last executing test programs: 3.832656747s ago: executing program 1 (id=16460): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560c, 0x0) 3.534598725s ago: executing program 4 (id=16463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) 3.407124362s ago: executing program 1 (id=16464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.189020492s ago: executing program 4 (id=16466): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000004c0)="0ff6", 0x2}, {0x0}], 0x2) 2.995729s ago: executing program 3 (id=16468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x22a, 0x0) 2.731319439s ago: executing program 1 (id=16470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8, 0xb, 0xbe2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) 2.684473541s ago: executing program 4 (id=16471): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000980)={0xa, 0x0, 0xfffffffc, @mcast1, 0xfffffffd}, 0x18, 0x0}}], 0x1, 0x40810) 2.540566769s ago: executing program 2 (id=16472): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101440) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 2.395393276s ago: executing program 0 (id=16473): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) 2.39057711s ago: executing program 3 (id=16474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x17, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.09636113s ago: executing program 4 (id=16475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0x1, &(0x7f0000000380)=""/92, &(0x7f0000000400)=0x5c) 2.078191629s ago: executing program 1 (id=16476): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) 2.031067916s ago: executing program 2 (id=16477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc5) 1.869432411s ago: executing program 0 (id=16478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x4e4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4d0, 0x1, [@m_police={0x4cc, 0x1, 0x0, 0x0, {{0xb}, {0x4a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xe61, 0x2, 0xc, 0x7e80, 0x100, 0x8, 0x6, 0xfba, 0x2, 0xffff, 0x7, 0xd4, 0xfffffffa, 0x3, 0xffffff22, 0x9, 0x3, 0x3e5, 0x3, 0x5, 0x40, 0x5, 0x5, 0x40, 0x6, 0x9, 0x9, 0x4, 0xffffffff, 0x1, 0x9, 0x401, 0xb, 0x4, 0x0, 0x4b, 0x8, 0x100020, 0x5, 0x7, 0x48e2, 0xb, 0x8, 0x80000001, 0x8f9, 0x358b, 0x7, 0x8, 0xffff3803, 0x0, 0x61, 0x8, 0x10, 0x5, 0x2, 0x1, 0x7fffffff, 0x6, 0x6, 0x84d1, 0x8, 0x7, 0x120, 0x800, 0x8, 0x8, 0xca, 0x8, 0x9, 0xfc000000, 0x7, 0x4, 0x0, 0xcc3, 0x40, 0x9, 0x10001, 0x3, 0x6, 0x10000, 0x5, 0x1, 0x5, 0x7fff, 0x401, 0xf, 0x8, 0xe, 0xc, 0x3, 0x4, 0x0, 0x5, 0x8, 0x3, 0x5, 0x0, 0x26, 0x100, 0xb, 0x6, 0x0, 0x8, 0x8, 0x4, 0x14, 0x40100, 0x3, 0x1, 0x3, 0x1000, 0x80000001, 0x2, 0x4284, 0x4a9, 0x2, 0x400, 0x8, 0x200, 0x1e, 0x1e, 0x1, 0x100, 0x9, 0xfe, 0x6, 0x7, 0xce, 0x7fff, 0x8001, 0x124b, 0xfce8, 0x3b, 0x80000001, 0x8, 0x5, 0x9, 0x69c3, 0x1, 0x6, 0x5, 0x8, 0x9700, 0x9, 0x3, 0x95, 0x2, 0x7, 0x4, 0xfffffffa, 0x80000001, 0x6, 0x0, 0x8, 0x5, 0x8, 0x1, 0x7, 0x7, 0x1, 0x7fffffff, 0x0, 0x7, 0x1, 0x5, 0x1, 0x4, 0x0, 0x8, 0x0, 0xfb5, 0xa, 0x65d, 0x8, 0x7, 0x6, 0x3, 0x100, 0x4, 0x40, 0x3ff, 0x9, 0xb, 0x8, 0x6b20, 0x6, 0xfffffffa, 0x4, 0xb7fa, 0x7, 0x1, 0x5, 0x0, 0x6b, 0x8, 0x800a4, 0x5, 0x4, 0x5, 0xffff0001, 0x2, 0x7, 0x6880, 0x400, 0x8, 0x3, 0x2, 0x7, 0xc2ec, 0x7, 0x4, 0x2, 0x9, 0x7, 0x3, 0x8, 0xd4, 0x1, 0x89, 0x4, 0x9a8, 0x8001, 0x34d4, 0x1, 0x7, 0x0, 0x6, 0x357, 0x935, 0x80000000, 0x0, 0xfffffffc, 0x8, 0xfff, 0x8001, 0xfffeffff, 0x100, 0x977, 0xa, 0xe582, 0xbe, 0x8, 0x9, 0x11, 0x8, 0x1ff, 0x2, 0x1, 0x17b8, 0x3, 0xdf9c, 0x639, 0x8, 0x1ff, 0x101]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x4, 0xffffffff, 0x4a5, 0xe3c0, {0x5, 0x2, 0x8, 0x0, 0x1c, 0x6}, {0x5e, 0x2, 0x800, 0x8000, 0x6}, 0x2, 0x9, 0x80}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4e4}}, 0x0) 1.7792991s ago: executing program 3 (id=16479): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8) 1.560238019s ago: executing program 2 (id=16480): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x9, 0x0, @generic=0x10, 0x80}) 1.46120099s ago: executing program 4 (id=16481): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002680)={0x8, @raw_data="87d94989ee19c008341669994db6a283ccb1222fac9a1863a6b0da54c719f423b30187b1a59955d02a6b2287af2d95dcb5959af7ed687b12c55be87f79a242a3db7d1d116d8c2d0e5db8e14d414f41429b8c31532e7db3880a79dfbd5cd4e0d078daa262b06ccbce053c44862b542c3e7caa32fce5775cce3851758799b7d1faae6dcd02d003363cff9386d2d53bbc84c705e950b56e87444489fd452e6ed775e6a8c4747e1ce09fe9b9539aefb4b8b0d0f6991d1ca3f54963960e68d2ec329f725191a8ec87efd2"}) 1.325223681s ago: executing program 0 (id=16482): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), 0x0, 0x0, 0x2) 1.256006723s ago: executing program 3 (id=16483): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000624000/0x3000)=nil], 0x0, 0x0, 0x2) 1.113095841s ago: executing program 1 (id=16484): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.023986477s ago: executing program 4 (id=16485): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.023789695s ago: executing program 2 (id=16486): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010a}) 876.159672ms ago: executing program 0 (id=16487): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x998) 632.057655ms ago: executing program 3 (id=16488): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x4) 552.594612ms ago: executing program 2 (id=16489): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 453.307398ms ago: executing program 0 (id=16490): setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00007d8000/0x1000)=nil) 348.854968ms ago: executing program 1 (id=16491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d60000000400000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002240), &(0x7f0000002300), 0x8001, r0}, 0x38) 100.772924ms ago: executing program 2 (id=16492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100110000002c00018014000300fe8800000000000000000000000001011400000000000000040000000000ffff0a0101023c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400000000000000000000000000000000003c0002800c00028005000100000000002c000180080003"], 0xc8}}, 0x0) 3.373438ms ago: executing program 0 (id=16493): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x314, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x39c}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) 0s ago: executing program 3 (id=16494): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2001, 0x0) ioctl$BLKPBSZGET(r0, 0x80041284, &(0x7f0000000000)) kernel console output (not intermixed with test programs): alNumber: syz [ 2947.811758][ T24] usb 4-1: config 0 descriptor?? [ 2948.251837][ T7245] usb 4-1: USB disconnect, device number 74 [ 2948.768731][T10977] netlink: 'syz.4.13890': attribute type 4 has an invalid length. [ 2949.103827][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13892'. [ 2949.113404][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13892'. [ 2953.124311][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13925'. [ 2954.193822][T11103] loop3: detected capacity change from 0 to 8 [ 2954.372191][T11103] SQUASHFS error: Failed to read block 0x2d7: -5 [ 2954.379232][T11103] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 2954.432947][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13935'. [ 2954.447058][T11103] SQUASHFS error: Failed to read block 0x8f: -5 [ 2954.463229][ T30] audit: type=1800 audit(3079.875:932): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13933" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 2954.721928][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13936'. [ 2955.151202][T11125] ieee802154 phy0 wpan0: encryption failed: -22 [ 2955.704060][T11135] netlink: 'syz.0.13942': attribute type 1 has an invalid length. [ 2956.354739][ T7245] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2956.544538][ T7245] usb 2-1: Using ep0 maxpacket: 16 [ 2956.584216][ T7245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2956.618122][ T7245] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 2956.627421][ T7245] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2956.642097][ T7245] usb 