last executing test programs: 47.085871735s ago: executing program 3 (id=1965): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) 46.860042442s ago: executing program 3 (id=1972): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 46.838058753s ago: executing program 3 (id=1973): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x5e, 0x80, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 46.557807843s ago: executing program 3 (id=1980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 46.473182443s ago: executing program 3 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) 45.969855967s ago: executing program 3 (id=1992): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 45.696040819s ago: executing program 32 (id=1992): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3.316887012s ago: executing program 2 (id=2704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}}, 0x0) 3.124613784s ago: executing program 2 (id=2707): r0 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, 0x0, 0x80) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000800), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000008c0)={0x1, 0x3, [{0xffffffffffffffff, 0x0, 0x8000, 0x4000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x8000, 0x2000}]}) 2.944568608s ago: executing program 2 (id=2710): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x4, 0x2, "8ba0"}, 0xa) 2.798396199s ago: executing program 2 (id=2712): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x10, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 2.469851648s ago: executing program 2 (id=2717): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, 0x0}) 2.33301559s ago: executing program 2 (id=2719): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 1.310960827s ago: executing program 0 (id=2737): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.147928655s ago: executing program 0 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000107, 0x0, 0x6}]}) 992.424719ms ago: executing program 0 (id=2743): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x140, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 914.252135ms ago: executing program 0 (id=2746): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xec, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0xfe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0xfffffffffffffdad, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 836.335033ms ago: executing program 1 (id=2748): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40008100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f00000028c0)=""/4052, 0xfd4}, {&(0x7f0000001880)=""/4095, 0xfff}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000300)=""/102, 0x66}], 0x7}, 0x100) 740.34282ms ago: executing program 1 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 730.103384ms ago: executing program 0 (id=2750): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x39) keyctl$clear(0x7, r1) 611.288156ms ago: executing program 0 (id=2752): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000888000/0x3000)=nil, 0x3000, 0x2000007, 0x4002012, r1, 0x0) 604.059983ms ago: executing program 1 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x3, 0xb6c1, 0x1, 0x45a5, 0x8, 0x1000]}}]}]}]}, 0x38}}, 0x0) 596.399956ms ago: executing program 4 (id=2754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) 478.156757ms ago: executing program 1 (id=2755): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_debug_messages', 0x8480, 0xc0) fstat(r0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee01, r1) setfsuid(r1) 416.662273ms ago: executing program 4 (id=2756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0xffff3cb9) 387.857689ms ago: executing program 4 (id=2757): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x7, 0xfffffffc, 0x0) 341.227001ms ago: executing program 1 (id=2758): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0xffffffffffffff80, 0x0) 252.501317ms ago: executing program 4 (id=2759): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 191.497218ms ago: executing program 4 (id=2760): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 179.629134ms ago: executing program 1 (id=2761): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x3, 0x0, 0x1c00}, {0x2, 0x41, 0x1800}], 0x2) 0s ago: executing program 4 (id=2762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000106, 0x0, 0x9}]}) kernel console output (not intermixed with test programs): value: 2 [ 96.226908][ T980] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 96.226933][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.248849][ T980] usb 2-1: config 0 descriptor?? [ 96.275595][ T9] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 96.319080][ T5980] vhci_hcd: connection closed [ 96.320544][ T5971] vhci_hcd: connection reset by peer [ 96.332270][ T35] vhci_hcd vhci_hcd.2: stop threads [ 96.340072][ T5984] vhci_hcd: connection closed [ 96.340467][ T5978] vhci_hcd: connection closed [ 96.346220][ T35] vhci_hcd vhci_hcd.2: release socket [ 96.372620][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 96.387460][ T35] vhci_hcd vhci_hcd.2: stop threads [ 96.392792][ T35] vhci_hcd vhci_hcd.2: release socket [ 96.418923][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 96.427072][ T35] vhci_hcd vhci_hcd.2: stop threads [ 96.434009][ T35] vhci_hcd vhci_hcd.2: release socket [ 96.453660][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 96.464142][ T35] vhci_hcd vhci_hcd.2: stop threads [ 96.469821][ T35] vhci_hcd vhci_hcd.2: release socket [ 96.476646][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 96.552520][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.563300][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.608710][ T5995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.816789][ T980] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 96.829469][ T980] steelseries 0003:1038:12B6.0001: unknown main item tag 0x1 [ 96.837402][ T980] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 96.852159][ T980] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 96.860157][ T980] steelseries 0003:1038:12B6.0001: item fetching failed at offset 10/11 [ 96.870921][ T980] steelseries 0003:1038:12B6.0001: probe with driver steelseries failed with error -22 [ 97.022445][ T796] usb 2-1: USB disconnect, device number 2 [ 97.758855][ T6026] overlay: ./file0 is not a directory [ 98.433822][ T6049] warning: `syz.3.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.539006][ T6052] process 'syz.1.63' launched './file0' with NULL argv: empty string added [ 98.837921][ T6066] dummy0: entered allmulticast mode [ 98.844862][ T6066] dummy0: left allmulticast mode [ 98.994087][ T6070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.349963][ T6084] loop8: detected capacity change from 0 to 1 [ 99.387016][ T6084] Dev loop8: unable to read RDB block 1 [ 99.416736][ T6084] loop8: unable to read partition table [ 99.422642][ T6084] loop8: partition table beyond EOD, truncated [ 99.457135][ T6084] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 99.606487][ T6088] nbd0: detected capacity change from 0 to 127 [ 99.626047][ T5827] block nbd0: Receive control failed (result -32) [ 99.636545][ T5867] block nbd0: Dead connection, failed to find a fallback [ 99.644189][ T5867] block nbd0: shutting down sockets [ 99.704283][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.734475][ T5867] buffer_io_error: 8 callbacks suppressed [ 99.734495][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.809225][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.845981][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.853907][ T5867] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.890993][ T5867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 99.896230][ T6100] usb usb8: usbfs: process 6100 (syz.2.87) did not claim interface 0 before use [ 99.901505][ T5867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.919569][ T5867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 99.929993][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.940320][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.960078][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.974159][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.982863][ T6103] netlink: 188 bytes leftover after parsing attributes in process `syz.1.88'. [ 99.984334][ T5867] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.015504][ T5867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 100.028988][ T5867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.041074][ T5867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 100.050898][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.063368][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 100.074104][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.084248][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 100.093381][ T5867] ldm_validate_partition_table(): Disk read failed. [ 100.105339][ T5867] Dev nbd0: unable to read RDB block 0 [ 100.114868][ T5867] nbd0: unable to read partition table [ 100.163290][ T5867] ldm_validate_partition_table(): Disk read failed. [ 100.174147][ T5867] Dev nbd0: unable to read RDB block 0 [ 100.181293][ T5867] nbd0: unable to read partition table [ 100.350634][ T6115] syz_tun: entered allmulticast mode [ 100.369014][ T6114] syz_tun: left allmulticast mode [ 100.391128][ T6117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.899713][ T6138] capability: warning: `syz.0.103' uses 32-bit capabilities (legacy support in use) [ 101.395717][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 102.120971][ T6181] mmap: syz.0.121 (6181) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.147376][ T6184] ======================================================= [ 102.147376][ T6184] WARNING: The mand mount option has been deprecated and [ 102.147376][ T6184] and is ignored by this kernel. Remove the mand [ 102.147376][ T6184] option from the mount to silence this warning. [ 102.147376][ T6184] ======================================================= [ 102.238675][ T6184] bpf: Bad value for 'uid' [ 102.439769][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.666437][ T6200] tipc: Started in network mode [ 102.689091][ T6200] tipc: Node identity ac14140f, cluster identity 4711 [ 102.703536][ T6200] tipc: New replicast peer: 255.255.255.255 [ 102.737198][ T6200] tipc: Enabled bearer , priority 10 [ 103.388067][ T6229] kernel read not supported for file /file1 (pid: 6229 comm: syz.3.144) [ 103.404030][ T29] audit: type=1800 audit(1771009780.532:2): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.144" name="file1" dev="mqueue" ino=9966 res=0 errno=0 [ 103.857166][ T10] tipc: Node number set to 2886997007 [ 104.567116][ T6275] delete_channel: no stack [ 104.782645][ T6286] overlayfs: workdir and upperdir must reside under the same mount [ 104.957599][ T6294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.176'. [ 105.106534][ T6298] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.177'. [ 105.404274][ T6311] netlink: 104 bytes leftover after parsing attributes in process `syz.3.183'. [ 105.995509][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.171916][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 106.197764][ T6345] overlay: Unknown parameter '32 [ 106.197764][ T6345] time [ 106.197764][ T6345] string [ 106.197764][ T6345] statistic [ 106.197764][ T6345] state [ 106.197764][ T6345] realm [ 106.197764][ T6345] rateest [ 106.197764][ T6345] quota [ 106.197764][ T6345] pkttype [ 106.197764][ T6345] physdev [ 106.197764][ T6345] cgroup [ 106.197764][ T6345] cgroup [ 106.197764][ T6345] cgroup [ 106.197764][ T6345] owner [ 106.197764][ T6345] nfacct [ 106.197764][ T6345] nfacct [ 106.197764][ T6345] mac [ 106.197764][ T6345] limit [ 106.197764][ T6345] ipvs [ 106.197764][ T6345] helper [ 106.197764][ T6345] devgroup [ 106.197764][ T6345] cpu [ 106.197764][ T6345] conntrack [ 106.197764][ T6345] conntrack [ 106.197764][ T6345] conntrack [ 106.197764][ T6345] connlabel [ 106.197764][ T6345] connbytes [ 106.197764][ T6345] comment [ 106.197764][ T6345] bpf [ 106.197764][ T6345] bpf [ 106.197764][ T6345] connmark [ 106.197764][ T6345] mark [ 106.197764][ T6345] rpfilter [ 106.197764][ T6345] ah [ 106.197764][ T6345] tcpmss [ 106.197764][ T6345] socket [ 106.197764][ T6345] socket [ 106.197764][ T6345] socket [ 106.197764][ T6345] socket [ 106.197764][ T6345] sctp [ 106.197764][ T6345] recent [ 106.197764][ T6345] recent [ 106.197764][ T6345] policy [ 106.197764][ T6345] osf [ 106.197764][ T6345] multiport [ 106.197764][ T6345] length [ 106.197764][ T6345] l2tp [ 106.197764][ T6345] iprange [ 106.197764][ T6345] ipcomp [ 106.197764][ T6345] ttl [ 106.197764][ T6345] hashlimit [ 106.197764][ T6345] hashlimit [ 106.197764][ T6345] hashlimit [ 106.197764][ T6345] esp [ 106.197764][ T6345] ecn [ 106.197764][ T6345] tos [ 106.197764][ T6345] dscp [ 106.197764][ T6345] dccp [ 106.197764][ T6345] connlimit [ 106.197764][ T6345] cluster [ 106.197764][ T6345] addrtype [ 106.197764][ T6345] addrtype [ 106.197764][ T6345] set [ 106.197764][ T6345] set [ 106.197764][ T6345] set [ 106.197764][ T6345] set [ 106.197764][ T6345] set [ 106.197764][ T6345] icmp [ 106.198639][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.413490][ T9] usb 1-1: Product: syz [ 106.417804][ T9] usb 1-1: Manufacturer: syz [ 106.422534][ T9] usb 1-1: SerialNumber: syz [ 106.429477][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 106.438548][ T9] usb 1-1: config 0 descriptor?? [ 106.462429][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 107.264045][ T9] gspca_sunplus: reg_r err -71 [ 107.269444][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 107.304839][ T9] usb 1-1: USB disconnect, device number 3 [ 107.827087][ T6379] Failed to get privilege flags for destination (handle=0x2:0x3) [ 108.261538][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 108.502361][ T6399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.532385][ T6399] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 109.556770][ T6428] program syz.1.