last executing test programs: 52.844960852s ago: executing program 0 (id=497): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200006, 0x0) 52.803899181s ago: executing program 0 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x144, r1, 0x1, 0x70bd2a, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x112, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x67}, @device_b, @from_mac, @device_a, {0x9, 0x3}, "", @value={0xc, 0x0, 0x1, 0x0, 0x80}}, @a_msdu=[{@broadcast, @device_b, 0xab, "fe9cc008c1201c16ed3f775fae55ac048c9bc99ac76fe8c77750f1448a6199bfda7e972b9a311201b341ab2e4734b058fc383b6138054cb913d125a8c861f34be5028a80bc59f3c47adb752850ce75ab5bbaa22f88ef5873a7dfca1db008d38cb8a80f8486b5a92156cefe4f1540a341e58f2c91b64409236cfaf9daee5510199e64be9562df2f5f41a426c20e3fe205938733bb72c22fddc058c8d12c26eaf70f40a64822eead594fa302"}, {@device_a, @device_b, 0x27, "96e5d03ef9b33e3bb28685b3c57ffe570adcb3a5e3430c922064d23d8d760e458e13abe6617ef8"}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) 52.777110801s ago: executing program 0 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x144, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x112, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x67}, @device_b, @from_mac, @device_a, {0x9, 0x3}, "", @value={0xc, 0x0, 0x1, 0x0, 0x80}}, @a_msdu=[{@broadcast, @device_b, 0xab, "fe9cc008c1201c16ed3f775fae55ac048c9bc99ac76fe8c77750f1448a6199bfda7e972b9a311201b341ab2e4734b058fc383b6138054cb913d125a8c861f34be5028a80bc59f3c47adb752850ce75ab5bbaa22f88ef5873a7dfca1db008d38cb8a80f8486b5a92156cefe4f1540a341e58f2c91b64409236cfaf9daee5510199e64be9562df2f5f41a426c20e3fe205938733bb72c22fddc058c8d12c26eaf70f40a64822eead594fa302"}, {@device_a, @device_b, 0x27, "96e5d03ef9b33e3bb28685b3c57ffe570adcb3a5e3430c922064d23d8d760e458e13abe6617ef8"}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) 52.673153244s ago: executing program 0 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x101) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 52.667258149s ago: executing program 0 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 52.627339684s ago: executing program 0 (id=502): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0x12) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"a'], 0x0}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat$loop(r6, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 37.584590971s ago: executing program 32 (id=502): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0x12) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"a'], 0x0}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat$loop(r6, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 8.520851173s ago: executing program 4 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000004e40)=""/4090, 0xffa}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/110, 0x6e}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc9, 0xff}}}}}]}}]}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r4, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "1c5e608c"}, @global=@item_4={0x3, 0x1, 0x4, "020650ab"}]}}, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) sendfile(r6, r6, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 7.509302804s ago: executing program 3 (id=826): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x4, 0x5, 0x6, 0x0, 0x12}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 7.237166084s ago: executing program 3 (id=830): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xffff, 0x7, 0x5, 0x2}}) (fail_nth: 4) 6.929709229s ago: executing program 3 (id=831): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x300) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x300) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.409006471s ago: executing program 4 (id=832): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x29) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="66baf80cb870056388ef66bafc0ced0f380ab770000000670f2fc3b9330b0000b827840000ba000000000f302e0f226360c744142400a3c5000000442402f20f20517647c7442406000000000f011c24640f01cfb949030000b800100000ba000000000f30b9260a0000b805000000ba00000000f2abc4e16e11fc", 0x7b}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000006d9108000000bcb580d0d5950f1a5a802e27439db4c4f1b731d832d81ac2848edab50765105fa1f1f3d96aaf77539be35dddb33e92583ab408e3666020fbb495caee4c2a1445ae5cc84ce72a261130fd31346f73fa114b61c48f4731a3ccb26a9f3da826dc8dcca59cca4a7220d525d784876c269e65679005000000abc02b0e45a56b19495e21eec3e8703a02dd58b8ef78a9448ab24a681ae646644710601e859628f2", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000040003000400028004000180"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 6.201187258s ago: executing program 3 (id=833): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xb, @vbi={0x97, 0x1, 0x2, 0x41564e57, [0x7, 0x2], [0x0, 0x6], 0x108}}) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') setns(r3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000010r_id=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0066a24abcdfbed424644051965b9bab8cdba889ca7b4be4d0b7144aa5142c439047beb64d0949931cac81cd0d241447a2805a337fed90e60bd308c6031ca600f2e9e5338523b8b3d45ce4c8b41e12011288a28a205574959113abea0c2360abc14c6139e0638f2edc76fd72b8e8f6989274074fc0906d79aec72601832200"/139]) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000062c0)={0x2020}, 0x2020) epoll_create(0x95) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x763}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x107fe}}) 1.083218309s ago: executing program 4 (id=835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f9002dbd7000fcdbdf2502002000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 1.082469274s ago: executing program 3 (id=836): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r1}) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000000)=0x1, 0x4) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 828.9699ms ago: executing program 2 (id=845): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 764.982264ms ago: executing program 1 (id=847): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="6204", 0x2}], 0x1}, 0x4008001) 764.788719ms ago: executing program 4 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 709.414232ms ago: executing program 1 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) 677.989375ms ago: executing program 1 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x5) 553.130932ms ago: executing program 1 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x30, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 141.061651ms ago: executing program 1 (id=852): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x81, 0x32}, {@rand_addr=0x64010101, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5d}}, 0x44) 140.866221ms ago: executing program 2 (id=853): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 109.227323ms ago: executing program 1 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 66.289913ms ago: executing program 2 (id=855): msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/42) 0s ago: executing program 2 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) kernel console output (not intermixed with test programs): 76.838054][ T5864] Bluetooth: hci3: command tx timeout [ 76.839605][ T5860] Bluetooth: hci2: command tx timeout [ 76.843519][ T51] Bluetooth: hci1: command tx timeout [ 77.487672][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.537499][ T6069] /dev/rnullb0: Can't open blockdev [ 77.546086][ T6071] /dev/rnullb0: Can't open blockdev [ 77.612868][ T6073] /dev/rnullb0: Can't open blockdev [ 77.663575][ T5907] usb 2-1: device descriptor read/64, error -71 [ 77.917905][ T5907] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 77.973157][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 78.250994][ T5907] usb 2-1: device descriptor read/64, error -71 [ 78.259845][ T6091] ======================================================= [ 78.259845][ T6091] WARNING: The mand mount option has been deprecated and [ 78.259845][ T6091] and is ignored by this kernel. Remove the mand [ 78.259845][ T6091] option from the mount to silence this warning. [ 78.259845][ T6091] ======================================================= [ 78.360530][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.383336][ T6091] XFS (rnullb0): Invalid superblock magic number [ 78.468747][ T5907] usb usb2-port1: attempt power cycle [ 78.497806][ T24] usb 3-1: device descriptor read/64, error -71 [ 78.607656][ T982] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.738277][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.768429][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 78.780586][ T982] usb 1-1: config 127 has an invalid interface number: 102 but max is 2 [ 78.789508][ T982] usb 1-1: config 127 has no interface number 2 [ 78.796071][ T982] usb 1-1: config 127 interface 0 has no altsetting 0 [ 78.806045][ T982] usb 1-1: config 127 interface 1 has no altsetting 0 [ 78.813027][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.821545][ T982] usb 1-1: config 127 interface 102 has no altsetting 0 [ 78.839553][ T982] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 78.849500][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.858185][ T5907] usb 2-1: device descriptor read/8, error -71 [ 78.864806][ T982] usb 1-1: Product: syz [ 78.869187][ T982] usb 1-1: Manufacturer: syz [ 78.873797][ T982] usb 1-1: SerialNumber: syz [ 78.878701][ T24] usb 3-1: device descriptor read/64, error -71 [ 78.988019][ T24] usb usb3-port1: attempt power cycle [ 79.107717][ T5907] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 79.128653][ T5907] usb 2-1: device descriptor read/8, error -71 [ 79.238137][ T5907] usb usb2-port1: unable to enumerate USB device [ 79.327707][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.348160][ T24] usb 3-1: device descriptor read/8, error -71 [ 79.587698][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.608953][ T24] usb 3-1: device descriptor read/8, error -71 [ 79.718138][ T24] usb usb3-port1: unable to enumerate USB device [ 79.898791][ T6138] vivid-002: disconnect [ 79.904067][ T6138] vivid-002: reconnect [ 79.965505][ T6144] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.974898][ T6144] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.103862][ T6153] netlink: 'syz.0.58': attribute type 83 has an invalid length. [ 80.260922][ T6162] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 80.268731][ T6162] UDF-fs: Scanning with blocksize 4096 failed [ 80.658428][ T6182] input: syz1 as /devices/virtual/input/input5 [ 80.859301][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 80.865884][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 80.872890][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 80.926552][ T6191] /dev/rnullb0: Can't open blockdev [ 81.010524][ T6188] infiniband syz0: set active [ 81.015420][ T6188] infiniband syz0: added wlan1 [ 81.027742][ T6054] wlan1 speed is unknown, defaulting to 1000 [ 81.068781][ T6188] RDS/IB: syz0: added [ 81.093757][ T6188] smc: adding ib device syz0 with port count 1 [ 81.104030][ T6188] smc: ib device syz0 port 1 has pnetid [ 81.110926][ T6054] wlan1 speed is unknown, defaulting to 1000 [ 81.125547][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 81.386923][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 81.457757][ T6054] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.518333][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 81.597744][ T6054] usb 3-1: device descriptor read/64, error -71 [ 81.650251][ T6188] wlan1 speed is unknown, defaulting to 1000 [ 81.795896][ T6198] /dev/rnullb0: Can't open blockdev [ 81.847761][ T6054] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.905306][ T6201] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.924376][ T6202] /dev/rnullb0: Can't open blockdev [ 81.930151][ T6201] IPv6: NLM_F_REPLACE set, but no existing node found! [ 81.997708][ T6054] usb 3-1: device descriptor read/64, error -71 [ 82.049677][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.072303][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.121602][ T6054] usb usb3-port1: attempt power cycle [ 82.467787][ T6054] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 82.509420][ T6054] usb 3-1: device descriptor read/8, error -71 [ 82.757743][ T6054] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 82.788187][ T6054] usb 3-1: device descriptor read/8, error -71 [ 82.898782][ T6054] usb usb3-port1: unable to enumerate USB device [ 83.983357][ T982] usb 1-1: selecting invalid altsetting 0 [ 84.011073][ T982] usb 1-1: Could not set interface, error -22 [ 84.042332][ T982] usb 1-1: selecting invalid altsetting 0 [ 84.050908][ T982] usb 1-1: Could not set interface, error -22 [ 84.980362][ T6219] warning: `syz.2.