2-1: config 8 has no interface number 0 [ 2956.650117][ T7245] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2956.663818][ T7245] usb 2-1: config 8 interface 132 has no altsetting 0 [ 2956.800925][ T7245] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 2956.810503][ T7245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2956.820867][ T7245] usb 2-1: Product: syz [ 2956.825300][ T7245] usb 2-1: Manufacturer: syz [ 2956.830914][ T7245] usb 2-1: SerialNumber: syz [ 2957.260673][ T7245] usb-storage 2-1:8.132: USB Mass Storage device detected [ 2957.298274][ T24] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2957.298370][ T7245] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 2957.405398][ T7245] usb 2-1: USB disconnect, device number 102 [ 2957.538864][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2957.548623][ T24] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2957.556907][ T24] usb 3-1: Product: syz [ 2957.619628][ T24] usb 3-1: config 0 descriptor?? [ 2957.655873][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2957.666406][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2957.843221][ T24] usb 3-1: USB disconnect, device number 101 [ 2957.852271][ T24] ftdi_sio 3-1:0.0: device disconnected [ 2958.428954][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13961'. [ 2959.123591][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2959.208358][T11234] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.328309][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2959.337991][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.401131][ T24] usb 2-1: config 0 descriptor?? [ 2959.424170][ T24] cp210x 2-1:0.0: cp210x converter detected [ 2959.666967][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2959.850734][ T24] usb 2-1: USB disconnect, device number 103 [ 2959.871943][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2959.884531][ T24] cp210x 2-1:0.0: device disconnected [ 2960.019095][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13972'. [ 2960.105872][T11253] loop2: detected capacity change from 0 to 1024 [ 2960.287140][T11253] fuse: Bad value for 'fd' [ 2960.630008][ T2950] hfsplus: b-tree write err: -5, ino 4 [ 2961.350732][T11291] xt_limit: Overflow, try lower: 0/0 [ 2961.653820][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13991'. [ 2962.100598][T11307] kAFS: No cell specified [ 2962.441575][ T7245] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2962.657053][ T7245] usb 3-1: Using ep0 maxpacket: 8 [ 2962.679819][ T7245] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2962.723118][ T7245] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2962.761167][ T7245] usb 3-1: string descriptor 0 read error: -22 [ 2962.768363][ T7245] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2962.777978][ T7245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.950111][ T7245] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2962.972045][ T7245] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2962.984084][ T7245] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2962.993276][ T7245] usb 3-1: media controller created [ 2963.164073][ T7245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2963.277813][T11341] netlink: 'syz.3.13993': attribute type 1 has an invalid length. [ 2963.629918][T11338] loop0: detected capacity change from 0 to 4096 [ 2963.686561][T11338] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 2963.956993][ T7245] usb 3-1: USB disconnect, device number 102 [ 2964.093827][T11338] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 2964.698063][T11373] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13999'. [ 2964.709789][T11373] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 2966.764816][T11419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2967.583251][T11441] kAFS: unable to lookup cell '' [ 2970.682800][T11508] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 2970.682800][T11508] z,@qJ#"h/.W1ȱnNC"C<+`#k' [ 2971.529153][T11526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14051'. [ 2972.217666][T11541] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 2975.269935][T11611] loop1: detected capacity change from 0 to 64 [ 2975.354580][T11611] hfs: invalid btree extent records [ 2975.360377][T11611] hfs: unable to open extent tree [ 2975.586940][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14086'. [ 2977.762793][ T30] audit: type=1107 audit(3104.863:933): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2980.086114][T11727] TCP: TCP_TX_DELAY enabled [ 2980.274234][T11729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2982.519285][T11768] loop2: detected capacity change from 0 to 4096 [ 2982.568287][T11768] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 2985.177634][T11837] netlink: 'syz.1.14161': attribute type 1 has an invalid length. [ 2985.185976][T11837] netlink: 'syz.1.14161': attribute type 1 has an invalid length. [ 2985.919244][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14167'. [ 2985.996915][T11858] netlink: 'syz.4.14169': attribute type 4 has an invalid length. [ 2987.962325][ T24] IPVS: starting estimator thread 0... [ 2988.064238][T11900] IPVS: using max 240 ests per chain, 12000 per kthread [ 2988.606326][T11899] loop0: detected capacity change from 0 to 4096 [ 2988.687759][T11899] ntfs3(loop0): It is recommened to use chkdsk. [ 2988.737097][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 2988.745683][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 2988.757869][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 2988.766424][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 2988.774761][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 2988.783084][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 2988.791554][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 2988.801901][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 2988.810776][T11899] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 2989.259233][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2989.266310][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2989.919682][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14198'. [ 2990.739794][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14203'. [ 2992.804552][T12063] loop1: detected capacity change from 0 to 1024 [ 2992.967868][T12063] fuse: Bad value for 'fd' [ 2993.233470][ T3468] hfsplus: b-tree write err: -5, ino 4 [ 2993.531086][T12072] loop2: detected capacity change from 0 to 2048 [ 2993.605966][T12072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2994.306288][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14225'. [ 2994.632175][T12095] loop1: detected capacity change from 0 to 2048 [ 2994.718903][T12100] loop0: detected capacity change from 0 to 64 [ 2994.810036][T12095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2994.981028][T12107] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 2994.981132][T12107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2994.998824][T12104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 2995.178857][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2996.177771][T12131] loop1: detected capacity change from 0 to 256 [ 2996.203684][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14236'. [ 2998.191489][T12170] netlink: 'syz.2.14250': attribute type 1 has an invalid length. [ 2998.199909][T12170] netlink: 244 bytes leftover after parsing attributes in process `syz.2.14250'. [ 2998.209515][T12170] NCSI netlink: No device for ifindex 0 [ 2999.165819][T12194] netlink: 'syz.4.14257': attribute type 2 has an invalid length. [ 2999.948223][T12212] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 3000.236954][T12215] openvswitch: netlink: IP tunnel dst address not specified [ 3001.706377][T12249] loop1: detected capacity change from 0 to 256 [ 3001.730283][T12250] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14276'. [ 3001.740280][T12250] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14276'. [ 3001.895625][T12256] misc userio: The device must be registered before sending interrupts [ 