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.827171][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 110.079031][ T6444] kvm: apic: phys broadcast and lowest prio [ 110.723065][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 111.979666][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 114.956876][ T6618] Bluetooth: MGMT ver 1.23 [ 115.085931][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.275604][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 115.295636][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.329240][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.361439][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.400759][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 115.438346][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.484464][ T10] usb 1-1: config 0 descriptor?? [ 115.938639][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 115.960394][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 115.990062][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 115.998568][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 116.011072][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 116.032796][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 116.042823][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 116.109685][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 116.134697][ T6612] random: crng reseeded on system resumption [ 116.158212][ T10] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 116.203761][ T10] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 116.307436][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 116.333186][ T10] usb 1-1: USB disconnect, device number 4 [ 116.361893][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 116.396805][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 116.412121][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 117.655031][ T6711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.882648][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 117.926569][ T6717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.988247][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.059556][ T6717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.258812][ T6717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.469570][ T6717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.719597][ T6744] team0: No ports can be present during mode change [ 118.764702][ T1000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.777217][ T6746] netlink: 'syz.3.375': attribute type 6 has an invalid length. [ 118.805600][ T796] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.877859][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.886420][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.951585][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.994704][ T29] audit: type=1326 audit(1771009796.122:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f3f99bf79 code=0x0 [ 118.996144][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 119.043627][ T796] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 119.066967][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.075062][ T796] usb 3-1: Product: syz [ 119.094585][ T796] usb 3-1: Manufacturer: syz [ 119.103781][ T796] usb 3-1: SerialNumber: syz [ 119.127862][ T796] usb 3-1: config 0 descriptor?? [ 119.150896][ T796] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 119.564816][ T796] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 119.779755][ T10] usb 3-1: USB disconnect, device number 2 [ 119.815240][ T10] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 119.858212][ T10] visor 3-1:0.0: device disconnected [ 120.308306][ T6799] sctp: [Deprecated]: syz.1.400 (pid 6799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.308306][ T6799] Use struct sctp_sack_info instead [ 121.503889][ T6838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.653645][ T6842] kvm: kvm [6841]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4 [ 122.564434][ T6867] sctp: [Deprecated]: syz.2.427 (pid 6867) Use of int in max_burst socket option deprecated. [ 122.564434][ T6867] Use struct sctp_assoc_value instead [ 123.048738][ T6881] netlink: 128 bytes leftover after parsing attributes in process `syz.3.434'. [ 124.779818][ T6957] loop2: detected capacity change from 0 to 7 [ 124.790611][ T6957] Dev loop2: unable to read RDB block 7 [ 124.803395][ T6957] loop2: unable to read partition table [ 124.809830][ T6957] loop2: partition table beyond EOD, truncated [ 124.826114][ T6957] loop_reread_partitions: partition scan of loop2 (賫x ) failed (rc=-5) [ 124.856987][ T5191] Dev loop2: unable to read RDB block 7 [ 124.864888][ T5191] loop2: unable to read partition table [ 124.871505][ T5191] loop2: partition table beyond EOD, truncated [ 125.530150][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 125.552746][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 125.584017][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'. [ 125.602973][ T29] audit: type=1326 audit(1771009802.732:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.0.484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c379bf79 code=0x0 [ 126.546630][ T7023] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.497'. [ 127.526707][ T7061] netlink: 'syz.2.506': attribute type 83 has an invalid length. [ 127.896810][ T7077] netlink: 64 bytes leftover after parsing attributes in process `syz.1.512'. [ 128.103017][ T7081] sp0: Synchronizing with TNC [ 128.188347][ T7088] netlink: 160 bytes leftover after parsing attributes in process `syz.2.519'. [ 128.212830][ T7088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.686992][ T5827] Bluetooth: hci3: command tx timeout [ 128.934664][ T7120] netlink: 'syz.3.534': attribute type 83 has an invalid length. [ 129.325935][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.488995][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 129.527628][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.546706][ T10] usb 4-1: config index 0 descriptor too short (expected 32861, got 93) [ 129.561965][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.583750][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 129.614417][ T10] usb 4-1: config 1 interface 1 has no altsetting 1 [ 129.634005][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.648589][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.657001][ T10] usb 4-1: Product: syz [ 129.661221][ T10] usb 4-1: Manufacturer: syz [ 129.666673][ T10] usb 4-1: SerialNumber: syz [ 129.903763][ T10] usb 4-1: selecting invalid altsetting 1 [ 129.934553][ T10] cdc_ncm 4-1:1.0: bind() failure [ 129.959281][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.983175][ T10] cdc_ncm 4-1:1.1: bind() failure [ 129.993317][ T7157] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 130.015325][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.021642][ T10] usb 4-1: USB disconnect, device number 2 [ 130.037890][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'. [ 130.051981][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 130.063900][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'. [ 130.073239][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 130.245269][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 130.254730][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 130.865922][ T29] audit: type=1326 audit(1771009807.982:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7fc00000 [ 131.613549][ T29] audit: type=1326 audit(1771009808.742:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f309c995d97 code=0x7fc00000 [ 131.666485][ T29] audit: type=1326 audit(1771009808.772:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f309c93d399 code=0x7fc00000 [ 131.691877][ T29] audit: type=1326 audit(1771009808.772:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f309c93d45d code=0x7fc00000 [ 131.734723][ T29] audit: type=1326 audit(1771009808.772:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f309c99bf79 code=0x7fc00000 [ 132.046179][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.047849][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 132.205646][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.099175][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135498][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.146649][ T7235] netlink: 128 bytes leftover after parsing attributes in process `syz.1.590'. [ 133.215901][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 133.363158][ T29] audit: type=1326 audit(1771009810.492:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3f99bf79 code=0x7ffc0000 [ 133.394251][ T29] audit: type=1326 audit(1771009810.492:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3f99bf79 code=0x7ffc0000 [ 133.428622][ T29] audit: type=1326 audit(1771009810.522:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7f3f99bf79 code=0x7ffc0000 [ 133.452211][ T29] audit: type=1326 audit(1771009810.522:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3f99bf79 code=0x7ffc0000 [ 133.476791][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.489154][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.502797][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 133.512308][ T29] audit: type=1326 audit(1771009810.522:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3f99bf79 code=0x7ffc0000 [ 133.534768][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.553182][ T10] usb 3-1: config 0 descriptor?? [ 133.997086][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.008040][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.018820][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.028448][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.045956][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.052841][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.093615][ T10] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 134.139748][ T10] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 134.403920][ T24] usb 3-1: USB disconnect, device number 3 [ 135.080757][ T7302] netlink: 'syz.2.621': attribute type 22 has an invalid length. [ 135.088881][ T7302] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.621'. [ 135.746562][ T7329] binder: 7327:7329 ioctl c018620c 200000000340 returned -1 [ 135.907226][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 135.954875][ T7338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.638'. [ 135.988883][ T7338] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 136.081448][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 136.148433][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.364487][ T7351] netlink: 'syz.3.644': attribute type 4 has an invalid length. [ 136.654325][ T7361] input: syz1 as /devices/virtual/input/input9 [ 138.460820][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 138.476215][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 138.596912][ T7445] binder: 7444:7445 ioctl 400c620e 0 returned -14 [ 139.306915][ T7469] input: syz1 as /devices/virtual/input/input11 [ 139.592862][ T5827] Bluetooth: hci3: link tx timeout [ 139.599692][ T5827] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.046428][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 140.129948][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.169399][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.176696][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.365180][ T7512] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.718'. [ 140.476150][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.635439][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 140.655206][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.752725][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.785510][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 140.794683][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.823322][ T24] usb 2-1: config 0 descriptor?? [ 141.256728][ T24] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 141.445101][ T24] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 141.469244][ T24] usb 2-1: USB disconnect, device number 3 [ 141.613066][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 141.613093][ T29] audit: type=1326 audit(1771009818.742:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7fc00000 [ 141.910440][ T7561] tipc: Started in network mode [ 141.917692][ T7561] tipc: Node identity ac14140f, cluster identity 4711 [ 141.933273][ T7561] tipc: New replicast peer: 255.255.255.255 [ 141.940473][ T7561] tipc: Enabled bearer , priority 10 [ 142.125703][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 142.187632][ T7575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.238375][ T7576] wg2: entered promiscuous mode [ 142.243316][ T7576] wg2: entered allmulticast mode [ 143.055478][ T980] tipc: Node number set to 2886997007 [ 143.279936][ T7628] kvm: kvm [7627]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 143.967381][ T7671] team_slave_0: entered allmulticast mode [ 144.000463][ T7671] team_slave_0: entered promiscuous mode [ 144.059225][ T7674] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 144.167483][ T7678] sg_write: data in/out 393179/8 bytes for SCSI command 0x0-- guessing data in; [ 144.167483][ T7678] program syz.1.796 not setting count and/or reply_len properly [ 144.744815][ T7704] netlink: 1 bytes leftover after parsing attributes in process `syz.1.810'. [ 144.851040][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 145.528546][ T7739] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 145.543187][ T7739] netlink: 'syz.0.826': attribute type 11 has an invalid length. [ 145.552338][ T7739] netlink: 112 bytes leftover after parsing attributes in process `syz.0.826'. [ 145.743012][ T7750] netlink: 'syz.0.831': attribute type 27 has an invalid length. [ 145.754338][ T7750] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 146.113789][ T5824] block nbd1: Receive control failed (result -32) [ 146.456415][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.618029][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 