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.032964][ T6220] /dev/rnullb0: Can't open blockdev [ 85.092439][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.116887][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.139768][ T6226] pimreg: entered allmulticast mode [ 85.157044][ T6226] pimreg: left allmulticast mode [ 85.183445][ T6229] NILFS (nullb0): couldn't find nilfs on the device [ 85.237766][ T30] audit: type=1326 audit(1756536298.522:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.2.78" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f630ff8ebe9 code=0x0 [ 85.442208][ T6241] mkiss: ax0: crc mode is auto. [ 85.726079][ T6248] Can't find a SQUASHFS superblock on rnullb0 [ 86.398336][ T5945] IPVS: starting estimator thread 0... [ 86.467792][ T6054] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.489208][ T6267] IPVS: using max 35 ests per chain, 84000 per kthread [ 86.629698][ T6054] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.661851][ T6054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 86.687639][ T6054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.720607][ T6054] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.767675][ T6054] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.796010][ T6054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.825306][ T6054] usb 3-1: config 0 descriptor?? [ 86.837996][ T6272] capability: warning: `syz.3.93' uses 32-bit capabilities (legacy support in use) [ 86.860496][ T6172] syz.1.62 (6172) used greatest stack depth: 18744 bytes left [ 86.861093][ T6264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.928768][ T10] cfg80211: failed to load regulatory.db [ 87.160146][ T6283] /dev/rnullb0: Can't open blockdev [ 87.319835][ T6054] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.721231][ T6054] usb 3-1: USB disconnect, device number 10 [ 88.208012][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 88.242234][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.248439][ T6321] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.258550][ T6323] netlink: 200 bytes leftover after parsing attributes in process `syz.3.106'. [ 88.276453][ T6322] Invalid ELF header magic: != ELF [ 88.284923][ T6321] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 88.426656][ T6330] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 88.443821][ T6330] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 88.454163][ T6330] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 89.047078][ T6341] netlink: 108 bytes leftover after parsing attributes in process `syz.2.112'. [ 89.093764][ T6341] input: syz0 as /devices/virtual/input/input7 [ 89.144800][ T5858] udevd[5858]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 89.167778][ T5858] udevd[5858]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 89.363245][ T6348] block nbd2: Attempted send on invalid socket [ 89.363269][ T6348] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.363341][ T6348] exFAT-fs (nbd2): unable to read boot sector [ 89.363351][ T6348] exFAT-fs (nbd2): failed to read boot sector [ 89.363360][ T6348] exFAT-fs (nbd2): failed to recognize exfat type [ 89.441060][ T6350] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.117'. [ 89.472713][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 89.551693][ T6357] overlayfs: statfs failed on './file0' [ 89.591643][ T6362] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 89.602580][ T6362] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 89.612687][ T6362] 9pnet_virtio: no channels available for device /dev/sr0 [ 89.827795][ T2153] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.935626][ T6384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 89.997729][ T2153] usb 4-1: Using ep0 maxpacket: 8 [ 90.004890][ T2153] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.024923][ T2153] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 90.035318][ T2153] usb 4-1: config 11 has no interface number 0 [ 90.042462][ T2153] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.053532][ T2153] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.063911][ T2153] usb 4-1: config 11 interface 244 has no altsetting 0 [ 90.073378][ T2153] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 90.082991][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.103002][ T2153] usb 4-1: Product: syz [ 90.107224][ T2153] usb 4-1: Manufacturer: syz [ 90.118065][ T2153] usb 4-1: SerialNumber: syz [ 90.138123][ T5945] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 90.219615][ T6392] FAT-fs (rnullb0): bogus number of FAT structure [ 90.226657][ T6392] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 90.337285][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.357693][ T5945] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.366868][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.384461][ T5945] usb 2-1: config 0 descriptor?? [ 90.408558][ T5945] pwc: Askey VC010 type 2 USB webcam detected. [ 90.475072][ T6408] overlayfs: missing 'lowerdir' [ 90.475947][ T6411] overlayfs: missing 'lowerdir' [ 90.762675][ T6425] /dev/rnullb0: Can't open blockdev [ 90.812151][ T5945] pwc: recv_control_msg error -32 req 02 val 2b00 [ 90.833897][ T5945] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.036738][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.053425][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.586873][ T2153] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 92.645169][ T2153] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 92.756631][ T2153] peak_usb 4-1:11.244: probe with driver peak_usb failed with error -71 [ 92.801703][ T2153] usb 4-1: USB disconnect, device number 6 [ 92.930789][ T5945] pwc: recv_control_msg error -71 req 04 val 1000 [ 92.943687][ T5945] pwc: recv_control_msg error -71 req 04 val 1300 [ 92.958106][ T5945] pwc: recv_control_msg error -71 req 04 val 1400 [ 92.965187][ T5945] pwc: recv_control_msg error -71 req 02 val 2000 [ 92.977143][ T5945] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.998121][ T5945] pwc: recv_control_msg error -71 req 04 val 1500 [ 93.005602][ T5945] pwc: recv_control_msg error -71 req 02 val 2500 [ 93.013864][ T5945] pwc: recv_control_msg error -71 req 02 val 2400 [ 93.022973][ T5945] pwc: recv_control_msg error -71 req 02 val 2600 [ 93.040235][ T5945] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.047044][ T5945] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.055565][ T5945] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.064481][ T5945] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.079096][ T5945] pwc: Registered as video103. [ 93.094900][ T5945] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 93.121978][ T5945] usb 2-1: USB disconnect, device number 9 [ 93.383418][ T6466] netlink: 244 bytes leftover after parsing attributes in process `syz.2.153'. [ 93.396605][ T6469] Zero length message leads to an empty skb [ 93.436149][ T6466] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 93.468369][ T6466] /dev/rnullb0: Can't open blockdev [ 93.630462][ T6476] /dev/rnullb0: Can't open blockdev [ 93.802174][ T6483] /dev/rnullb0: Can't open blockdev [ 93.824415][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'. [ 93.846999][ T6481] qnx4: no qnx4 filesystem (no root dir). [ 93.871833][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.918012][ T6488] FAT-fs (rnullb0): bogus number of reserved sectors [ 93.924755][ T6488] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 94.027980][ T24] usb 3-1: device descriptor read/64, error -71 [ 94.113988][ T6497] netlink: 92 bytes leftover after parsing attributes in process `syz.0.165'. [ 94.307657][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 94.437805][ T24] usb 3-1: device descriptor read/64, error -71 [ 94.557925][ T24] usb usb3-port1: attempt power cycle [ 94.688788][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 94.918682][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 94.927458][ T6508] evm: overlay not supported [ 94.959119][ T24] usb 3-1: device descriptor read/8, error -71 [ 95.197668][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 95.218050][ T24] usb 3-1: device descriptor read/8, error -71 [ 95.294733][ T6510] /dev/rnullb0: Can't open blockdev [ 95.303352][ T6510] fuse: Bad value for 'fd' [ 95.327888][ T24] usb usb3-port1: unable to enumerate USB device [ 95.351123][ T6512] sctp: [Deprecated]: syz.0.170 (pid 6512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.351123][ T6512] Use struct sctp_sack_info instead [ 95.368869][ T6512] /dev/rnullb0: Can't open blockdev [ 96.437800][ T2153] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.481620][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.505918][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.587728][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 96.600846][ T2153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.634599][ T2153] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 96.652097][ T2153] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 96.668837][ T2153] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.681387][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.695245][ T2153] usb 2-1: Product: syz [ 96.700836][ T2153] usb 2-1: Manufacturer: syz [ 96.705498][ T2153] usb 2-1: SerialNumber: syz [ 96.989198][ T2153] usb 2-1: USB disconnect, device number 10 [ 97.040025][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.053560][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.719534][ T6570] netlink: 'syz.2.189': attribute type 6 has an invalid length. [ 97.764588][ T6570] netlink: 168 bytes leftover after parsing attributes in process `syz.2.189'. [ 97.771563][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.797189][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.899744][ T6574] loop2: detected capacity change from 0 to 1 [ 97.943690][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.957972][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.973910][ T6574] Dev loop2: unable to read RDB block 1 [ 98.017759][ T6574] loop2: unable to read partition table [ 98.044843][ T6574] loop2: partition table beyond EOD, truncated [ 98.051240][ T6574] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 98.264620][ T6588] /dev/rnullb0: Can't open blockdev [ 98.436305][ T6590] can0: slcan on ttyS3. [ 98.487295][ T6590] tipc: Started in network mode [ 98.520657][ T6590] tipc: Node identity 2d000000400000000000000000000001, cluster identity 4711 [ 98.560360][ T6590] tipc: Enabling of bearer rejected, failed to enable media [ 98.590249][ T6594] /dev/rnullb0: Can't open blockdev [ 98.831951][ T6589] can0 (unregistered): slcan off ttyS3. [ 99.085956][ T6610] random: crng reseeded on system resumption [ 99.855918][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.903452][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.399562][ T6658] block nbd2: Attempted send on invalid socket [ 100.417706][ T6658] I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.417796][ T6658] qnx4: unable to read the superblock [ 100.707696][ T2153] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.747933][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 100.868953][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 100.875873][ T2153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.885706][ T2153] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.897271][ T2153] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 100.911079][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 100.916676][ T2153] usb 2-1: config 8 interface 0 has no altsetting 0 [ 100.925971][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.938559][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 100.948217][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.959261][ T24] usb 3-1: config 0 descriptor?? [ 100.972833][ T2153] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 100.983231][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.993674][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 101.006266][ T2153] usb 2-1: Product: syz [ 101.010915][ T2153] usb 2-1: Manufacturer: syz [ 101.015776][ T2153] usb 2-1: SerialNumber: syz [ 101.105554][ T6666] syzkaller1: entered promiscuous mode [ 101.111980][ T6666] syzkaller1: entered allmulticast mode [ 101.290239][ T6670] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 101.318186][ T6670] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 101.814265][ T6664] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 102.087354][ T24] gspca_vc032x: reg_w err -71 [ 102.102651][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 102.136091][ T24] usb 3-1: USB disconnect, device number 15 [ 102.584062][ T6692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'. [ 102.594373][ T6692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'. [ 102.606068][ T6692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'. [ 102.876203][ T6697] vxfs: WRONG superblock magic 00000000 at 1 [ 102.882499][ T6697] vxfs: WRONG superblock magic 00000000 at 8 [ 102.888649][ T6697] vxfs: can't find superblock. [ 102.959853][ T30] audit: type=1326 audit(1756536316.252:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693cf8ebe9 code=0x0 [ 102.985639][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.995762][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.365195][ T2153] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.383881][ T2153] usb 2-1: selecting invalid altsetting 0 [ 103.444611][ T2153] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 103.457462][ T6709] udevd[6709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.474269][ T2153] usb 2-1: USB disconnect, device number 11 [ 103.632110][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.644484][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.646942][ T6719] Mount JFS Failure: -22 [ 103.686431][ T6725] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.709769][ T6724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.787797][ T2153] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 103.868979][ T6730] loop6: detected capacity change from 0 to 1 [ 103.890132][ T6730] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 103.900366][ T6730] loop6: p1 start 1048576 is beyond EOD, truncated [ 103.907047][ T6730] loop6: p2 size 458752 extends beyond EOD, truncated [ 103.915305][ T6730] loop6: p3 start 12666 is beyond EOD, truncated [ 103.923529][ T6730] loop6: p4 start 16387 is beyond EOD, truncated [ 103.929079][ T2153] usb 2-1: device descriptor read/64, error -71 [ 103.934381][ T6730] loop6: p5 start 2037579777 is beyond EOD, truncated [ 103.944650][ T6730] loop6: p6 start 425986 is beyond EOD, truncated [ 104.177658][ T2153] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.348055][ T2153] usb 2-1: device descriptor read/64, error -71 [ 104.467975][ T2153] usb usb2-port1: attempt power cycle [ 104.551834][ T30] audit: type=1326 audit(1756536317.842:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.0.