3003.363173][T12289] tmpfs: Unexpected value for 'grpquota' [ 3004.290791][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 3004.465690][T12303] loop3: detected capacity change from 0 to 2048 [ 3004.624355][T12309] loop2: detected capacity change from 0 to 128 [ 3004.654210][T12309] FAT-fs (loop2): bogus number of reserved sectors [ 3004.660954][T12309] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 3004.671244][T12309] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3004.694361][T12303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3005.157800][ T5842] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3005.401674][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 3005.451282][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 7 [ 3005.462943][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25697, setting to 1024 [ 3005.601262][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3005.611059][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.619671][ T5842] usb 3-1: Product: syz [ 3005.624259][ T5842] usb 3-1: Manufacturer: syz [ 3005.629099][ T5842] usb 3-1: SerialNumber: syz [ 3005.710385][ T5842] usb 3-1: config 0 descriptor?? [ 3005.764872][ T5842] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3005.774552][ T5842] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 3005.985155][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14302'. [ 3005.994896][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14302'. [ 3006.015777][ T5842] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3006.105651][ T5842] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 3006.114296][ T5842] em28xx 3-1:0.0: board has no eeprom [ 3006.260097][ T5842] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 3006.270301][ T5842] em28xx 3-1:0.0: dvb set to isoc mode. [ 3006.282904][T20314] em28xx 3-1:0.0: Binding DVB extension [ 3006.351918][ T5842] usb 3-1: USB disconnect, device number 103 [ 3006.361234][ T5842] em28xx 3-1:0.0: Disconnecting em28xx [ 3006.646220][T20314] em28xx 3-1:0.0: Registering input extension [ 3006.696137][ T5842] em28xx 3-1:0.0: Closing input extension [ 3006.803360][ T5842] em28xx 3-1:0.0: Freeing device [ 3007.670717][T12388] loop1: detected capacity change from 0 to 1024 [ 3008.291121][T12405] netlink: 'syz.3.14317': attribute type 23 has an invalid length. [ 3009.088417][T12420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3009.095989][T12420] IPv6: NLM_F_CREATE should be set when creating new route [ 3009.103694][T12420] IPv6: NLM_F_CREATE should be set when creating new route [ 3009.203891][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14334'. [ 3009.769734][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14327'. [ 3010.884146][T12460] loop3: detected capacity change from 0 to 256 [ 3010.941254][T12460] exfat: Deprecated parameter 'namecase' [ 3010.947613][T12460] exfat: Deprecated parameter 'utf8' [ 3010.953430][T12460] exfat: Deprecated parameter 'namecase' [ 3010.959643][T12460] exfat: Deprecated parameter 'utf8' [ 3011.167579][T12460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 3011.745091][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14343'. [ 3013.002811][T12509] netlink: 'syz.4.14352': attribute type 10 has an invalid length. [ 3013.063992][T12509] team0: Cannot enslave team device to itself [ 3013.538878][ T30] audit: type=1326 audit(3143.262:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12517 comm="syz.0.14355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3013.561294][ T30] audit: type=1326 audit(3143.262:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12517 comm="syz.0.14355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3013.870572][T12523] loop3: detected capacity change from 0 to 2048 [ 3013.955719][T12531] loop1: detected capacity change from 0 to 64 [ 3014.014806][T12523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3014.102189][T12523] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 3015.278254][T12556] loop3: detected capacity change from 0 to 1764 [ 3015.478508][T12556] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 3016.313844][T16085] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3016.377627][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14372'. [ 3016.518690][T16085] usb 2-1: Using ep0 maxpacket: 8 [ 3016.556714][T16085] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3016.580338][T16085] usb 2-1: config 4 interface 0 has no altsetting 0 [ 3016.624491][T16085] usb 2-1: string descriptor 0 read error: -22 [ 3016.631467][T16085] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3016.641084][T16085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3016.728146][T16085] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3016.795660][T16085] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3016.807812][T16085] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3016.815336][T16085] usb 2-1: media controller created [ 3016.927648][T12600] loop3: detected capacity change from 0 to 64 [ 3016.978465][T16085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3017.659186][T16085] usb 2-1: USB disconnect, device number 104 [ 3018.223468][T12639] delete_channel: no stack [ 3018.592345][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14387'. [ 3019.375671][T12664] cgroup: Invalid name [ 3022.445990][T12735] xt_ipcomp: unknown flags 12 [ 3023.348656][T12756] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 3023.948731][T12769] bond0: option all_slaves_active: invalid value (9) [ 3024.489991][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14435'. [ 3025.207518][T12800] raw_sendmsg: syz.2.14443 forgot to set AF_INET. Fix it! [ 3026.083703][T12819] loop1: detected capacity change from 0 to 512 [ 3026.356747][T12819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3026.778077][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3029.576941][ T5842] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3029.810266][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 3029.861361][ T5842] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 3029.870032][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.880668][ T5842] usb 3-1: config 0 has no interface number 0 [ 3029.947640][ T5842] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3029.957512][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.966032][ T5842] usb 3-1: Product: syz [ 3029.970568][ T5842] usb 3-1: Manufacturer: syz [ 3029.975379][ T5842] usb 3-1: SerialNumber: syz [ 3030.037251][ T5842] usb 3-1: config 0 descriptor?? [ 3030.079436][ T5842] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 3030.086363][ T5842] usb 3-1: No valid video chain found. [ 3030.257656][ T5842] usb 3-1: USB disconnect, device number 104 [ 3032.154096][T12954] loop0: detected capacity change from 0 to 4096 [ 3032.246835][T12964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3032.311923][T12954] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 3033.287969][T12986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14500'. [ 3033.311589][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14500'. [ 3033.402472][T12991] loop3: detected capacity change from 0 to 256 [ 3033.518214][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14501'. [ 3033.769790][T12991] FAT-fs (loop3): Directory bread(block 64) failed [ 3033.776866][T12991] FAT-fs (loop3): Directory bread(block 65) failed [ 3033.784144][T12991] FAT-fs (loop3): Directory bread(block 66) failed [ 3033.791127][T12991] FAT-fs (loop3): Directory bread(block 67) failed [ 3033.797998][T12991] FAT-fs (loop3): Directory bread(block 68) failed [ 3033.805099][T12991] FAT-fs (loop3): Directory bread(block 69) failed [ 3033.815759][T12991] FAT-fs (loop3): Directory bread(block 70) failed [ 3033.822764][T12991] FAT-fs (loop3): Directory bread(block 71) failed [ 3033.829785][T12991] FAT-fs (loop3): Directory bread(block 72) failed [ 3033.836725][T12991] FAT-fs (loop3): Directory bread(block 73) failed [ 3034.079112][T13000] netlink: 'syz.0.14502': attribute type 21 has an invalid length. [ 