146.629639][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 146.639517][ T9] usb 4-1: config 0 has no interface number 0 [ 146.647499][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 146.658465][ T9] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 146.670238][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 146.683755][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 146.698009][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.706231][ T9] usb 4-1: Product: syz [ 146.712664][ T9] usb 4-1: Manufacturer: syz [ 146.718030][ T9] usb 4-1: SerialNumber: syz [ 146.737797][ T9] usb 4-1: config 0 descriptor?? [ 146.743782][ T7768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.751881][ T7768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.775583][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.857071][ T796] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.932681][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.944315][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.955762][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.964949][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.995628][ T10] usb 2-1: SerialNumber: syz [ 147.017109][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 147.029364][ T796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 147.040794][ T796] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 147.054940][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.062722][ T796] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 147.073433][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.109304][ T796] usb 3-1: config 0 descriptor?? [ 147.232070][ T10] usb 2-1: 0:2 : does not exist [ 147.311559][ T10] usb 2-1: USB disconnect, device number 4 [ 147.363914][ T7792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.375651][ T7792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.392747][ T6824] udevd[6824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.538774][ T29] audit: type=1326 audit(1771009824.672:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.0.853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c379bf79 code=0x0 [ 147.566194][ T796] wacom 0003:056A:010E.0006: unbalanced collection at end of report description [ 147.576341][ T796] wacom 0003:056A:010E.0006: parse failed [ 147.582240][ T796] wacom 0003:056A:010E.0006: probe with driver wacom failed with error -22 [ 147.630795][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 147.647660][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 147.658661][ T9] usb 4-1: USB disconnect, device number 3 [ 148.304003][ T24] usb 3-1: USB disconnect, device number 4 [ 148.356279][ T7810] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.859'. [ 148.395604][ T7810] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.602649][ T7818] usb usb8: usbfs: process 7818 (syz.0.863) did not claim interface 0 before use [ 148.787309][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.980275][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.003568][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.026242][ T24] usb 3-1: config 0 descriptor?? [ 149.047338][ T24] cp210x 3-1:0.0: cp210x converter detected [ 149.444521][ T24] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 149.454406][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 149.471985][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 149.518152][ T5824] block nbd2: Receive control failed (result -32) [ 149.665119][ T796] usb 3-1: USB disconnect, device number 5 [ 149.675214][ T796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.685842][ T796] cp210x 3-1:0.0: device disconnected [ 149.835477][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.986215][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 149.993262][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 150.001594][ T24] usb 2-1: config 0 has no interface number 0 [ 150.008000][ T24] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 150.018082][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 150.028875][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 150.045433][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.053497][ T24] usb 2-1: Product: syz [ 150.061511][ T24] usb 2-1: Manufacturer: syz [ 150.066301][ T24] usb 2-1: SerialNumber: syz [ 150.074272][ T24] usb 2-1: config 0 descriptor?? [ 150.086208][ T7860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.719653][ T24] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 150.792976][ T24] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 150.939049][ T10] usb 2-1: USB disconnect, device number 5 [ 151.017352][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 151.678063][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 152.306800][ T9] hid-generic 0005:04F3:7FFF.0007: item fetching failed at offset 0/4 [ 152.326290][ T9] hid-generic 0005:04F3:7FFF.0007: probe with driver hid-generic failed with error -22 [ 153.052144][ T8005] input: syz0 as /devices/virtual/input/input13 [ 153.293843][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 153.511216][ T8027] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 153.544997][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 153.640388][ T8033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.256688][ T8070] netlink: 108 bytes leftover after parsing attributes in process `syz.1.968'. [ 154.569701][ T8086] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.686300][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 154.693614][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.277005][ T8175] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1019'. [ 156.857327][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 157.125760][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 157.299406][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.315712][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 157.334934][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 157.345724][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.362849][ T10] usb 4-1: config 0 descriptor?? [ 157.436722][ T980] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.601330][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.612580][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.630693][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.643999][ T980] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 157.654076][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.666657][ T980] usb 2-1: config 0 descriptor?? [ 157.804558][ T10] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x1 [ 157.813758][ T10] sunplus 0003:04FC:05D8.0008: unknown global tag 0xe [ 157.820765][ T10] sunplus 0003:04FC:05D8.0008: item 0 0 1 14 parsing failed [ 157.846388][ T10] sunplus 0003:04FC:05D8.0008: probe with driver sunplus failed with error -22 [ 158.029490][ T10] usb 4-1: USB disconnect, device number 4 [ 158.086274][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.105486][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.112987][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.120999][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.132753][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.140418][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.148168][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.155685][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.163153][ T980] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 158.189175][ T980] steelseries 0003:1038:12B6.0009: hidraw0: USB HID vff.fc Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 158.508300][ T10] usb 2-1: USB disconnect, device number 6 [ 159.922090][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.096290][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 160.115093][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.126649][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.175439][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.185784][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.217314][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.236118][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.481618][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 160.501464][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 160.709843][ T24] usb 3-1: USB disconnect, device number 6 [ 160.824492][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 161.155467][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 161.307652][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.317666][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 161.328095][ T24] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 161.339666][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 161.349402][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 161.359925][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.368483][ T24] usb 2-1: Product: syz [ 161.372780][ T24] usb 2-1: Manufacturer: syz [ 161.382948][ T24] usb 2-1: SerialNumber: syz [ 161.397583][ T8373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.411811][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15 [ 161.611594][ T5176] bcm5974 2-1:1.0: could not read from device [ 161.621371][ T5176] bcm5974 2-1:1.0: could not read from device [ 161.632658][ T24] usb 2-1: USB disconnect, device number 7 [ 161.643057][ T5176] bcm5974 2-1:1.0: could not read from device [ 162.046437][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.225688][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 162.244303][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 162.317111][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 162.329010][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.349620][ T24] usb 1-1: Product: syz [ 162.353974][ T24] usb 1-1: Manufacturer: syz [ 162.360165][ T24] usb 1-1: SerialNumber: syz [ 162.373149][ T24] usb 1-1: config 0 descriptor?? [ 162.399697][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 162.414685][ T24] usb 1-1: Detected FT232R [ 162.611616][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 162.647865][ T796] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.807414][ T796] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 162.816709][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.828579][ T796] usb 2-1: config 0 descriptor?? [ 162.848722][ T796] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 162.860067][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.055759][ T10] usb 1-1: USB disconnect, device number 5 [ 163.116298][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.132779][ T10] ftdi_sio 1-1:0.0: device disconnected [ 163.150333][ T8434] tap0: tun_chr_ioctl cmd 1074025676 [ 163.169287][ T8434] tap0: owner set to 0 [ 163.265862][ T796] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 163.432155][ T8445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.677582][ T796] gspca_cpia1: usb_control_msg 02, error -71 [ 163.694243][ T796] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 163.735918][ T796] usb 2-1: USB disconnect, device number 8 [ 164.268334][ T8475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1159'. [ 164.660775][ T8484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1163'. [ 164.878957][ T8494] batadv_slave_0: entered promiscuous mode [ 164.886298][ T8494] batadv_slave_0: left promiscuous mode [ 165.711181][ T8543] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 166.551155][ T8583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.889383][ T8602] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 166.907099][ T8602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1219'. [ 166.920675][ T8606] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1222'. [ 167.563050][ T1327] tipc: Subscription rejected, illegal request [ 167.616996][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 167.660418][ T5824] block nbd3: Receive control failed (result -32) [ 167.676224][ T8639] program syz.0.