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee3218ebe9 code=0x0 [ 104.573809][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.653459][ T6748] : renamed from bond_slave_0 (while UP) [ 104.677706][ T6054] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.818798][ T2153] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 104.827809][ T6054] usb 4-1: device descriptor read/64, error -71 [ 104.848610][ T2153] usb 2-1: device descriptor read/8, error -71 [ 105.067864][ T6054] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.097826][ T2153] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 105.129698][ T2153] usb 2-1: device descriptor read/8, error -71 [ 105.217922][ T6054] usb 4-1: device descriptor read/64, error -71 [ 105.248781][ T2153] usb usb2-port1: unable to enumerate USB device [ 105.328792][ T6054] usb usb4-port1: attempt power cycle [ 105.406836][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.424501][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.621542][ T6778] 9p: Unknown parameter 'y\Z -22Z\@w yeqr ({w~0C16Gsm’C{ڢ^RI b:o&`t¤PogGAUe"* -+RD6i~8CwG'èJ' [ 105.697682][ T6054] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.735498][ T6054] usb 4-1: device descriptor read/8, error -71 [ 105.901843][ T6799] netlink: 220 bytes leftover after parsing attributes in process `syz.0.249'. [ 105.913809][ T6799] unsupported nla_type 224 [ 105.953706][ T6805] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.250'. [ 105.982862][ T6805] /dev/rnullb0: Can't open blockdev [ 105.988334][ T6054] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.018704][ T6054] usb 4-1: device descriptor read/8, error -71 [ 106.130643][ T6054] usb usb4-port1: unable to enumerate USB device [ 106.736815][ T6820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.254'. [ 107.842161][ T6846] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.933635][ T6848] /dev/rnullb0: Can't open blockdev [ 108.217723][ T6054] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.357881][ T6054] usb 2-1: device descriptor read/64, error -71 [ 108.438508][ T982] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.597951][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 108.603285][ T6054] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 108.604620][ T982] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 108.619682][ T982] usb 4-1: config 0 has no interface number 0 [ 108.625810][ T982] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.639346][ T982] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 108.652806][ T982] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 108.664512][ T982] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 108.675066][ T982] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 108.687647][ T982] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.697981][ T982] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.708731][ T982] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.721693][ T982] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.737360][ T982] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 108.737703][ T6054] usb 2-1: device descriptor read/64, error -71 [ 108.755008][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.773544][ T982] usb 4-1: Product: syz [ 108.783665][ T982] usb 4-1: Manufacturer: syz [ 108.788996][ T982] usb 4-1: SerialNumber: syz [ 108.801266][ T6864] omfs: Invalid superblock (0) [ 108.807213][ T982] usb 4-1: config 0 descriptor?? [ 108.814268][ T6864] omfs: Invalid superblock (0) [ 108.820750][ T6855] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.830747][ T982] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 108.841487][ T982] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 108.879996][ T6054] usb usb2-port1: attempt power cycle [ 108.927721][ T6868] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 108.927811][ T6867] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 109.046093][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.068097][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.238137][ T6054] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 109.296401][ T2153] usb 4-1: USB disconnect, device number 11 [ 109.314040][ T6054] usb 2-1: device descriptor read/8, error -71 [ 109.557849][ T6054] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.578340][ T6054] usb 2-1: device descriptor read/8, error -71 [ 109.689041][ T6054] usb usb2-port1: unable to enumerate USB device [ 110.012410][ T6879] netlink: 104 bytes leftover after parsing attributes in process `syz.3.273'. [ 110.087853][ T5945] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 110.239950][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.258071][ T5945] usb 3-1: not running at top speed; connect to a high speed hub [ 110.266883][ T5945] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 110.289398][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.308313][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.316347][ T5945] usb 3-1: Product: syz [ 110.337625][ T5945] usb 3-1: Manufacturer: syz [ 110.342528][ T5945] usb 3-1: SerialNumber: syz [ 110.398217][ T6886] /dev/rnullb0: Can't open blockdev [ 110.450935][ T6888] /dev/rnullb0: Can't open blockdev [ 111.090170][ T43] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 111.227877][ T43] usb 4-1: device descriptor read/64, error -71 [ 111.433431][ T6906] /dev/rnullb0: Can't open blockdev [ 111.487720][ T43] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 111.515844][ T6909] /dev/rnullb0: Can't open blockdev [ 111.576308][ T6911] batadv_slave_1: entered promiscuous mode [ 111.637938][ T43] usb 4-1: device descriptor read/64, error -71 [ 111.817811][ T43] usb usb4-port1: attempt power cycle [ 112.122268][ T6918] Invalid source name [ 112.140508][ T6918] UBIFS error (pid: 6918): cannot open "./file0", error -22 [ 112.167719][ T43] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 112.218119][ T43] usb 4-1: device descriptor read/8, error -71 [ 112.284925][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.293889][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.457889][ T43] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 112.489477][ T43] usb 4-1: device descriptor read/8, error -71 [ 112.598809][ T43] usb usb4-port1: unable to enumerate USB device [ 112.858088][ T982] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 112.884789][ T5945] cdc_ncm 3-1:1.0: bind() failure [ 112.894322][ T5945] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 112.901664][ T5945] cdc_ncm 3-1:1.1: bind() failure [ 112.912360][ T5945] usb 3-1: USB disconnect, device number 16 [ 112.973678][ T6939] netlink: 'syz.2.292': attribute type 21 has an invalid length. [ 112.982577][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 112.998051][ T982] usb 2-1: device descriptor read/64, error -71 [ 113.012835][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.024559][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.036164][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.053347][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.124646][ T6955] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 113.257657][ T982] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 113.397744][ T5906] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 113.405530][ T982] usb 2-1: device descriptor read/64, error -71 [ 113.527881][ T982] usb usb2-port1: attempt power cycle [ 113.568193][ T5906] usb 3-1: too many configurations: 110, using maximum allowed: 8 [ 113.578897][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 113.587754][ T5906] usb 3-1: can't read configurations, error -61 [ 113.747661][ T5906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 113.783714][ T6968] binder: 6967:6968 ioctl 4018f514 0 returned -22 [ 113.870000][ T982] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 113.898538][ T982] usb 2-1: device descriptor read/8, error -71 [ 113.906002][ T5906] usb 3-1: too many configurations: 110, using maximum allowed: 8 [ 113.923547][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 113.931425][ T5906] usb 3-1: can't read configurations, error -61 [ 113.945585][ T5906] usb usb3-port1: attempt power cycle [ 114.157673][ T982] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 114.179354][ T982] usb 2-1: device descriptor read/8, error -71 [ 114.287957][ T982] usb usb2-port1: unable to enumerate USB device [ 114.317765][ T5906] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 114.348702][ T5906] usb 3-1: too many configurations: 110, using maximum allowed: 8 [ 114.358541][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 114.366249][ T5906] usb 3-1: can't read configurations, error -61 [ 114.517683][ T5906] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 114.554266][ T5906] usb 3-1: too many configurations: 110, using maximum allowed: 8 [ 114.569866][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 114.578251][ T5906] usb 3-1: can't read configurations, error -61 [ 114.585635][ T5906] usb usb3-port1: unable to enumerate USB device [ 115.877718][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 115.898415][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 115.942307][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 115.951602][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 116.032915][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 116.042331][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 116.157658][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 116.213179][ T7015] binder: 7014:7015 ioctl 80286722 2000000005c0 returned -22 [ 116.224829][ T7015] bridge0: entered allmulticast mode [ 116.231510][ T7015] binder: 7014:7015 ioctl 541c 200000000580 returned -22 [ 116.240330][ T7015] /dev/rnullb0: Can't open blockdev [ 116.319547][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.339030][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 116.362367][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 116.375270][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.386009][ T10] usb 2-1: config 0 descriptor?? [ 116.412374][ T7019] /dev/rnullb0: Can't open blockdev [ 116.424422][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.701830][ T7025] can0: slcan on ttyprintk. [ 116.767812][ T7024] can0 (unregistered): slcan off ttyprintk. [ 116.812472][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 116.847078][ T10] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 116.868002][ T10] lenovo 0003:17EF:60FE.0002: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0 [ 116.968883][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 117.002283][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.024330][ T43] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 117.061212][ T43] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 117.076168][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.094028][ T43] usb 3-1: Product: syz [ 117.098391][ T43] usb 3-1: Manufacturer: syz [ 117.103179][ T43] usb 3-1: SerialNumber: syz [ 117.322246][ T43] usb 3-1: Cannot retrieve CPort count: 0 [ 117.337922][ T43] usb 3-1: Cannot retrieve CPort count: -5 [ 117.357796][ T43] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 118.008546][ T7073] process 'syz.0.319' launched '/dev/fd/4' with NULL argv: empty string added [ 118.125898][ T7056] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 118.175057][ T43] usb 3-1: USB disconnect, device number 21 [ 118.740986][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 118.998138][ T5906] usb 2-1: USB disconnect, device number 24 [ 119.052822][ T7084] block nbd3: Attempted send on invalid socket [ 119.062824][ T7084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.289293][ T7109] block nbd3: Attempted send on invalid socket [ 119.297260][ T7109] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 119.314020][ T7109] SQUASHFS error: Failed to read block 0x0: -5 [ 119.321927][ T7109] unable to read squashfs_super_block [ 119.339976][ T7109] /dev/rnullb0: Can't open blockdev [ 119.363820][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.375702][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.383426][ T7116] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 119.384619][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 119.409628][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.422048][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.425716][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.440284][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.553789][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 119.573350][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.574038][ T7127] syzkaller1: entered promiscuous mode [ 119.582985][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.591783][ T7127] syzkaller1: entered allmulticast mode [ 119.603106][ T7130] erofs (device nullb0): cannot find valid erofs superblock [ 119.611656][ T43] usb 3-1: Product: syz [ 119.615888][ T43] usb 3-1: Manufacturer: syz [ 119.621390][ T43] usb 3-1: SerialNumber: syz [ 119.634276][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 119.649216][ T43] r8152-cfgselector 3-1: config 0 descriptor?? [ 119.763072][ T7144] Malformed UNC in devname [ 119.763072][ T7144] [ 119.786077][ T7144] CIFS: VFS: Malformed UNC in devname [ 119.949977][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 119.962173][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 120.082256][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 120.507646][ T5906] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 120.669428][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.691195][ T5906] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 120.703089][ T5906] usb 2-1: config 0 has no interface number 0 [ 120.712426][ T5906] usb 2-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt [ 120.727364][ T5906] usb 2-1: config 0 interface 105 has no altsetting 0 [ 120.740282][ T5906] usb 2-1: string descriptor 0 read error: -22 [ 120.741333][ T7179] [U] ^P^C [ 120.747932][ T5906] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 120.777797][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.792790][ T5906] usb 2-1: config 0 descriptor?? [ 120.811800][ T7163] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 120.834457][ T5906] usb 2-1: Found UVC 0.00 device (1943:2250) [ 120.851387][ T5906] usb 2-1: No valid video chain found. [ 120.867898][ T5906] go7007 2-1:0.105: Sensoray 2250 found [ 120.873589][ T5906] go7007 2-1:0.105: probe with driver go7007 failed with error -12 [ 120.978024][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.998378][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.046213][ T7163] netlink: 256 bytes leftover after parsing attributes in process `syz.1.345'. [ 121.056496][ T7163] /dev/rnullb0: Can't open blockdev [ 121.064675][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 121.097034][ T5945] usb 2-1: USB disconnect, device number 25 [ 121.137927][ T5906] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 121.180398][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.191179][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.206282][ T7193] usb usb8: usbfs: process 7193 (syz.2.355) did not claim interface 0 before use [ 121.300678][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 121.330264][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 121.346319][ T5906] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 121.355632][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.366296][ T5906] usb 4-1: config 0 descriptor?? [ 121.383756][ T7181] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 121.556806][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 121.574643][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 121.595564][ T7181] program syz.3.