3034.087911][T13000] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14502'. [ 3034.097549][T13000] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14502'. [ 3034.212844][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14504'. [ 3034.944076][T13020] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 3034.950795][T13021] netlink: 'syz.1.14509': attribute type 10 has an invalid length. [ 3034.966698][T13021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14509'. [ 3034.976059][T13021] dummy0: left promiscuous mode [ 3034.981168][T13021] dummy0: left allmulticast mode [ 3034.991552][T13021] bridge0: port 3(dummy0) entered blocking state [ 3034.998772][T13021] bridge0: port 3(dummy0) entered disabled state [ 3035.006028][T13021] dummy0: entered allmulticast mode [ 3035.015339][T13021] dummy0: entered promiscuous mode [ 3035.023370][T13021] bridge0: port 3(dummy0) entered blocking state [ 3035.030496][T13021] bridge0: port 3(dummy0) entered forwarding state [ 3035.383570][T13027] loop0: detected capacity change from 0 to 64 [ 3037.029660][T13063] loop3: detected capacity change from 0 to 1024 [ 3037.119314][T13071] ip6gre1: entered promiscuous mode [ 3037.124817][T13071] ip6gre1: entered allmulticast mode [ 3037.743476][T13084] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 3037.752291][T13084] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 3037.763815][T13084] overlayfs: missing 'lowerdir' [ 3038.307787][T13095] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14532'. [ 3038.317815][T13095] 0X: renamed from caif0 [ 3038.497044][T13095] 0X: entered allmulticast mode [ 3038.502549][T13095] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 3039.884848][T13132] netlink: 'syz.2.14546': attribute type 1 has an invalid length. [ 3039.893211][T13132] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14546'. [ 3040.968696][T13154] netlink: 'syz.4.14554': attribute type 2 has an invalid length. [ 3040.977367][T13154] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14554'. [ 3041.228890][ T5842] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3041.448810][ T5842] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 3041.457593][ T5842] usb 2-1: config 0 has no interface number 0 [ 3041.464289][ T5842] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3041.527490][ T5842] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3041.537041][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.545995][ T5842] usb 2-1: Product: syz [ 3041.550427][ T5842] usb 2-1: Manufacturer: syz [ 3041.555510][ T5842] usb 2-1: SerialNumber: syz [ 3041.658694][ T5842] usb 2-1: config 0 descriptor?? [ 3041.742178][ T5842] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 3041.927187][ C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 3042.122498][ T5842] usb 2-1: USB disconnect, device number 105 [ 3042.168993][ T5842] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 3042.568687][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14566'. [ 3042.569743][ T8477] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 3042.784573][ T8477] usb 5-1: Using ep0 maxpacket: 32 [ 3042.825150][ T8477] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3042.835705][ T8477] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3042.845226][ T8477] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3042.858644][ T8477] usb 5-1: config 0 interface 0 has no altsetting 1 [ 3042.976936][ T8477] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 3042.986542][ T8477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.995392][ T8477] usb 5-1: Product: syz [ 3042.999891][ T8477] usb 5-1: Manufacturer: syz [ 3043.006367][ T8477] usb 5-1: SerialNumber: syz [ 3043.132016][ T8477] usb 5-1: config 0 descriptor?? [ 3043.516010][T13219] syz.2.14570: attempt to access beyond end of device [ 3043.516010][T13219] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3043.530067][T13219] XFS (nbd2): SB validate failed with error -5. [ 3043.565814][ T8477] usb 5-1: USB disconnect, device number 88 [ 3043.899979][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3044.258673][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14574'. [ 3044.304274][T13257] netlink: 'syz.2.14575': attribute type 1 has an invalid length. [ 3044.312328][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14575'. [ 3044.409447][T13259] netlink: 272 bytes leftover after parsing attributes in process `syz.0.14576'. [ 3046.536963][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3046.543983][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3047.045023][T13310] loop0: detected capacity change from 0 to 256 [ 3047.112100][T13310] MINIX-fs: mounting file system with errors, running fsck is recommended [ 3047.165898][T13310] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 3048.360531][T13334] loop1: detected capacity change from 0 to 2048 [ 3049.542543][T13368] program syz.3.14612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3050.124258][T13376] xt_TCPMSS: Only works on TCP SYN packets [ 3051.471733][T13407] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14637'. [ 3052.120555][T13420] overlayfs: missing 'lowerdir' [ 3054.779207][T13483] loop1: detected capacity change from 0 to 256 [ 3055.076610][ T30] audit: type=1326 audit(3187.830:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 3056.909673][T13523] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.14666'. [ 3057.173778][T13524] loop2: detected capacity change from 0 to 8 [ 3057.348871][T13524] SQUASHFS error: Unable to read inode 0xe3 [ 3060.324281][T13578] Invalid ELF header magic: != ELF [ 3062.213205][T13613] Unknown options in mask 7 [ 3062.370671][T13620] netlink: 'syz.2.14703': attribute type 4 has an invalid length. [ 3063.587107][T13642] loop1: detected capacity change from 0 to 1024 [ 3063.671231][T13642] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 3063.683123][T13642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 3063.693209][T13642] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 3063.775314][T13642] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.14711: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 3063.836185][T13642] EXT4-fs (loop1): no journal found [ 3063.841954][T13642] EXT4-fs (loop1): can't get journal size [ 3063.917509][T13642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3064.350983][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3065.181874][ T8477] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3065.377551][ T8477] usb 3-1: Using ep0 maxpacket: 8 [ 3065.431663][ T8477] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3065.477222][ T8477] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 3065.486859][ T8477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.495292][ T8477] usb 3-1: Product: syz [ 3065.495317][T13689] netlink: 11 bytes leftover after parsing attributes in process `syz.4.14728'. [ 3065.495542][T13689] netlink: 7 bytes leftover after parsing attributes in process `syz.4.14728'. [ 3065.499697][ T8477] usb 3-1: Manufacturer: syz [ 3065.499795][ T8477] usb 3-1: SerialNumber: syz [ 3065.549384][ T8477] usb 3-1: config 0 descriptor?? [ 3065.568254][ T8477] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 3065.574797][ T8477] usb 3-1: selecting invalid altsetting 1 [ 3065.958007][ T8477] usb 3-1: USB disconnect, device number 105 [ 3066.012375][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14729'. [ 3067.265908][T13736] program syz.1.14738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3067.362762][ T5842] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3067.556566][ T5842] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3067.566965][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3067.650049][ T5842] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3067.660473][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3067.668916][ T5842] usb 3-1: Product: syz [ 3067.674675][ T5842] usb 3-1: Manufacturer: syz [ 3067.679960][ T5842] usb 3-1: SerialNumber: syz [ 3067.717872][ T5842] usb 3-1: config 0 descriptor?? [ 3067.743144][ T5842] usb 3-1: selecting invalid altsetting 