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.026385][ T796] kernel read not supported for file /radio0 (pid: 796 comm: kworker/0:2) [ 168.410813][ T8678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.422333][ T8680] netlink: 'syz.1.1257': attribute type 58 has an invalid length. [ 169.302851][ T8723] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.315228][ T8725] Attempt to restore checkpoint with obsolete wellknown handles [ 169.403850][ T8728] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.1279'. [ 169.416349][ T8729] sp0: Synchronizing with TNC [ 169.520880][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 169.531538][ T8731] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 169.580295][ T8732] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.590160][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.607167][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.615069][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.625928][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.633358][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 169.644621][ T8735] loop8: detected capacity change from 0 to 1 [ 169.664128][ T8735] Dev loop8: unable to read RDB block 1 [ 169.670073][ T8735] loop8: unable to read partition table [ 169.676560][ T8735] loop8: partition table beyond EOD, truncated [ 169.695596][ T8735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 171.493793][ T8830] input: syz0 as /devices/virtual/input/input16 [ 171.566152][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 171.572539][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.806728][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 171.873799][ T8837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.895580][ T8837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.974688][ T8851] use of bytesused == 0 is deprecated and will be removed in the future, [ 171.976256][ T8837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.985183][ T8851] use the actual size instead. [ 172.041227][ T8837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.047727][ T8837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.074884][ T8837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.087552][ T8837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.093944][ T8837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.116423][ T8837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.142527][ T8837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.187255][ T8837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.403371][ T8920] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 173.633486][ T8930] program syz.0.1365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.885721][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.896277][ T8945] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1370'. [ 174.046330][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.125959][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.205460][ T5824] Bluetooth: hci3: command 0x0405 tx timeout [ 175.975510][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.005821][ T9059] kvm: kvm [9057]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 176.136105][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.206366][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.288069][ T5824] Bluetooth: hci3: command 0x0405 tx timeout [ 176.313669][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1421'. [ 176.372369][ T9077] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1420'. [ 177.713732][ T980] IPVS: starting estimator thread 0... [ 177.722863][ T9145] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.815666][ T9148] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.905452][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.045851][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.065598][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 178.077448][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 178.086659][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.128146][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.146100][ T24] pvrusb2: ********** [ 178.150168][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.178046][ T24] pvrusb2: Important functionality might not be entirely working. [ 178.195494][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.208758][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.225049][ T24] pvrusb2: ********** [ 178.296808][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.329117][ T2345] pvrusb2: Invalid write control endpoint [ 178.470211][ T2345] pvrusb2: Invalid write control endpoint [ 178.496770][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 178.538952][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 178.557917][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 178.588122][ T2345] pvrusb2: Device being rendered inoperable [ 178.624171][ T796] usb 4-1: USB disconnect, device number 5 [ 178.645887][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.653447][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.661752][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 178.708581][ T2345] pvrusb2: Attached sub-driver cx25840 [ 178.716361][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.726803][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.949368][ T9195] sctp: [Deprecated]: syz.1.1461 (pid 9195) Use of int in maxseg socket option. [ 178.949368][ T9195] Use struct sctp_assoc_value instead [ 179.102487][ T29] audit: type=1326 audit(1771009856.232:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.1.1465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f3f99bf79 code=0x0 [ 180.082367][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1482'. [ 180.383248][ T9273] Bluetooth: MGMT ver 1.23 [ 180.395507][ T9273] Bluetooth: hci1: too big key_count value 16386 [ 180.495304][ T9275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.927771][ T9301] program syz.2.1502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.953407][ T9303] loop7: detected capacity change from 0 to 7 [ 180.966343][ T9303] buffer_io_error: 138 callbacks suppressed [ 180.966363][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.006175][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.046845][ T9306] Invalid logical block size (6) [ 181.062466][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.117534][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.140254][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.152148][ T9314] netlink: 'syz.0.1508': attribute type 21 has an invalid length. [ 181.162578][ T9314] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1508'. [ 181.175519][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.183662][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.204355][ T9314] netlink: 'syz.0.1508': attribute type 21 has an invalid length. [ 181.221340][ T9314] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1508'. [ 181.228581][ T9303] ldm_validate_partition_table(): Disk read failed. [ 181.237603][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.259721][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.267870][ T9303] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.277421][ T9303] Dev loop7: unable to read RDB block 0 [ 181.283552][ T9303] loop7: unable to read partition table [ 181.289659][ T9303] loop7: partition table beyond EOD, truncated [ 181.305593][ T9303] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 181.864671][ T9343] loop8: detected capacity change from 0 to 1 [ 181.893470][ T9343] Dev loop8: unable to read RDB block 1 [ 181.923255][ T9343] loop8: unable to read partition table [ 181.945721][ T9343] loop8: partition table beyond EOD, truncated [ 181.969568][ T9347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.977368][ T9343] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 182.108809][ T9352] netlink: 'syz.0.1527': attribute type 2 has an invalid length. [ 182.116921][ T9352] netlink: 'syz.0.1527': attribute type 5 has an invalid length. [ 182.504559][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 182.749821][ T9378] overlayfs: failed lookup in lower (newroot/359, name='file0', err=-40): overlapping layers [ 183.026487][ T9394] tap0: tun_chr_ioctl cmd 1074025675 [ 183.032504][ T9394] tap0: persist enabled [ 183.527625][ T9417] overlay: filesystem on ./file0 not supported as upperdir [ 184.298096][ T9456] block nbd4: Unsupported socket: should be TCP or UNIX. [ 184.306150][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.481737][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 184.492154][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.518730][ T9] usb 1-1: config 0 descriptor?? [ 184.529157][ T9] cp210x 1-1:0.0: cp210x converter detected [ 184.675040][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 184.956415][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 184.978222][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 185.150442][ T9493] vxcan0: tx address claim with dest, not broadcast [ 185.181398][ T9] usb 1-1: USB disconnect, device number 6 [ 185.202189][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 185.233995][ T9] cp210x 1-1:0.0: device disconnected [ 185.255848][ T9497] loop4: detected capacity change from 0 to 7 [ 185.263953][ T5867] ldm_validate_partition_table(): Disk read failed. [ 185.271862][ T5867] Dev loop4: unable to read RDB block 0 [ 185.278836][ T5867] loop4: unable to read partition table [ 185.284655][ T5867] loop4: partition table beyond EOD, truncated [ 185.291642][ T9497] ldm_validate_partition_table(): Disk read failed. [ 185.300710][ T9497] Dev loop4: unable to read RDB block 0 [ 185.306602][ T9497] loop4: unable to read partition table [ 185.315190][ T9497] loop4: partition table beyond EOD, truncated [ 185.322021][ T9497] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 185.646127][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.797623][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.815188][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 185.845467][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.860844][ T9] usb 3-1: config 0 descriptor?? [ 186.022736][ T9519] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1603'. [ 186.301060][ T9] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 186.692912][ T9] lenovo 0003:17EF:6047.000A: Failed to switch middle button: -71 [ 186.707665][ T9] lenovo 0003:17EF:6047.000A: Fn-lock setting failed: -71 [ 186.715634][ T9] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 186.737154][ T9] usb 3-1: USB disconnect, device number 7 [ 187.549476][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 188.219473][ T9611] overlayfs: invalid origin (0000) [ 188.285495][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.446047][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 188.456162][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 188.465271][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.494807][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 188.504097][ T9] pvrusb2: ********** [ 188.508335][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 188.518594][ T9] pvrusb2: Important functionality might not be entirely working. [ 188.526006][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.556505][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.568298][ T9] pvrusb2: ********** [ 188.700466][ T2345] pvrusb2: Invalid write control endpoint [ 188.769388][ T2345] pvrusb2: Invalid write control endpoint [ 188.779334][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 188.790422][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 188.799826][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 188.810317][ T2345] pvrusb2: Device being rendered inoperable [ 188.816695][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 188.824051][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 188.834507][ T2345] pvrusb2: Attached sub-driver cx25840 [ 188.840228][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 188.851801][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 188.911871][ T9] usb 2-1: USB disconnect, device number 9 [ 189.029078][ T9641] program syz.3.1659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.305043][ T9655] input: syz0 as /devices/virtual/input/input17 [ 189.452613][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 189.467224][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 189.915230][ T9686] hugetlbfs: syz.1.1681 (9686): Using mlock ulimits for SHM_HUGETLB is obsolete [ 189.997303][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 190.065469][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.077860][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 190.126226][ T5905] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.202067][ T10] IPVS: starting estimator thread 0... [ 190.235441][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 190.252383][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.278559][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.297252][ T9700] IPVS: using max 26 ests per chain, 62400 per kthread [ 190.301241][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 190.309610][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.309653][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.309700][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.309724][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.376517][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 190.388646][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.428273][ T29] audit: type=1326 audit(1771009873.559:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.472303][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 190.504615][ T5905] pvrusb2: ********** [ 190.517598][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 190.528073][ T29] audit: type=1326 audit(1771009873.559:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.565694][ T5905] pvrusb2: Important functionality might not be entirely working. [ 190.573703][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.589526][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 190.615296][ T9] usbtmc 1-1:16.0: can't read capabilities [ 190.630886][ T29] audit: type=1326 audit(1771009873.589:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.655230][ T5905] pvrusb2: ********** [ 190.661545][ T29] audit: type=1326 audit(1771009873.589:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f562df9bce2 code=0x7ffc0000 [ 190.686656][ T29] audit: type=1326 audit(1771009873.589:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f562df9bce2 code=0x7ffc0000 [ 190.724361][ T29] audit: type=1326 audit(1771009873.589:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.749146][ T2345] pvrusb2: Invalid write control endpoint [ 190.763154][ T29] audit: type=1326 audit(1771009873.589:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562df5c84e code=0x7ffc0000 [ 190.812522][ T9] usb 1-1: USB disconnect, device number 7 [ 190.847309][ T29] audit: type=1326 audit(1771009873.589:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.905042][ T29] audit: type=1326 audit(1771009873.589:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.947578][ T29] audit: type=1326 audit(1771009873.629:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562df9bf79 code=0x7ffc0000 [ 190.964170][ T2345] pvrusb2: Invalid write control endpoint [ 190.998163][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 191.013995][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.026846][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.039715][ T2345] pvrusb2: Device being rendered inoperable [ 191.052518][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.062248][ T10] usb 3-1: USB disconnect, device number 8 [ 191.093140][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 191.134898][ T2345] pvrusb2: Attached sub-driver cx25840 [ 191.145741][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.170813][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 191.636667][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 