last executing test programs: 12m27.089501963s ago: executing program 2 (id=6075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x2, 0x12c, @pic={0x0, 0x2, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) 12m27.080004618s ago: executing program 0 (id=6083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x8, 0xfffff028}, {0x6, 0x1, 0xa, 0x4}]}) 12m26.947166402s ago: executing program 0 (id=6076): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 12m26.894281953s ago: executing program 2 (id=6077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x20000010) 12m26.817827661s ago: executing program 0 (id=6078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) 12m26.804830182s ago: executing program 2 (id=6079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="b807020000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "d036"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m26.778191139s ago: executing program 0 (id=6080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) 12m26.662182098s ago: executing program 0 (id=6081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 12m26.537954959s ago: executing program 0 (id=6082): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$apparmor_current(r0, 0x0, 0x0) 12m25.096424712s ago: executing program 2 (id=6095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2f) close(r0) 12m24.985813103s ago: executing program 2 (id=6096): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 12m24.952628284s ago: executing program 2 (id=6097): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) 12m11.083546446s ago: executing program 32 (id=6082): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$apparmor_current(r0, 0x0, 0x0) 12m9.585906894s ago: executing program 33 (id=6097): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) 4m3.887623453s ago: executing program 5 (id=13628): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 4m3.830340982s ago: executing program 5 (id=13629): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x1, 0xa}, {0x6, 0x0, 0x0, 0xffff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000280)=[{0x84, 0x8, 0x40, 0x800}, {0x6, 0x0, 0x0, 0xffff0001}]}) setitimer(0x2, 0x0, 0x0) 4m1.638951867s ago: executing program 5 (id=13639): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 4m0.934378127s ago: executing program 5 (id=13643): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 4m0.579980301s ago: executing program 5 (id=13653): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 4m0.518114622s ago: executing program 5 (id=13646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000800010507000300800006"], 0x1e7) 3m45.471140307s ago: executing program 34 (id=13646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000800010507000300800006"], 0x1e7) 5.404236724s ago: executing program 6 (id=17143): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) 5.240404801s ago: executing program 6 (id=17145): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7dd033e3", {0x3, 0x100, 0x0, 0x2, 0x2, 0x10, 0x8}}) 3.283454892s ago: executing program 4 (id=17166): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) splice(r1, 0x0, r0, 0x0, 0x400000107ffff000, 0x0) 3.231639473s ago: executing program 4 (id=17167): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) 2.113021717s ago: executing program 6 (id=17172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.09696607s ago: executing program 1 (id=17174): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x2}, 0x2) 2.057500697s ago: executing program 6 (id=17175): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) 1.952963324s ago: executing program 6 (id=17177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.776328947s ago: executing program 6 (id=17180): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.599897743s ago: executing program 1 (id=17183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 683.969697ms ago: executing program 1 (id=17187): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x5, 0x9, 0x2}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 536.898015ms ago: executing program 1 (id=17190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x58, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bb01f5cd6364925382fc938a98"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x58}}, 0x4800) 464.441036ms ago: executing program 1 (id=17192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) 413.230872ms ago: executing program 3 (id=17193): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 392.668993ms ago: executing program 1 (id=17194): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 365.132485ms ago: executing program 3 (id=17195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 320.551663ms ago: executing program 3 (id=17196): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x100, 0x1, 0x4, 0x4, 0x7, 0x1, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc6e8, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x3, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x3, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x4291, 0xac8, 0xca, 0x6, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x58, 0x9, 0x2, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x7, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x80000000, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 270.203465ms ago: executing program 3 (id=17197): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)) 201.986878ms ago: executing program 3 (id=17198): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 163.508818ms ago: executing program 4 (id=17199): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000200)=""/4, 0x4) 136.91031ms ago: executing program 3 (id=17200): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB=' 1\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a80)={0x0, 0x5}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x20, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 91.005965ms ago: executing program 4 (id=17201): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r1, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @multicast}, 0x10) 41.845277ms ago: executing program 4 (id=17202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) 0s ago: executing program 4 (id=17203): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r1], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 14 [ 990.376727][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.463299][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.492848][T18971] udevd[18971]: symlink '../../loop8' '/dev/disk/by-diskseq/91.tmp-b7:8' failed: Read-only file system [ 990.520116][T18971] udevd[18971]: symlink '../../loop8' '/dev/disk/by-diskseq/91.tmp-b7:8' failed: Read-only file system [ 990.541979][ T5900] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 990.585822][T18971] udevd[18971]: symlink '../../loop8' '/dev/disk/by-diskseq/91.tmp-b7:8' failed: Read-only file system [ 990.594137][ T5962] netlink: 763 bytes leftover after parsing attributes in process `syz.6.14685'. [ 990.622187][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.733221][ T5900] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.745216][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.745856][ T5900] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 990.769923][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.780900][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 990.794966][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 990.809373][ T5900] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.820616][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.829017][ T5900] usb 4-1: Product: syz [ 990.834407][ T5900] usb 4-1: Manufacturer: syz [ 990.864636][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.879932][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 990.887052][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 990.894798][ T5972] tipc: Enabled bearer , priority 14 [ 990.913724][ T5900] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 990.920920][ T5900] cdc_wdm 4-1:1.0: Unknown control protocol [ 990.957334][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 990.969248][T24156] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 991.034597][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 991.059347][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14692'. [ 991.068632][T17333] usb 4-1: USB disconnect, device number 74 [ 991.133017][T24156] usb 2-1: Using ep0 maxpacket: 8 [ 991.140350][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.151362][T24156] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 991.160470][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.175614][T24156] usb 2-1: config 0 descriptor?? [ 991.291536][ T5722] Bluetooth: hci3: command 0x0405 tx timeout [ 991.621655][T24156] lenovo 0003:17EF:6062.0133: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 991.843199][ T5937] usb 2-1: USB disconnect, device number 48 [ 992.057354][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14711'. [ 992.774798][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14715'. [ 993.564980][ T6080] program syz.3.14739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.859606][ T6097] smc: net device bond0 applied user defined pnetid SYZ0 [ 994.164490][T24156] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 994.333134][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.357126][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.369180][T24156] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 994.379426][T24156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.399455][T24156] usb 4-1: config 0 descriptor?? [ 994.431147][T17333] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 994.593248][T17333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.607373][T17333] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 994.634072][T17333] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.645067][T17333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.653742][T17333] usb 2-1: Product: syz [ 994.658264][T17333] usb 2-1: Manufacturer: syz [ 994.664083][T17333] usb 2-1: SerialNumber: syz [ 994.837682][T24156] hid_parser_main: 49 callbacks suppressed [ 994.837709][T24156] arvo 0003:1E7D:30D4.0134: unknown main item tag 0x0 [ 994.874432][T24156] arvo 0003:1E7D:30D4.0134: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 994.930801][T17333] usb 2-1: 0:2 : does not exist [ 994.946968][T17333] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 995.001455][T17333] usb 2-1: USB disconnect, device number 49 [ 995.032617][T24156] arvo 0003:1E7D:30D4.0134: couldn't init struct arvo_device [ 995.061816][T24156] arvo 0003:1E7D:30D4.0134: couldn't install keyboard [ 995.089830][T24156] arvo 0003:1E7D:30D4.0134: probe with driver arvo failed with error -71 [ 995.141111][T24156] usb 4-1: USB disconnect, device number 75 [ 995.317221][ T6159] program syz.6.14767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.457239][ T6165] ALSA: seq fatal error: cannot create timer (-22) [ 995.579218][ T6170] netlink: 'syz.6.14773': attribute type 1 has an invalid length. [ 995.591085][ T6170] netlink: 208 bytes leftover after parsing attributes in process `syz.6.14773'. [ 995.600778][ T6170] netlink: 'syz.6.14773': attribute type 1 has an invalid length. [ 995.612609][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14773'. [ 996.084486][ T6199] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 996.364708][ T6215] loop6: detected capacity change from 0 to 63 [ 996.391906][T18971] buffer_io_error: 10 callbacks suppressed [ 996.391927][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.406958][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.416653][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.425226][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.433858][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.442812][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.454681][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.463237][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.474192][T18971] ldm_validate_partition_table(): Disk read failed. [ 996.480924][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.489491][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 996.498973][T18971] Dev loop6: unable to read RDB block 0 [ 996.507504][T18971] loop6: unable to read partition table [ 996.517929][ T6215] ldm_validate_partition_table(): Disk read failed. [ 996.526677][ T6215] Dev loop6: unable to read RDB block 0 [ 996.535458][ T6215] loop6: unable to read partition table [ 996.544470][ T6215] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 996.557963][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 996.619980][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 996.647729][ T6223] program syz.6.14798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.651448][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/93.tmp-b7:6' failed: Read-only file system [ 996.736939][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 996.868718][ T6233] netlink: 'syz.1.14802': attribute type 1 has an invalid length. [ 996.878626][ T6233] netlink: 208 bytes leftover after parsing attributes in process `syz.1.14802'. [ 996.889377][ T6233] netlink: 'syz.1.14802': attribute type 1 has an invalid length. [ 996.898168][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14802'. [ 996.931232][ T5945] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 996.964590][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.068776][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.101900][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 997.110438][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.133032][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.148867][ T5945] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 997.179654][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.194937][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.210864][ T5945] usb 4-1: config 0 descriptor?? [ 997.303288][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.397494][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.569481][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 997.643357][ T5945] hid-picolcd 0003:04D8:F002.0135: item fetching failed at offset 7/11 [ 997.655904][ T5945] hid-picolcd 0003:04D8:F002.0135: device report parse failed [ 997.665122][ T5945] hid-picolcd 0003:04D8:F002.0135: probe with driver hid-picolcd failed with error -22 [ 997.861592][ T5945] usb 4-1: USB disconnect, device number 76 [ 997.871724][ T6269] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 998.487969][ T6296] hugetlbfs: Bad value '' for mount option 'size' [ 998.487969][ T6296] [ 998.936180][ T6318] hugetlbfs: Bad value '' for mount option 'size' [ 998.936180][ T6318] [ 999.231259][ T6334] netlink: 'syz.4.14852': attribute type 27 has an invalid length. [ 999.867007][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14861'. [ 1000.290550][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14876'. [ 1000.836205][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1000.846967][ T6394] openvswitch: netlink: Unknown nsh attribute 0 [ 1000.855596][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.208754][ T6403] tmpfs: Cannot change global quota limit on remount [ 1001.290307][ T6405] netlink: 188 bytes leftover after