0 [ 3067.980954][ T8477] usb 3-1: USB disconnect, device number 106 [ 3068.233529][T13776] x_tables: duplicate underflow at hook 3 [ 3068.333084][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3069.803050][T13808] netlink: 'syz.4.14757': attribute type 4 has an invalid length. [ 3070.607597][T13825] netlink: 'syz.3.14764': attribute type 30 has an invalid length. [ 3070.616284][T13825] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 3070.626030][T13825] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 3070.939661][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14766'. [ 3071.549621][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14772'. [ 3072.537314][T13867] loop3: detected capacity change from 0 to 764 [ 3072.556253][T13867] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 3073.600520][T13892] loop2: detected capacity change from 0 to 256 [ 3073.953010][T13892] FAT-fs (loop2): Directory bread(block 64) failed [ 3073.959817][T13892] FAT-fs (loop2): Directory bread(block 65) failed [ 3073.967137][T13892] FAT-fs (loop2): Directory bread(block 66) failed [ 3073.974209][T13892] FAT-fs (loop2): Directory bread(block 67) failed [ 3073.981790][T13892] FAT-fs (loop2): Directory bread(block 68) failed [ 3073.988601][T13892] FAT-fs (loop2): Directory bread(block 69) failed [ 3073.995781][T13892] FAT-fs (loop2): Directory bread(block 70) failed [ 3074.002720][T13892] FAT-fs (loop2): Directory bread(block 71) failed [ 3074.009899][T13892] FAT-fs (loop2): Directory bread(block 72) failed [ 3074.016686][T13892] FAT-fs (loop2): Directory bread(block 73) failed [ 3074.753985][T13917] netlink: 'syz.1.14796': attribute type 10 has an invalid length. [ 3074.788008][T13917] syz_tun: entered promiscuous mode [ 3074.887891][T13917] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 3075.458868][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14802'. [ 3075.468475][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14802'. [ 3075.478222][T13931] netlink: 492 bytes leftover after parsing attributes in process `syz.3.14802'. [ 3076.163751][T13943] netlink: 'syz.3.14806': attribute type 1 has an invalid length. [ 3076.625449][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14809'. [ 3076.672057][T13953] loop3: detected capacity change from 0 to 256 [ 3076.858353][T13960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14810'. [ 3077.063463][T13953] FAT-fs (loop3): Directory bread(block 64) failed [ 3077.070888][T13953] FAT-fs (loop3): Directory bread(block 65) failed [ 3077.079511][T13953] FAT-fs (loop3): Directory bread(block 66) failed [ 3077.086964][T13953] FAT-fs (loop3): Directory bread(block 67) failed [ 3077.094146][T13953] FAT-fs (loop3): Directory bread(block 68) failed [ 3077.100916][T13953] FAT-fs (loop3): Directory bread(block 69) failed [ 3077.107920][T13953] FAT-fs (loop3): Directory bread(block 70) failed [ 3077.117949][T13953] FAT-fs (loop3): Directory bread(block 71) failed [ 3077.125040][T13953] FAT-fs (loop3): Directory bread(block 72) failed [ 3077.131978][T13953] FAT-fs (loop3): Directory bread(block 73) failed [ 3078.525276][T13993] netlink: 'syz.1.14824': attribute type 28 has an invalid length. [ 3078.534588][T13993] netlink: 'syz.1.14824': attribute type 3 has an invalid length. [ 3078.547505][T13993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14824'. [ 3078.849917][T13999] tmpfs: Bad value for 'mpol' [ 3081.280449][T14050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14844'. [ 3081.836056][T14062] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3082.384736][T14071] dvmrp1: entered allmulticast mode [ 3082.862522][T14083] netlink: 516 bytes leftover after parsing attributes in process `syz.4.14857'. [ 3083.232292][T14091] loop2: detected capacity change from 0 to 764 [ 3083.318135][T14091] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 3084.047674][T14110] hfs: unable to load iocharset "I#hIars8Ύ wѷ}+[S_. ,s$nFBlbSR,.R]^kRL/J}&o9b6\wm$xCdeOjocڅ`1҆m#CX^ݾO;;󣫭Xp!+ƇK=A a2HKA rp" [ 3084.080208][T14109] loop2: detected capacity change from 0 to 256 [ 3084.363774][T14104] loop1: detected capacity change from 0 to 4096 [ 3084.897476][T14124] xt_recent: Unsupported userspace flags (000000fe) [ 3085.062962][T14129] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3086.758389][ T8477] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3086.815827][ T5842] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3086.960601][ T8477] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3086.970322][ T8477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3086.978832][ T8477] usb 3-1: Product: syz [ 3086.983447][ T8477] usb 3-1: Manufacturer: syz [ 3086.988281][ T8477] usb 3-1: SerialNumber: syz [ 3087.071909][ T5842] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3087.078723][ T8477] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3087.081307][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.081451][ T5842] usb 2-1: Product: syz [ 3087.104196][ T5842] usb 2-1: Manufacturer: syz [ 3087.109179][ T5842] usb 2-1: SerialNumber: syz [ 3087.216916][T16085] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3087.222802][ T5842] usb 2-1: config 0 descriptor?? [ 3087.457932][ T5842] hso 2-1:0.0: Failed to find BULK IN ep [ 3087.546440][ T5842] usb-storage 2-1:0.0: USB Mass Storage device detected [ 3087.735514][ T8477] usb 3-1: USB disconnect, device number 107 [ 3087.848378][T14175] loop3: detected capacity change from 0 to 4096 [ 3087.895340][ T5842] usb 2-1: USB disconnect, device number 106 [ 3087.981176][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14888'. [ 3088.251746][T16085] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3088.259972][T16085] ath9k_htc: Failed to initialize the device [ 3088.296312][ T8477] usb 3-1: ath9k_htc: USB layer deinitialized [ 3088.313551][T14175] ntfs3(loop3): ino=b, mi_enum_attr [ 3088.319467][T14175] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 3088.346095][T14175] ntfs3(loop3): Failed to load $Extend (-22). [ 3088.352660][T14175] ntfs3(loop3): Failed to initialize $Extend. [ 3088.507664][T14212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14890'. [ 3088.536713][T14175] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000 [ 3088.545559][T14175] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 3089.915599][ T30] audit: type=1326 audit(3225.189:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.0.14899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3090.036938][ T30] audit: type=1326 audit(3225.242:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.0.14899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3090.061129][ T30] audit: type=1326 audit(3225.242:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.0.14899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3090.084314][ T30] audit: type=1326 audit(3225.242:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.0.14899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3090.279943][T14242] loop1: detected capacity change from 0 to 2048 [ 3090.321597][T14242] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 3090.427263][T14253] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3090.445509][ T6168] udevd[6168]: incorrect nilfs2 checksum on /dev/loop1 [ 3090.860071][T16085] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3091.059511][T16085] usb 3-1: Using ep0 maxpacket: 8 [ 3091.095904][T16085] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3091.108279][T16085] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3091.119058][T16085] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3091.221951][T16085] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3091.232010][T16085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3091.240264][T16085] usb 3-1: Product: syz [ 3091.244901][T16085] usb 3-1: Manufacturer: syz [ 3091.249727][T16085] usb 3-1: SerialNumber: syz [ 3091.358911][T16085] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 3091.569596][T16085] usb 3-1: USB disconnect, device number 108 [ 3091.747598][T14271] loop1: detected capacity change from 0 to 4096 [ 