191.745506][ T5905] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.797524][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 191.812893][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.823110][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 191.836882][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 191.846574][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.861266][ T10] usb 4-1: config 0 descriptor?? [ 191.895575][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 191.907691][ T5905] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 191.916121][ T5905] usb 1-1: config 0 has no interface number 0 [ 191.923784][ T5905] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 191.933928][ T5905] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.947498][ T5905] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 191.959380][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.971747][ T5905] usb 1-1: Product: syz [ 191.976142][ T5905] usb 1-1: Manufacturer: syz [ 191.980992][ T5905] usb 1-1: SerialNumber: syz [ 191.991165][ T5905] usb 1-1: config 0 descriptor?? [ 191.997606][ T9720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.005113][ T9720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.227285][ T9720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.234766][ T9720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.292762][ T10] elecom 0003:056E:010C.000B: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 192.509337][ T10] usb 4-1: USB disconnect, device number 6 [ 192.652387][ T5905] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 192.666433][ T5905] asix 1-1:0.251: probe with driver asix failed with error -524 [ 192.869325][ T10] usb 1-1: USB disconnect, device number 8 [ 194.239362][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 194.534956][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.046336][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 195.227998][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 195.250958][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.274226][ T24] usb 3-1: config 0 descriptor?? [ 195.423572][ T9884] sctp: Trying to GSO but underlying device doesn't support it. [ 195.503620][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 195.762402][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 195.794182][ T24] [drm] Initialized udl on minor 2 [ 195.934677][ T9906] netlink: 'syz.0.1775': attribute type 9 has an invalid length. [ 195.964684][ T9906] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1775'. [ 196.145684][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 196.183323][ T9917] kvm: kvm [9916]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x7 [ 196.196646][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 196.208141][ T5905] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.238129][ T24] usb 3-1: USB disconnect, device number 9 [ 196.246351][ T5905] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 196.582752][ T9936] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1786'. [ 196.755788][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 196.837618][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1792'. [ 196.855537][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 196.923403][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 196.923422][ T29] audit: type=1326 audit(1771009880.049:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.1.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f3f99bf79 code=0x0 [ 196.958971][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.968925][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.980817][ T24] usb 4-1: config 0 descriptor?? [ 197.202320][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 197.436778][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 197.456501][ T24] [drm] Initialized udl on minor 2 [ 197.613697][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 197.631047][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 197.814132][ T5905] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.841204][ T24] usb 4-1: USB disconnect, device number 7 [ 197.852890][ T5905] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 197.882002][ T5905] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 198.533818][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 198.848409][T10030] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1826'. [ 199.142098][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 199.467361][T10061] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1841'. [ 199.719152][T10073] netlink: 'syz.3.1846': attribute type 25 has an invalid length. [ 199.752716][T10073] netlink: 'syz.3.1846': attribute type 29 has an invalid length. [ 200.805657][T10111] kvm: kvm [10110]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x6 [ 201.872077][ T29] audit: type=1326 audit(1771009884.999:43): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=10158 comm="syz.2.1889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f309c99bf79 code=0x0 [ 202.448478][T10182] misc userio: Can't change port type on an already running userio instance [ 202.497502][T10185] sctp: [Deprecated]: syz.3.1900 (pid 10185) Use of int in max_burst socket option. [ 202.497502][T10185] Use struct sctp_assoc_value instead [ 202.744871][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 202.754634][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 202.826466][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 202.841989][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 202.863592][T10204] input: syz1 as /devices/virtual/input/input19 [ 203.225965][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 203.396451][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 203.399659][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.425418][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 203.434441][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 203.465408][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.496524][ T10] usb 2-1: config 0 descriptor?? [ 203.518443][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 203.535568][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 203.562459][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 203.604481][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 203.612209][ T10] usb 2-1: media controller created [ 203.627467][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.662757][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 203.671379][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 203.700972][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 203.765913][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 203.790168][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 203.943493][ T10] usb 2-1: USB disconnect, device number 10 [ 203.998921][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 204.255491][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.409841][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.419011][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.427238][ T24] usb 3-1: Product: syz [ 204.431457][ T24] usb 3-1: Manufacturer: syz [ 204.436204][ T24] usb 3-1: SerialNumber: syz [ 204.881438][T10264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.253431][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 205.295125][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.311261][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.339704][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 205.372887][ T24] usb 3-1: USB disconnect, device number 10 [ 205.940230][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 206.105170][T10318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.540104][T10342] can0: slcan on ptm0. [ 206.619002][T10342] can0 (unregistered): slcan off ptm0. [ 206.727220][T10348] sctp: [Deprecated]: syz.1.1978 (pid 10348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.727220][T10348] Use struct sctp_sack_info instead [ 207.816529][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.830420][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.839383][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.857250][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.876284][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.421609][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.536291][T10387] chnl_net:caif_netlink_parms(): no params data found [ 208.579973][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.652930][ T10] hid-generic 0005:4C4A:7FFF.000C: item fetching failed at offset 0/3 [ 208.669176][ T10] hid-generic 0005:4C4A:7FFF.000C: probe with driver hid-generic failed with error -22 [ 208.727279][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.734796][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.742598][T10387] bridge_slave_0: entered allmulticast mode [ 208.750671][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 208.754526][T10387] bridge_slave_0: entered promiscuous mode [ 208.767195][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.767819][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.775294][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.790025][T10387] bridge_slave_1: entered allmulticast mode [ 208.799597][T10387] bridge_slave_1: entered promiscuous mode [ 208.799727][ T9] usb 3-1: config 0 has no interface number 0 [ 208.815890][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.829686][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.849176][ T9] usb 3-1: Product: syz [ 208.857971][ T9] usb 3-1: Manufacturer: syz [ 208.870873][ T9] usb 3-1: SerialNumber: syz [ 208.887898][ T9] usb 3-1: config 0 descriptor?? [ 208.903333][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.939301][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.957356][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.033617][T10387] team0: Port device team_slave_0 added [ 209.051822][T10387] team0: Port device team_slave_1 added [ 209.103051][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.110126][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.141006][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.153866][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.161451][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.170531][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.199065][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.212057][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.352832][T10387] hsr_slave_0: entered promiscuous mode [ 209.362229][T10387] hsr_slave_1: entered promiscuous mode [ 209.373611][T10387] debugfs: 'hsr0' already exists in 'hsr' [ 209.382210][T10387] Cannot create hsr debugfs directory [ 209.523386][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.531768][ T9] usb 3-1: USB disconnect, device number 11 [ 209.553954][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.574806][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.606715][ T9] quatech2 3-1:0.51: device disconnected [ 209.897847][T10387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.923648][T10387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.958602][T10387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.967078][ T5827] Bluetooth: hci0: command tx timeout [ 209.983297][T10387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.207015][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.269850][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.299738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.303555][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 210.307100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.334487][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.341770][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.831833][T10387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.929515][T10486] blk_print_req_error: 138 callbacks suppressed [ 210.929539][T10486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.945734][T10486] buffer_io_error: 52 callbacks suppressed [ 210.945756][T10486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.960086][T10486] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.975592][T10486] Buffer I/O error on dev nbd0, logical block 1, async page read [ 210.987156][T10486] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.999365][T10489] tmpfs: User quota inode hardlimit too large. [ 211.005875][T10486] Buffer I/O error on dev nbd0, logical block 2, async page read [ 211.014310][T10486] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.027410][T10486] Buffer I/O error on dev nbd0, logical block 3, async page read [ 211.045567][T10486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.057281][T10486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.065154][T10486] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.102073][T10486] Buffer I/O error on dev nbd0, logical block 1, async page read [ 211.111312][T10486] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.122786][T10486] Buffer I/O error on dev nbd0, logical block 2, async page read [ 211.132451][T10486] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.147346][T10486] Buffer I/O error on dev nbd0, logical block 3, async page read [ 211.156093][T10486] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.168630][T10486] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.195716][T10486] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.227774][T10486] Buffer I/O error on dev nbd0, logical block 1, async page read [ 211.238003][T10486] ldm_validate_partition_table(): Disk read failed. [ 211.250900][T10486] Dev nbd0: unable to read RDB block 0 [ 211.266322][T10486] nbd0: unable to read partition table [ 211.293427][ T5191] ldm_validate_partition_table(): Disk read failed. [ 211.313094][ T5191] Dev nbd0: unable to read RDB block 0 [ 211.323052][ T5191] nbd0: unable to read partition table [ 211.334294][ T5191] ldm_validate_partition_table(): Disk read failed. [ 211.356909][ T5191] Dev nbd0: unable to read RDB block 