parsing attributes in process `syz.1.14884'. [ 1001.496228][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14888'. [ 1001.533027][ T6412] netlink: 'syz.1.14888': attribute type 1 has an invalid length. [ 1001.540943][ T6412] netlink: 'syz.1.14888': attribute type 2 has an invalid length. [ 1001.549661][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14888'. [ 1001.597150][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1001.720191][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1001.845227][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1001.924145][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1001.967476][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14897'. [ 1002.015262][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.027124][ T5937] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1002.072891][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.126164][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.181205][ T5945] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1002.201119][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1002.208434][ T5937] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1002.217541][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.229123][ T5937] usb 2-1: config 0 descriptor?? [ 1002.237878][ T5937] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1002.353484][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1002.363727][ T5945] usb 4-1: config 0 has no interface number 0 [ 1002.370559][ T5945] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1002.380341][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.397093][ T5945] usb 4-1: config 0 descriptor?? [ 1002.406734][ T5945] usb 4-1: selecting invalid altsetting 1 [ 1002.414871][ T5945] dvb_ttusb_budget: ttusb_init_controller: error [ 1002.421756][ T5945] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1002.516331][ T5945] DVB: Unable to find symbol cx22700_attach() [ 1002.608055][ T5945] DVB: Unable to find symbol tda10046_attach() [ 1002.619588][ T5945] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1002.674865][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.689509][T24156] usb 4-1: USB disconnect, device number 77 [ 1002.785998][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.865623][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1002.878639][T17333] usb 2-1: USB disconnect, device number 50 [ 1005.692193][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14956'. [ 1006.126249][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14961'. [ 1007.321352][T17333] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1007.484161][T17333] usb 2-1: Using ep0 maxpacket: 32 [ 1007.492372][T17333] usb 2-1: config 2 has an invalid interface number: 66 but max is 0 [ 1007.500958][T17333] usb 2-1: config 2 has no interface number 0 [ 1007.510953][T17333] usb 2-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1007.544335][T17333] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1007.561135][T17333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.579477][T17333] usb 2-1: Product: syz [ 1007.586029][T17333] usb 2-1: Manufacturer: syz [ 1007.600958][T17333] usb 2-1: SerialNumber: syz [ 1007.630015][T17333] usb 2-1: Found UVC 0.00 device syz (046d:08c6) [ 1007.650017][T17333] usb 2-1: No valid video chain found. [ 1007.707450][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1007.787561][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1007.833004][T24563] usb 2-1: USB disconnect, device number 51 [ 1007.935318][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1008.095122][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1008.151747][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15005'. [ 1008.179606][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15006'. [ 1008.211093][ T6666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15006'. [ 1008.240403][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1008.418736][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1008.623482][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1009.115400][ T6696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15017'. [ 1009.134000][ T6693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15017'. [ 1009.576154][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1009.686278][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1010.109454][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1010.366428][ T6753] sg_write: data in/out 2907/14 bytes for SCSI command 0x0-- guessing data in; [ 1010.366428][ T6753] program syz.1.15047 not setting count and/or reply_len properly [ 1010.474037][ T6757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15049'. [ 1010.896355][ T6768] openvswitch: netlink: nsh attr 218 is out of range max 3 [ 1010.907821][ T6768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.256696][ T6785] netlink: 92 bytes leftover after parsing attributes in process `syz.4.15061'. [ 1011.578959][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15071'. [ 1012.231381][T24156] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1012.402193][T24156] usb 2-1: Using ep0 maxpacket: 16 [ 1012.409204][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.420312][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.430494][T24156] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.443492][T24156] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1012.452707][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.464214][T24156] usb 2-1: config 0 descriptor?? [ 1012.885589][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.898734][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.906490][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.914261][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.922118][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.929916][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.937672][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.945511][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.953441][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.961195][T24156] hid-multitouch 0003:0457:07DA.0136: unknown main item tag 0x0 [ 1012.971189][T24156] hid-multitouch 0003:0457:07DA.0136: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 1013.142984][ T5937] usb 2-1: USB disconnect, device number 52 [ 1013.209678][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1013.362809][T24563] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1013.450567][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1013.523158][T24563] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1013.541486][T24563] usb 4-1: config 0 has no interface number 0 [ 1013.548085][T24563] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1013.572700][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.579022][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1013.598165][T24563] usb 4-1: config 0 descriptor?? [ 1013.618517][T24563] usb 4-1: selecting invalid altsetting 1 [ 1013.636102][T24563] dvb_ttusb_budget: ttusb_init_controller: error [ 1013.651319][T24563] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1013.750735][T24563] DVB: Unable to find symbol cx22700_attach() [ 1013.817393][ T6868] binder: BINDER_SET_CONTEXT_MGR already set [ 1013.837371][ T6868] binder: 6866:6868 ioctl 40046207 0 returned -16 [ 1013.853030][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1013.884604][T24563] DVB: Unable to find symbol tda10046_attach() [ 1013.890823][T24563] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1013.934752][T24563] usb 4-1: USB disconnect, device number 78 [ 1014.043305][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.157321][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.240823][ T6884] random: crng reseeded on system resumption [ 1014.355550][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.468223][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.493017][ T6893] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.508388][ T6893] binder: 6891:6893 ioctl 40046207 0 returned -16 [ 1014.636756][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.797437][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1014.858159][ T6912] random: crng reseeded on system resumption [ 1015.045191][ T6920] netlink: 763 bytes leftover after parsing attributes in process `syz.4.15134'. [ 1015.140548][ T6924] [U]  [ 1015.143867][ T6924] [U] K{ [ 1015.147099][ T6924] [U] T 1ŠFFˊ`GJǘGO/MC [ 1015.161423][ T6924] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1015.204770][ T6924] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1015.244835][ T6924] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1015.289402][ T6924] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1015.315534][ T6924] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1015.328351][ T6924] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1015.345005][ T6924] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1015.443954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.458348][ T6924] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1015.467783][ T6924] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1015.485222][ T6924] [U] 22Ʃ۩X?0;3U [ 1015.490330][ T6924] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1015.515336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.530069][ T6924] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1015.540297][ T6924] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1015.549246][ T6924] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1015.556057][ T6924] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1015.568926][ T6924] [U] EC [ 1015.572599][ T6924] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1015.649564][ T6923] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1015.996054][ T6959] netlink: 368 bytes leftover after parsing attributes in process `syz.1.15145'. [ 1016.861380][ T6981] netlink: 368 bytes leftover after parsing attributes in process `syz.6.15156'. [ 1017.004659][ T6989] random: crng reseeded on system resumption [ 1017.371186][ T926] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1017.483748][ T7013] random: crng reseeded on system resumption [ 1017.563344][ T926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.595909][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1017.618953][ T926] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1017.628742][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.657997][ T926] usb 2-1: config 0 descriptor?? [ 1017.667614][ T6994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1017.677661][ T926] hub 2-1:0.0: USB hub found [ 1017.762397][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15176'. [ 1017.890355][ T926] hub 2-1:0.0: 2 ports detected [ 1017.898982][ T926] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1018.107867][ T926] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1018.129255][ T926] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1018.156461][T17333] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1018.169957][ T926] usbhid 2-1:0.0: can't add hid device: -71 [ 1018.191359][ T926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1018.215703][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1018.234159][ T926] usb 2-1: USB disconnect, device number 53 [ 1018.339973][T17333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.361198][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1018.374435][T17333] usb 4-1: config 0 has no interfaces? [ 1018.379998][T17333] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.395840][T17333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.412801][T17333] usb 4-1: config 0 descriptor?? [ 1018.483222][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1018.492639][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15187'. [ 1018.626552][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1018.655267][T17333] usb 4-1: USB disconnect, device number 79 [ 1018.788361][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1018.998820][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1019.086836][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1019.217360][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1019.297017][ T7083] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1019.297017][ T7083] The task syz.6.15203 (7083) triggered the difference, watch for misbehavior. [ 1020.123081][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1020.260635][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1020.737890][ T30] audit: type=1326 audit(2000000679.887:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.15223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14b38e929 code=0x7fc00000 [ 1020.760225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.010538][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15235'. [ 1021.971141][ T926] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1022.036611][ T7195] devtmpfs: Cannot enable quota on remount [ 1022.142711][ T926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.155831][ T926] usb 2-1: config 0 has no interface number 0 [ 1022.169223][ T926] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.197025][ T926] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.226604][ T926] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1022.257030][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.284617][ T926] usb 2-1: config 0 descriptor?? [ 1022.386210][ T30] audit: type=1326 audit(2000000681.547:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.408541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.490182][ T30] audit: type=1326 audit(2000000681.547:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.512463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.592463][ T30] audit: type=1326 audit(2000000681.547:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.651354][ T30] audit: type=1326 audit(2000000681.547:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.677896][ T30] audit: type=1326 audit(2000000681.547:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.730544][ T30] audit: type=1326 audit(2000000681.547:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.831779][ T30] audit: type=1326 audit(2000000681.547:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.856845][ T926] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0137/input/input106 [ 1022.914455][ T30] audit: type=1326 audit(2000000681.547:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1022.977385][ T30] audit: type=1326 audit(2000000681.547:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.3.