ T5956] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 300.318525][T12388] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2747'. [ 300.321770][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 300.337844][ T982] usb 4-1: config 5 has an invalid interface number: 153 but max is 0 [ 300.346831][ T982] usb 4-1: config 5 has no interface number 0 [ 300.362899][ T982] usb 4-1: config 5 interface 153 has no altsetting 0 [ 300.373789][ T982] usb 4-1: New USB device found, idVendor=12d1, idProduct=763a, bcdDevice=4a.a8 [ 300.383427][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.391515][ T982] usb 4-1: Product: syz [ 300.398844][ T982] usb 4-1: Manufacturer: syz [ 300.404411][ T982] usb 4-1: SerialNumber: syz [ 300.410025][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.421839][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.440666][ T5956] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 300.455935][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.470792][ T5956] usb 6-1: config 0 descriptor?? [ 300.581728][ T5950] vhci_hcd: vhci_device speed not set [ 300.653965][ T982] huawei_cdc_ncm 4-1:5.153: CDC Union missing and no IAD found [ 300.665959][ T982] huawei_cdc_ncm 4-1:5.153: bind() failure [ 300.668572][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 300.702026][ T982] usb 4-1: USB disconnect, device number 31 [ 300.784411][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 300.865432][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 300.907401][ T5956] logitech-djreceiver 0003:046D:C52F.003B: item fetching failed at offset 2/5 [ 300.919458][ T5956] logitech-djreceiver 0003:046D:C52F.003B: logi_dj_probe: parse failed [ 300.938424][ T5956] logitech-djreceiver 0003:046D:C52F.003B: probe with driver logitech-djreceiver failed with error -22 [ 300.959102][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 300.989828][T12403] netlink: 'syz.0.2754': attribute type 21 has an invalid length. [ 300.998727][T12403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2754'. [ 301.055783][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 301.123316][ T5956] usb 6-1: USB disconnect, device number 19 [ 301.150206][ T6309] udevd[6309]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 301.176179][T12407] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 301.255762][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 301.391509][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 301.534769][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 301.738236][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 303.216071][ T5846] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 303.302498][ T5832] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 303.327905][T12501] smc: net device bond0 erased user defined pnetid SYZ2 [ 303.386798][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.398341][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.409754][ T5846] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 303.419897][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.433919][ T5846] usb 6-1: config 0 descriptor?? [ 303.481922][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 303.488989][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.501863][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.511785][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.524915][ T5832] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.535566][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.547187][ T5832] usb 5-1: config 0 descriptor?? [ 303.878125][ T5846] savu 0003:1E7D:2D5A.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 303.996796][ T5832] microsoft 0003:045E:07DA.003D: ignoring exceeding usage max [ 304.042732][ T5832] microsoft 0003:045E:07DA.003D: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 304.075588][ T5832] microsoft 0003:045E:07DA.003D: no inputs found [ 304.086092][ T43] usb 6-1: USB disconnect, device number 20 [ 304.103142][ T5832] microsoft 0003:045E:07DA.003D: could not initialize ff, continuing anyway [ 304.221099][ T5832] usb 5-1: USB disconnect, device number 15 [ 304.806716][T12548] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.2822'. [ 305.510246][ T30] audit: type=1326 audit(1750931643.290:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab2f8e929 code=0x7fc00000 [ 305.532543][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.774330][ T6307] udevd[6307]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 306.020277][T12592] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 306.145231][ T5950] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 306.251826][ T5956] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.303514][ T5950] usb 5-1: config index 0 descriptor too short (expected 126, got 72) [ 306.314379][ T5950] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.324303][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.332505][ T5950] usb 5-1: Product: syz [ 306.336683][ T5950] usb 5-1: Manufacturer: syz [ 306.341265][ T5950] usb 5-1: SerialNumber: syz [ 306.353624][ T5950] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.371123][ T5959] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.411964][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 306.419110][ T5956] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 306.427555][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.438034][ T5956] usb 6-1: config 0 has no interface number 0 [ 306.444302][ T982] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 306.456070][ T5956] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 306.465421][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.473522][ T5956] usb 6-1: Product: syz [ 306.477747][ T5956] usb 6-1: Manufacturer: syz [ 306.482457][ T5956] usb 6-1: SerialNumber: syz [ 306.491178][ T5956] usb 6-1: config 0 descriptor?? [ 306.503679][ T5956] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 306.510092][ T5956] usb 6-1: No valid video chain found. [ 306.615341][ T982] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 306.624651][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.637207][ T982] usb 4-1: config 0 descriptor?? [ 306.646900][ T982] cp210x 4-1:0.0: cp210x converter detected [ 306.719168][ T5832] usb 6-1: USB disconnect, device number 21 [ 306.994577][ T5832] usb 5-1: USB disconnect, device number 16 [ 307.062935][ T982] usb 4-1: cp210x converter now attached to ttyUSB0 [ 307.077328][ T982] usb 4-1: USB disconnect, device number 32 [ 307.088761][ T982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.098010][ T982] cp210x 4-1:0.0: device disconnected [ 307.761435][T12620] mkiss: ax0: crc mode is auto. [ 307.792077][ T5959] usb 5-1: Service connection timeout for: 257 [ 307.798321][ T5959] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 307.811262][ T5959] ath9k_htc: Failed to initialize the device [ 307.820640][ T5832] usb 5-1: ath9k_htc: USB layer deinitialized [ 307.984641][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 308.307085][T12644] option changes via remount are deprecated (pid=12643 comm=syz.4.2869) [ 308.411100][T12648] binder: 12647:12648 ioctl c00c620f 200000000180 returned -22 [ 308.840602][T12668] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2881'. [ 308.965682][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 308.977053][ T5832] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 309.143346][ T5832] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 309.162250][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 309.173071][ T30] audit: type=1804 audit(1750931646.950:70): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2887" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=1986 res=1 errno=0 [ 309.183582][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 48367, setting to 64 [ 309.196087][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.226087][ T30] audit: type=1800 audit(1750931646.980:71): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2887" name="cgroup.controllers" dev="tmpfs" ino=1986 res=0 errno=0 [ 309.237121][ T5832] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 309.247837][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.278576][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2888'. [ 309.278591][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.296093][ T5832] usb 4-1: Product: syz [ 309.300285][ T5832] usb 4-1: Manufacturer: syz [ 309.305334][ T5832] usb 4-1: SerialNumber: syz [ 309.319904][ T5832] usb 4-1: config 0 descriptor?? [ 309.326126][T12662] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 309.530861][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2893'. [ 309.642113][ T5959] usb 4-1: USB disconnect, device number 33 [ 309.986165][ T5950] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 310.129385][T12712] netlink: 'syz.4.2903': attribute type 8 has an invalid length. [ 310.150009][ T5950] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 310.161800][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.195269][ T5950] usb 6-1: config 0 descriptor?? [ 310.217349][ T5950] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 310.623906][ T5950] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 310.626791][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 310.643718][ T5950] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 310.834473][ T5959] usb 6-1: USB disconnect, device number 22 [ 311.041766][ T5950] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 311.212695][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 311.233305][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.245903][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.259521][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.272945][ T5950] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 311.282392][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.295974][ T5950] usb 4-1: config 0 descriptor?? [ 311.738179][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.746287][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.754596][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.762685][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.770369][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.779364][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.788685][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.807324][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.817800][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.834829][ T5950] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 311.862407][ T5950] hid-multitouch 0003:0457:07DA.003E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 312.031138][ T5950] usb 4-1: USB disconnect, device number 34 [ 312.159551][ T6309] udevd[6309]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 312.441346][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 312.530440][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 312.712090][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 312.857074][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.106310][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.307326][T12831] vivid-000: disconnect [ 313.334559][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.357838][T12830] vivid-000: reconnect [ 313.450056][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.532836][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 313.579694][T12844] netlink: 'syz.3.2965': attribute type 1 has an invalid length. [ 313.619767][T12844] netlink: 'syz.3.2965': attribute type 2 has an invalid length. [ 313.640733][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.736326][ T6100] udevd[6100]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 313.764544][T12853] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 313.812122][ T5832] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 313.972052][ T5846] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 313.983801][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 314.012421][ T5832] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 314.031720][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.054203][ T5832] usb 5-1: config 0 descriptor?? [ 314.156433][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.169526][ T5846] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 314.187043][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.203141][ T5846] usb 6-1: config 0 descriptor?? [ 314.498977][ T5832] aquacomputer_d5next 0003:0C70:F0BD.003F: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 314.640985][ T5846] logitech 0003:046D:C626.0040: item fetching failed at offset 0/3 [ 314.662907][ T5846] logitech 0003:046D:C626.0040: parse failed [ 314.677630][ T5846] logitech 0003:046D:C626.0040: probe with driver logitech failed with error -22 [ 314.698850][ T5956] usb 5-1: USB disconnect, device number 17 [ 314.855070][ T5959] usb 6-1: USB disconnect, device number 23 [ 315.535595][T12906] tipc: Bearer : already 2 bearers with priority 10 [ 315.543345][T12906] tipc: Bearer : trying with adjusted priority [ 315.550540][T12906] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 315.723164][ T5959] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 315.896465][ T5959] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.916150][ T5959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.948375][ T5959] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.975578][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 316.001100][ T5959] usb 6-1: SerialNumber: syz [ 316.230448][ T5959] usb 6-1: 0:2 : does not exist [ 316.301299][ T5959] usb 6-1: USB disconnect, device number 24 [ 316.543598][T12947] netlink: 'syz.4.3014': attribute type 29 has an invalid length. [ 316.559004][T12947] netlink: 'syz.4.3014': attribute type 29 has an invalid length. [ 316.751487][T12956] tipc: Enabling of bearer rejected, media not registered [ 316.854318][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3019'. [ 317.319682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326307][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.623725][T12991] ================================================================== [ 317.631854][T12991] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 317.639789][T12991] Read of size 8 at addr ffff88802f512b30 by task syz.5.3034/12991 [ 317.647703][T12991] [ 317.650069][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.5.3034 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 317.650098][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.650111][T12991] Call Trace: [ 317.650120][T12991] [ 317.650128][T12991] dump_stack_lvl+0x189/0x250 [ 317.650155][T12991] ? __virt_addr_valid+0x1c8/0x5c0 [ 317.650178][T12991] ? rcu_is_watching+0x15/0xb0 [ 317.650207][T12991] ? __kasan_check_byte+0x12/0x40 [ 317.650229][T12991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.650249][T12991] ? rcu_is_watching+0x15/0xb0 [ 317.650269][T12991] ? lock_release+0x4b/0x3e0 [ 317.650309][T12991] ? __virt_addr_valid+0x1c8/0x5c0 [ 317.650332][T12991] ? __virt_addr_valid+0x4a5/0x5c0 [ 317.650355][T12991] print_report+0xd2/0x2b0 [ 317.650382][T12991] ? pause_parse_request+0x40/0x160 [ 317.650403][T12991] kasan_report+0x118/0x150 [ 317.650425][T12991] ? pause_parse_request+0x40/0x160 [ 317.650448][T12991] ? __pfx_pause_parse_request+0x10/0x10 [ 317.650466][T12991] pause_parse_request+0x40/0x160 [ 317.650488][T12991] ? __pfx_pause_parse_request+0x10/0x10 [ 317.650507][T12991] ethnl_default_set_doit+0x2be/0xa40 [ 