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.607990][ T7181] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.685487][ T7212] usb usb5: usbfs: process 7212 (syz.1.359) did not claim interface 0 before use [ 121.842228][ T5906] hid-udraw 0003:20D6:CB17.0003: item fetching failed at offset 5/7 [ 121.891470][ T5906] hid-udraw 0003:20D6:CB17.0003: parse failed [ 121.913931][ T5906] hid-udraw 0003:20D6:CB17.0003: probe with driver hid-udraw failed with error -22 [ 121.969594][ T7217] netlink: 'syz.1.360': attribute type 62 has an invalid length. [ 122.037487][ T7219] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 122.043166][ T7181] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.048444][ T7219] netlink: 'syz.1.360': attribute type 101 has an invalid length. [ 122.092210][ T7221] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 122.097690][ T7219] netlink: 468 bytes leftover after parsing attributes in process `syz.1.360'. [ 122.111982][ T7221] /dev/rnullb0: Can't open blockdev [ 122.342187][ T7226] syzkaller1: entered promiscuous mode [ 122.370704][ T7226] syzkaller1: entered allmulticast mode [ 122.553947][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.567912][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.737908][ T7219] syz.1.360 (7219) used greatest stack depth: 17992 bytes left [ 123.139002][ T7244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.367'. [ 123.256408][ T7246] /dev/rnullb0: Can't open blockdev [ 123.453426][ T7248] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.638244][ T7253] /dev/rnullb0: Can't open blockdev [ 123.759710][ T7257] /dev/rnullb0: Can't open blockdev [ 123.875770][ T5945] usb 4-1: USB disconnect, device number 16 [ 124.191595][ T7271] netlink: 'syz.3.376': attribute type 4 has an invalid length. [ 124.221973][ T7270] netlink: 'syz.3.376': attribute type 4 has an invalid length. [ 124.279089][ T7274] fuse: Bad value for 'fd' [ 124.795694][ T7288] binder: 7287:7288 unknown command 576 [ 124.817912][ T6054] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 124.835744][ T7288] binder: 7287:7288 ioctl c0306201 200000000480 returned -22 [ 124.898600][ T7293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 124.910176][ T7293] /dev/rnullb0: Can't open blockdev [ 124.918490][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 124.926653][ T43] r8152-cfgselector 3-1: bad CDC descriptors [ 124.988227][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.008732][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 125.029883][ T6054] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 125.047740][ T6054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.067735][ T6054] usb 4-1: config 0 descriptor?? [ 125.073330][ T7280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.522755][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 125.538322][ T7309] /dev/rnullb0: Can't open blockdev [ 125.631661][ T7313] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 125.646409][ T7313] /dev/rnullb0: Can't open blockdev [ 125.726044][ T7320] /dev/rnullb0: Can't open blockdev [ 125.857414][ T7322] /dev/rnullb0: Can't open blockdev [ 125.920880][ T7325] /dev/rnullb0: Can't open blockdev [ 126.092220][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.104107][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.120281][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.131941][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.141747][ T7337] /dev/rnullb0: Can't open blockdev [ 126.198005][ T6054] ath6kl: Failed to submit usb control message: -110 [ 126.217706][ T6054] ath6kl: unable to send the bmi data to the device: -110 [ 126.224956][ T6054] ath6kl: Unable to send get target info: -110 [ 126.232054][ T6054] ath6kl: Failed to init ath6kl core: -110 [ 126.238833][ T6054] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 126.498089][ T7345] /dev/rnullb0: Can't open blockdev [ 126.548591][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 126.651171][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.706328][ T7362] tipc: Can't bind to reserved service type 0 [ 126.881410][ T7378] /dev/rnullb0: Can't open blockdev [ 127.073853][ T7389] sctp: [Deprecated]: syz.2.409 (pid 7389) Use of int in maxseg socket option. [ 127.073853][ T7389] Use struct sctp_assoc_value instead [ 127.404661][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.417032][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.435922][ T5945] usb 4-1: USB disconnect, device number 17 [ 127.502491][ T7410] netlink: 'syz.3.414': attribute type 7 has an invalid length. [ 127.768490][ T7418] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 127.857754][ T5945] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 127.881394][ T7424] /dev/rnullb0: Can't open blockdev [ 127.881524][ T7425] pvfs2: Unknown parameter 'hfs' [ 127.936533][ T7429] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 127.950197][ T7429] Error validating options; rc = [-22] [ 128.042456][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 128.055384][ T5945] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 128.071273][ T5945] usb 4-1: config 0 has no interface number 0 [ 128.091933][ T5945] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 128.118772][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.152231][ T5945] usb 4-1: Product: syz [ 128.169899][ T5945] usb 4-1: Manufacturer: syz [ 128.174566][ T5945] usb 4-1: SerialNumber: syz [ 128.183270][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.200215][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.210725][ T5945] usb 4-1: config 0 descriptor?? [ 128.222461][ T5945] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 128.249724][ T7445] /dev/sg0: Can't lookup blockdev [ 128.341555][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.351528][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.418182][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.430'. [ 128.458424][ T7457] netlink: 76 bytes leftover after parsing attributes in process `syz.2.430'. [ 128.467634][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.479966][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.530013][ T7459] netlink: 10 bytes leftover after parsing attributes in process `syz.1.431'. [ 128.554608][ T7459] /dev/rnullb0: Can't open blockdev [ 128.606524][ T5945] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 128.621622][ T5945] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 128.638594][ T5945] usb 4-1: USB disconnect, device number 18 [ 128.672733][ T7463] /dev/rnullb0: Can't open blockdev [ 128.709806][ T7465] /dev/rnullb0: Can't open blockdev [ 129.027178][ T7483] netlink: 'syz.0.439': attribute type 5 has an invalid length. [ 129.035191][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 129.235499][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 129.253093][ T7500] /dev/rnullb0: Can't open blockdev [ 129.538050][ T2153] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 129.697638][ T2153] usb 4-1: Using ep0 maxpacket: 8 [ 129.710314][ T2153] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.725843][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.747954][ T2153] usb 4-1: Product: syz [ 129.766046][ T2153] usb 4-1: Manufacturer: syz [ 129.777723][ T2153] usb 4-1: SerialNumber: syz [ 129.784315][ T2153] usb 4-1: config 0 descriptor?? [ 129.999218][ T2153] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.342677][ T7551] /dev/rnullb0: Can't open blockdev [ 130.411276][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.422011][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.546606][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.560549][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.572009][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.582727][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.707386][ T7574] batadv_slave_0: entered promiscuous mode [ 130.793682][ T7573] batadv_slave_0: left promiscuous mode [ 131.035951][ T7586] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 131.043126][ T7586] block nbd1: Attempted send on invalid socket [ 131.051111][ T7586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.415194][ T2153] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.425703][ T2153] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 131.435234][ T2153] usb 4-1: media controller created [ 131.470232][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.536220][ T2153] i2c i2c-1: Added multiplexed i2c bus 2 [ 131.560557][ T2153] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 131.578094][ T2153] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 131.598363][ T2153] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 131.647129][ T7604] /dev/rnullb0: Can't open blockdev [ 131.773302][ T7608] /dev/rnullb0: Can't open blockdev [ 131.988726][ T7622] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.482'. [ 132.091121][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.102344][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.274604][ T7632] overlayfs: missing 'lowerdir' [ 132.364883][ T7636] /dev/rnullb0: Can't open blockdev [ 132.429168][ T7638] /dev/rnullb0: Can't open blockdev [ 132.533280][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.490'. [ 132.541392][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.552497][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.562077][ T7647] /dev/rnullb0: Can't open blockdev [ 132.610325][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.620019][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.709687][ T2153] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 132.735818][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.746647][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.817659][ T5945] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 132.899114][ T5906] usb 4-1: USB disconnect, device number 19 [ 132.967649][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 132.974638][ T5945] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 132.985118][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.001094][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007651][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.009483][ T5945] usb 2-1: config 0 descriptor?? [ 133.232979][ T10] usb 2-1: USB disconnect, device number 26 [ 133.297940][ T5906] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 133.395991][ T7668] netlink: 244 bytes leftover after parsing attributes in process `syz.2.496'. [ 133.409562][ T30] audit: type=1326 audit(1756536346.702:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f630ff8ebe9 code=0x0 [ 133.430131][ T5906] usb 4-1: device descriptor read/64, error -71 [ 133.442032][ T7670] erofs (device nullb0): cannot find valid erofs superblock [ 133.502879][ T7674] tipc: Started in network mode [ 133.508909][ T7674] tipc: Node identity ac14140f, cluster identity 4711 [ 133.516277][ T7674] tipc: New replicast peer: 255.255.255.83 [ 133.522802][ T7674] tipc: Enabled bearer , priority 10 [ 133.562327][ T7677] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 133.569459][ T7677] /dev/rnullb0: Can't open blockdev [ 133.669123][ T5906] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 133.758126][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.770237][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.780956][ T30] audit: type=1800 audit(1756536347.072:6): pid=7684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 133.781516][ T7681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.502'. [ 133.811308][ T5906] usb 4-1: device descriptor read/64, error -71 [ 133.927807][ T5906] usb usb4-port1: attempt power cycle [ 134.282108][ T5906] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 134.309248][ T5906] usb 4-1: device descriptor read/8, error -71 [ 134.471256][ T7698] /dev/rnullb0: Can't open blockdev [ 134.521407][ T5945] tipc: Node number set to 2886997007 [ 134.536928][ T7703] Trying to write to read-only block-device rnullb0 [ 134.557914][ T2153] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 134.562134][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 134.604361][ T5906] usb 4-1: device descriptor read/8, error -71 [ 134.717833][ T5906] usb usb4-port1: unable to enumerate USB device [ 134.736731][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 134.743516][ T2153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 134.773084][ T2153] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 134.783117][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.794840][ T2153] usb 2-1: config 0 descriptor?? [ 135.213740][ T2153] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 135.240808][ T2153] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 135.433651][ T7692] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 137.196847][ T7692] /dev/rnullb0: Can't open blockdev [ 137.219693][ T2153] usb 2-1: USB disconnect, device number 27 [ 137.697710][ T2153] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 137.848850][ T2153] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 137.860008][ T2153] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.870068][ T2153] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.883368][ T2153] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.890040][ T2153] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 137.899129][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.908389][ T2153] usb 4-1: config 0 descriptor?? [ 138.067742][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 138.120564][ T2153] hid-alps 0003:044E:120C.0005: item fetching failed at offset 5/8 [ 138.128849][ T2153] hid-alps 0003:044E:120C.0005: parse failed [ 138.135607][ T2153] hid-alps 0003:044E:120C.0005: probe with driver hid-alps failed with error -22 [ 138.227764][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 138.239057][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 138.248284][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.256336][ T10] usb 2-1: Product: syz [ 138.260615][ T10] usb 2-1: Manufacturer: syz [ 138.265218][ T10] usb 2-1: SerialNumber: syz [ 138.271158][ T10] usb 2-1: config 0 descriptor?? [ 138.316951][ T7722] /dev/rnullb0: Can't open blockdev [ 138.323712][ T2153] usb 4-1: USB disconnect, device number 24 [ 138.679367][ T10] airspy 2-1:0.0: Board ID: 00 [ 138.684164][ T10] airspy 2-1:0.0: Firmware version: [ 139.064566][ T7755] sctp: [Deprecated]: syz.2.526 (pid 7755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.064566][ T7755] Use struct sctp_sack_info instead [ 139.131893][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.146690][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.161199][ T7759] netlink: 112 bytes leftover after parsing attributes in process `syz.2.528'. [ 139.179656][ T7761] netlink: 124 bytes leftover after parsing attributes in process `syz.3.529'. [ 139.192574][ T51] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 139.192604][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 139.207713][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 139.214417][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 139.284242][ T7761] /dev/rnullb0: Can't open blockdev [ 139.484066][ T7735] /dev/rnullb0: Can't open blockdev [ 139.587710][ T5906] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 139.727644][ T5906] usb 4-1: device descriptor read/64, error -71 [ 139.987650][ T5906] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 140.127886][ T5906] usb 4-1: device descriptor read/64, error -71 [ 140.247944][ T5906] usb usb4-port1: attempt power cycle [ 140.358563][ T10] airspy 2-1:0.0: usb_control_msg() failed -110 request 0f [ 140.366859][ T10] airspy 2-1:0.0: Registered as swradio24 [ 140.372694][ T10] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 140.597770][ T5906] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 140.618515][ T5906] usb 4-1: device descriptor read/8, error -71 [ 140.733163][ T7775] /dev/rnullb0: Can't open blockdev [ 140.789074][ T5945] usb 2-1: USB disconnect, device number 28 [ 140.857897][ T5906] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 140.879404][ T5906] usb 4-1: device descriptor read/8, error -71 [ 140.988092][ T5906] usb usb4-port1: unable to enumerate USB device [ 141.010280][ T7792] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 141.017447][ T7792] /dev/rnullb0: Can't open blockdev [ 141.406811][ T7820] fuse: Bad value for 'rootmode' [ 141.547804][ T5906] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 141.687732][ T5906] usb 2-1: device descriptor read/64, error -71 [ 141.930119][ T5906] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 142.067651][ T5906] usb 2-1: device descriptor read/64, error -71 [ 142.177978][ T5906] usb usb2-port1: attempt power cycle [ 142.394173][ T7822] netlink: 'syz.3.547': attribute type 12 has an invalid length. [ 142.404276][ T7822] /dev/rnullb0: Can't open blockdev [ 142.537724][ T5906] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 142.578394][ T5906] usb 2-1: device descriptor read/8, error -71 [ 142.827807][ T5906] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 142.858126][ T5906] usb 2-1: device descriptor read/8, error -71 [ 142.968049][ T5906] usb usb2-port1: unable to enumerate USB device [ 143.017680][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 143.177699][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 143.185986][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 143.195566][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.207163][ T24] usb 4-1: config 0 descriptor?? [ 143.215340][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 143.739850][ T7819] kexec: Could not allocate control_code_buffer [ 143.773878][ T7837] /dev/rnullb0: Can't open blockdev [ 143.996967][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.006319][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.424449][ T24] gspca_sunplus: reg_w_riv err -71 [ 144.431669][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 144.444200][ T24] usb 4-1: USB disconnect, device number 29 [ 144.670961][ T7870] /dev/rnullb0: Can't open blockdev [ 144.811626][ T7882] syzkaller0: entered allmulticast mode [ 145.109857][ T7899] netlink: 'syz.2.575': attribute type 21 has an invalid length. [ 145.118640][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 145.227661][ T5945] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 145.379853][ T5945] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 145.390556][ T5945] usb 4-1: config 0 has no interface number 0 [ 145.397217][ T5945] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 145.409391][ T5945] usb 4-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 145.422607][ T5945] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 145.434317][ T5945] usb 4-1: config 0 interface 9 has no altsetting 0 [ 145.443669][ T5945] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 145.453132][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.461397][ T5945] usb 4-1: Product: syz [ 145.465636][ T5945] usb 4-1: Manufacturer: syz [ 145.470799][ T5945] usb 4-1: SerialNumber: syz [ 145.478334][ T5945] usb 4-1: config 0 descriptor?? [ 145.682679][ T7922] trusted_key: syz.2.584 sent an empty control message without MSG_MORE. [ 145.774376][ T7925] /dev/rnullb0: Can't open blockdev [ 146.099835][ T5945] ftdi_sio 4-1:0.9: FTDI USB Serial Device converter detected [ 146.109072][ T5945] usb 4-1: Detected SIO [ 146.113275][ T5945] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 146.128554][ T5945] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 146.144377][ T5945] usb 4-1: USB disconnect, device number 30 [ 146.169781][ T5945] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 146.187005][ T5945] ftdi_sio 4-1:0.9: device disconnected [ 146.347748][ T7947] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.907641][ T2153] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 147.047722][ T2153] usb 2-1: device descriptor read/64, error -71 [ 147.067791][ T982] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 147.112917][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.125914][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.138382][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.151132][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.165681][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.177481][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.240681][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.252592][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.264129][ T982] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.282533][ T982] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.297686][ T2153] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 147.307603][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.318962][ T982] usb 4-1: config 0 descriptor?? [ 147.447764][ T2153] usb 2-1: device descriptor read/64, error -71 [ 147.577980][ T2153] usb usb2-port1: attempt power cycle [ 147.731767][ T8007] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 147.746692][ T982] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 147.843555][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.852317][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.862407][ T8011] program syz.2.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.872249][ T8011] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.885510][ T8011] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.602'. [ 147.918121][ T2153] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 147.938321][ T2153] usb 2-1: device descriptor read/8, error -71 [ 148.177708][ T2153] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 148.198906][ T2153] usb 2-1: device descriptor read/8, error -71 [ 148.252345][ T24] usb 4-1: USB disconnect, device number 31 [ 148.310181][ T2153] usb usb2-port1: unable to enumerate USB device [ 149.016649][ T24] usb 1-1: USB disconnect, device number 6 [ 149.179248][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.186604][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.198260][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.224914][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.225310][ T8039] (syz.2.609,8039,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 149.233737][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.253623][ T8039] (syz.2.609,8039,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 149.268548][ T8039] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 149.370005][ T8036] wlan1 speed is unknown, defaulting to 1000 [ 149.498270][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 149.537282][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.544832][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.547100][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 149.553020][ T8036] bridge_slave_0: entered allmulticast mode [ 149.566459][ T8036] bridge_slave_0: entered promiscuous mode [ 149.573596][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.580916][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.588325][ T8036] bridge_slave_1: entered allmulticast mode [ 149.595021][ T8036] bridge_slave_1: entered promiscuous mode [ 149.614579][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.625643][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.647272][ T8036] team0: Port device team_slave_0 added [ 149.654678][ T8036] team0: Port device team_slave_1 added [ 149.673018][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.680238][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.713201][ T24] usb 4-1: device descriptor read/64, error -71 [ 149.714626][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.732954][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.740970][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.769067][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.804660][ T8036] hsr_slave_0: entered promiscuous mode [ 149.811722][ T8036] hsr_slave_1: entered promiscuous mode [ 149.818597][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 149.824362][ T8036] Cannot create hsr debugfs directory [ 149.896164][ T8036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.905110][ T8036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.915488][ T8036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.925149][ T8036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.945229][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.952386][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.959846][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.967050][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.974909][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 150.008583][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.022671][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.030459][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.045947][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.056464][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.063663][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.075297][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.082456][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.098174][ T982] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 150.107836][ T24] usb 4-1: device descriptor read/64, error -71 [ 150.230503][ T24] usb usb4-port1: attempt power cycle [ 150.253129][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.253489][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 150.276132][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.293334][ T982] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 150.313919][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.335644][ T982] usb 2-1: config 0 descriptor?? [ 150.350295][ T8056] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.520108][ T8036] veth0_vlan: entered promiscuous mode [ 150.536454][ T8036] veth1_vlan: entered promiscuous mode [ 150.564511][ T8055] program syz.1.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.572683][ T8036] veth0_macvtap: entered promiscuous mode [ 150.574051][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 150.585280][ T8036] veth1_macvtap: entered promiscuous mode [ 150.588412][ T8055] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 150.611413][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.619214][ T24] usb 4-1: device descriptor read/8, error -71 [ 150.632904][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.647156][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.661516][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.677449][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.687391][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.746760][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.758688][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.783421][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.793672][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.814659][ T982] hid-udraw 0003:20D6:CB17.0007: item fetching failed at offset 5/7 [ 150.824013][ T982] hid-udraw 0003:20D6:CB17.0007: parse failed [ 150.833524][ T982] hid-udraw 0003:20D6:CB17.0007: probe with driver hid-udraw failed with error -22 [ 150.858195][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 150.898284][ T24] usb 4-1: device descriptor read/8, error -71 [ 150.906921][ T8094] netlink: 'syz.2.619': attribute type 58 has an invalid length. [ 150.915763][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.923206][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.939025][ T8094] netlink: 'syz.2.619': attribute type 58 has an invalid length. [ 151.008016][ T24] usb usb4-port1: unable to enumerate USB device [ 151.018866][ T8055] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.611'. [ 151.032293][ T24] usb 2-1: USB disconnect, device number 37 [ 151.124722][ T8104] netlink: 420 bytes leftover after parsing attributes in process `syz.2.621'. [ 151.317717][ T51] Bluetooth: hci4: command tx timeout [ 151.670278][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.628'. [ 151.702674][ T8130] /dev/rnullb0: Can't open blockdev [ 152.328119][ T982] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 152.499999][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 152.519671][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 152.535980][ T982] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 152.559953][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.575414][ T982] usb 5-1: config 0 descriptor?? [ 152.588875][ T8147] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.707679][ T5906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 152.811417][ T8147] program syz.4.