0 [ 211.369060][ T5191] nbd0: unable to read partition table [ 211.410293][ T6824] ldm_validate_partition_table(): Disk read failed. [ 211.425263][ T6824] Dev nbd0: unable to read RDB block 0 [ 211.432435][ T6824] nbd0: unable to read partition table [ 211.463535][ T6824] ldm_validate_partition_table(): Disk read failed. [ 211.508928][ T6824] Dev nbd0: unable to read RDB block 0 [ 211.515174][ T6824] nbd0: unable to read partition table [ 211.553834][T10387] veth0_vlan: entered promiscuous mode [ 211.582808][T10387] veth1_vlan: entered promiscuous mode [ 211.693330][T10387] veth0_macvtap: entered promiscuous mode [ 211.713859][T10387] veth1_macvtap: entered promiscuous mode [ 211.720410][T10507] Bluetooth: MGMT ver 1.23 [ 211.761382][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.784367][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.840979][ T1000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.855455][ T1000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.868377][ T1000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.877821][ T1000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.032759][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.057428][ T5827] Bluetooth: hci0: command tx timeout [ 212.067430][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.151128][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.167364][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.547442][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.719448][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 212.731602][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.757230][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.764011][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.04 [ 212.801623][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.817478][ T9] usb 2-1: config 0 descriptor?? [ 213.249111][ T9] hid_parser_main: 2 callbacks suppressed [ 213.249136][ T9] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 213.275194][ T9] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 213.283583][ T9] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 213.292012][ T9] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 213.301029][ T9] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 213.344908][ T9] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 213.434731][ C0] usb 2-1: input irq status -75 received [ 213.638859][ T5905] usb 2-1: USB disconnect, device number 11 [ 213.962776][T10590] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 213.978169][T10590] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 214.129340][ T5827] Bluetooth: hci0: command tx timeout [ 214.590533][T10623] tmpfs: Cannot change global quota limit on remount [ 216.205792][ T5827] Bluetooth: hci0: command tx timeout [ 216.793578][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.965826][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 216.975061][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 216.988009][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.014256][ T9] usb 1-1: config 0 descriptor?? [ 217.234940][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 217.254281][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.276692][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 217.289556][ T9] usb 1-1: media controller created [ 217.331332][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.345049][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 217.726537][T10760] loop6: detected capacity change from 524288000 to 1 [ 217.747649][ T6824] buffer_io_error: 330 callbacks suppressed [ 217.747669][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.771831][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.786768][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.799878][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.809576][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.826146][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.834627][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.857320][ T9] az6027: usb out operation failed. (-71) [ 217.863131][ T9] stb0899_attach: Driver disabled by Kconfig [ 217.880863][ T9] az6027: no front-end attached [ 217.880863][ T9] [ 217.883292][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.899318][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.909047][ T6824] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.917859][ T9] az6027: usb out operation failed. (-71) [ 217.923714][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 217.954483][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 217.979940][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 217.989300][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 218.027135][ T9] usb 1-1: USB disconnect, device number 9 [ 218.127868][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 218.905584][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.053965][T10803] input: syz0 as /devices/virtual/input/input23 [ 219.065432][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 219.078467][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.088663][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 219.104110][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.120866][ T9] usb 1-1: Product: syz [ 219.125795][ T9] usb 1-1: Manufacturer: syz [ 219.130462][ T9] usb 1-1: SerialNumber: syz [ 219.161968][ T9] usb 1-1: config 0 descriptor?? [ 219.548910][T10823] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 219.609217][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 219.670526][T10828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.012675][ T9] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 220.071869][ T9] usb 1-1: USB disconnect, device number 10 [ 220.627006][ T29] audit: type=1400 audit(1771009903.739:44): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313220202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313620202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203520202020352020202030202020202030202020202020203520202020202020202020300A2020736974303A2020202020 [ 221.480097][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 221.715507][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 221.726279][T10921] sctp: [Deprecated]: syz.2.2230 (pid 10921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.726279][T10921] Use struct sctp_sack_info instead [ 221.745670][T10915] block nbd4: shutting down sockets [ 222.175639][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 222.329860][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.340613][ T42] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 222.349920][ T42] usb 5-1: config 6 has no interface number 0 [ 222.356399][ T42] usb 5-1: config 6 interface 200 has no altsetting 0 [ 222.369722][ T42] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 222.380181][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.390805][ T42] usb 5-1: Product: syz [ 222.397154][ T42] usb 5-1: Manufacturer: syz [ 222.402128][ T42] usb 5-1: SerialNumber: syz [ 222.445590][ T5827] Bluetooth: hci0: command tx timeout [ 222.830425][ T42] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 223.032274][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.055625][ T42] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 223.063598][ T42] usb 5-1: media controller created [ 223.111463][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.235792][ T42] dvb-usb: bulk message failed: -71 (6/0) [ 223.243303][ T42] dvb-usb: bulk message failed: -71 (6/0) [ 223.250097][ T42] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 223.279298][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 223.307085][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 223.321001][ T42] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 223.343294][ T42] usb 5-1: USB disconnect, device number 2 [ 223.423512][ T42] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 223.670905][ T29] audit: type=1326 audit(1771009906.799:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.694535][ T29] audit: type=1326 audit(1771009906.799:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.721773][ T29] audit: type=1326 audit(1771009906.799:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.774101][ T29] audit: type=1326 audit(1771009906.799:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f309c95c84e code=0x7ffc0000 [ 223.819296][ T29] audit: type=1326 audit(1771009906.799:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.850911][ T29] audit: type=1326 audit(1771009906.799:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.875523][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.888656][ T29] audit: type=1326 audit(1771009906.799:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.912153][ T29] audit: type=1326 audit(1771009906.799:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 223.936532][ T29] audit: type=1326 audit(1771009906.799:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11001 comm="syz.2.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f309c99bf79 code=0x7ffc0000 [ 224.066402][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 224.075512][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 224.083715][ T9] usb 1-1: config 0 has no interface number 0 [ 224.090418][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 224.101589][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 224.113972][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.123688][ T9] usb 1-1: Product: syz [ 224.128761][ T9] usb 1-1: Manufacturer: syz [ 224.133519][ T9] usb 1-1: SerialNumber: syz [ 224.151873][ T9] usb 1-1: config 0 descriptor?? [ 224.160767][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 224.183996][T11012] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2274'. [ 224.217356][T11014] syz.1.2275 uses obsolete (PF_INET,SOCK_PACKET) [ 224.247820][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.265409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.278263][ T10] usb 5-1: config 0 descriptor?? [ 224.299599][ T10] cp210x 5-1:0.0: cp210x converter detected [ 224.373441][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 224.398513][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 224.702392][ T10] usb 5-1: cp210x converter now attached to ttyUSB2 [ 224.763706][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 224.764974][ T5905] usb 1-1: USB disconnect, device number 12 [ 224.787280][ T5905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 224.804063][ T5905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 224.816364][ T5905] quatech2 1-1:0.51: device disconnected [ 224.896337][ T24] usb 5-1: USB disconnect, device number 3 [ 224.908784][ T24] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 224.922517][ T24] cp210x 5-1:0.0: device disconnected [ 224.975540][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 225.127539][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.135849][ T42] usb 2-1: config 0 has no interface number 0 [ 225.144729][ T42] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.154288][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.162507][ T42] usb 2-1: Product: syz [ 225.167011][ T42] usb 2-1: Manufacturer: syz [ 225.172078][ T42] usb 2-1: SerialNumber: syz [ 225.180302][ T42] usb 2-1: config 0 descriptor?? [ 225.393915][ T42] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 225.411049][ T42] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.423444][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 225.431713][ T42] usb 2-1: media controller created [ 225.468945][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.793447][T11050] binder: 11049:11050 ioctl c018620c 200000000580 returned -22 [ 225.871521][T11054] [U] [ 225.874895][T11054] [U] [ 225.877648][T11054] [U] [ 225.880396][T11054] [U] [ 225.883892][T11054] [U] [ 225.886660][T11054] [U] [ 225.889403][T11054] [U] [ 225.892144][T11054] [U] [ 225.901482][T11054] [U] [ 225.904276][T11054] [U] [ 225.907026][T11054] [U] [ 225.909868][T11054] [U] [ 225.914678][T11054] [U] [ 225.917457][T11054] [U] [ 225.920207][T11054] [U] [ 225.922956][T11054] [U] [ 225.927758][T11054] [U] [ 225.930519][T11054] [U] [ 225.933258][T11054] [U] [ 225.935999][T11054] [U] [ 225.939916][T11054] [U] [ 225.942692][T11054] [U] [ 225.945442][T11054] [U] [ 225.948210][T11054] [U] [ 225.951833][T11054] [U] [ 225.954592][T11054] [U] [ 225.957343][T11054] [U] [ 225.960088][T11054] [U] [ 225.965725][T11054] [U] [ 225.968509][T11054] [U] [ 225.971259][T11054] [U] [ 225.974000][T11054] [U] [ 225.977284][T11054] [U] [ 225.980041][T11054] [U] [ 225.982797][T11054] [U] [ 225.985548][T11054] [U] [ 225.990445][T11054] [U] [ 225.993214][T11054] [U] [ 225.995960][T11054] [U] [ 225.998710][T11054] [U] [ 226.002016][T11054] [U] [ 226.004788][T11054] [U] [ 226.007522][T11054] [U] [ 226.010288][T11054] [U] [ 226.014394][T11054] [U] [ 226.017166][T11054] [U] [ 226.019899][T11054] [U] [ 226.022695][T11054] [U] [ 226.026894][T11054] [U] [ 226.029661][T11054] [U] [ 226.032406][T11054] [U] [ 226.035151][T11054] [U] [ 226.038402][T11054] [U] [ 226.041169][T11054] [U] [ 226.043908][T11054] [U] [ 226.046646][T11054] [U] [ 226.049923][T11054] [U] [ 226.052677][T11054] [U] [ 226.055411][T11054] [U] [ 226.058146][T11054] [U] [ 226.061538][T11054] [U] [ 226.064290][T11054] [U] [ 226.067045][T11054] [U] [ 226.069796][T11054] [U] [ 226.073777][T11054] [U] [ 226.076555][T11054] [U] [ 226.079309][T11054] [U] [ 226.082049][T11054] [U] [ 226.085515][T11054] [U] [ 226.088270][T11054] [U] [ 226.091009][T11054] [U] [ 226.093748][T11054] [U] [ 226.099100][T11054] [U] [ 226.101856][T11054] [U] [ 226.104595][T11054] [U] [ 226.107341][T11054] [U] [ 226.110985][T11054] [U] [ 226.113737][T11054] [U] [ 226.116478][T11054] [U] [ 226.119233][T11054] [U] [ 226.122720][T11054] [U] [ 226.125480][T11054] [U] [ 226.128219][T11054] [U] [ 226.130958][T11054] [U] [ 226.134735][T11054] [U] [ 226.137538][T11054] [U] [ 226.140287][T11054] [U] [ 226.143058][T11054] [U] [ 226.146657][T11054] [U] [ 226.149424][T11054] [U] [ 