317.650532][T12991] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 317.650563][T12991] genl_family_rcv_msg_doit+0x212/0x300 [ 317.650593][T12991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.650628][T12991] ? bpf_lsm_capable+0x9/0x20 [ 317.650648][T12991] ? security_capable+0x7e/0x2e0 [ 317.650673][T12991] genl_rcv_msg+0x60e/0x790 [ 317.650703][T12991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.650729][T12991] ? ref_tracker_free+0x63a/0x7d0 [ 317.650750][T12991] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 317.650774][T12991] ? __pfx_ref_tracker_free+0x10/0x10 [ 317.650798][T12991] netlink_rcv_skb+0x205/0x470 [ 317.650819][T12991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.650845][T12991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.650873][T12991] ? down_read+0x1ad/0x2e0 [ 317.650898][T12991] genl_rcv+0x28/0x40 [ 317.650923][T12991] netlink_unicast+0x758/0x8d0 [ 317.650947][T12991] netlink_sendmsg+0x805/0xb30 [ 317.650972][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.650995][T12991] ? aa_sock_msg_perm+0xf1/0x1d0 [ 317.651018][T12991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.651044][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.651067][T12991] __sock_sendmsg+0x219/0x270 [ 317.651087][T12991] ____sys_sendmsg+0x505/0x830 [ 317.651114][T12991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.651144][T12991] ? import_iovec+0x74/0xa0 [ 317.651163][T12991] ___sys_sendmsg+0x21f/0x2a0 [ 317.651203][T12991] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.651247][T12991] ? __fget_files+0x2a/0x420 [ 317.651271][T12991] ? __fget_files+0x3a0/0x420 [ 317.651299][T12991] __x64_sys_sendmsg+0x19b/0x260 [ 317.651324][T12991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.651359][T12991] ? rcu_is_watching+0x15/0xb0 [ 317.651381][T12991] ? do_syscall_64+0xbe/0x3b0 [ 317.651407][T12991] do_syscall_64+0xfa/0x3b0 [ 317.651427][T12991] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.651445][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.651464][T12991] ? clear_bhb_loop+0x60/0xb0 [ 317.651519][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.651540][T12991] RIP: 0033:0x7f9ab2f8e929 [ 317.651558][T12991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.651577][T12991] RSP: 002b:00007f9ab3ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.651601][T12991] RAX: ffffffffffffffda RBX: 00007f9ab31b5fa0 RCX: 00007f9ab2f8e929 [ 317.651618][T12991] RDX: 0000000020040884 RSI: 0000200000000080 RDI: 0000000000000003 [ 317.651632][T12991] RBP: 00007f9ab3010b39 R08: 0000000000000000 R09: 0000000000000000 [ 317.651646][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.651658][T12991] R13: 0000000000000000 R14: 00007f9ab31b5fa0 R15: 00007ffc0d30e978 [ 317.651679][T12991] [ 317.651687][T12991] [ 318.033312][T12991] Allocated by task 12991: [ 318.037730][T12991] kasan_save_track+0x3e/0x80 [ 318.042422][T12991] __kasan_kmalloc+0x93/0xb0 [ 318.047010][T12991] __kmalloc_noprof+0x27a/0x4f0 [ 318.051856][T12991] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 318.057928][T12991] genl_family_rcv_msg_doit+0xb8/0x300 [ 318.063566][T12991] genl_rcv_msg+0x60e/0x790 [ 318.068104][T12991] netlink_rcv_skb+0x205/0x470 [ 318.072879][T12991] genl_rcv+0x28/0x40 [ 318.076877][T12991] netlink_unicast+0x758/0x8d0 [ 318.081642][T12991] netlink_sendmsg+0x805/0xb30 [ 318.086415][T12991] __sock_sendmsg+0x219/0x270 [ 318.091097][T12991] ____sys_sendmsg+0x505/0x830 [ 318.095875][T12991] ___sys_sendmsg+0x21f/0x2a0 [ 318.100574][T12991] __x64_sys_sendmsg+0x19b/0x260 [ 318.105522][T12991] do_syscall_64+0xfa/0x3b0 [ 318.110036][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.115937][T12991] [ 318.118267][T12991] The buggy address belongs to the object at ffff88802f512b00 [ 318.118267][T12991] which belongs to the cache kmalloc-64 of size 64 [ 318.132155][T12991] The buggy address is located 8 bytes to the right of [ 318.132155][T12991] allocated 40-byte region [ffff88802f512b00, ffff88802f512b28) [ 318.146568][T12991] [ 318.148894][T12991] The buggy address belongs to the physical page: [ 318.155297][T12991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f512980 pfn:0x2f512 [ 318.165367][T12991] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 318.172925][T12991] page_type: f5(slab) [ 318.176917][T12991] raw: 00fff00000000000 ffff88801a8418c0 0000000000000000 dead000000000001 [ 318.185507][T12991] raw: ffff88802f512980 000000008020001f 00000000f5000000 0000000000000000 [ 318.194095][T12991] page dumped because: kasan: bad access detected [ 318.200506][T12991] page_owner tracks the page as allocated [ 318.206220][T12991] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2, tgid 2 (kthreadd), ts 22514817295, free_ts 0 [ 318.223770][T12991] post_alloc_hook+0x240/0x2a0 [ 318.228548][T12991] get_page_from_freelist+0x21e4/0x22c0 [ 318.234098][T12991] __alloc_frozen_pages_noprof+0x181/0x370 [ 318.239915][T12991] alloc_pages_mpol+0x232/0x4a0 [ 318.244766][T12991] allocate_slab+0x8a/0x370 [ 318.249273][T12991] ___slab_alloc+0xbeb/0x1410 [ 318.253950][T12991] __kmalloc_noprof+0x305/0x4f0 [ 318.258798][T12991] security_task_alloc+0x4d/0x360 [ 