3091.797826][T14271] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 3092.043289][T14271] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 3093.390153][T14318] loop2: detected capacity change from 0 to 512 [ 3093.624044][T14318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3094.073991][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3095.141881][T14356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14934'. [ 3095.152483][T14356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14934'. [ 3097.132612][ T5842] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3097.337937][ T5842] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 3097.349182][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.410235][ T5842] usb 2-1: config 0 descriptor?? [ 3097.445951][ T5842] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 3097.825795][ T5842] gspca_sunplus: reg_w_riv err -71 [ 3097.831544][ T5842] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 3097.909676][ T5842] usb 2-1: USB disconnect, device number 107 [ 3098.521908][ T5842] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 3098.750147][ T5842] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 3098.759107][ T5842] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 3098.767849][ T5842] usb 3-1: config 0 has no interface number 0 [ 3098.774276][ T5842] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3098.784484][ T5842] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3098.793852][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3098.954106][ T5842] usb 3-1: config 0 descriptor?? [ 3098.964393][T14451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14964'. [ 3098.974206][T14451] netlink: 43 bytes leftover after parsing attributes in process `syz.1.14964'. [ 3098.986612][T14451] netlink: 'syz.1.14964': attribute type 5 has an invalid length. [ 3098.997217][T14451] netlink: 43 bytes leftover after parsing attributes in process `syz.1.14964'. [ 3099.199436][ T5842] usb 3-1: USB disconnect, device number 109 [ 3100.339363][T14484] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14973'. [ 3100.464005][T14488] overlay: ./file0 is not a directory [ 3100.659483][T14490] netlink: 'syz.0.14976': attribute type 1 has an invalid length. [ 3101.053316][T14501] loop2: detected capacity change from 0 to 128 [ 3102.703386][T14534] loop2: detected capacity change from 0 to 256 [ 3103.020691][T14534] FAT-fs (loop2): Directory bread(block 64) failed [ 3103.027947][T14534] FAT-fs (loop2): Directory bread(block 65) failed [ 3103.035309][T14534] FAT-fs (loop2): Directory bread(block 66) failed [ 3103.044541][T14534] FAT-fs (loop2): Directory bread(block 67) failed [ 3103.051894][T14534] FAT-fs (loop2): Directory bread(block 68) failed [ 3103.058846][T14534] FAT-fs (loop2): Directory bread(block 69) failed [ 3103.065968][T14534] FAT-fs (loop2): Directory bread(block 70) failed [ 3103.072917][T14534] FAT-fs (loop2): Directory bread(block 71) failed [ 3103.079990][T14534] FAT-fs (loop2): Directory bread(block 72) failed [ 3103.086787][T14534] FAT-fs (loop2): Directory bread(block 73) failed [ 3103.791134][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3103.800303][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3103.981114][T14562] xt_bpf: check failed: parse error [ 3104.648700][T14574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3105.461036][T14593] loop1: detected capacity change from 0 to 256 [ 3105.549820][ T30] audit: type=1326 audit(3241.980:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3105.694839][ T30] audit: type=1326 audit(3242.012:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3105.718578][ T30] audit: type=1326 audit(3242.012:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.4.15013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3105.987109][T14593] FAT-fs (loop1): Directory bread(block 64) failed [ 3105.993926][T14593] FAT-fs (loop1): Directory bread(block 65) failed [ 3106.016849][T14593] FAT-fs (loop1): Directory bread(block 66) failed [ 3106.023649][T14593] FAT-fs (loop1): Directory bread(block 67) failed [ 3106.031234][T14593] FAT-fs (loop1): Directory bread(block 68) failed [ 3106.038200][T14593] FAT-fs (loop1): Directory bread(block 69) failed [ 3106.045211][T14593] FAT-fs (loop1): Directory bread(block 70) failed [ 3106.052111][T14593] FAT-fs (loop1): Directory bread(block 71) failed [ 3106.059058][T14593] FAT-fs (loop1): Directory bread(block 72) failed [ 3106.066063][T14593] FAT-fs (loop1): Directory bread(block 73) failed [ 3106.761806][T16085] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 3107.021829][T16085] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3107.031299][T16085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.085424][T16085] usb 4-1: config 0 descriptor?? [ 3107.490768][T16085] [drm:udl_init] *ERROR* Selecting channel failed [ 3107.571927][T16085] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 3107.578908][T16085] [drm] Initialized udl on minor 2 [ 3107.630990][T16085] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3107.640770][T16085] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 3107.665034][ T8477] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3107.715030][ T8477] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3107.724039][ T8477] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 3107.766156][T16085] usb 4-1: USB disconnect, device number 75 [ 3108.639884][T14668] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3111.738831][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15053'. [ 3114.718500][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15072'. [ 3115.624789][ T5842] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 3115.809062][ T5842] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 3115.809190][ T5842] usb 5-1: config 0 has no interface number 0 [ 3115.809305][ T5842] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid maxpacket 528, setting to 64 [ 3115.809451][ T5842] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 3115.840693][ T5842] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 3115.840833][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.840999][ T5842] usb 5-1: Product: syz [ 3115.841093][ T5842] usb 5-1: Manufacturer: syz [ 3115.841190][ T5842] usb 5-1: SerialNumber: syz [ 3115.859774][ T5842] usb 5-1: config 0 descriptor?? [ 3115.867989][T14781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3115.868637][T14781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3116.111210][T14781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3116.111731][T14781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3116.140139][ T5842] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, aa:52:e9:5d:a0:81 [ 3116.318752][T16085] usb 5-1: USB disconnect, device number 89 [ 3116.327987][T16085] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 3116.496394][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15080'. [ 3118.243113][T14845] loop1: detected capacity change from 0 to 764 [ 3120.284667][T14886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15105'. [ 3121.007886][T14899] loop3: detected capacity change from 0 to 1024 [ 3121.040338][T14899] hfsplus: Bad value for 'session' [ 3121.348604][ T5842] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3121.561269][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 3121.576555][ T5842] usb 4-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 3121.587633][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3121.706106][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3121.716435][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.725002][ T5842] usb 4-1: Product: syz [ 3121.729578][ T5842] usb 4-1: Manufacturer: syz [ 3121.734407][ T5842] usb 4-1: SerialNumber: syz [ 3121.800710][T14920] xt_bpf: check failed: parse error [ 3121.889974][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15116'. [ 3122.076115][ T5842] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 3122.209448][ T5842] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3122.319653][ T5842] usb 4-1: USB disconnect, device number 76 [ 3122.566999][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3123.246628][T14958] program syz.3.15122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3124.003937][T14972] netlink: 'syz.3.15126': attribute type 10 has an invalid length. [ 3124.012116][T14972] ipvlan1: left allmulticast mode [ 3124.031391][T14972] team0: Device ipvlan1 failed to register rx_handler [ 3124.991540][ T5842] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 3125.042214][T14997] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 3125.209338][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3125.252950][ T5842] usb 5-1: not running at top speed; connect to a high speed hub [ 3125.300387][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.311523][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3125.322864][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3125.332900][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 3125.343148][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3125.455193][ T5842] usb 5-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 3125.465046][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.482318][ T5842] usb 5-1: Product: syz [ 3125.486883][ T5842] usb 5-1: Manufacturer: syz [ 3125.493667][ T5842] usb 5-1: SerialNumber: syz [ 3125.584854][ T5842] ipaq 5-1:1.0: PocketPC PDA converter detected [ 3125.832222][ T5842] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 3125.953589][T15017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3126.033324][T16085] usb 5-1: USB disconnect, device number 90 [ 3126.126069][T15025] sctp: [Deprecated]: syz.3.15140 (pid 15025) Use of int in max_burst socket option. [ 3126.126069][T15025] Use struct sctp_assoc_value instead [ 3126.155270][T16085] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 3126.167372][T16085] ipaq 5-1:1.0: device disconnected [ 3126.181844][T15026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15141'. [ 3126.559955][T15038] netlink: 'syz.2.15142': attribute type 14 has an invalid length. [ 3126.952598][ T5842] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3127.166781][T15055] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3127.200859][ T5842] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3127.210332][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.218742][ T5842] usb 2-1: Product: syz [ 3127.223119][ T5842] usb 2-1: Manufacturer: syz [ 3127.228592][ T5842] usb 2-1: SerialNumber: syz [ 3127.363436][ T5842] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3127.447017][T20314] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3127.449901][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15149'. [ 3127.465909][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15149'. [ 3128.126178][ T5842] usb 2-1: USB disconnect, device number 108 [ 3128.203914][T15072] loop2: detected capacity change from 0 to 512 [ 3128.273109][T15072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3128.346564][T15072] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.15152: invalid indirect mapped block 4294967295 (level 0) [ 3128.411555][T15072] EXT4-fs (loop2): Remounting filesystem read-only [ 3128.429562][T15072] EXT4-fs (loop2): 1 orphan inode deleted [ 3128.435871][T15072] EXT4-fs (loop2): 1 truncate cleaned up [ 3128.444722][T15072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3128.459052][T20314] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3128.466909][T20314] ath9k_htc: Failed to initialize the device [ 3128.497399][ T5842] usb 2-1: ath9k_htc: USB layer deinitialized [ 3128.965658][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3130.132422][T15114] netlink: 316 bytes leftover after parsing attributes in process `syz.3.15165'. [ 3131.091668][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15171'. [ 3131.892127][ T30] audit: type=1326 audit(3270.240:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.2.15179" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 3133.227185][T15211] netlink: 'syz.2.15188': attribute type 2 has an invalid length. [ 3133.236676][T15211] netlink: 'syz.2.15188': attribute type 1 has an invalid length. [ 3134.039647][T15228] netlink: 'syz.1.15195': attribute type 3 has an invalid length. [ 3134.563550][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15198'. [ 3134.573291][T15238] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 3134.582840][T15238] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 3135.171087][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15204'. [ 3135.180689][T15251] netlink: 'syz.2.15204': attribute type 3 has an invalid length. [ 3135.260443][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15205'. [ 3135.271432][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15205'. [ 3135.280681][T15253] netlink: 'syz.3.15205': attribute type 6 has an invalid length. [ 3135.909047][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15209'. [ 3135.919092][T15266] netlink: 75 bytes leftover after parsing attributes in process `syz.2.15209'. [ 3135.941881][T15267] netlink: 'syz.0.15210': attribute type 1 has an invalid length. [ 3135.987555][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15212'. [ 3137.261330][T15282] loop2: detected capacity change from 0 to 4096 [ 3137.546510][T16085] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 3137.742178][T16085] usb 4-1: Using ep0 maxpacket: 8 [ 3137.826339][T16085] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 3137.836239][T16085] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3137.844971][T16085] usb 4-1: Product: syz [ 3137.849363][T16085] usb 4-1: Manufacturer: syz [ 3137.854401][T16085] usb 4-1: SerialNumber: syz [ 3137.988937][T16085] usb 4-1: config 0 descriptor?? [ 3138.557264][T16085] usb 4-1: USB disconnect, device number 77 [ 3138.704715][T15329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3138.712328][T15329] IPv6: NLM_F_CREATE should be set when creating new route [ 3138.719856][T15329] IPv6: NLM_F_CREATE should be set when creating new route [ 3139.068778][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3139.939882][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15235'. [ 3140.083943][T15357] dvmrp0: entered allmulticast mode [ 3140.281978][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15239'. [ 3140.793914][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15241'. [ 3141.443312][T15386] siw: device registration error -23 [ 3141.628277][T15390] loop2: detected capacity change from 0 to 1764 [ 3141.795931][T15390] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 3143.762526][T15436] loop3: detected capacity change from 0 to 1024 [ 3143.805629][T15436] EXT4-fs: Ignoring removed bh option [ 3143.811843][T15436] EXT4-fs: inline encryption not supported [ 3143.881456][T15436] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 3143.978291][T15436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e018, mo2=0000] [ 3144.032498][T15436] System zones: 0-1, 3-12 [ 3144.133516][T15436] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.15263: lblock 1 mapped to illegal pblock 1 (length 1) [ 3144.190231][T15436] Quota error (device loop3): write_blk: dquota write failed [ 3144.198283][T15436] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 3144.208938][T15436] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.15263: Failed to acquire dquot type 0 [ 3144.294074][T15436] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.15263: Freeing blocks not in datazone - block = 0, count = 4096 [ 3144.360831][T15436] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.15263: Invalid inode bitmap blk 0 in block_group 0 [ 3144.386724][T30549] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 3144.387112][T15436] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 3144.414838][T30549] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 3144.423838][T30549] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 3144.473666][T15436] EXT4-fs (loop3): 1 orphan inode deleted [ 3144.482983][T15436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3144.636249][T15436] EXT4-fs