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1023.039908][ T926] holtek_kbd 0003:04D9:A055.0137: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 1023.077510][ T926] usb 2-1: USB disconnect, device number 54 [ 1023.162335][ T7227] fido_id[7227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1023.243498][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1023.372363][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1023.475519][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1023.511179][ T7240] block nbd6: Unsupported socket: shutdown callout must be supported. [ 1023.628940][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1023.768305][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1024.355353][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15284'. [ 1024.744595][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1024.882128][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1024.937050][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15294'. [ 1025.385542][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1025.480219][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1025.620352][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1025.768216][ T7346] Bluetooth: MGMT ver 1.23 [ 1026.378568][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15327'. [ 1027.191161][T24563] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1027.343152][T24563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.354179][T24563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.365266][T24563] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1027.374510][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.385324][T24563] usb 4-1: config 0 descriptor?? [ 1027.803024][T24563] hid_parser_main: 6 callbacks suppressed [ 1027.803046][T24563] hid-steam 0003:28DE:1142.0138: unknown main item tag 0x0 [ 1027.818285][T24563] hid-steam 0003:28DE:1142.0138: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1027.881271][T24563] hid-steam 0003:28DE:1142.0138: Steam wireless receiver connected [ 1027.889275][T24563] hid-steam 0003:28DE:1142.0138: No HID_FEATURE_REPORT submitted - nothing to read [ 1027.907948][T24563] hid-steam 0003:28DE:1142.0139: unknown main item tag 0x0 [ 1027.918555][T24563] hid-steam 0003:28DE:1142.0139: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1028.016230][ T926] usb 4-1: USB disconnect, device number 80 [ 1028.037370][ T926] hid-steam 0003:28DE:1142.0138: Steam wireless receiver disconnected [ 1028.808679][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1028.914797][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1029.024759][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1029.550187][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1029.690054][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1029.765497][ T7463] netlink: 200 bytes leftover after parsing attributes in process `syz.3.15370'. [ 1029.826339][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1029.986504][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1030.180743][ T7484] ALSA: mixer_oss: invalid OSS volume '' [ 1030.186807][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1030.261486][T24156] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1030.276171][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1030.434183][T24156] usb 2-1: Using ep0 maxpacket: 32 [ 1030.457747][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.479661][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.507540][T24156] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1030.533090][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.574159][T24156] usb 2-1: config 0 descriptor?? [ 1030.637012][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1031.016029][T24156] ft260 0003:0403:6030.013A: item fetching failed at offset 0/2 [ 1031.051810][T24156] ft260 0003:0403:6030.013A: failed to parse HID [ 1031.059365][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15398'. [ 1031.067235][T24156] ft260 0003:0403:6030.013A: probe with driver ft260 failed with error -22 [ 1031.180222][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15401'. [ 1031.282133][T24156] usb 2-1: USB disconnect, device number 55 [ 1031.859916][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15410'. [ 1032.661861][T17333] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1032.788587][ T7604] program syz.3.15429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1032.851394][T17333] usb 2-1: Using ep0 maxpacket: 8 [ 1032.882073][T17333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.903454][T17333] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 1032.921499][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.947440][T17333] usb 2-1: config 0 descriptor?? [ 1033.300847][ T7622] netlink: 'syz.3.15437': attribute type 3 has an invalid length. [ 1033.310226][ T7622] netlink: 'syz.3.15437': attribute type 1 has an invalid length. [ 1033.318748][ T7622] netlink: 192 bytes leftover after parsing attributes in process `syz.3.15437'. [ 1033.328978][ T7622] NCSI netlink: No device for ifindex 0 [ 1033.380018][T17333] wacom 0003:056A:00E5.013B: unknown main item tag 0x0 [ 1033.586113][T17333] usb 2-1: USB disconnect, device number 56 [ 1033.816387][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1033.970234][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1034.044712][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1034.208091][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1034.368312][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1034.601285][T24156] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1034.753334][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.764606][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.774468][T24156] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1034.783688][T24156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.794360][T24156] usb 4-1: config 0 descriptor?? [ 1035.214808][T24156] samsung 0003:0419:0600.013C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 1035.421391][ T5945] usb 4-1: USB disconnect, device number 81 [ 1036.050349][ T7697] netlink: 'syz.1.15472': attribute type 10 has an invalid length. [ 1036.059794][ T7697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15472'. [ 1036.615579][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15481'. [ 1036.925469][ T7719] netlink: 'syz.3.15483': attribute type 10 has an invalid length. [ 1036.939789][ T7719] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15483'. [ 1036.983216][ T7721] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1036.997928][ T7721] overlayfs: missing 'lowerdir' [ 1037.425627][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1037.539188][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1037.694155][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1037.790120][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1037.841912][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1037.841932][ T30] audit: type=1326 audit(2000000697.007:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.3.15485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a398e929 code=0x7fc00000 [ 1039.191200][T17333] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1039.364476][T17333] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1039.377835][ T30] audit: type=1326 audit(2000000698.527:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdf8e929 code=0x7fc00000 [ 1039.400900][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.415866][T17333] usb 2-1: config 0 descriptor?? [ 1039.951364][T24156] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1040.062773][T17333] usb 2-1: Cannot set autoneg [ 1040.081849][T17333] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1040.124972][T17333] usb 2-1: USB disconnect, device number 57 [ 1040.142490][T24156] usb 4-1: Using ep0 maxpacket: 16 [ 1040.156206][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.176413][T24156] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1040.209752][T24156] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1040.231136][T24156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.273539][T24156] usb 4-1: config 0 descriptor?? [ 1040.475908][ T7819] program syz.4.15521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1040.702814][T24156] logitech 0003:046D:C286.013D: unknown main item tag 0x0 [ 1040.738050][T24156] logitech 0003:046D:C286.013D: unknown main item tag 0x0 [ 1040.750618][T24156] logitech 0003:046D:C286.013D: unknown main item tag 0x0 [ 1040.780881][T24156] logitech 0003:046D:C286.013D: unknown main item tag 0x0 [ 1040.804681][T24156] logitech 0003:046D:C286.013D: unknown main item tag 0x0 [ 1040.838146][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1040.870599][T24156] logitech 0003:046D:C286.013D: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 1040.923861][T24156] logitech 0003:046D:C286.013D: no inputs found [ 1040.963390][T24156] usb 4-1: USB disconnect, device number 82 [ 1041.096767][ T7833] fido_id[7833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1041.128318][T30602] udevd[30602]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.255994][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.301159][ T5945] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1041.345870][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.401614][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15531'. [ 1041.465870][ T5945] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1041.485160][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.487671][ T5945] usb 2-1: config 0 has no interface number 0 [ 1041.513456][ T5945] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.525923][ T5945] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.536592][ T5945] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1041.546092][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.559366][ T7852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1041.576993][ T5945] usb 2-1: config 0 descriptor?? [ 1041.585126][ T7852] overlayfs: missing 'lowerdir' [ 1041.645905][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.748455][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.815721][ T30] audit: type=1326 audit(2000000700.977:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.6.15539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff81bb8e929 code=0x0 [ 1041.825956][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1041.941120][T24156] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1042.001638][ T5945] uclogic 0003:256C:006D.013E: interface is invalid, ignoring [ 1042.091385][T24156] usb 4-1: Using ep0 maxpacket: 8 [ 1042.104204][T24156] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1042.115383][T24156] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1042.124831][T24156] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1042.133442][T24156] usb 4-1: Product: syz [ 1042.137663][T24156] usb 4-1: Manufacturer: syz [ 1042.142578][T24156] usb 4-1: SerialNumber: syz [ 1042.214346][T17333] usb 2-1: USB disconnect, device number 58 [ 1042.356733][T24156] usb 4-1: Invalid connection information received from device [ 1042.564814][ T5945] usb 4-1: USB disconnect, device number 83 [ 1042.688608][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1042.764086][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1042.969746][ T7878] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1042.987293][ T7878] overlayfs: missing 'lowerdir' [ 1043.313890][ T7891] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.15551'. [ 1043.400503][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15554'. [ 1043.416461][ T7896] netlink: 'syz.6.15554': attribute type 2 has an invalid length. [ 1043.424767][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15554'. [ 1043.542320][T17333] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1043.701097][T17333] usb 2-1: Using ep0 maxpacket: 16 [ 1043.715603][T17333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.740576][T17333] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1043.758943][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.784462][T17333] usb 2-1: config 0 descriptor?? [ 1044.229482][T17333] apple 0003:05AC:027C.013F: hidraw0: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 1044.447728][ T926] usb 2-1: USB disconnect, device number 59 [ 1044.889827][ T7948] netlink: 'syz.3.15580': attribute type 1 has an invalid length. [ 1044.903244][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15580'. [ 1045.221162][T24563] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1045.385684][T24563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1045.417256][T24563] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1045.427742][ T7976] netlink: 'syz.6.15593': attribute type 1 has an invalid length. [ 1045.435864][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15593'. [ 1045.437411][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.474669][T24563] usb 4-1: config 0 descriptor?? [ 1045.481261][ T7955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1045.861543][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1045.912891][T24563] belkin 0003:050D:3201.0140: item fetching failed at offset 0/3 [ 1045.941802][T24563] belkin 0003:050D:3201.0140: parse failed [ 1045.947744][T24563] belkin 0003:050D:3201.0140: probe with driver belkin failed with error -22 [ 1045.968576][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.066367][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.138201][T24563] usb 4-1: USB disconnect, device number 84 [ 1046.169588][ T8002] netlink: 100 bytes leftover after parsing attributes in process `syz.1.15607'. [ 1046.207736][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.312693][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.406397][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.587160][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.620586][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15616'. [ 1046.727863][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.840358][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1046.935704][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1047.112384][ T926] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1047.301193][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 1047.313040][ T926] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1047.326772][ T926] usb 2-1: config 179 has no interface number 0 [ 1047.341508][ T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1047.358318][ T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1047.370203][ T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1047.382093][ T926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1047.395701][ T926] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1047.409911][ T926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1047.419516][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.451749][ T8031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1047.708652][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.756725][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.007670][ T926] usb 2-1: USB disconnect, device number 60 [ 1048.014125][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1048.014186][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1048.714808][ T8102] trusted_key: encrypted_key: key user:syz not found [ 1049.337709][ T8127] trusted_key: encrypted_key: key user:syz not found [ 1050.320847][ T8178] netlink: 'syz.3.15690': attribute type 2 has an invalid length. [ 1050.357172][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15691'. [ 1050.416086][ T8182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15693'. [ 1050.721432][ T926] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1050.873065][ T926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.893232][ T926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.908222][ T926] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1050.918439][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.937333][ T926] usb 4-1: config 0 