318.263818][T12991] copy_process+0x1530/0x3c00 [ 318.268492][T12991] kernel_clone+0x21e/0x870 [ 318.272993][T12991] kernel_thread+0x10c/0x160 [ 318.277586][T12991] kthreadd+0x575/0x770 [ 318.281741][T12991] ret_from_fork+0x3fc/0x770 [ 318.286352][T12991] ret_from_fork_asm+0x1a/0x30 [ 318.291117][T12991] page_owner free stack trace missing [ 318.296480][T12991] [ 318.298802][T12991] Memory state around the buggy address: [ 318.304428][T12991] ffff88802f512a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 318.312501][T12991] ffff88802f512a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 318.320587][T12991] >ffff88802f512b00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 318.328652][T12991] ^ [ 318.334283][T12991] ffff88802f512b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 318.342343][T12991] ffff88802f512c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 318.350406][T12991] ================================================================== [ 318.401611][T12991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.408860][T12991] CPU: 1 UID: 0 PID: 12991 Comm: syz.5.3034 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 318.420432][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.430513][T12991] Call Trace: [ 318.433817][T12991] [ 318.436774][T12991] dump_stack_lvl+0x99/0x250 [ 318.441489][T12991] ? __asan_memcpy+0x40/0x70 [ 318.446115][T12991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.451343][T12991] ? __pfx__printk+0x10/0x10 [ 318.455979][T12991] panic+0x2db/0x790 [ 318.459907][T12991] ? __pfx_panic+0x10/0x10 [ 318.464366][T12991] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 318.470381][T12991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.476738][T12991] ? print_memory_metadata+0x314/0x400 [ 318.482234][T12991] ? pause_parse_request+0x40/0x160 [ 318.487465][T12991] check_panic_on_warn+0x89/0xb0 [ 318.492445][T12991] ? pause_parse_request+0x40/0x160 [ 318.497674][T12991] end_report+0x78/0x160 [ 318.501943][T12991] kasan_report+0x129/0x150 [ 318.506484][T12991] ? pause_parse_request+0x40/0x160 [ 318.511711][T12991] ? __pfx_pause_parse_request+0x10/0x10 [ 318.517372][T12991] pause_parse_request+0x40/0x160 [ 318.522422][T12991] ? __pfx_pause_parse_request+0x10/0x10 [ 318.528429][T12991] ethnl_default_set_doit+0x2be/0xa40 [ 318.533835][T12991] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 318.540246][T12991] genl_family_rcv_msg_doit+0x212/0x300 [ 318.545830][T12991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 318.551940][T12991] ? bpf_lsm_capable+0x9/0x20 [ 318.556646][T12991] ? security_capable+0x7e/0x2e0 [ 318.561620][T12991] genl_rcv_msg+0x60e/0x790 [ 318.566156][T12991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.571212][T12991] ? ref_tracker_free+0x63a/0x7d0 [ 318.576258][T12991] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 318.582184][T12991] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.587583][T12991] netlink_rcv_skb+0x205/0x470 [ 318.592378][T12991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.597439][T12991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.602769][T12991] ? down_read+0x1ad/0x2e0 [ 318.607217][T12991] genl_rcv+0x28/0x40 [ 318.611232][T12991] netlink_unicast+0x758/0x8d0 [ 318.616028][T12991] netlink_sendmsg+0x805/0xb30 [ 318.621010][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.626323][T12991] ? aa_sock_msg_perm+0xf1/0x1d0 [ 318.631296][T12991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.636618][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.641929][T12991] __sock_sendmsg+0x219/0x270 [ 318.646630][T12991] ____sys_sendmsg+0x505/0x830 [ 318.651427][T12991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.656755][T12991] ? import_iovec+0x74/0xa0 [ 318.661284][T12991] ___sys_sendmsg+0x21f/0x2a0 [ 318.666005][T12991] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.671248][T12991] ? __fget_files+0x2a/0x420 [ 318.675860][T12991] ? __fget_files+0x3a0/0x420 [ 318.680569][T12991] __x64_sys_sendmsg+0x19b/0x260 [ 318.685540][T12991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.691039][T12991] ? rcu_is_watching+0x15/0xb0 [ 318.695827][T12991] ? do_syscall_64+0xbe/0x3b0 [ 318.700532][T12991] do_syscall_64+0xfa/0x3b0 [ 318.705058][T12991] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.710280][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.716456][T12991] ? clear_bhb_loop+0x60/0xb0 [ 318.721160][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.727053][T12991] RIP: 0033:0x7f9ab2f8e929 [ 318.731468][T12991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.751081][T12991] RSP: 002b:00007f9ab3ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.759499][T12991] RAX: ffffffffffffffda RBX: 00007f9ab31b5fa0 RCX: 00007f9ab2f8e929 [ 318.767479][T12991] RDX: 0000000020040884 RSI: 0000200000000080 RDI: 0000000000000003 [ 318.775447][T12991] RBP: 00007f9ab3010b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.783424][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.791486][T12991] R13: 0000000000000000 R14: 00007f9ab31b5fa0 R15: 00007ffc0d30e978 [ 318.799463][T12991] [ 318.802737][T12991] Kernel Offset: disabled [ 318.807058][T12991] Rebooting in 86400 seconds..