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.821517][ T8147] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.861254][ T5906] usb 4-1: device descriptor read/64, error -71 [ 152.877823][ T8183] [U]  [ 152.880775][ T8183] [U] K{ [ 152.893525][ T8183] [U] t 1ŠFfˊ`GJgo/mC [ 152.913887][ T8183] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 152.932876][ T8183] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 152.944725][ T8183] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 152.980437][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.004165][ T8183] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 153.027806][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.036534][ T982] hid-udraw 0003:20D6:CB17.0008: item fetching failed at offset 5/7 [ 153.045221][ T982] hid-udraw 0003:20D6:CB17.0008: parse failed [ 153.051541][ T982] hid-udraw 0003:20D6:CB17.0008: probe with driver hid-udraw failed with error -22 [ 153.061474][ T8183] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 153.072967][ T8183] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 153.087243][ T8183] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 153.196241][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.208567][ T8183] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 153.217378][ T8183] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 153.218026][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.231513][ T8183] [U] 22Ʃx?0;3u [ 153.240884][ T8147] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.634'. [ 153.242158][ T8183] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 153.278190][ T5906] usb 4-1: device descriptor read/64, error -71 [ 153.280329][ T8191] bond0: (slave rose0): Enslaving as an active interface with an up link [ 153.302915][ T24] usb 5-1: USB disconnect, device number 2 [ 153.339940][ T8183] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 153.350346][ T8183] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 153.359098][ T8183] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 153.365483][ T8183] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 153.378240][ T8183] [U] ec [ 153.381378][ T8183] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 153.394677][ T5906] usb usb4-port1: attempt power cycle [ 153.398971][ T51] Bluetooth: hci4: command tx timeout [ 153.417277][ T8181] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 153.459596][ T8203] netlink: 128 bytes leftover after parsing attributes in process `syz.2.648'. [ 153.486964][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 153.574726][ T8211] fuse: Bad value for 'rootmode' [ 153.685471][ T8221] /dev/rnullb0: Can't open blockdev [ 153.737774][ T5906] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 153.759465][ T5906] usb 4-1: device descriptor read/8, error -71 [ 153.785470][ T8225] /dev/rnullb0: Can't open blockdev [ 153.901882][ T8235] /dev/rnullb0: Can't open blockdev [ 154.002253][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 154.033960][ T5906] usb 4-1: device descriptor read/8, error -71 [ 154.044405][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.074730][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.087622][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.112612][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.148341][ T5906] usb usb4-port1: unable to enumerate USB device [ 154.178352][ T30] audit: type=1326 audit(1756536367.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.4.657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbe218ebe9 code=0x0 [ 154.246993][ T8249] input: syz1 as /devices/virtual/input/input12 [ 154.361369][ T8249] autofs: Unknown parameter '|a͹tN!OTښy^3N }p7:W\ Fh@xAmYS%t-L?' [ 155.079049][ T8276] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 155.089107][ T8276] IPVS: Unknown mcast interface: dvmrp1 [ 155.320840][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.329885][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.343652][ T8282] program syz.2.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.353981][ T8282] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 155.365788][ T8282] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.662'. [ 155.477871][ T51] Bluetooth: hci4: command tx timeout [ 155.579755][ T8207] kexec: Could not allocate control_code_buffer [ 155.626011][ T8290] fuse: blksize only supported for fuseblk [ 155.717984][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.847725][ T5906] usb 5-1: device descriptor read/64, error -71 [ 156.087725][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.104332][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 156.166697][ T8321] binder: 8320:8321 ioctl c00c6211 0 returned -14 [ 156.228230][ T5906] usb 5-1: device descriptor read/64, error -71 [ 156.348461][ T5906] usb usb5-port1: attempt power cycle [ 156.431245][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 156.442733][ T8327] /dev/rnullb0: Can't open blockdev [ 156.469166][ T982] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 156.627738][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 156.634206][ T982] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 156.642889][ T982] usb 4-1: config 0 has no interface number 0 [ 156.650147][ T982] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 156.659292][ T982] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 156.667300][ T982] usb 4-1: Product: syz [ 156.672340][ T982] usb 4-1: Manufacturer: syz [ 156.679595][ T982] usb 4-1: config 0 descriptor?? [ 156.697671][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.718073][ T5906] usb 5-1: device descriptor read/8, error -71 [ 156.852285][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.862644][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.874702][ T8333] program syz.2.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.884275][ T8333] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 156.894947][ T8333] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.681'. [ 156.958373][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.978171][ T5906] usb 5-1: device descriptor read/8, error -71 [ 157.091616][ T5906] usb usb5-port1: unable to enumerate USB device [ 157.528004][ T8375] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 157.557938][ T51] Bluetooth: hci4: command tx timeout [ 158.277539][ T8384] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 158.284112][ T8384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.293172][ T8384] vhci_hcd vhci_hcd.0: Device attached [ 158.467713][ T5906] vhci_hcd: vhci_device speed not set [ 158.527990][ T5906] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 158.623010][ T8385] vhci_hcd: connection reset by peer [ 158.629237][ T3168] vhci_hcd: stop threads [ 158.633600][ T3168] vhci_hcd: release socket [ 158.639330][ T3168] vhci_hcd: disconnect device [ 159.278930][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 159.291765][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 159.302111][ T8398] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.329423][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.357230][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.357882][ T2153] usb 4-1: USB disconnect, device number 40 [ 159.405370][ T8405] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 159.415901][ T8405] /dev/rnullb0: Can't open blockdev [ 159.437847][ T43] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 159.514287][ T8415] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 159.523316][ T8415] /dev/rnullb0: Can't open blockdev [ 159.574263][ T8419] /dev/rnullb0: Can't open blockdev [ 159.590334][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 159.611192][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 159.639163][ T43] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 159.650826][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.661480][ T43] usb 5-1: config 0 descriptor?? [ 159.680790][ T8395] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 159.778936][ T8430] fuse: Bad value for 'rootmode' [ 159.893011][ T8395] program syz.4.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.902896][ T8395] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.339175][ T8395] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.693'. [ 160.570349][ T43] hid-udraw 0003:20D6:CB17.0009: item fetching failed at offset 5/7 [ 160.589137][ T43] hid-udraw 0003:20D6:CB17.0009: parse failed [ 160.595336][ T43] hid-udraw 0003:20D6:CB17.0009: probe with driver hid-udraw failed with error -22 [ 160.648119][ T43] usb 5-1: USB disconnect, device number 7 [ 161.043727][ T8472] block nbd4: Attempted send on invalid socket [ 161.062364][ T8472] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 161.087693][ T8472] SQUASHFS error: Failed to read block 0x0: -5 [ 161.104212][ T8472] unable to read squashfs_super_block [ 161.151206][ T8478] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 161.312643][ T8484] /dev/rnullb0: Can't open blockdev [ 161.405901][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.425021][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.445996][ T8488] program syz.2.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.465821][ T8488] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 161.488638][ T8488] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.714'. [ 161.541971][ T8491] netlink: 156 bytes leftover after parsing attributes in process `syz.1.715'. [ 161.796438][ T30] audit: type=1326 audit(1756536375.082:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.4.719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbe218ebe9 code=0x0 [ 161.957672][ T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 162.107838][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 162.118906][ T43] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.137440][ T43] usb 2-1: config 179 has no interface number 0 [ 162.149469][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.173143][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.189059][ T8428] kexec: Could not allocate control_code_buffer [ 162.201659][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.226422][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 162.251086][ T43] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.288466][ T43] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.329808][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.379107][ T8500] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.723971][ T8519] /dev/rnullb0: Can't open blockdev [ 162.772250][ T8525] loop6: detected capacity change from 0 to 7 [ 162.790357][ T5858] Dev loop6: unable to read RDB block 7 [ 162.796068][ T5858] loop6: unable to read partition table [ 162.803205][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 162.811539][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 162.820678][ T6057] usb 2-1: USB disconnect, device number 38 [ 162.822354][ T5858] loop6: partition table beyond EOD, truncated [ 162.898128][ T8525] Dev loop6: unable to read RDB block 7 [ 162.924292][ T8525] loop6: unable to read partition table [ 162.934483][ T8525] loop6: partition table beyond EOD, truncated [ 162.980494][ T8525] loop_reread_partitions: partition scan of loop6 (被x) failed (rc=-5) [ 163.106523][ T8537] block nbd2: Attempted send on invalid socket [ 163.112967][ T8537] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.134088][ T8537] hpfs: hpfs_map_sector(): read error [ 163.277813][ T43] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 163.297164][ T8551] fuse: Bad value for 'rootmode' [ 163.440495][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 163.453000][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 163.629714][ T5906] vhci_hcd: vhci_device speed not set [ 163.632694][ T43] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 163.646523][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.679093][ T43] usb 4-1: config 0 descriptor?? [ 163.684722][ T8541] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.912445][ T8541] program syz.3.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.940155][ T8541] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.104230][ T8587] FAT-fs (nullb0): bogus number of reserved sectors [ 164.111700][ T8587] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 164.165666][ T43] hid-udraw 0003:20D6:CB17.000A: item fetching failed at offset 5/7 [ 164.182332][ T43] hid-udraw 0003:20D6:CB17.000A: parse failed [ 164.189627][ T43] hid-udraw 0003:20D6:CB17.000A: probe with driver hid-udraw failed with error -22 [ 164.204407][ T8593] binder: BINDER_SET_CONTEXT_MGR already set [ 164.213227][ T8593] binder: 8588:8593 ioctl 4018620d 200000000040 returned -16 [ 164.364418][ T8541] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.729'. [ 164.403529][ T982] usb 4-1: USB disconnect, device number 41 [ 164.638715][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 164.990840][ T8629] program syz.2.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.031273][ T8630] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 165.062640][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.100411][ T8630] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.179680][ T8630] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 165.213416][ T8549] kexec: Could not allocate control_code_buffer [ 165.249037][ T8639] siw: device registration error -23 [ 165.255217][ T8639] /dev/rnullb0: Can't open blockdev [ 165.284215][ T8630] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 165.422719][ T8652] netlink: 'syz.2.748': attribute type 11 has an invalid length. [ 165.452414][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.463041][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.657675][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.808533][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 165.828349][ T43] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 165.837720][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.845752][ T43] usb 5-1: Product: syz [ 165.850210][ T43] usb 5-1: Manufacturer: syz [ 165.854828][ T43] usb 5-1: SerialNumber: syz [ 165.868210][ T6057] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 165.876903][ T43] usb 5-1: config 0 descriptor?? [ 165.899170][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 165.927708][ T8684] /dev/rnullb0: Can't open blockdev [ 166.030144][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 166.057346][ T6057] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 166.111454][ T8693] fuse: Bad value for 'rootmode' [ 166.116567][ T6057] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 166.137434][ T6057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.149037][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.170996][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.202028][ T6057] usb 2-1: config 0 descriptor?? [ 166.221021][ T8667] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.433179][ T8667] program syz.1.