descriptor?? [ 1051.237344][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1051.304929][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15713'. [ 1051.398070][ T926] sony 0003:054C:024B.0141: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 1051.411128][ T926] sony 0003:054C:024B.0141: failed to claim input [ 1051.588371][ T926] usb 4-1: USB disconnect, device number 85 [ 1051.602484][T24563] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1051.763426][T24563] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1051.772209][T24563] usb 2-1: config 0 has no interface number 0 [ 1051.778309][T24563] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1051.788056][T24563] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1051.797555][T24563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.805732][T24563] usb 2-1: Product: syz [ 1051.809913][T24563] usb 2-1: Manufacturer: syz [ 1051.814553][T24563] usb 2-1: SerialNumber: syz [ 1051.821538][T24563] usb 2-1: config 0 descriptor?? [ 1052.033464][T24563] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1052.239127][T24563] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1052.246554][T24563] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1052.260272][T24563] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1052.332656][T24563] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 1052.457410][ T926] usb 2-1: USB disconnect, device number 61 [ 1052.850426][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15736'. [ 1052.923866][ T8273] netlink: 'syz.4.15737': attribute type 1 has an invalid length. [ 1052.935131][ T8273] netlink: 208 bytes leftover after parsing attributes in process `syz.4.15737'. [ 1052.945381][ T8273] netlink: 'syz.4.15737': attribute type 1 has an invalid length. [ 1052.953530][ T8273] netlink: 'syz.4.15737': attribute type 2 has an invalid length. [ 1053.151900][ T8284] sctp: [Deprecated]: syz.4.15742 (pid 8284) Use of int in max_burst socket option. [ 1053.151900][ T8284] Use struct sctp_assoc_value instead [ 1053.266521][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15746'. [ 1053.641095][T17333] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1053.795207][T17333] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1053.803533][T17333] usb 4-1: config 0 has no interface number 0 [ 1053.809696][T17333] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1053.820526][T17333] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1053.830037][T17333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.838645][T17333] usb 4-1: Product: syz [ 1053.844284][T17333] usb 4-1: Manufacturer: syz [ 1053.848892][T17333] usb 4-1: SerialNumber: syz [ 1053.857901][T17333] usb 4-1: config 0 descriptor?? [ 1054.071683][T17333] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1054.128636][ T8306] netlink: 'syz.1.15752': attribute type 1 has an invalid length. [ 1054.137111][ T8306] netlink: 208 bytes leftover after parsing attributes in process `syz.1.15752'. [ 1054.147804][ T8306] netlink: 'syz.1.15752': attribute type 1 has an invalid length. [ 1054.157702][ T8306] netlink: 'syz.1.15752': attribute type 2 has an invalid length. [ 1054.290809][T17333] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1054.293967][ T8312] netlink: 328 bytes leftover after parsing attributes in process `syz.4.15756'. [ 1054.307222][T17333] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1054.323587][T17333] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1054.360312][T25937] udevd[25937]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1054.434068][T17333] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 1054.509171][T17333] usb 4-1: USB disconnect, device number 86 [ 1054.547552][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1054.650565][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1054.697253][ T8325] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.15764'. [ 1054.843047][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1054.967178][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1055.086963][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1055.246206][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1055.362643][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1055.445205][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1055.780120][ T8377] netlink: 'syz.1.15788': attribute type 4 has an invalid length. [ 1056.191750][ T5937] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1056.321127][T24563] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1056.356151][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1056.377921][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.396665][ T5937] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1056.410062][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1056.434655][ T5937] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1056.447322][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.456939][ T5937] usb 2-1: Product: syz [ 1056.464770][ T5937] usb 2-1: Manufacturer: syz [ 1056.476900][ T5937] usb 2-1: SerialNumber: syz [ 1056.487211][T24563] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1056.497443][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1056.524156][T24563] usb 4-1: config 0 has no interface number 0 [ 1056.532058][ T5937] usb 2-1: config 0 descriptor?? [ 1056.538719][T24563] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1056.557954][T24563] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1056.570826][T24563] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1056.586404][T24563] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1056.597769][T24563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.610109][T24563] usb 4-1: Product: syz [ 1056.616191][T24563] usb 4-1: Manufacturer: syz [ 1056.623512][T24563] usb 4-1: SerialNumber: syz [ 1056.644809][T24563] usb 4-1: config 0 descriptor?? [ 1056.655547][ T8392] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1056.754769][ T5937] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 1056.767683][ T5937] usb 2-1: No valid video chain found. [ 1056.977075][ T5937] usb 2-1: USB disconnect, device number 62 [ 1057.080107][T24563] appletouch 4-1:0.85: Geyser mode initialized. [ 1057.089707][T24563] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input109 [ 1057.292944][ T5937] usb 4-1: USB disconnect, device number 87 [ 1057.315432][ T5937] appletouch 4-1:0.85: input: appletouch disconnected [ 1057.550171][ T8421] netlink: 'syz.6.15798': attribute type 4 has an invalid length. [ 1057.607076][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1057.677297][T17333] IPVS: starting estimator thread 0... [ 1057.683245][ T8427] IPVS: ip_vs_add_dest(): server weight less than zero [ 1057.758478][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1057.791125][ T8429] IPVS: using max 28 ests per chain, 67200 per kthread [ 1058.394517][ T8465] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1058.673993][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1058.848226][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1058.958360][ T8492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15832'. [ 1059.026917][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1059.209561][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1059.305426][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1059.434255][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1059.456396][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15842'. [ 1060.779206][ T8558] netlink: 192 bytes leftover after parsing attributes in process `syz.6.15860'. [ 1060.942258][ T8564] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15863'. [ 1061.241246][ T5937] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1061.401080][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 1061.412961][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.435770][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.451298][ T5937] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1061.460383][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.494929][ T5937] usb 4-1: config 0 descriptor?? [ 1061.713911][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1061.814993][ T30] audit: type=1326 audit(2000000720.977:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.1.15871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa14b38e929 code=0x0 [ 1061.936012][ T5937] ntrig 0003:1B96:0008.0142: unbalanced delimiter at end of report description [ 1061.945776][ T5937] ntrig 0003:1B96:0008.0142: parse failed [ 1061.951995][ T5937] ntrig 0003:1B96:0008.0142: probe with driver ntrig failed with error -22 [ 1062.135061][ T5937] usb 4-1: USB disconnect, device number 88 [ 1062.634490][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1062.725889][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1063.107852][ T8604] netlink: 328 bytes leftover after parsing attributes in process `syz.4.15884'. [ 1063.686090][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1063.773558][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1063.896771][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15897'. [ 1064.005681][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1064.185448][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1064.359646][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1064.499224][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1064.543049][ T8655] binder: 8654:8655 ioctl 40046210 0 returned -14 [ 1064.626408][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1064.668838][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15910'. [ 1065.052229][ T8681] binder: 8677:8681 ioctl 40046210 0 returned -14 [ 1065.099977][ T8682] vivid-000: ================= START STATUS ================= [ 1065.100033][ T8682] vivid-000: Test Pattern: 75% Colorbar [ 1065.100074][ T8682] vivid-000: Fill Percentage of Frame: 100 [ 1065.100113][ T8682] vivid-000: Horizontal Movement: No Movement [ 1065.100139][ T8682] vivid-000: Vertical Movement: No Movement [ 1065.100164][ T8682] vivid-000: OSD Text Mode: All [ 1065.100189][ T8682] vivid-000: Show Border: true [ 1065.100213][ T8682] vivid-000: Show Square: false [ 1065.100237][ T8682] vivid-000: Sensor Flipped Horizontally: true [ 1065.100263][ T8682] vivid-000: Sensor Flipped Vertically: false [ 1065.100287][ T8682] vivid-000: Insert SAV Code in Image: false [ 1065.100312][ T8682] vivid-000: Insert EAV Code in Image: false [ 1065.100336][ T8682] vivid-000: Insert Video Guard Band: false [ 1065.100361][ T8682] vivid-000: Reduced Framerate: true [ 1065.100384][ T8682] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1065.100411][ T8682] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1065.100438][ T8682] vivid-000: Enable Capture Cropping: true grabbed [ 1065.100469][ T8682] vivid-000: Enable Capture Composing: true grabbed [ 1065.100500][ T8682] vivid-000: Enable Capture Scaler: true grabbed [ 1065.100530][ T8682] vivid-000: Timestamp Source: End of Frame [ 1065.100555][ T8682] vivid-000: Colorspace: Rec. 709 [ 1065.100580][ T8682] vivid-000: Transfer Function: sRGB [ 1065.100603][ T8682] vivid-000: Y'CbCr Encoding: Default [ 1065.100627][ T8682] vivid-000: HSV Encoding: Hue 0-256 [ 1065.100652][ T8682] vivid-000: Quantization: Default [ 1065.100676][ T8682] vivid-000: Apply Alpha To Red Only: true [ 1065.100700][ T8682] vivid-000: Standard Aspect Ratio: 4x3 [ 1065.100724][ T8682] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1065.100751][ T8682] vivid-000: DV Timings: 640x480p59 inactive [ 1065.100783][ T8682] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1065.100808][ T8682] vivid-000: Maximum EDID Blocks: 256 [ 1065.100833][ T8682] vivid-000: Limited RGB Range (16-235): true [ 1065.100858][ T8682] vivid-000: Rx RGB Quantization Range: Automatic [ 1065.100884][ T8682] vivid-000: Power Present: 0x00000001 [ 1065.100910][ T8682] tpg source WxH: 1280x720 (R'G'B) [ 1065.100925][ T8682] tpg field: 1 [ 1065.100935][ T8682] tpg crop: (0,0)/1280x64 [ 1065.100950][ T8682] tpg compose: (0,704)/1024x16 [ 1065.330828][ T8682] tpg colorspace: 3 [ 1065.330847][ T8682] tpg transfer function: 2/2 [ 1065.330861][ T8682] tpg quantization: 0/1 [ 1065.330873][ T8682] tpg RGB range: 0/1 [ 1065.330886][ T8682] vivid-000: ================== END STATUS ================== [ 1065.963051][ T8712] fuse: blksize only supported for fuseblk [ 1066.451470][T17333] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1066.617344][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15951'. [ 1066.641317][T17333] usb 2-1: Using ep0 maxpacket: 16 [ 1066.652334][T17333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.668881][T17333] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1066.679926][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.694757][T17333] usb 2-1: config 0 descriptor?? [ 1067.191106][T24156] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1067.326345][T17333] usb 2-1: USB disconnect, device number 63 [ 1067.350940][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.379797][T24156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.391251][T24156] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1067.400341][T24156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.419629][T24156] usb 4-1: config 0 descriptor?? [ 1067.841658][T24156] hid_mf 0003:0079:1846.0144: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 1067.868708][T24156] hid_mf 0003:0079:1846.0144: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1067.922671][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15963'. [ 1067.936800][ T8769] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1068.043437][T24156] usb 4-1: USB disconnect, device number 89 [ 1068.600920][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15972'. [ 1068.614103][ T8773] IPVS: Error joining to the multicast group [ 1068.820289][T25937] udevd[25937]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1068.941308][T24156] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1069.021193][ T5937] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1069.093672][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.105267][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.115205][T24156] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1069.124623][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.139698][T24156] usb 2-1: config 0 descriptor?? [ 1069.171464][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 1069.180528][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.193880][ T5937] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1069.204625][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.216555][ T5937] usb 4-1: config 0 descriptor?? [ 1069.557311][T24156] hid (null): global environment stack underflow [ 1069.568083][T24156] steelseries 0003:1038:12B6.0145: global environment stack underflow [ 1069.576432][T24156] steelseries 0003:1038:12B6.0145: item 0 2 1 11 parsing failed [ 1069.588392][T24156] steelseries 0003:1038:12B6.0145: probe with driver steelseries failed with error -22 [ 1069.637905][ T5937] mcp2221 0003:04D8:00DD.0146: unexpected long global item [ 1069.645717][ T5937] mcp2221 0003:04D8:00DD.0146: can't parse reports [ 1069.653088][ T5937] mcp2221 0003:04D8:00DD.0146: probe with driver mcp2221 failed with error -22 [ 1069.795824][ T5937] usb 2-1: USB disconnect, device number 64 [ 