226.152151][T11054] [U] [ 226.154870][T11054] [U] [ 226.158936][T11054] [U] [ 226.161691][T11054] [U] [ 226.164433][T11054] [U] [ 226.167186][T11054] [U] [ 226.172882][T11054] [U] [ 226.175645][T11054] [U] [ 226.178388][T11054] [U] [ 226.181130][T11054] [U] [ 226.185951][T11054] [U] [ 226.188721][T11054] [U] [ 226.191456][T11054] [U] [ 226.194185][T11054] [U] [ 226.201477][T11054] [U] [ 226.204248][T11054] [U] [ 226.206988][T11054] [U] [ 226.209726][T11054] [U] [ 226.215876][T11054] [U] [ 226.218634][T11054] [U] [ 226.221385][T11054] [U] [ 226.224105][T11054] [U] [ 226.227277][T11054] [U] [ 226.230020][T11054] [U] [ 226.232741][T11054] [U] [ 226.235475][T11054] [U] [ 226.238803][T11054] [U] [ 226.241569][T11054] [U] [ 226.244321][T11054] [U] [ 226.247108][T11054] [U] [ 226.251174][T11054] [U] [ 226.253934][T11054] [U] [ 226.256688][T11054] [U] [ 226.259429][T11054] [U] [ 226.262970][T11054] [U] [ 226.265808][T11054] [U] [ 226.268567][T11054] [U] [ 226.290782][T11053] [U] [ 226.526383][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 226.533680][ T5824] Bluetooth: hci4: command 0x1003 tx timeout [ 226.612281][ T42] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 226.670770][ T42] usb 2-1: USB disconnect, device number 12 [ 226.712931][T11069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.963174][T11079] netlink: 'syz.4.2306': attribute type 25 has an invalid length. [ 226.971705][T11079] netlink: 'syz.4.2306': attribute type 28 has an invalid length. [ 227.497720][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 227.685483][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 227.702668][ T42] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.729990][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.746086][ T42] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.04 [ 227.770631][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.801399][ T42] usb 1-1: config 0 descriptor?? [ 227.847330][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 228.112691][T11121] batadv_slave_1: entered promiscuous mode [ 228.132629][T11120] batadv_slave_1: left promiscuous mode [ 228.241517][ T42] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 228.259327][ T42] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 228.273955][T11127] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2329'. [ 228.284935][ T42] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 228.294129][ T42] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 228.308232][ T42] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 228.320869][ T42] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 228.463421][ C1] usb 1-1: input irq status -75 received [ 228.665136][ T42] usb 1-1: USB disconnect, device number 13 [ 229.015595][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.166387][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 229.176317][ T42] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 229.185695][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.193752][ T42] usb 5-1: Product: syz [ 229.198270][ T42] usb 5-1: Manufacturer: syz [ 229.202929][ T42] usb 5-1: SerialNumber: syz [ 229.211078][ T42] usb 5-1: config 0 descriptor?? [ 229.222569][ T42] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 229.546421][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 229.714528][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 229.735534][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.743633][ T9] usb 1-1: Product: syz [ 229.766394][ T9] usb 1-1: Manufacturer: syz [ 229.771069][ T9] usb 1-1: SerialNumber: syz [ 229.848164][ T42] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 229.877526][ T42] usb 5-1: USB disconnect, device number 4 [ 230.099930][T11179] Bluetooth: hci4: Frame reassembly failed (-84) [ 230.616563][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 230.633485][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 230.644280][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 230.664184][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 230.727738][ T9] usb 1-1: USB disconnect, device number 14 [ 231.106333][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2367'. [ 232.126268][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 232.378355][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 232.605069][T11271] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.624754][T11271] overlayfs: overlapping lowerdir path [ 232.797651][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 232.808908][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 232.892301][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 232.967942][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2403'. [ 233.125034][T11293] netlink: 'syz.0.2405': attribute type 83 has an invalid length. [ 233.387051][T11305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2411'. [ 233.948607][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 233.965578][T11335] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2427'. [ 233.981995][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 234.301771][T11351] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 234.386508][T11351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 234.486306][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 234.486326][ T29] audit: type=1326 audit(1771009918.612:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c379bf79 code=0x7fc00000 [ 234.747140][T11370] random: crng reseeded on system resumption [ 234.982194][T11380] dvmrp6: entered allmulticast mode [ 235.935444][ T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.115686][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 236.128630][ T42] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.149305][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.164102][ T42] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.176983][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.195287][ T42] usb 2-1: config 0 descriptor?? [ 236.294967][T11434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.643808][ T42] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 237.036187][ T24] usb 2-1: USB disconnect, device number 13 [ 238.262104][T11506] Invalid ELF header len 16 [ 238.277700][T11510] input: syz0 as /devices/virtual/input/input25 [ 238.865638][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 239.042751][ T42] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 239.062551][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.081010][ T42] usb 5-1: Product: syz [ 239.085265][ T42] usb 5-1: Manufacturer: syz [ 239.105461][ T42] usb 5-1: SerialNumber: syz [ 239.123906][ T42] usb 5-1: config 0 descriptor?? [ 239.146942][ T42] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 005 [ 239.572978][ T42] (null): failure reading functionality [ 239.597305][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 239.620905][T11564] __nla_validate_parse: 2 callbacks suppressed [ 239.620926][T11564] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2526'. [ 239.793942][ T42] usb 5-1: USB disconnect, device number 5 [ 240.229496][T11584] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2536'. [ 240.528729][T11599] syz.0.2543: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.565531][T11599] CPU: 1 UID: 0 PID: 11599 Comm: syz.0.2543 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.565568][T11599] Tainted: [L]=SOFTLOCKUP [ 240.565577][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 240.565598][T11599] Call Trace: [ 240.565607][T11599] [ 240.565620][T11599] dump_stack_lvl+0xe8/0x150 [ 240.565660][T11599] warn_alloc+0x249/0x340 [ 240.565684][T11599] ? stack_trace_save+0xa9/0x100 [ 240.565711][T11599] ? __pfx_warn_alloc+0x10/0x10 [ 240.565740][T11599] ? kasan_save_track+0x4f/0x80 [ 240.565761][T11599] ? kasan_save_track+0x3e/0x80 [ 240.565781][T11599] ? __kasan_kmalloc+0x93/0xb0 [ 240.565802][T11599] ? __kmalloc_cache_noprof+0x31c/0x660 [ 240.565822][T11599] ? xskq_create+0x56/0x170 [ 240.565844][T11599] ? xsk_setsockopt+0x54c/0x990 [ 240.565873][T11599] ? do_sock_setsockopt+0x17c/0x1b0 [ 240.565894][T11599] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 240.565914][T11599] ? do_syscall_64+0x14d/0xf80 [ 240.565942][T11599] __vmalloc_node_range_noprof+0x132/0x1730 [ 240.566010][T11599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.566052][T11599] ? __kasan_kmalloc+0x93/0xb0 [ 240.566079][T11599] vmalloc_user_noprof+0xad/0xe0 [ 240.566100][T11599] ? xskq_create+0xbf/0x170 [ 240.566122][T11599] xskq_create+0xbf/0x170 [ 240.566147][T11599] xsk_init_queue+0x8a/0xe0 [ 240.566171][T11599] xsk_setsockopt+0x54c/0x990 [ 240.566206][T11599] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.566272][T11599] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.566299][T11599] ? aa_sock_opt_perm+0xff/0x1a0 [ 240.566328][T11599] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 240.566350][T11599] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.566384][T11599] do_sock_setsockopt+0x17c/0x1b0 [ 240.566412][T11599] __x64_sys_setsockopt+0x13d/0x1b0 [ 240.566439][T11599] do_syscall_64+0x14d/0xf80 [ 240.566464][T11599] ? trace_irq_disable+0x3b/0x150 [ 240.566493][T11599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.566515][T11599] ? clear_bhb_loop+0x40/0x90 [ 240.566548][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.566570][T11599] RIP: 0033:0x7f93c379bf79 [ 240.566603][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.566623][T11599] RSP: 002b:00007f93c46cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.566648][T11599] RAX: ffffffffffffffda RBX: 00007f93c3a15fa0 RCX: 00007f93c379bf79 [ 240.566664][T11599] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 240.566677][T11599] RBP: 00007f93c38327e0 R08: 0000000000000004 R09: 0000000000000000 [ 240.566691][T11599] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.566705][T11599] R13: 00007f93c3a16038 R14: 00007f93c3a15fa0 R15: 00007ffdf1274658 [ 240.566739][T11599] [ 240.566752][T11599] Mem-Info: [ 240.854785][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.867470][T11599] active_anon:23073 inactive_anon:0 isolated_anon:0 [ 240.867470][T11599] active_file:18501 inactive_file:44174 isolated_file:0 [ 240.867470][T11599] unevictable:768 dirty:139 writeback:0 [ 240.867470][T11599] slab_reclaimable:12073 slab_unreclaimable:93695 [ 240.867470][T11599] mapped:24830 shmem:18314 pagetables:1549 [ 240.867470][T11599] sec_pagetables:0 bounce:0 [ 240.867470][T11599] kernel_misc_reclaimable:0 [ 240.867470][T11599] free:1291942 free_pcp:18294 free_cma:0 [ 240.951692][T11599] Node 0 active_anon:92392kB inactive_anon:0kB active_file:73944kB inactive_file:176500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99260kB dirty:544kB writeback:0kB shmem:71720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12188kB pagetables:6032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.027737][ T42] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.031457][T11599] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.037363][ T42] usb 3-1: config 0 has no interface number 0 [ 241.073334][T11599] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 241.107277][T11599] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 241.113137][T11599] Node 0 DMA32 free:1218428kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92348kB inactive_anon:0kB active_file:73944kB inactive_file:176500kB unevictable:1536kB writepending:544kB zspages:0kB present:3129332kB managed:2540712kB mlocked:0kB bounce:0kB free_pcp:68184kB local_pcp:24592kB free_cma:0kB [ 241.151852][ T42] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 241.162641][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.171611][ T42] usb 3-1: Product: syz [ 241.176320][ T42] usb 3-1: Manufacturer: syz [ 241.181066][ T42] usb 3-1: SerialNumber: syz [ 241.192190][ T42] usb 3-1: config 0 descriptor?? [ 241.221887][T11599] lowmem_reserve[]: 0 0 1 1 1 [ 241.230747][T11599] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 241.263983][T11599] lowmem_reserve[]: 0 0 0 0 0 [ 241.269274][T11599] Node 1 Normal free:3938852kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:196kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.351805][T11599] lowmem_reserve[]: 0 0 0 0 0 [ 241.362152][T11599] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 241.378507][T11599] Node 0 DMA32: 3196*4kB (UME) 2160*8kB (UME) 959*16kB (UME) 199*32kB (UME) 86*64kB (UME) 67*128kB (UME) 34*256kB (UM) 12*512kB (UM) 6*1024kB (U) 2*2048kB (UM) 276*4096kB (UME) = 1221440kB [ 241.410995][ T42] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 241.428005][ T42] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.441242][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 241.449994][ T42] usb 3-1: media controller created [ 241.450590][T11599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.477005][T11599] Node 1 Normal: 3*4kB (U) 5*8kB (U) 8*16kB (UE) 13*32kB (UE) 10*64kB (UM) 5*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 959*4096kB (UM) = 3938900kB [ 241.482538][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.513352][T11599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.526043][T11599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.537529][T11599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.547635][T11599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.557201][T11599] 80981 total pagecache pages [ 241.562135][T11599] 0 pages in swap cache [ 241.566971][T11599] Free swap = 124996kB [ 241.571384][T11599] Total swap = 124996kB [ 241.580299][T11599] 2097051 pages RAM [ 241.584274][T11599] 0 pages HighMem/MovableOnly [ 241.589574][T11599] 429838 pages reserved [ 241.593804][T11599] 0 pages cma reserved [ 241.635660][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.754997][T11626] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2555'. [ 241.785387][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 241.795056][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.815903][ T24] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 