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.443152][ T8667] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 166.663507][ T6057] hid-udraw 0003:20D6:CB17.000B: item fetching failed at offset 5/7 [ 166.676610][ T6057] hid-udraw 0003:20D6:CB17.000B: parse failed [ 166.683197][ T6057] hid-udraw 0003:20D6:CB17.000B: probe with driver hid-udraw failed with error -22 [ 166.860248][ T8712] /dev/rnullb0: Can't open blockdev [ 166.866392][ T8667] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.751'. [ 166.893613][ T2153] usb 2-1: USB disconnect, device number 39 [ 167.331290][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.749'. [ 167.933886][ T43] gspca_stk1135: reg_w 0x200 err -71 [ 167.946957][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 167.953985][ T43] gspca_stk1135: Sensor write failed [ 167.961267][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 167.969222][ T43] gspca_stk1135: Sensor write failed [ 167.974558][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 167.986635][ T43] gspca_stk1135: Sensor read failed [ 167.992626][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 168.001097][ T43] gspca_stk1135: Sensor read failed [ 168.006848][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 168.019259][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 168.025893][ T43] gspca_stk1135: Sensor read failed [ 168.040122][ T8732] /dev/rnullb0: Can't open blockdev [ 168.041487][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 168.059253][ T43] gspca_stk1135: Sensor read failed [ 168.064730][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 168.071930][ T43] gspca_stk1135: Sensor write failed [ 168.077375][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 168.096507][ T43] gspca_stk1135: Sensor write failed [ 168.103832][ T43] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 168.117510][ T43] usb 5-1: USB disconnect, device number 8 [ 168.214357][ T8742] netlink: 830 bytes leftover after parsing attributes in process `syz.2.766'. [ 168.225024][ T8742] bond_slave_0: entered promiscuous mode [ 168.230765][ T8742] bond_slave_1: entered promiscuous mode [ 168.279027][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.289872][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.301229][ T8744] program syz.2.767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.311664][ T8744] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 168.326399][ T8744] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.767'. [ 168.407623][ T982] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 168.440800][ T8688] kexec: Could not allocate control_code_buffer [ 168.563595][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 168.576232][ T982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.579346][ T8755] mmap: syz.4.771 (8755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.588710][ T982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 168.636427][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 168.652035][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 168.662263][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.672447][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 168.683238][ T982] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 168.693969][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 168.715638][ T982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 168.727687][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.739840][ T982] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 168.752317][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.761759][ T982] usb 2-1: Product: syz [ 168.765948][ T982] usb 2-1: Manufacturer: syz [ 168.771856][ T982] usb 2-1: SerialNumber: syz [ 168.780186][ T982] usb 2-1: config 0 descriptor?? [ 168.788758][ T982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.851132][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.960623][ T8764] block nbd2: NBD_DISCONNECT [ 168.976958][ T8764] block nbd2: Send disconnect failed -107 [ 168.985587][ T8764] block nbd2: Send control failed (result -107) [ 168.992960][ T8764] block nbd2: Request send failed, requeueing [ 169.001037][ T8764] block nbd2: Disconnected due to user request. [ 169.007490][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.018753][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 169.033163][ T8764] /dev/rnullb0: Can't open blockdev [ 169.095550][ T5906] usb 2-1: USB disconnect, device number 40 [ 169.132963][ T8771] fuse: Bad value for 'rootmode' [ 169.188579][ T43] usb 4-1: no configurations [ 169.194437][ T43] usb 4-1: can't read configurations, error -22 [ 169.348553][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 169.528393][ T43] usb 4-1: no configurations [ 169.537606][ T43] usb 4-1: can't read configurations, error -22 [ 169.554286][ T43] usb usb4-port1: attempt power cycle [ 169.694232][ T8781] /dev/rnullb0: Can't open blockdev [ 169.897695][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 169.928526][ T43] usb 4-1: no configurations [ 169.937636][ T43] usb 4-1: can't read configurations, error -22 [ 170.077773][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 170.108512][ T43] usb 4-1: no configurations [ 170.126888][ T43] usb 4-1: can't read configurations, error -22 [ 170.133843][ T43] usb usb4-port1: unable to enumerate USB device [ 170.192418][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.204028][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.216249][ T8790] program syz.2.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.226443][ T8790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 170.238341][ T8790] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.783'. [ 170.798448][ T982] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 170.810631][ T8794] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 170.822387][ T8794] /dev/rnullb0: Can't open blockdev [ 170.910478][ T8798] /dev/rnullb0: Can't open blockdev [ 170.958373][ T8800] /dev/rnullb0: Can't open blockdev [ 170.969653][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 170.986252][ T982] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.995810][ T982] usb 2-1: config 0 has no interface number 0 [ 171.006855][ T982] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.018403][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.026429][ T982] usb 2-1: Product: syz [ 171.031347][ T982] usb 2-1: Manufacturer: syz [ 171.035969][ T982] usb 2-1: SerialNumber: syz [ 171.048607][ T982] usb 2-1: config 0 descriptor?? [ 171.056790][ T982] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.099335][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.109753][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.265200][ T8770] kexec: Could not allocate control_code_buffer [ 171.269402][ T982] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.284602][ T982] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.584576][ T8808] /dev/rnullb0: Can't open blockdev [ 172.157621][ T6057] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 172.217793][ T982] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.329288][ T6057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 172.341328][ T6057] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 172.354280][ T6057] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 172.363669][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.378200][ T6057] usb 4-1: config 0 descriptor?? [ 172.384529][ T8813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 172.391953][ T982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.407202][ T982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.429502][ T982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.441668][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.454863][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.470950][ T982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.481048][ T982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.490445][ T982] usb 5-1: Product: syz [ 172.494906][ T982] usb 5-1: Manufacturer: syz [ 172.516724][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 172.522225][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 172.530357][ T982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 172.536327][ T982] cdc_wdm 5-1:1.0: Unknown control protocol [ 172.625632][ T8813] program syz.3.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.635454][ T8813] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.717649][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.724325][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.730737][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.737360][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.743897][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.750525][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.757165][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.763787][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.770486][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.777124][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.783425][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.790499][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.796886][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 172.797951][ T43] usb 5-1: USB disconnect, device number 9 [ 172.803498][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 172.803518][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 172.854272][ T6057] hid-udraw 0003:20D6:CB17.000C: item fetching failed at offset 5/7 [ 172.865207][ T6057] hid-udraw 0003:20D6:CB17.000C: parse failed [ 172.874005][ T6057] hid-udraw 0003:20D6:CB17.000C: probe with driver hid-udraw failed with error -22 [ 173.057346][ T8813] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.793'. [ 173.092331][ T982] usb 4-1: USB disconnect, device number 46 [ 173.724230][ T8823] FAULT_INJECTION: forcing a failure. [ 173.724230][ T8823] name failslab, interval 1, probability 0, space 0, times 1 [ 173.751946][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(full) [ 173.751974][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.751986][ T8823] Call Trace: [ 173.751994][ T8823] [ 173.752002][ T8823] dump_stack_lvl+0x189/0x250 [ 173.752036][ T8823] ? __pfx____ratelimit+0x10/0x10 [ 173.752060][ T8823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.752096][ T8823] ? __pfx__printk+0x10/0x10 [ 173.752123][ T8823] ? __pfx___might_resched+0x10/0x10 [ 173.752143][ T8823] ? lock_acquire+0x5f/0x360 [ 173.752161][ T8823] should_fail_ex+0x414/0x560 [ 173.752186][ T8823] should_failslab+0xa8/0x100 [ 173.752204][ T8823] __kmalloc_noprof+0xcb/0x4b0 [ 173.752228][ T8823] ? kfree+0x4d/0x440 [ 173.752249][ T8823] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.752275][ T8823] tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.752299][ T8823] ? tomoyo_domain+0xd9/0x130 [ 173.752323][ T8823] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 173.752343][ T8823] tomoyo_path_number_perm+0x1e8/0x5a0 [ 173.752361][ T8823] ? lock_release+0x4b/0x3e0 [ 173.752377][ T8823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.752398][ T8823] ? rcu_is_watching+0x15/0xb0 [ 173.752417][ T8823] ? lock_release+0x4b/0x3e0 [ 173.752432][ T8823] ? vfs_write+0x956/0xb30 [ 173.752452][ T8823] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 173.752485][ T8823] ? __fget_files+0x3a0/0x420 [ 173.752506][ T8823] ? __fget_files+0x2a/0x420 [ 173.752528][ T8823] security_file_ioctl+0xcb/0x2d0 [ 173.752547][ T8823] __se_sys_ioctl+0x47/0x170 [ 173.752572][ T8823] do_syscall_64+0xfa/0xfa0 [ 173.752596][ T8823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.752612][ T8823] ? clear_bhb_loop+0x60/0xb0 [ 173.752630][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.752647][ T8823] RIP: 0033:0x7ffbe218ebe9 [ 173.752663][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.752678][ T8823] RSP: 002b:00007ffbe2fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.752698][ T8823] RAX: ffffffffffffffda RBX: 00007ffbe23c5fa0 RCX: 00007ffbe218ebe9 [ 173.752711][ T8823] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 173.752724][ T8823] RBP: 00007ffbe2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 173.752737][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.752748][ T8823] R13: 00007ffbe23c6038 R14: 00007ffbe23c5fa0 R15: 00007fff213df528 [ 173.752768][ T8823] [ 173.752776][ T8823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.895712][ T8825] fuse: Bad value for 'rootmode' [ 174.333894][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.364313][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.402956][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.424789][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.453385][ T8833] input: syz0 as /devices/virtual/input/input14 [ 174.524280][ T8833] /dev/rnullb0: Can't open blockdev [ 174.562847][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.572681][ T5945] usb 2-1: USB disconnect, device number 41 [ 174.598070][ T5945] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.648036][ T5945] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.668344][ T5945] quatech2 2-1:0.51: device disconnected [ 174.738532][ T982] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.938639][ T982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.947397][ T982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.977832][ T982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.986953][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 175.037763][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 175.079924][ T982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.089186][ T982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.097201][ T982] usb 5-1: Product: syz [ 175.127618][ T982] usb 5-1: Manufacturer: syz [ 175.160459][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 175.165773][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 175.199081][ T982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 175.217752][ T982] cdc_wdm 5-1:1.0: Unknown control protocol [ 175.359478][ T5945] usb 5-1: USB disconnect, device number 10 [ 175.676744][ T8869] /dev/rnullb0: Can't open blockdev [ 175.871034][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.902331][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.934710][ T8881] /dev/rnullb0: Can't open blockdev [ 175.954630][ T8878] program syz.2.