1069.843651][T24563] usb 4-1: USB disconnect, device number 90 [ 1070.431362][ T8787] vivid-000: ================= START STATUS ================= [ 1070.439244][ T8787] vivid-000: Test Pattern: 75% Colorbar [ 1070.445458][ T8787] vivid-000: Fill Percentage of Frame: 100 [ 1070.455767][ T8787] vivid-000: Horizontal Movement: No Movement [ 1070.468954][ T8787] vivid-000: Vertical Movement: No Movement [ 1070.481727][ T8787] vivid-000: OSD Text Mode: All [ 1070.489328][ T8787] vivid-000: Show Border: true [ 1070.502765][ T8787] vivid-000: Show Square: false [ 1070.527493][ T8787] vivid-000: Sensor Flipped Horizontally: true [ 1070.568547][ T8787] vivid-000: Sensor Flipped Vertically: false [ 1070.592496][ T8787] vivid-000: Insert SAV Code in Image: false [ 1070.608863][ T8787] vivid-000: Insert EAV Code in Image: false [ 1070.628533][ T8787] vivid-000: Insert Video Guard Band: false [ 1070.647331][ T8787] vivid-000: Reduced Framerate: true [ 1070.663051][ T8787] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1070.681561][ T8787] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1070.701964][ T8787] vivid-000: Enable Capture Cropping: true grabbed [ 1070.708561][ T8787] vivid-000: Enable Capture Composing: true grabbed [ 1070.748964][ T8787] vivid-000: Enable Capture Scaler: true grabbed [ 1070.757374][ T8787] vivid-000: Timestamp Source: End of Frame [ 1070.771519][ T8787] vivid-000: Colorspace: Rec. 709 [ 1070.781316][ T8787] vivid-000: Transfer Function: sRGB [ 1070.801117][ T8787] vivid-000: Y'CbCr Encoding: Default [ 1070.806712][ T8787] vivid-000: HSV Encoding: Hue 0-256 [ 1070.827940][ T8787] vivid-000: Quantization: Default [ 1070.837060][ T8787] vivid-000: Apply Alpha To Red Only: true [ 1070.844266][ T8787] vivid-000: Standard Aspect Ratio: 4x3 [ 1070.861090][ T8787] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1070.868755][ T8787] vivid-000: DV Timings: 640x480p59 inactive [ 1070.887244][ T8787] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1070.911157][ T8787] vivid-000: Maximum EDID Blocks: 256 [ 1070.918014][ T8787] vivid-000: Limited RGB Range (16-235): true [ 1070.925404][ T8787] vivid-000: Rx RGB Quantization Range: Automatic [ 1070.932311][ T8787] vivid-000: Power Present: 0x00000001 [ 1070.938387][ T8787] tpg source WxH: 1280x720 (R'G'B) [ 1070.946308][ T8787] tpg field: 1 [ 1070.949849][ T8787] tpg crop: (0,0)/1280x64 [ 1070.960392][ T8787] tpg compose: (0,704)/1024x16 [ 1070.981095][ T8787] tpg colorspace: 3 [ 1070.991445][ T8787] tpg transfer function: 2/2 [ 1071.000504][ T8787] tpg quantization: 0/1 [ 1071.009597][ T8787] tpg RGB range: 0/1 [ 1071.023967][ T8787] vivid-000: ================== END STATUS ================== [ 1071.167778][T24563] Process accounting resumed [ 1071.208633][ T8810] Process accounting resumed [ 1071.595659][T24156] Process accounting resumed [ 1071.630479][ T8834] Process accounting resumed [ 1071.945911][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.129339][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.320287][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.376299][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16015'. [ 1072.385727][ T8878] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1072.447660][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.551077][T24156] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1072.558260][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.599939][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1072.630563][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1072.679082][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.721184][T24156] usb 2-1: Using ep0 maxpacket: 16 [ 1072.744592][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.764606][ T8895] netlink: 92 bytes leftover after parsing attributes in process `syz.6.16022'. [ 1072.779913][T24156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.807215][T24156] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1072.831832][T24156] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1072.846832][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.865123][T24156] usb 2-1: config 0 descriptor?? [ 1072.875853][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1072.976755][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1073.304991][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.312491][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.319727][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.327878][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.335355][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.345421][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.353147][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.360416][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.368083][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.375604][T24156] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 1073.387423][T24156] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0147/input/input110 [ 1073.416420][T24156] microsoft 0003:045E:07DA.0147: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1073.532338][ T5937] usb 2-1: USB disconnect, device number 65 [ 1073.968220][ T8919] evm: overlay not supported [ 1074.340391][ T8939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.630709][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16051'. [ 1074.859147][ T30] audit: type=1326 audit(2000000734.017:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.1.16058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa14b38e929 code=0x0 [ 1075.980350][ T8997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.085505][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1076.308271][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1076.475432][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1076.585674][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1076.740873][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1076.928371][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1077.093589][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1077.294306][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1077.697657][T18976] udevd[18976]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1077.877810][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 1078.591316][T17333] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1078.751163][T17333] usb 2-1: Using ep0 maxpacket: 32 [ 1078.763412][T17333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.784155][T17333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.809256][T17333] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1078.846778][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.883905][T17333] usb 2-1: config 0 descriptor?? [ 1079.070016][ T9133] Bluetooth: hci4: Frame reassembly failed (-84) [ 1079.303847][T17333] kone 0003:1E7D:2CED.0148: unknown main item tag 0x0 [ 1079.319785][T17333] kone 0003:1E7D:2CED.0148: unknown main item tag 0x0 [ 1079.327518][T17333] kone 0003:1E7D:2CED.0148: unknown main item tag 0x4 [ 1079.337352][T17333] kone 0003:1E7D:2CED.0148: item fetching failed at offset 3/5 [ 1079.346376][T17333] kone 0003:1E7D:2CED.0148: parse failed [ 1079.354153][T17333] kone 0003:1E7D:2CED.0148: probe with driver kone failed with error -22 [ 1079.520482][T17333] usb 2-1: USB disconnect, device number 66 [ 1079.782159][ T9162] loop6: detected capacity change from 0 to 524287487 [ 1079.796675][T18971] buffer_io_error: 27 callbacks suppressed [ 1079.796694][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.810584][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.823517][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.884359][ T9165] loop6: detected capacity change from 524287487 to 0 [ 1079.884404][T18971] Buffer I/O error on dev loop6, logical block 0, async page read [ 1079.899235][T18971] ldm_validate_partition_table(): Disk read failed. [ 1079.905987][T18971] Dev loop6: unable to read RDB block 0 [ 1079.911662][T18971] loop6: unable to read partition table [ 1079.917489][T18971] loop6: partition table beyond EOD, truncated [ 1080.017600][ C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:1d, vlan:0) [ 1080.844227][ T9202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.061257][ T9215] trusted_key: encrypted_key: keyword 'uew' not recognized [ 1081.131366][ T5722] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1081.133360][T27209] Bluetooth: hci4: command 0xfc11 tx timeout [ 1081.179255][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1081.342501][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1081.418052][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1081.715444][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1081.903105][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1082.123152][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1082.307626][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1082.427043][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1082.539787][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1082.553254][ T9274] tap0: tun_chr_ioctl cmd 1074025677 [ 1082.570836][ T9274] tap0: linktype set to 776 [ 1082.620828][ T9278] loop6: detected capacity change from 0 to 524287487 [ 1082.635009][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.644108][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.666981][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.678298][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.689416][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.704005][ T9278] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.761480][ T9279] loop6: detected capacity change from 524287487 to 0 [ 1082.761905][ T9278] ldm_validate_partition_table(): Disk read failed. [ 1082.812051][ T9278] Dev loop6: unable to read RDB block 0 [ 1082.825886][ T9278] loop6: unable to read partition table [ 1082.832476][ T9278] loop6: partition table beyond EOD, truncated [ 1082.839543][ T9278] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1082.849843][T18971] udevd[18971]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1083.003235][ T5937] kernel read not supported for file /dsp1 (pid: 5937 comm: kworker/0:4) [ 1083.160633][ T9296] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16211'. [ 1083.311182][ T5937] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1083.463252][ T5937] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1083.473669][ T5937] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1083.486275][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.495561][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.503797][ T5937] usb 4-1: Product: syz [ 1083.508022][ T5937] usb 4-1: Manufacturer: syz [ 1083.513443][T24563] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1083.521156][ T5937] usb 4-1: SerialNumber: syz [ 1083.673240][T24563] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1083.681963][T24563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.697604][T24563] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1083.708023][T24563] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1083.716841][T24563] usb 2-1: Manufacturer: syz [ 1083.725041][T24563] usb 2-1: config 0 descriptor?? [ 1083.740518][ T5937] cdc_ncm 4-1:1.0: bind() failure [ 1083.757981][ T5937] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1083.765421][ T5937] cdc_ncm 4-1:1.1: bind() failure [ 1083.780623][ T5937] usb 4-1: USB disconnect, device number 91 [ 1083.821639][T24563] rc_core: IR keymap rc-hauppauge not found [ 1083.827592][T24563] Registered IR keymap rc-empty [ 1083.837342][T24563] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1083.851157][T24563] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input112 [ 1083.941322][T24156] usb 2-1: USB disconnect, device number 67 [ 1085.478653][ T9323] tap0: tun_chr_ioctl cmd 1074025677 [ 1085.496989][ T9323] tap0: linktype set to 776 [ 1086.382766][ T9362] vxcan1: tx address claim with dest, not broadcast [ 1086.701090][T24563] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1086.863757][T24563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.885116][T24563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.900192][T24563] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1086.909763][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.921209][ T5937] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1086.941370][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1086.943578][T24563] usb 4-1: config 0 descriptor?? [ 1087.086158][ T5937] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1087.102195][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.110767][ T5937] usb 2-1: Product: syz [ 1087.115445][ T5937] usb 2-1: Manufacturer: syz [ 1087.120473][ T5937] usb 2-1: SerialNumber: syz [ 1087.146913][ T5937] usb 2-1: config 0 descriptor?? [ 1087.164477][ T5937] ch341 2-1:0.0: ch341-uart converter detected [ 1087.393452][T24563] playstation 0003:054C:0DF2.0149: unknown main item tag 0x0 [ 1087.429900][T24563] playstation 0003:054C:0DF2.0149: unknown main item tag 0x0 [ 1087.439008][T24563] playstation 0003:054C:0DF2.0149: unknown main item tag 0x0 [ 1087.461162][T24563] playstation 0003:054C:0DF2.0149: unknown main item tag 0x0 [ 1087.483137][T24563] playstation 0003:054C:0DF2.0149: unknown main item tag 0x0 [ 1087.519638][T24563] playstation 0003:054C:0DF2.0149: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1087.814166][T24563] playstation 0003:054C:0DF2.0149: Failed to retrieve feature with reportID 32: -71 [ 1087.830188][T24563] playstation 0003:054C:0DF2.0149: Failed to retrieve DualSense firmware info: -71 [ 1087.845443][T24563] playstation 0003:054C:0DF2.0149: Failed to get firmware info from DualSense [ 1087.856389][T24563] playstation 0003:054C:0DF2.0149: Failed to create dualsense. [ 1087.878805][T24563] playstation 0003:054C:0DF2.0149: probe with driver playstation failed with error -71 [ 1087.909212][T24563] usb 4-1: USB disconnect, device number 92 [ 1088.028744][ T5937] usb 2-1: failed to send control message: -71 [ 1088.035416][ T5937] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1088.066067][ T5937] usb 2-1: USB disconnect, device number 68 [ 1088.082138][ T5937] ch341 2-1:0.0: device disconnected [ 1088.397688][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16261'. [ 1088.525403][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16266'. [ 1088.981290][ T5937] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1089.141961][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 1089.159384][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1089.180698][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1089.199700][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.218066][ T5937] usb 2-1: Product: syz [ 1089.231883][ T5937] usb 2-1: Manufacturer: syz [ 1089.236534][ T5937] usb 2-1: SerialNumber: syz [ 1089.261886][ T5937] usb 2-1: config 0 descriptor?? [ 1089.277030][ T5937] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1089.287024][ T5937] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1089.761459][T24563] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1089.879390][ T5937] em28xx 2-1:0.0: chip ID is em2800 [ 1089.934205][T24563] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1089.958238][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.976581][T24563] usb 4-1: config 0 descriptor?? [ 1089.993657][T24563] cp210x 