241.833070][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.872994][ T24] usb 5-1: config 0 descriptor?? [ 242.299538][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.324860][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.333561][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.341399][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.350651][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.361337][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.372088][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.379808][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.389243][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.397002][ T24] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 242.414909][ T24] aureal 0003:0755:2626.0010: unexpected long global item [ 242.424986][ T24] aureal 0003:0755:2626.0010: probe with driver aureal failed with error -22 [ 242.498780][ T24] usb 5-1: USB disconnect, device number 6 [ 242.616037][ T42] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 242.721467][ T42] usb 3-1: USB disconnect, device number 12 [ 242.785464][T11664] sctp: [Deprecated]: syz.1.2572 (pid 11664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.785464][T11664] Use struct sctp_sack_info instead [ 243.000532][T11676] netlink: 'syz.1.2577': attribute type 12 has an invalid length. [ 243.012615][T11676] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2577'. [ 243.372228][ T42] IPVS: starting estimator thread 0... [ 243.478641][T11696] IPVS: using max 26 ests per chain, 62400 per kthread [ 244.268906][T11744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2610'. [ 244.365683][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.515209][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 244.525552][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 244.532621][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.564322][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.585531][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.615936][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 244.634455][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.668374][ T24] usb 3-1: config 0 descriptor?? [ 244.815502][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 244.975963][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 244.996237][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.025243][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 245.034558][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.047516][ T9] usb 1-1: config 0 descriptor?? [ 245.065077][ T5825] IPVS: starting estimator thread 0... [ 245.088402][ T24] hid-u2fzero 0003:10C4:8ACF.0011: item fetching failed at offset 3/5 [ 245.102862][ T24] hid-u2fzero 0003:10C4:8ACF.0011: probe with driver hid-u2fzero failed with error -22 [ 245.167737][T11780] IPVS: using max 27 ests per chain, 64800 per kthread [ 245.286477][ T5825] usb 3-1: USB disconnect, device number 13 [ 245.475947][ T9] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 245.867357][ T24] usb 1-1: USB disconnect, device number 15 [ 246.045544][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.123934][T11817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.206781][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 246.214516][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.224770][ T42] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 246.233934][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.248482][ T42] usb 5-1: config 0 descriptor?? [ 246.683321][ T42] hid (null): unknown global tag 0xc [ 246.696335][ T5825] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.879263][ T5825] usb 5-1: USB disconnect, device number 7 [ 248.376068][ T5825] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 248.543664][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.562011][ T5825] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 248.574110][ T5825] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 248.587469][ T5825] usb 3-1: config 1 interface 0 has no altsetting 0 [ 248.599948][ T5825] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 248.612626][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.624303][ T5825] usb 3-1: Product: syz [ 248.634874][ T5825] usb 3-1: Manufacturer: syz [ 248.643029][ T5825] usb 3-1: SerialNumber: syz [ 248.688442][T11893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.133658][ T5825] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 249.380815][ T24] usb 3-1: USB disconnect, device number 14 [ 249.380961][ C0] pxrc 3-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 249.427968][T11933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2693'. [ 250.620570][T11973] dvmrp1: entered allmulticast mode [ 250.666490][T11979] dvmrp1: left allmulticast mode [ 251.190851][T12001] option changes via remount are deprecated (pid=12000 comm=syz.4.2723) [ 251.202061][T12001] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 251.373970][T12011] loop8: detected capacity change from 0 to 7 [ 251.386620][ T6824] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 251.398313][ T6824] loop8: partition table partially beyond EOD, truncated [ 251.406837][ T6824] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 251.422562][ T6824] loop8: p2 start 956478 is beyond EOD, truncated [ 251.436449][T12011] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 251.443960][T12011] loop8: partition table partially beyond EOD, truncated [ 251.451425][T12011] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 251.467914][T12011] loop8: p2 start 956478 is beyond EOD, truncated [ 251.528720][ T6824] udevd[6824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 251.587385][T12013] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 251.587386][ T6824] udevd[6824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 251.995633][T12033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.313432][T12049] netlink: 'syz.1.2745': attribute type 83 has an invalid length. [ 252.425766][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 252.443127][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 252.454982][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 252.485930][T12055] kvm: kvm [12054]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006e) = 0x8004 [ 252.950665][T12068] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ec22 pfn:0x7c423 [ 252.965636][T12068] memcg:ffff88801ca80d40 [ 252.970048][T12068] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 253.003032][T12068] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 253.011914][T11991] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 253.030121][T12068] raw: 000000000007ec22 0000000000000000 00000001ffffffff ffff88801ca80d40 [ 253.056134][T12068] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 253.085762][T12068] page_owner tracks the page as allocated [ 253.099159][T12068] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12068, tgid 12062 (syz.0.2752), ts 252950630750, free_ts 252948189460 [ 253.145445][T12068] post_alloc_hook+0x231/0x280 [ 253.150389][T12068] get_page_from_freelist+0x24dc/0x2580 [ 253.156350][T12068] __alloc_frozen_pages_noprof+0x18d/0x380 [ 253.163292][T12068] alloc_pages_mpol+0x232/0x4a0 [ 253.168681][T12068] alloc_pages_noprof+0xa8/0x190 [ 253.173751][T12068] folio_alloc_noprof+0x1e/0x30 [ 253.179156][T12068] filemap_alloc_folio_noprof+0x111/0x470 [ 253.185028][T12068] page_cache_ra_order+0x551/0xeb0 [ 253.191457][T12068] do_sync_mmap_readahead+0x6ad/0x8e0 [ 253.197059][T12068] filemap_fault+0x6e2/0x1320 [ 253.202377][T12068] __do_fault+0x138/0x390 [ 253.208506][T12068] do_pte_missing+0x1006/0x3750 [ 253.223779][T12068] handle_mm_fault+0x1bec/0x3310 [ 253.239565][T12068] __get_user_pages+0x165b/0x29d0 [ 253.247898][T12068] populate_vma_page_range+0x2be/0x3c0 [ 253.253610][T12068] __mm_populate+0x25f/0x390 [ 253.258548][T12068] page last free pid 12063 tgid 12062 stack trace: [ 253.265267][T12068] free_unref_folios+0xed5/0x16d0 [ 253.272652][T12068] folios_put_refs+0x789/0x8d0 [ 253.281189][T12068] truncate_inode_pages_range+0x3dd/0xe30 [ 253.287212][T12068] set_blocksize+0x2ce/0x440 [ 253.291955][T12068] blkdev_bszset+0x1b2/0x230 [ 253.302184][T12068] blkdev_ioctl+0x2c7/0x740 [ 253.308772][T12068] __se_sys_ioctl+0xfc/0x170 [ 253.313528][T12068] do_syscall_64+0x14d/0xf80 [ 253.318450][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.324788][T12068] ------------[ cut here ]------------ [ 253.331060][T12068] kernel BUG at mm/filemap.c:859! [ 253.339985][T12068] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 253.346289][T12068] CPU: 0 UID: 0 PID: 12068 Comm: syz.0.2752 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.357270][T12068] Tainted: [L]=SOFTLOCKUP [ 253.361620][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 253.371795][T12068] RIP: 0010:__filemap_add_folio+0x11bc/0x1350 [ 253.377924][T12068] Code: 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 9c 85 27 ff 90 0f 0b e8 54 5b c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 85 85 27 ff 90 <0f> 0b e8 3d 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 6e 85 27 ff [ 253.397610][T12068] RSP: 0018:ffffc9000334f1e0 EFLAGS: 00010246 [ 253.403710][T12068] RAX: 3aa8eb1af3d9af00 RBX: 0000000000000000 RCX: 0000000000000000 [ 253.411718][T12068] RDX: 0000000000000007 RSI: ffffffff8e0108cf RDI: 00000000ffffffff [ 253.419729][T12068] RBP: ffffc9000334f360 R08: ffffffff903399b7 R09: 1ffffffff2067336 [ 253.427732][T12068] R10: dffffc0000000000 R11: fffffbfff2067337 R12: ffffea0001f108c0 [ 253.435737][T12068] R13: dffffc0000000000 R14: ffffea0001f108c8 R15: 0000000000000004 [ 253.443908][T12068] FS: 00007f93c46ae6c0(0000) GS:ffff88812500b000(0000) knlGS:0000000000000000 [ 253.452862][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.459488][T12068] CR2: 00007f7f3fa4e661 CR3: 0000000078ef2000 CR4: 00000000003526f0 [ 253.467500][T12068] Call Trace: [ 253.470804][T12068] [ 253.473765][T12068] ? percpu_ref_put+0x19/0x180 [ 253.478561][T12068] ? __pfx___filemap_add_folio+0x10/0x10 [ 253.484237][T12068] ? percpu_ref_put+0xf9/0x180 [ 253.489151][T12068] ? __mem_cgroup_charge+0x149/0x1e0 [ 253.494463][T12068] filemap_add_folio+0x264/0x530 [ 253.499543][T12068] page_cache_ra_order+0x6b5/0xeb0 [ 253.504698][T12068] do_sync_mmap_readahead+0x6ad/0x8e0 [ 253.510108][T12068] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 253.516044][T12068] ? count_memcg_event_mm+0x1d/0x250 [ 253.521385][T12068] ? count_memcg_event_mm+0x1d/0x250 [ 253.526713][T12068] filemap_fault+0x6e2/0x1320 [ 253.531439][T12068] ? __pfx_filemap_fault+0x10/0x10 [ 253.536769][T12068] ? kmem_cache_alloc_noprof+0x307/0x650 [ 253.542440][T12068] ? ptlock_alloc+0x20/0x70 [ 253.547015][T12068] ? __raw_spin_lock_init+0x45/0x100 [ 253.552424][T12068] ? pte_alloc_one+0x1f9/0x370 [ 253.557230][T12068] __do_fault+0x138/0x390 [ 253.561601][T12068] do_pte_missing+0x1006/0x3750 [ 253.566519][T12068] handle_mm_fault+0x1bec/0x3310 [ 253.571765][T12068] ? mt_find+0x186/0x630 [ 253.576101][T12068] ? handle_mm_fault+0xee/0x3310 [ 253.581282][T12068] ? __pfx_handle_mm_fault+0x10/0x10 [ 253.586804][T12068] __get_user_pages+0x165b/0x29d0 [ 253.591964][T12068] populate_vma_page_range+0x2be/0x3c0 [ 253.597548][T12068] ? __pfx_populate_vma_page_range+0x10/0x10 [ 253.603563][T12068] ? down_read+0x272/0x2e0 [ 253.608021][T12068] ? __mm_populate+0x173/0x390 [ 253.612910][T12068] __mm_populate+0x25f/0x390 [ 253.617724][T12068] ? __pfx___mm_populate+0x10/0x10 [ 253.622878][T12068] vm_mmap_pgoff+0x3aa/0x4f0 [ 253.627507][T12068] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 253.632654][T12068] ? __fget_files+0x2a/0x420 [ 253.637307][T12068] ? __fget_files+0x3a0/0x420 [ 253.642042][T12068] ? __fget_files+0x2a/0x420 [ 253.646687][T12068] ksys_mmap_pgoff+0x51e/0x760 [ 253.651503][T12068] do_syscall_64+0x14d/0xf80 [ 253.656124][T12068] ? trace_irq_disable+0x3b/0x150 [ 253.661191][T12068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.667467][T12068] ? clear_bhb_loop+0x40/0x90 [ 253.672178][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.678099][T12068] RIP: 0033:0x7f93c379bf79 [ 253.682542][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.702182][T12068] RSP: 002b:00007f93c46ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 253.710823][T12068] RAX: ffffffffffffffda RBX: 00007f93c3a16090 RCX: 00007f93c379bf79 [ 253.718833][T12068] RDX: 0000000002000007 RSI: 0000000000003000 RDI: 0000200000888000 [ 253.726838][T12068] RBP: 00007f93c38327e0 R08: 0000000000000004 R09: 0000000000000000 [ 253.734833][T12068] R10: 0000000004002012 R11: 0000000000000246 R12: 0000000000000000 [ 253.742836][T12068] R13: 00007f93c3a16128 R14: 00007f93c3a16090 R15: 00007ffdf1274658 [ 253.750893][T12068] [ 253.753937][T12068] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.759325][T12068] ---[ end trace 0000000000000000 ]--- [ 253.920517][T12068] RIP: 0010:__filemap_add_folio+0x11bc/0x1350 [ 253.942527][T12068] Code: 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 9c 85 27 ff 90 0f 0b e8 54 5b c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 85 85 27 ff 90 <0f> 0b e8 3d 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 6e 85 27 ff [ 254.065520][T12068] RSP: 0018:ffffc9000334f1e0 EFLAGS: 00010246 [ 254.071677][T12068] RAX: 3aa8eb1af3d9af00 RBX: 0000000000000000 RCX: 0000000000000000 [ 254.125498][T12068] RDX: 0000000000000007 RSI: ffffffff8e0108cf RDI: 00000000ffffffff [ 254.133733][T12068] RBP: ffffc9000334f360 R08: ffffffff903399b7 R09: 1ffffffff2067336 [ 254.178897][T12068] R10: dffffc0000000000 R11: fffffbfff2067337 R12: ffffea0001f108c0 [ 254.206157][T12068] R13: dffffc0000000000 R14: ffffea0001f108c8 R15: 0000000000000004 [ 254.214215][T12068] FS: 00007f93c46ae6c0(0000) GS:ffff88812510b000(0000) knlGS:0000000000000000 [ 254.265554][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.272239][T12068] CR2: 00007fd4df290bd0 CR3: 0000000078ef2000 CR4: 00000000003526f0 [ 254.286196][T12068] Kernel panic - not syncing: Fatal exception [ 254.292501][T12068] Kernel Offset: disabled [ 254.296841][T12068] Rebooting in 86400 seconds..