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.988102][ T8878] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.152033][ T8889] FAULT_INJECTION: forcing a failure. [ 176.152033][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 176.167812][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.4.808 Not tainted syzkaller #0 PREEMPT(full) [ 176.167839][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.167850][ T8889] Call Trace: [ 176.167857][ T8889] [ 176.167865][ T8889] dump_stack_lvl+0x189/0x250 [ 176.167898][ T8889] ? __pfx____ratelimit+0x10/0x10 [ 176.167921][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.167946][ T8889] ? __pfx__printk+0x10/0x10 [ 176.167972][ T8889] ? __pfx___might_resched+0x10/0x10 [ 176.167992][ T8889] ? lock_acquire+0x5f/0x360 [ 176.168010][ T8889] should_fail_ex+0x414/0x560 [ 176.168035][ T8889] should_failslab+0xa8/0x100 [ 176.168053][ T8889] __kmalloc_noprof+0xcb/0x4b0 [ 176.168079][ T8889] ? tomoyo_encode+0x28b/0x550 [ 176.168104][ T8889] tomoyo_encode+0x28b/0x550 [ 176.168129][ T8889] tomoyo_realpath_from_path+0x58d/0x5d0 [ 176.168157][ T8889] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 176.168177][ T8889] tomoyo_path_number_perm+0x1e8/0x5a0 [ 176.168197][ T8889] ? lock_release+0x4b/0x3e0 [ 176.168213][ T8889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.168234][ T8889] ? rcu_is_watching+0x15/0xb0 [ 176.168255][ T8889] ? lock_release+0x4b/0x3e0 [ 176.168280][ T8889] ? vfs_write+0x956/0xb30 [ 176.168300][ T8889] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 176.168336][ T8889] ? __fget_files+0x3a0/0x420 [ 176.168370][ T8889] ? __fget_files+0x2a/0x420 [ 176.168392][ T8889] security_file_ioctl+0xcb/0x2d0 [ 176.168420][ T8889] __se_sys_ioctl+0x47/0x170 [ 176.168447][ T8889] do_syscall_64+0xfa/0xfa0 [ 176.168471][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.168489][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 176.168508][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.168526][ T8889] RIP: 0033:0x7ffbe218ebe9 [ 176.168542][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.168558][ T8889] RSP: 002b:00007ffbe2fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.168587][ T8889] RAX: ffffffffffffffda RBX: 00007ffbe23c5fa0 RCX: 00007ffbe218ebe9 [ 176.168601][ T8889] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 176.168613][ T8889] RBP: 00007ffbe2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.168624][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.168635][ T8889] R13: 00007ffbe23c6038 R14: 00007ffbe23c5fa0 R15: 00007fff213df528 [ 176.168656][ T8889] [ 176.168673][ T8889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.280419][ T8826] kexec: Could not allocate control_code_buffer [ 176.597930][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.601391][ T6057] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.617055][ T6057] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 176.655379][ T8904] /dev/rnullb0: Can't open blockdev [ 176.788132][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.837797][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.847408][ T8919] /dev/rnullb0: Can't open blockdev [ 177.383066][ T8938] fuse: Bad value for 'rootmode' [ 177.834973][ T8949] FAULT_INJECTION: forcing a failure. [ 177.834973][ T8949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.861810][ T8949] CPU: 0 UID: 0 PID: 8949 Comm: syz.2.821 Not tainted syzkaller #0 PREEMPT(full) [ 177.861838][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.861849][ T8949] Call Trace: [ 177.861856][ T8949] [ 177.861864][ T8949] dump_stack_lvl+0x189/0x250 [ 177.861895][ T8949] ? __pfx____ratelimit+0x10/0x10 [ 177.861917][ T8949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.861944][ T8949] ? __pfx__printk+0x10/0x10 [ 177.861967][ T8949] ? __might_fault+0xb0/0x130 [ 177.861996][ T8949] ? rcu_is_watching+0x15/0xb0 [ 177.862017][ T8949] should_fail_ex+0x414/0x560 [ 177.862044][ T8949] _copy_from_user+0x2d/0xb0 [ 177.862066][ T8949] video_usercopy+0x346/0x1450 [ 177.862093][ T8949] ? __pfx___video_do_ioctl+0x10/0x10 [ 177.862115][ T8949] ? __pfx_video_usercopy+0x10/0x10 [ 177.862145][ T8949] ? __fget_files+0x3a0/0x420 [ 177.862168][ T8949] v4l2_ioctl+0x18a/0x1e0 [ 177.862190][ T8949] ? __pfx_v4l2_ioctl+0x10/0x10 [ 177.862212][ T8949] __se_sys_ioctl+0xf9/0x170 [ 177.862240][ T8949] do_syscall_64+0xfa/0xfa0 [ 177.862277][ T8949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.862295][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 177.862315][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.862333][ T8949] RIP: 0033:0x7f630ff8ebe9 [ 177.862349][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.862365][ T8949] RSP: 002b:00007f630e1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.862386][ T8949] RAX: ffffffffffffffda RBX: 00007f63101c5fa0 RCX: 00007f630ff8ebe9 [ 177.862400][ T8949] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 177.862412][ T8949] RBP: 00007f630e1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 177.862424][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.862436][ T8949] R13: 00007f63101c6038 R14: 00007f63101c5fa0 R15: 00007fff3a838d68 [ 177.862457][ T8949] [ 178.179383][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.207619][ T2153] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 178.234283][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.295879][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.327133][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.341454][ T8956] loop3: detected capacity change from 0 to 1 [ 178.364587][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.375119][ T8956] Dev loop3: unable to read RDB block 1 [ 178.383916][ T8956] loop3: unable to read partition table [ 178.391581][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 178.404218][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.413700][ T2153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 178.428863][ T8936] kexec: Could not allocate control_code_buffer [ 178.429823][ T8959] /dev/rnullb0: Can't open blockdev [ 178.444066][ T8953] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 178.452918][ T8956] loop3: partition table beyond EOD, truncated [ 178.461290][ T2153] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 178.481729][ T8956] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 178.491088][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.512555][ T2153] usb 5-1: config 0 descriptor?? [ 178.522111][ T8944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.532058][ T5235] Dev loop3: unable to read RDB block 1 [ 178.547281][ T5235] loop3: unable to read partition table [ 178.568739][ T5235] loop3: partition table beyond EOD, truncated [ 178.638556][ T8966] /dev/rnullb0: Can't open blockdev [ 178.670630][ T8968] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.677721][ T6057] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 178.678112][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.694821][ T6057] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 178.734510][ T8944] program syz.4.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.754827][ T8944] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 179.019721][ T8987] FAULT_INJECTION: forcing a failure. [ 179.019721][ T8987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.036444][ T2153] hid-udraw 0003:20D6:CB17.000D: item fetching failed at offset 5/7 [ 179.051201][ T2153] hid-udraw 0003:20D6:CB17.000D: parse failed [ 179.057812][ T2153] hid-udraw 0003:20D6:CB17.000D: probe with driver hid-udraw failed with error -22 [ 179.068105][ T8987] CPU: 1 UID: 0 PID: 8987 Comm: syz.3.830 Not tainted syzkaller #0 PREEMPT(full) [ 179.068130][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.068142][ T8987] Call Trace: [ 179.068148][ T8987] [ 179.068156][ T8987] dump_stack_lvl+0x189/0x250 [ 179.068188][ T8987] ? __pfx____ratelimit+0x10/0x10 [ 179.068210][ T8987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.068246][ T8987] ? __pfx__printk+0x10/0x10 [ 179.068295][ T8987] ? rcu_is_watching+0x15/0xb0 [ 179.068316][ T8987] should_fail_ex+0x414/0x560 [ 179.068342][ T8987] _copy_to_user+0x31/0xb0 [ 179.068365][ T8987] simple_read_from_buffer+0xe1/0x170 [ 179.068387][ T8987] proc_fail_nth_read+0x1b3/0x220 [ 179.068413][ T8987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.068439][ T8987] ? rw_verify_area+0x2a6/0x4d0 [ 179.068456][ T8987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.068481][ T8987] vfs_read+0x200/0xa30 [ 179.068496][ T8987] ? fdget_pos+0x247/0x320 [ 179.068519][ T8987] ? __pfx___mutex_lock+0x10/0x10 [ 179.068544][ T8987] ? __pfx_vfs_read+0x10/0x10 [ 179.068564][ T8987] ? __fget_files+0x3a0/0x420 [ 179.068584][ T8987] ? __fget_files+0x2a/0x420 [ 179.068608][ T8987] ksys_read+0x145/0x250 [ 179.068625][ T8987] ? __pfx_ksys_read+0x10/0x10 [ 179.068641][ T8987] ? __pfx_v4l2_ioctl+0x10/0x10 [ 179.068664][ T8987] ? rcu_is_watching+0x15/0xb0 [ 179.068684][ T8987] do_syscall_64+0xfa/0xfa0 [ 179.068708][ T8987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.068725][ T8987] ? clear_bhb_loop+0x60/0xb0 [ 179.068745][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.068762][ T8987] RIP: 0033:0x7f693cf8d5fc [ 179.068778][ T8987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.068794][ T8987] RSP: 002b:00007f693de10030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.068816][ T8987] RAX: ffffffffffffffda RBX: 00007f693d1c5fa0 RCX: 00007f693cf8d5fc [ 179.068830][ T8987] RDX: 000000000000000f RSI: 00007f693de100a0 RDI: 0000000000000004 [ 179.068841][ T8987] RBP: 00007f693de10090 R08: 0000000000000000 R09: 0000000000000000 [ 179.068853][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.068865][ T8987] R13: 00007f693d1c6038 R14: 00007f693d1c5fa0 R15: 00007ffdc2fe6888 [ 179.068886][ T8987] [ 179.332705][ T6054] usb 5-1: USB disconnect, device number 11 [ 180.427188][ T9008] fuse: Bad value for 'fd' [ 180.837863][ T6057] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 180.844009][ T6057] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 180.847684][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.750085][ T9006] kexec: Could not allocate control_code_buffer [ 182.917810][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.923902][ T6057] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 182.930191][ T6057] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 182.965942][ T6054] wlan1 speed is unknown, defaulting to 1000 [ 182.972237][ T6054] syz0: Port: 1 Link DOWN [ 183.003424][ T6054] wlan1 speed is unknown, defaulting to 1000 [ 185.077675][ T6057] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 185.078773][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.083804][ T6057] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 185.198689][ T9012] /dev/rnullb0: Can't open blockdev [ 185.228380][ T9014] syz0: rxe_newlink: already configured on wlan1 [ 185.264783][ T9014] /dev/rnullb0: Can't open blockdev [ 185.304621][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'. [ 185.392262][ T9028] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.456450][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.597657][ T6057] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 185.679069][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 185.777676][ T6057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 185.855393][ T6057] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 185.966487][ T6057] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 186.088326][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.130379][ T6057] usb 4-1: config 0 descriptor?? [ 186.143363][ T9024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.241277][ T9058] ------------[ cut here ]------------ [ 186.247068][ T9058] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 186.255799][ T9058] shift exponent 32 is too large for 32-bit type 'int' [ 186.264223][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) [ 186.264251][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.264264][ T9058] Call Trace: [ 186.264272][ T9058] [ 186.264280][ T9058] dump_stack_lvl+0x189/0x250 [ 186.264318][ T9058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.264347][ T9058] ? __pfx__printk+0x10/0x10 [ 186.264379][ T9058] ubsan_epilogue+0xa/0x40 [ 186.264400][ T9058] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 186.264439][ T9058] ? __pfx_v9fs_set_super+0x10/0x10 [ 186.264463][ T9058] v9fs_get_tree+0x957/0xa90 [ 186.264487][ T9058] ? __pfx_v9fs_get_tree+0x10/0x10 [ 186.264522][ T9058] vfs_get_tree+0x8f/0x2b0 [ 186.264542][ T9058] do_new_mount+0x2a2/0xa30 [ 186.264566][ T9058] ? ns_capable+0x8a/0xf0 [ 186.264587][ T9058] ? __pfx_do_new_mount+0x10/0x10 [ 186.264608][ T9058] ? path_mount+0x61c/0xfe0 [ 186.264627][ T9058] ? user_path_at+0x44/0x60 [ 186.264664][ T9058] __se_sys_mount+0x317/0x410 [ 186.264688][ T9058] ? __pfx___se_sys_mount+0x10/0x10 [ 186.264712][ T9058] ? rcu_is_watching+0x15/0xb0 [ 186.264733][ T9058] ? __x64_sys_mount+0x20/0xc0 [ 186.264757][ T9058] do_syscall_64+0xfa/0xfa0 [ 186.264784][ T9058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.264802][ T9058] ? clear_bhb_loop+0x60/0xb0 [ 186.264821][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.264839][ T9058] RIP: 0033:0x7f630ff8ebe9 [ 186.264857][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.264874][ T9058] RSP: 002b:00007f630e1ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.264897][ T9058] RAX: ffffffffffffffda RBX: 00007f63101c5fa0 RCX: 00007f630ff8ebe9 [ 186.264911][ T9058] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 186.264924][ T9058] RBP: 00007f6310011e19 R08: 0000200000000580 R09: 0000000000000000 [ 186.264948][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.264959][ T9058] R13: 00007f63101c6038 R14: 00007f63101c5fa0 R15: 00007fff3a838d68 [ 186.264980][ T9058] [ 186.265052][ T9058] ---[ end trace ]--- [ 186.359068][ T9024] program syz.3.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.368121][ T9058] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 186.368141][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) [ 186.368163][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.368175][ T9058] Call Trace: [ 186.368182][ T9058] [ 186.368190][ T9058] dump_stack_lvl+0x99/0x250 [ 186.368220][ T9058] ? __asan_memcpy+0x40/0x70 [ 186.368243][ T9058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.368268][ T9058] ? __pfx__printk+0x10/0x10 [ 186.368296][ T9058] vpanic+0x281/0x750 [ 186.368318][ T9058] ? __pfx_vpanic+0x10/0x10 [ 186.368343][ T9058] panic+0xb9/0xc0 [ 186.368361][ T9058] ? __pfx_panic+0x10/0x10 [ 186.368383][ T9058] ? __pfx__printk+0x10/0x10 [ 186.368409][ T9058] check_panic_on_warn+0x89/0xb0 [ 186.368434][ T9058] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 186.368459][ T9058] ? __pfx_v9fs_set_super+0x10/0x10 [ 186.368480][ T9058] v9fs_get_tree+0x957/0xa90 [ 186.368502][ T9058] ? __pfx_v9fs_get_tree+0x10/0x10 [ 186.368524][ T9058] vfs_get_tree+0x8f/0x2b0 [ 186.368543][ T9058] do_new_mount+0x2a2/0xa30 [ 186.368564][ T9058] ? ns_capable+0x8a/0xf0 [ 186.368583][ T9058] ? __pfx_do_new_mount+0x10/0x10 [ 186.368602][ T9058] ? path_mount+0x61c/0xfe0 [ 186.368619][ T9058] ? user_path_at+0x44/0x60 [ 186.368646][ T9058] __se_sys_mount+0x317/0x410 [ 186.368668][ T9058] ? __pfx___se_sys_mount+0x10/0x10 [ 186.368689][ T9058] ? rcu_is_watching+0x15/0xb0 [ 186.368707][ T9058] ? __x64_sys_mount+0x20/0xc0 [ 186.368727][ T9058] do_syscall_64+0xfa/0xfa0 [ 186.368750][ T9058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.368768][ T9058] ? clear_bhb_loop+0x60/0xb0 [ 186.368786][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.368802][ T9058] RIP: 0033:0x7f630ff8ebe9 [ 186.368819][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.368834][ T9058] RSP: 002b:00007f630e1ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.368854][ T9058] RAX: ffffffffffffffda RBX: 00007f63101c5fa0 RCX: 00007f630ff8ebe9 [ 186.368868][ T9058] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 186.368880][ T9058] RBP: 00007f6310011e19 R08: 0000200000000580 R09: 0000000000000000 [ 186.368892][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.368904][ T9058] R13: 00007f63101c6038 R14: 00007f63101c5fa0 R15: 00007fff3a838d68 [ 186.368923][ T9058] [ 186.370393][ T9058] Kernel Offset: disabled