4-1:0.0: cp210x converter detected [ 1090.148802][ T5937] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1090.157367][ T5937] em28xx 2-1:0.0: board has no eeprom [ 1090.221133][ T5937] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1090.229205][ T5937] em28xx 2-1:0.0: dvb set to bulk mode. [ 1090.234996][ T5945] em28xx 2-1:0.0: Binding DVB extension [ 1090.256762][ T5937] usb 2-1: USB disconnect, device number 69 [ 1090.270351][ T5937] em28xx 2-1:0.0: Disconnecting em28xx [ 1090.299289][ T5945] em28xx 2-1:0.0: Registering input extension [ 1090.306529][ T5937] em28xx 2-1:0.0: Closing input extension [ 1090.324923][ T5937] em28xx 2-1:0.0: Freeing device [ 1090.589594][T24563] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1090.605555][T24563] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1090.623865][T24563] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1090.644002][T24563] usb 4-1: USB disconnect, device number 93 [ 1090.664202][T24563] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1090.685938][T24563] cp210x 4-1:0.0: device disconnected [ 1090.905117][ T9485] netlink: 188 bytes leftover after parsing attributes in process `syz.6.16295'. [ 1091.131353][T24563] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1091.291486][T24563] usb 2-1: Using ep0 maxpacket: 16 [ 1091.305808][T24563] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1091.317467][T24563] usb 2-1: config 0 has no interface number 0 [ 1091.325127][T24563] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1091.335509][T24563] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1091.350925][T24563] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1091.367620][T24563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.376646][T24563] usb 2-1: Product: syz [ 1091.381385][T24563] usb 2-1: Manufacturer: syz [ 1091.386014][T24563] usb 2-1: SerialNumber: syz [ 1091.398734][T24563] usb 2-1: config 0 descriptor?? [ 1091.404810][ T9483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1091.414333][ T9483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1091.460874][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16305'. [ 1091.652154][ T9483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1091.659483][ T9483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1091.868399][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16314'. [ 1092.162506][ T9536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.311448][T24563] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1092.340276][T24563] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1092.353937][T24563] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1092.373849][T24563] usb 2-1: USB disconnect, device number 70 [ 1093.085062][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16334'. [ 1093.287609][ T9580] batadv_slave_0: entered promiscuous mode [ 1093.294625][ T9579] batadv_slave_0: left promiscuous mode [ 1093.676123][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16349'. [ 1093.692753][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16349'. [ 1093.706815][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16349'. [ 1093.772396][T27209] Bluetooth: hci3: command 0x0405 tx timeout [ 1094.391194][T24563] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1094.561222][T24563] usb 4-1: Using ep0 maxpacket: 8 [ 1094.570926][T24563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.581367][T24563] usb 4-1: config 0 has no interfaces? [ 1094.586897][T24563] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1094.596657][T24563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.607180][T24563] usb 4-1: config 0 descriptor?? [ 1094.825561][T24563] usb 4-1: USB disconnect, device number 94 [ 1095.072794][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16367'. [ 1096.581208][T24563] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1096.701882][ T9706] bpf: Bad value for 'uid' [ 1096.741032][T24563] usb 4-1: Using ep0 maxpacket: 32 [ 1096.750861][T24563] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1096.769265][T24563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.789697][T24563] usb 4-1: Product: syz [ 1096.811072][T24563] usb 4-1: Manufacturer: syz [ 1096.815733][T24563] usb 4-1: SerialNumber: syz [ 1096.842660][T24563] usb 4-1: config 0 descriptor?? [ 1096.857568][T24563] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1097.341218][ T5937] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1097.521969][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1097.547499][ T5937] usb 2-1: config index 0 descriptor too short (expected 6683, got 27) [ 1097.564858][ T5937] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1097.591035][ T5937] usb 2-1: config 0 has no interface number 0 [ 1097.597286][ T5937] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.621544][ T5937] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1097.633602][ T5937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1097.657726][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.671521][T24563] gspca_stk1135: reg_w 0x5 err -71 [ 1097.677714][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.701648][ T5937] usb 2-1: Product: syz [ 1097.706444][ T5937] usb 2-1: Manufacturer: syz [ 1097.711255][ T5937] usb 2-1: SerialNumber: syz [ 1097.717664][T24563] gspca_stk1135: Sensor write failed [ 1097.728536][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.740394][ T5937] usb 2-1: config 0 descriptor?? [ 1097.771595][T24563] gspca_stk1135: Sensor write failed [ 1097.776965][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.797335][T24563] gspca_stk1135: Sensor read failed [ 1097.803074][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.809494][T24563] gspca_stk1135: Sensor read failed [ 1097.815898][T24563] gspca_stk1135: Detected sensor type unknown (0x0) [ 1097.826232][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.842251][T24563] gspca_stk1135: Sensor read failed [ 1097.848585][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.881354][T24563] gspca_stk1135: Sensor read failed [ 1097.886665][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.902009][T24563] gspca_stk1135: Sensor write failed [ 1097.907490][T24563] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.915597][T24563] gspca_stk1135: Sensor write failed [ 1097.926589][T24563] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1097.953471][T24563] usb 4-1: USB disconnect, device number 95 [ 1098.072572][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.462016][ T5937] appletouch 2-1:0.85: Geyser mode initialized. [ 1098.481665][ T5937] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input114 [ 1098.687849][T24156] usb 2-1: USB disconnect, device number 71 [ 1098.749915][T24156] appletouch 2-1:0.85: input: appletouch disconnected [ 1099.526619][ T9784] vxcan0: tx address claim with dest, not broadcast [ 1101.328475][ T9832] netlink: 'syz.1.16455': attribute type 83 has an invalid length. [ 1101.428515][ T9836] kernel read not supported for file /file1 (pid: 9836 comm: syz.1.16457) [ 1101.438832][ T30] audit: type=1800 audit(2000000760.597:129): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16457" name="file1" dev="mqueue" ino=152575 res=0 errno=0 [ 1102.052414][ T9861] batadv_slave_1: entered promiscuous mode [ 1102.059409][ T9860] batadv_slave_1: left promiscuous mode [ 1102.223452][ T9871] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1102.510537][ T9880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.532981][ T5937] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1102.701404][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1102.720527][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1102.727591][ T5937] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1102.742362][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.755797][ T5937] usb 2-1: config 0 descriptor?? [ 1103.221077][ T5937] corsair-psu 0003:1B1C:1C0C.014A: hidraw0: USB HID v4.06 Device [HID 1b1c:1c0c] on usb-dummy_hcd.1-1/input0 [ 1103.596479][ T5937] corsair-psu 0003:1B1C:1C0C.014A: unable to initialize device (-71) [ 1103.616703][ T5937] corsair-psu 0003:1B1C:1C0C.014A: probe with driver corsair-psu failed with error -71 [ 1103.669916][ T5937] usb 2-1: USB disconnect, device number 72 [ 1104.171235][ T926] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1104.339236][ T926] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.358815][ T926] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.369315][ T926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.378198][ T926] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1104.387377][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.398306][ T926] usb 4-1: config 0 descriptor?? [ 1104.495453][ T5937] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1104.651252][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 1104.665805][ T5937] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1104.675040][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.683276][ T5937] usb 2-1: Product: syz [ 1104.687473][ T5937] usb 2-1: Manufacturer: syz [ 1104.693197][ T5937] usb 2-1: SerialNumber: syz [ 1104.702151][ T5937] usb 2-1: config 0 descriptor?? [ 1104.717418][ T5937] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1104.822029][ T926] hid-alps 0003:044E:120B.014B: bogus close delimiter [ 1104.838019][ T926] hid-alps 0003:044E:120B.014B: item 0 0 2 10 parsing failed [ 1104.847931][ T926] hid-alps 0003:044E:120B.014B: parse failed [ 1104.858502][ T926] hid-alps 0003:044E:120B.014B: probe with driver hid-alps failed with error -22 [ 1105.036671][T24563] usb 4-1: USB disconnect, device number 96 [ 1105.528476][ T5937] gspca_ov534_9: reg_w failed -71 [ 1105.851447][ T5937] gspca_ov534_9: Unknown sensor 0000 [ 1105.851549][ T5937] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1105.884228][ T5937] usb 2-1: USB disconnect, device number 73 [ 1106.299844][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16534'. [ 1106.806365][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16545'. [ 1106.819738][T10021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16545'. [ 1106.840890][T10021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16545'. [ 1106.970811][T10030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16549'. [ 1106.986635][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16549'. [ 1107.168781][T10040] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16554'. [ 1107.326300][ T30] audit: type=1804 audit(2000000766.487:130): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.16557" name="/newroot/654/cgroup.controllers" dev="tmpfs" ino=3340 res=1 errno=0 [ 1107.374777][ T30] audit: type=1800 audit(2000000766.487:131): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16557" name="cgroup.controllers" dev="tmpfs" ino=3340 res=0 errno=0 [ 1107.424462][ T926] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1107.581074][ T926] usb 2-1: Using ep0 maxpacket: 32 [ 1107.588506][ T926] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1107.601339][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.621951][ T926] usb 2-1: config 0 descriptor?? [ 1108.044153][ T926] logitech 0003:046D:C29C.014C: unknown main item tag 0x1 [ 1108.053872][ T926] logitech 0003:046D:C29C.014C: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 1108.446682][ T926] logitech 0003:046D:C29C.014C: no inputs found [ 1108.476705][ T926] usb 2-1: USB disconnect, device number 74 [ 1109.165226][T10100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16582'. [ 1109.286145][T24563] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1109.447456][T24563] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.457553][T24563] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.472245][T24563] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1109.485403][T24563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.718489][T24563] usb 2-1: GET_CAPABILITIES returned 0 [ 1109.725927][T24563] usbtmc 2-1:16.0: can't read capabilities [ 1109.920814][T24563] usb 2-1: USB disconnect, device number 75 [ 1110.611352][T10130] input: syz1 as /devices/virtual/input/input116 [ 1110.942342][T17333] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1111.103147][T17333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.124605][T17333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.141065][T17333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1111.160394][T17333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.191899][T17333] usb 4-1: config 0 descriptor?? [ 1111.634880][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16611'. [ 1111.837712][T10165] netlink: 200 bytes leftover after parsing attributes in process `syz.1.16613'. [ 1112.012889][T17333] uclogic 0003:256C:006D.014D: failed retrieving Huion firmware version: -71 [ 1112.026196][T17333] uclogic 0003:256C:006D.014D: failed probing parameters: -71 [ 1112.034375][T17333] uclogic 0003:256C:006D.014D: probe with driver uclogic failed with error -71 [ 1112.056251][T17333] usb 4-1: USB disconnect, device number 97 [ 1112.231121][T24156] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1112.311291][T27209] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 1112.383230][T24156] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1112.405127][T24156] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.425609][T24156] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1112.436411][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.671588][T24156] usb 2-1: GET_CAPABILITIES returned 0 [ 1112.681430][T24156] usbtmc 2-1:16.0: can't read capabilities [ 1112.895758][T24156] usb 2-1: USB disconnect, device number 76 [ 1112.900241][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16631'. [ 1112.930698][T10202] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16631'. [ 1112.958738][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16631'. [ 1113.016276][T10207] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1113.026528][ T1109] Bluetooth: hci4: Frame reassembly failed (-84) [ 1113.415551][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16644'. [ 1113.428617][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16644'. [ 1113.445907][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16644'. [ 1113.834334][T10250] input: syz0 as /devices/virtual/input/input117 [ 1113.882106][T10251] Invalid logical block size (7) [ 1113.892572][T18976] udevd[18976]: symlink '../../loop5' '/dev/disk/by-diskseq/99.tmp-b7:5' failed: Read-only file system [ 1113.929627][T18971] udevd[18971]: symlink '../../loop5' '/dev/disk/by-diskseq/99.tmp-b7:5' failed: Read-only file system [ 1113.964347][T18971] udevd[18971]: symlink '../../loop5' '/dev/disk/by-diskseq/99.tmp-b7:5' failed: Read-only file system [ 1114.481136][ T5937] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1114.645588][ T5937] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1114.654805][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.663639][ T5937] usb 2-1: Product: syz [ 1114.667863][ T5937] usb 2-1: Manufacturer: syz [ 1114.672624][ T5937] usb 2-1: SerialNumber: syz [ 1114.683217][ T5937] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1114.703251][T24563] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1115.051365][ T5722] Bluetooth: hci4: command 0x1003 tx timeout [ 1115.058302][T27209] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1115.471242][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.481218][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.771738][T24563] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1115.778984][T24563] ath9k_htc: Failed to initialize the device [ 1115.809620][T24563] usb 2-1: ath9k_htc: USB layer deinitialized [ 1115.822448][ T5937] usb 2-1: USB disconnect, device number 77 [ 1116.578160][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16675'. [ 1116.762286][T10305] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1116.868482][T10308] netlink: 'syz.6.16681': attribute type 11 has an invalid length. [ 1117.728392][T10346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16699'. [ 1117.926424][T10355] tap0: tun_chr_ioctl cmd 1074025678 [ 1117.933956][T10355] tap0: group set to 0 [ 1118.201204][T10365] nbd2: detected capacity change from 0 to 127 [ 1118.217887][T27209] block nbd2: Receive control failed (result -104) [ 1118.445458][T10386] netlink: 'syz.3.16718': attribute type 25 has an invalid length. [ 1118.454356][T10386] netlink: 'syz.3.16718': attribute type 28 has an invalid length. [ 1118.462789][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16718'. [ 1119.697882][T10452] kvm: kvm [10451]: vcpu4, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x10001 [ 1119.744190][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16750'. [ 1120.312755][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16764'. [ 1120.325905][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16764'. [ 1120.336704][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16764'. [ 1120.523104][T10492] kvm: kvm [10491]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x40000 [ 1120.654507][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16771'. [ 1120.673332][T10500] sock: sock_timestamping_bind_phc: sock not bind to device [ 1120.822553][T10508] random: crng reseeded on system resumption [ 1121.081127][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1121.231326][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1121.241686][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1121.254704][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1121.266146][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1121.277514][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1121.277545][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.298442][ T10] usb 4-1: config 0 descriptor?? [ 1121.312200][T10508] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1121.329213][ T10] hub 4-1:0.0: USB hub found [ 1121.531924][ T10] hub 4-1:0.0: 2 ports detected [ 1121.562438][ T30] audit: type=1326 audit(2000000780.717:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.4.16787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbcdf8e929 code=0x0 [ 1121.569938][T10532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1121.586067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.609357][T10532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1121.620797][T10532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1122.051086][ T926] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1122.205414][ T926] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1122.214928][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.226072][ T926] usb 2-1: Product: syz [ 1122.230279][ T926] usb 2-1: Manufacturer: syz [ 1122.237875][ T926] usb 2-1: SerialNumber: syz [ 1122.252168][ T926] usb 2-1: config 0 descriptor?? [ 1122.468086][ T926] usb 2-1: ignoring: probably an ADSL modem [ 1122.574838][ T10] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1122.586734][ T10] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1122.599978][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 1122.619926][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1122.876625][ T926] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1123.021349][ T926] usb 4-1: USB disconnect, device number 98 [ 1123.092989][ T926] usb 2-1: USB disconnect, device number 78 [ 1123.346872][T10584] kvm: kvm [10582]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000079) [ 1123.394891][T10587] sctp: [Deprecated]: syz.6.16813 (pid 10587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1123.394891][T10587] Use struct sctp_sack_info instead [ 1124.924558][T10666] __nla_validate_parse: 3 callbacks suppressed [ 1124.924579][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16852'. [ 1125.567058][T10702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16867'. [ 1125.771339][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16873'. [ 1125.782944][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16873'. [ 1126.148244][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16880'. [ 1126.271322][T27209] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1126.278819][ T5722] Bluetooth: hci4: command 0x1003 tx timeout [ 1127.099689][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16893'. [ 1127.528650][T10781] netlink: 'syz.1.16904': attribute type 5 has an invalid length. [ 1127.908191][T10803] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1128.041730][T10811] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 1128.708817][T10840] veth1_macvtap: left promiscuous mode [ 1128.721446][T10840] veth1_macvtap: entered promiscuous mode [ 1129.233554][T10863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16940'. [ 1129.255714][T10859] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16940'. [ 1129.268952][T10863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16940'. [ 1129.485794][T10874] netlink: 56 bytes leftover after parsing attributes in process `syz.6.16946'. [ 1129.645310][T18976] udevd[18976]: symlink '../../loop5' '/dev/disk/by-diskseq/101.tmp-b7:5' failed: Read-only file system [ 1129.698882][T18976] udevd[18976]: symlink '../../loop5' '/dev/disk/by-diskseq/101.tmp-b7:5' failed: Read-only file system [ 1129.756482][T18976] udevd[18976]: symlink '../../loop5' '/dev/disk/by-diskseq/101.tmp-b7:5' failed: Read-only file system [ 1129.806540][T18976] udevd[18976]: symlink '../../loop5' '/dev/disk/by-diskseq/101.tmp-b7:5' failed: Read-only file system [ 1130.272540][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 1130.286503][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 1130.302470][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 1130.882347][T10932] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16974'. [ 1130.894091][ T1039] wlan1: Trigger new scan to find an IBSS to join [ 1130.905893][T10932] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16974'. [ 1130.916005][T10932] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16974'. [ 1130.961099][ T10] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1131.113238][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.123875][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1131.141412][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1131.150830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.162597][ T10] usb 4-1: Product: syz [ 1131.166804][ T10] usb 4-1: Manufacturer: syz [ 1131.173473][ T10] usb 4-1: SerialNumber: syz [ 1131.180865][ T10] usb 4-1: config 0 descriptor?? [ 1131.429198][ T10] imon_raw 4-1:0.0: IR endpoint missing [ 1131.448351][ T10] usb 4-1: USB disconnect, device number 99 [ 1131.545090][T10948] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1132.631189][T24156] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1132.691125][ T926] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1132.791184][T24156] usb 4-1: Using ep0 maxpacket: 16 [ 1132.800877][T24156] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1132.810408][T24156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.818983][T24156] usb 4-1: Product: syz [ 1132.823473][T24156] usb 4-1: Manufacturer: syz [ 1132.828106][T24156] usb 4-1: SerialNumber: syz [ 1132.835580][T24156] usb 4-1: config 0 descriptor?? [ 1132.845498][T24156] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1132.853179][ T926] usb 2-1: Using ep0 maxpacket: 16 [ 1132.859866][T24156] usb 4-1: Detected FT232H [ 1132.867072][ T926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1132.875336][ T926] usb 2-1: config 0 has no interface number 0 [ 1132.884396][ T926] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1132.894423][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.902628][ T926] usb 2-1: Product: syz [ 1132.906873][ T926] usb 2-1: Manufacturer: syz [ 1132.911655][ T926] usb 2-1: SerialNumber: syz [ 1132.919275][ T926] usb 2-1: config 0 descriptor?? [ 1132.929371][ T926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1133.049390][T24156] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1133.461115][T24156] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1133.471749][T24156] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1133.487182][T24156] usb 4-1: USB disconnect, device number 100 [ 1133.503473][T24156] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1133.514443][T24156] ftdi_sio 4-1:0.0: device disconnected [ 1133.618872][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17000'. [ 1133.737092][ T926] gspca_spca1528: reg_w err -71 [ 1133.761221][ T926] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1133.781467][ T926] usb 2-1: USB disconnect, device number 79 [ 1133.851682][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1134.192570][T11007] netlink: 'syz.6.17010': attribute type 2 has an invalid length. [ 1134.215730][T11007] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.17010'. [ 1134.732698][T11031] batadv_slave_1: entered promiscuous mode [ 1134.752120][T11031] batadv_slave_1: left promiscuous mode [ 1135.514272][ T926] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1135.681207][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 1135.690624][ T926] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1135.700744][ T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.716034][ T926] usb 4-1: Product: syz [ 1135.720377][ T926] usb 4-1: Manufacturer: syz [ 1135.726347][ T926] usb 4-1: SerialNumber: syz [ 1135.734191][ T926] usb 4-1: config 0 descriptor?? [ 1135.747914][ T926] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1135.861399][T17333] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1136.021183][T17333] usb 2-1: Using ep0 maxpacket: 32 [ 1136.029163][T17333] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1136.038401][T17333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.051571][T17333] usb 2-1: config 0 descriptor?? [ 1136.060313][T17333] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1136.549859][ T926] gspca_sq930x: ucbus_write failed -71 [ 1136.556247][ T926] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1136.568809][ T926] usb 4-1: USB disconnect, device number 101 [ 1136.868030][T17333] gspca_sunplus: reg_w_riv err -71 [ 1136.877141][T17333] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1136.887713][T17333] usb 2-1: USB disconnect, device number 80 [ 1136.902541][ T37] wlan1: Trigger new scan to find an IBSS to join [ 1137.425443][T11098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17054'. [ 1137.435803][T11098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17054'. [ 1137.447827][T11098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17054'. [ 1137.804905][ T1039] wlan1: Creating new IBSS network, BSSID 7a:0d:1f:09:02:2b [ 1138.274854][T11132] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17070'. [ 1138.811830][T24563] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1138.875062][T11156] overlay: ./file0 is not a directory [ 1138.966783][T24563] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1138.979797][T24563] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1138.997985][T24563] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.026743][T24563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.035568][T24563] usb 4-1: Product: syz [ 1139.039780][T24563] usb 4-1: Manufacturer: syz [ 1139.059741][T11164] sctp: [Deprecated]: syz.4.17086 (pid 11164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.059741][T11164] Use struct sctp_sack_info instead [ 1139.061059][T24563] usb 4-1: SerialNumber: syz [ 1139.200307][T11171] netlink: 'syz.4.17089': attribute type 21 has an invalid length. [ 1139.208482][T11171] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.17089'. [ 1139.330055][T24563] cdc_ncm 4-1:1.0: bind() failure [ 1139.344820][T24563] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1139.361750][T24563] cdc_ncm 4-1:1.1: bind() failure [ 1139.382267][T24563] usb 4-1: USB disconnect, device number 102 [ 1141.311347][T24156] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 1141.428723][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17126'. [ 1141.479105][T24156] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1141.487647][T24156] usb 2-1: config 0 has no interface number 0 [ 1141.496479][T24156] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1141.510811][T24156] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1141.526313][T24156] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1141.536264][T24156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.557086][T24156] usb 2-1: config 0 descriptor?? [ 1141.568246][T11243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1141.591479][T24156] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1141.798225][T24156] usb 2-1: USB disconnect, device number 81 [ 1141.859647][T11262] netlink: 'syz.3.17130': attribute type 25 has an invalid length. [ 1141.867784][T11262] netlink: 'syz.3.17130': attribute type 1 has an invalid length. [ 1141.881693][T11262] bridge0: port 1(bridge_slave_0) entered learning state [ 1142.451226][ T5937] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1142.474389][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17139'. [ 1142.627723][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1142.654910][ T5937] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1142.668773][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.693299][ T5937] usb 4-1: config 0 descriptor?? [ 1142.823075][ T30] audit: type=1326 audit(2000000802.990:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.1.17144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa14b38e929 code=0x0 [ 1142.924497][T11275] netlink: 312 bytes leftover after parsing attributes in process `syz.3.17136'. [ 1142.938143][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 1142.948838][ T5937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1142.970028][ T5937] usb 4-1: USB disconnect, device number 103 [ 1144.341133][T24156] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1144.508110][T24156] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1144.520043][T24156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.530193][T24156] usb 2-1: Product: syz [ 1144.534839][T24156] usb 2-1: Manufacturer: syz [ 1144.539467][T24156] usb 2-1: SerialNumber: syz [ 1144.546729][T24156] usb 2-1: config 0 descriptor?? [ 1144.556472][T24156] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1145.370404][ T5937] usb 2-1: USB disconnect, device number 82 [ 1146.971834][ T5722] Bluetooth: hci3: command 0x0405 tx timeout [ 1148.062726][T11424] ================================================================== [ 1148.070834][T11424] BUG: KASAN: double-free in nl80211_dump_station+0x690/0x7f0 [ 1148.078313][T11424] Free of addr ffff88802715c000 by task syz.4.17203/11424 [ 1148.085423][T11424] [ 1148.087753][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.4.17203 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1148.087773][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1148.087784][T11424] Call Trace: [ 1148.087791][T11424] [ 1148.087799][T11424] dump_stack_lvl+0x189/0x250 [ 1148.087824][T11424] ? __virt_addr_valid+0x1c8/0x5c0 [ 1148.087847][T11424] ? rcu_is_watching+0x15/0xb0 [ 1148.087873][T11424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.087894][T11424] ? rcu_is_watching+0x15/0xb0 [ 1148.087914][T11424] ? lock_release+0x4b/0x3e0 [ 1148.087931][T11424] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1148.087956][T11424] ? __virt_addr_valid+0x1c8/0x5c0 [ 1148.087978][T11424] ? __virt_addr_valid+0x4a5/0x5c0 [ 1148.088001][T11424] print_report+0xca/0x230 [ 1148.088016][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1148.088040][T11424] kasan_report_invalid_free+0xea/0x110 [ 1148.088065][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1148.088090][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1148.088114][T11424] check_slab_allocation+0xe1/0x130 [ 1148.088136][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1148.088159][T11424] kfree+0x13f/0x440 [ 1148.088182][T11424] nl80211_dump_station+0x690/0x7f0 [ 1148.088204][T11424] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1148.088228][T11424] ? kmalloc_reserve+0x136/0x290 [ 1148.088251][T11424] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1148.088288][T11424] ? trace_kmalloc+0x1f/0xd0 [ 1148.088308][T11424] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1148.088335][T11424] ? __build_skb_around+0x257/0x3e0 [ 1148.088354][T11424] genl_dumpit+0x108/0x1b0 [ 1148.088377][T11424] netlink_dump+0x6db/0xe60 [ 1148.088397][T11424] ? __pfx_netlink_dump+0x10/0x10 [ 1148.088417][T11424] ? genl_start+0x499/0x6c0 [ 1148.088441][T11424] __netlink_dump_start+0x5cb/0x7e0 [ 1148.088460][T11424] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1148.088484][T11424] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1148.088505][T11424] ? genl_get_cmd+0x7d9/0x910 [ 1148.088527][T11424] ? __pfx_genl_start+0x10/0x10 [ 1148.088547][T11424] ? __pfx_genl_dumpit+0x10/0x10 [ 1148.088566][T11424] ? __pfx_genl_done+0x10/0x10 [ 1148.088592][T11424] genl_rcv_msg+0x5da/0x790 [ 1148.088615][T11424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.088635][T11424] ? ref_tracker_free+0x63a/0x7d0 [ 1148.088651][T11424] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1148.088675][T11424] ? __pfx_ref_tracker_free+0x10/0x10 [ 1148.088695][T11424] netlink_rcv_skb+0x205/0x470 [ 1148.088712][T11424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.088733][T11424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1148.088755][T11424] ? down_read+0x1ad/0x2e0 [ 1148.088774][T11424] genl_rcv+0x28/0x40 [ 1148.088793][T11424] netlink_unicast+0x759/0x8e0 [ 1148.088812][T11424] netlink_sendmsg+0x805/0xb30 [ 1148.088832][T11424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.088851][T11424] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1148.088872][T11424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1148.088892][T11424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.088910][T11424] __sock_sendmsg+0x219/0x270 [ 1148.088935][T11424] ____sys_sendmsg+0x505/0x830 [ 1148.088958][T11424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.088981][T11424] ? import_iovec+0x74/0xa0 [ 1148.088996][T11424] ___sys_sendmsg+0x21f/0x2a0 [ 1148.089016][T11424] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.089050][T11424] ? __fget_files+0x2a/0x420 [ 1148.089068][T11424] ? __fget_files+0x3a0/0x420 [ 1148.089090][T11424] __x64_sys_sendmsg+0x19b/0x260 [ 1148.089111][T11424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1148.089138][T11424] ? do_syscall_64+0xbe/0x3b0 [ 1148.089156][T11424] do_syscall_64+0xfa/0x3b0 [ 1148.089172][T11424] ? lockdep_hardirqs_on+0x9c/0x150 [ 1148.089187][T11424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.089202][T11424] ? clear_bhb_loop+0x60/0xb0 [ 1148.089219][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.089234][T11424] RIP: 0033:0x7fcbcdf8e929 [ 1148.089249][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.089263][T11424] RSP: 002b:00007fcbcee74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.089279][T11424] RAX: ffffffffffffffda RBX: 00007fcbce1b5fa0 RCX: 00007fcbcdf8e929 [ 1148.089291][T11424] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1148.089301][T11424] RBP: 00007fcbce010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1148.089311][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.089321][T11424] R13: 0000000000000000 R14: 00007fcbce1b5fa0 R15: 00007ffc2f6a3928 [ 1148.089338][T11424] [ 1148.089344][T11424] [ 1148.224525][ T926] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1148.224689][T11424] Allocated by task 11424: [ 1148.544303][T11424] kasan_save_track+0x3e/0x80 [ 1148.549000][T11424] __kasan_kmalloc+0x93/0xb0 [ 1148.553612][T11424] __kmalloc_cache_noprof+0x230/0x3d0 [ 1148.558995][T11424] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 1148.564992][T11424] sta_set_sinfo+0x1d6a/0x6990 [ 1148.569766][T11424] ieee80211_dump_station+0x111/0x1d0 [ 1148.575147][T11424] nl80211_dump_station+0x3a7/0x7f0 [ 1148.580365][T11424] genl_dumpit+0x108/0x1b0 [ 1148.584801][T11424] netlink_dump+0x6db/0xe60 [ 1148.589308][T11424] __netlink_dump_start+0x5cb/0x7e0 [ 1148.594512][T11424] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1148.600247][T11424] genl_rcv_msg+0x5da/0x790 [ 1148.604875][T11424] netlink_rcv_skb+0x205/0x470 [ 1148.609645][T11424] genl_rcv+0x28/0x40 [ 1148.613633][T11424] netlink_unicast+0x759/0x8e0 [ 1148.618396][T11424] netlink_sendmsg+0x805/0xb30 [ 1148.623163][T11424] __sock_sendmsg+0x219/0x270 [ 1148.627859][T11424] ____sys_sendmsg+0x505/0x830 [ 1148.632668][T11424] ___sys_sendmsg+0x21f/0x2a0 [ 1148.637352][T11424] __x64_sys_sendmsg+0x19b/0x260 [ 1148.642302][T11424] do_syscall_64+0xfa/0x3b0 [ 1148.646818][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.652731][T11424] [ 1148.655070][T11424] Freed by task 11424: [ 1148.659147][T11424] kasan_save_track+0x3e/0x80 [ 1148.663849][T11424] kasan_save_free_info+0x46/0x50 [ 1148.668904][T11424] __kasan_slab_free+0x62/0x70 [ 1148.673679][T11424] kfree+0x18e/0x440 [ 1148.677587][T11424] nl80211_send_station+0xb2c/0x3d00 [ 1148.682885][T11424] nl80211_dump_station+0x4bc/0x7f0 [ 1148.688097][T11424] genl_dumpit+0x108/0x1b0 [ 1148.692525][T11424] netlink_dump+0x6db/0xe60 [ 1148.697033][T11424] __netlink_dump_start+0x5cb/0x7e0 [ 1148.702243][T11424] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1148.707979][T11424] genl_rcv_msg+0x5da/0x790 [ 1148.712492][T11424] netlink_rcv_skb+0x205/0x470 [ 1148.717352][T11424] genl_rcv+0x28/0x40 [ 1148.721361][T11424] netlink_unicast+0x759/0x8e0 [ 1148.726129][T11424] netlink_sendmsg+0x805/0xb30 [ 1148.730893][T11424] __sock_sendmsg+0x219/0x270 [ 1148.735590][T11424] ____sys_sendmsg+0x505/0x830 [ 1148.740378][T11424] ___sys_sendmsg+0x21f/0x2a0 [ 1148.745087][T11424] __x64_sys_sendmsg+0x19b/0x260 [ 1148.750122][T11424] do_syscall_64+0xfa/0x3b0 [ 1148.754649][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.760557][T11424] [ 1148.762883][T11424] The buggy address belongs to the object at ffff88802715c000 [ 1148.762883][T11424] which belongs to the cache kmalloc-2k of size 2048 [ 1148.776959][T11424] The buggy address is located 0 bytes inside of [ 1148.776959][T11424] 2048-byte region [ffff88802715c000, ffff88802715c800) [ 1148.790174][T11424] [ 1148.792519][T11424] The buggy address belongs to the physical page: [ 1148.798939][T11424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27158 [ 1148.807702][T11424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1148.816204][T11424] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1148.824195][T11424] page_type: f5(slab) [ 1148.828181][T11424] raw: 00fff00000000040 ffff88801a842000 0000000000000000 dead000000000001 [ 1148.836775][T11424] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1148.845365][T11424] head: 00fff00000000040 ffff88801a842000 0000000000000000 dead000000000001 [ 1148.854038][T11424] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1148.862720][T11424] head: 00fff00000000003 ffffea00009c5601 00000000ffffffff 00000000ffffffff [ 1148.871410][T11424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1148.880080][T11424] page dumped because: kasan: bad access detected [ 1148.886520][T11424] page_owner tracks the page as allocated [ 1148.892245][T11424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10076873785, free_ts 0 [ 1148.910504][T11424] post_alloc_hook+0x240/0x2a0 [ 1148.915303][T11424] get_page_from_freelist+0x21e4/0x22c0 [ 1148.920852][T11424] __alloc_frozen_pages_noprof+0x181/0x370 [ 1148.926672][T11424] alloc_pages_mpol+0x232/0x4a0 [ 1148.931539][T11424] allocate_slab+0x8a/0x370 [ 1148.936139][T11424] ___slab_alloc+0xbeb/0x1410 [ 1148.940819][T11424] __kmalloc_cache_noprof+0x296/0x3d0 [ 1148.946198][T11424] device_create+0x12f/0x2f0 [ 1148.950816][T11424] bdi_register_va+0x9c/0x740 [ 1148.955497][T11424] bdi_register+0xd4/0x120 [ 1148.959919][T11424] __add_disk+0x747/0xd50 [ 1148.964262][T11424] add_disk_fwnode+0xfc/0x480 [ 1148.968950][T11424] add_mtd_blktrans_dev+0xe34/0x1440 [ 1148.974247][T11424] mtdblock_add_mtd+0x18a/0x240 [ 1148.979107][T11424] blktrans_notify_add+0x9c/0xf0 [ 1148.984050][T11424] add_mtd_device+0xc93/0x1490 [ 1148.988823][T11424] page_owner free stack trace missing [ 1148.994198][T11424] [ 1148.996520][T11424] Memory state around the buggy address: [ 1149.002149][T11424] ffff88802715bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1149.010209][T11424] ffff88802715bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1149.018363][T11424] >ffff88802715c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.026426][T11424] ^ [ 1149.030493][T11424] ffff88802715c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.038572][T11424] ffff88802715c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.046635][T11424] ================================================================== [ 1149.075484][ T55] block nbd2: Possible stuck request ffff888025ab0000: control (read@0,1024B). Runtime 30 seconds [ 1149.075778][T11424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1149.075798][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.4.17203 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1149.075821][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1149.075835][T11424] Call Trace: [ 1149.075846][T11424] [ 1149.075856][T11424] dump_stack_lvl+0x99/0x250 [ 1149.075899][T11424] ? __asan_memcpy+0x40/0x70 [ 1149.075931][T11424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1149.075965][T11424] ? __pfx__printk+0x10/0x10 [ 1149.076006][T11424] vpanic+0x281/0x750 [ 1149.076033][T11424] ? preempt_schedule+0xae/0xc0 [ 1149.076058][T11424] ? __pfx_vpanic+0x10/0x10 [ 1149.076083][T11424] ? preempt_schedule_common+0x83/0xd0 [ 1149.076108][T11424] ? preempt_schedule+0xae/0xc0 [ 1149.076130][T11424] ? __pfx_preempt_schedule+0x10/0x10 [ 1149.076158][T11424] panic+0xb9/0xc0 [ 1149.076184][T11424] ? __pfx_panic+0x10/0x10 [ 1149.076212][T11424] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1149.076239][T11424] ? is_module_address+0x17/0xf0 [ 1149.076263][T11424] check_panic_on_warn+0x89/0xb0 [ 1149.076289][T11424] end_report+0x78/0x160 [ 1149.076309][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1149.076345][T11424] kasan_report_invalid_free+0xfa/0x110 [ 1149.076383][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1149.076422][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1149.076459][T11424] check_slab_allocation+0xe1/0x130 [ 1149.076493][T11424] ? nl80211_dump_station+0x690/0x7f0 [ 1149.076527][T11424] kfree+0x13f/0x440 [ 1149.076562][T11424] nl80211_dump_station+0x690/0x7f0 [ 1149.076597][T11424] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1149.076633][T11424] ? kmalloc_reserve+0x136/0x290 [ 1149.076669][T11424] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1149.076737][T11424] ? trace_kmalloc+0x1f/0xd0 [ 1149.076770][T11424] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1149.076811][T11424] ? __build_skb_around+0x257/0x3e0 [ 1149.076841][T11424] genl_dumpit+0x108/0x1b0 [ 1149.076877][T11424] netlink_dump+0x6db/0xe60 [ 1149.076909][T11424] ? __pfx_netlink_dump+0x10/0x10 [ 1149.076940][T11424] ? genl_start+0x499/0x6c0 [ 1149.076978][T11424] __netlink_dump_start+0x5cb/0x7e0 [ 1149.077007][T11424] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1149.077044][T11424] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1149.077078][T11424] ? genl_get_cmd+0x7d9/0x910 [ 1149.077112][T11424] ? __pfx_genl_start+0x10/0x10 [ 1149.077142][T11424] ? __pfx_genl_dumpit+0x10/0x10 [ 1149.077173][T11424] ? __pfx_genl_done+0x10/0x10 [ 1149.077212][T11424] genl_rcv_msg+0x5da/0x790 [ 1149.077248][T11424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1149.077280][T11424] ? ref_tracker_free+0x63a/0x7d0 [ 1149.077307][T11424] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1149.077346][T11424] ? __pfx_ref_tracker_free+0x10/0x10 [ 1149.077379][T11424] netlink_rcv_skb+0x205/0x470 [ 1149.077405][T11424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1149.077439][T11424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1149.077472][T11424] ? down_read+0x1ad/0x2e0 [ 1149.077503][T11424] genl_rcv+0x28/0x40 [ 1149.077533][T11424] netlink_unicast+0x759/0x8e0 [ 1149.077562][T11424] netlink_sendmsg+0x805/0xb30 [ 1149.077594][T11424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.077622][T11424] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1149.077646][T11424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1149.077675][T11424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.077702][T11424] __sock_sendmsg+0x219/0x270 [ 1149.077748][T11424] ____sys_sendmsg+0x505/0x830 [ 1149.077782][T11424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.077818][T11424] ? import_iovec+0x74/0xa0 [ 1149.077842][T11424] ___sys_sendmsg+0x21f/0x2a0 [ 1149.077873][T11424] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.077924][T11424] ? __fget_files+0x2a/0x420 [ 1149.077972][T11424] ? __fget_files+0x3a0/0x420 [ 1149.078008][T11424] __x64_sys_sendmsg+0x19b/0x260 [ 1149.078041][T11424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1149.078085][T11424] ? do_syscall_64+0xbe/0x3b0 [ 1149.078114][T11424] do_syscall_64+0xfa/0x3b0 [ 1149.078141][T11424] ? lockdep_hardirqs_on+0x9c/0x150 [ 1149.078166][T11424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.078192][T11424] ? clear_bhb_loop+0x60/0xb0 [ 1149.078220][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.078242][T11424] RIP: 0033:0x7fcbcdf8e929 [ 1149.078266][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.078287][T11424] RSP: 002b:00007fcbcee74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.078315][T11424] RAX: ffffffffffffffda RBX: 00007fcbce1b5fa0 RCX: 00007fcbcdf8e929 [ 1149.078334][T11424] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1149.078351][T11424] RBP: 00007fcbce010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1149.078368][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.078385][T11424] R13: 0000000000000000 R14: 00007fcbce1b5fa0 R15: 00007ffc2f6a3928 [ 1149.078411][T11424] [ 1149.086761][T11424] Kernel Offset: disabled