error (device loop3): ext4_search_dir:1476: inode #2: block 16: comm syz.3.15263: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 3144.947197][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3146.261662][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15281'. [ 3146.300875][T15495] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 3148.434752][T15543] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 3148.447552][T15543] bond0: (slave lo): Error: Device can not be enslaved while up [ 3149.533505][T15563] netlink: 'syz.3.15304': attribute type 12 has an invalid length. [ 3150.205943][T15572] bond0: (slave bridge0): Releasing backup interface [ 3150.243255][T15572] bridge0: port 3(vlan1) entered disabled state [ 3150.250895][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.259424][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.410929][T15572] team0: Port device dummy0 removed [ 3150.441078][T15572] bridge_slave_0: left allmulticast mode [ 3150.447103][T15572] bridge_slave_0: left promiscuous mode [ 3150.454007][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.500374][T15572] bridge_slave_1: left allmulticast mode [ 3150.506544][T15572] bridge_slave_1: left promiscuous mode [ 3150.519180][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.621717][T15572] bond0: (slave bond_slave_0): Releasing backup interface [ 3150.729113][T15572] bond0: (slave bond_slave_1): Releasing backup interface [ 3150.890212][T15572] team0: Port device team_slave_0 removed [ 3150.987129][T15572] team0: Port device team_slave_1 removed [ 3150.997670][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3151.005547][T15572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3151.071126][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3151.078860][T15572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3151.172614][T15572] vlan1: left allmulticast mode [ 3151.177749][T15572] veth0_vlan: left allmulticast mode [ 3151.183598][T15572] vlan1: left promiscuous mode [ 3151.190465][T15572] bridge0: port 3(vlan1) entered disabled state [ 3151.263683][T15572] veth1_vlan: left allmulticast mode [ 3151.298922][T15572] team0: Port device macvlan0 removed [ 3151.434322][T15572] team0: Port device netdevsim1 removed [ 3151.504385][T15577] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 3151.513877][T15577] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 3151.524819][T15577] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 3151.534326][T15577] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 3151.543610][T15577] geneve4: entered allmulticast mode [ 3152.482235][T20314] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 3152.655568][T20314] usb 4-1: Using ep0 maxpacket: 32 [ 3152.711561][T20314] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 3152.720146][T20314] usb 4-1: config 0 has no interface number 0 [ 3152.726508][T20314] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3152.737967][T20314] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 3152.749979][T20314] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 3152.763786][T20314] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 3152.774594][T20314] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 3152.786768][T20314] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3152.797049][T20314] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3152.807340][T20314] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 2 [ 3152.817529][T20314] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3153.025683][T20314] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 3153.035437][T20314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3153.044526][T20314] usb 4-1: Product: syz [ 3153.050191][T20314] usb 4-1: Manufacturer: syz [ 3153.055358][T20314] usb 4-1: SerialNumber: syz [ 3153.121525][T20314] usb 4-1: config 0 descriptor?? [ 3153.138171][T15604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3153.168070][T15604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3153.200236][T20314] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 3153.209343][T20314] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 3153.254603][T20314] scsi host1: microtekX6 [ 3153.401019][T20314] usb 4-1: USB disconnect, device number 78 [ 3155.212149][T15682] loop1: detected capacity change from 0 to 512 [ 3155.283758][T15682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3155.408344][T15682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3155.538245][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3157.418356][T15732] netlink: 'syz.2.15359': attribute type 10 has an invalid length. [ 3157.426753][T15732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15359'. [ 3157.440522][T15732] team0: entered promiscuous mode [ 3157.446198][T15732] team_slave_0: entered promiscuous mode [ 3157.454044][T15732] team_slave_1: entered promiscuous mode [ 3157.464489][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 3157.478619][T15732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3157.846874][ T30] audit: type=1326 audit(3298.082:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3157.949739][ T30] audit: type=1326 audit(3298.124:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3157.971814][ T30] audit: type=1326 audit(3298.135:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3157.996172][ T30] audit: type=1326 audit(3298.189:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.020165][ T30] audit: type=1326 audit(3298.189:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.042929][ T30] audit: type=1326 audit(3298.189:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.065549][ T30] audit: type=1326 audit(3298.189:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.087692][ T30] audit: type=1326 audit(3298.210:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.111447][ T30] audit: type=1326 audit(3298.232:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.133796][ T30] audit: type=1326 audit(3298.232:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.4.15363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 3158.411540][T15749] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 3158.421302][T15749] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3159.489395][T15771] bond2: entered promiscuous mode [ 3159.494700][T15771] bond2: entered allmulticast mode [ 3159.501579][T15771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3160.723212][T15832] loop3: detected capacity change from 0 to 128 [ 3160.831463][T15832] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 3160.839756][T15832] FAT-fs (loop3): Filesystem has been set read-only [ 3160.864932][T15837] loop1: detected capacity change from 0 to 512 [ 3160.907591][T15837] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3161.050918][T15837] EXT4-fs error (device loop1): __ext4_iget:5025: inode #11: block 1: comm syz.1.15386: invalid block [ 3161.081312][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3161.088004][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3161.113274][T15837] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.15386: couldn't read orphan inode 11 (err -117) [ 3161.160117][T15837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3161.434963][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 3161.600315][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3161.636944][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3161.648810][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3161.659268][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3161.669640][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 3161.679968][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 3161.689431][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3161.800600][ T24] usb 5-1: config 0 descriptor?? [ 3162.052278][ T24] hdpvr 5-1:0.0: firmware version 0x8 dated [ 3162.154662][T15870] bridge0: port 4(erspan0) entered blocking state [ 3162.161851][T15870] bridge0: port 4(erspan0) entered disabled state [ 3162.169154][T15870] erspan0: entered allmulticast mode [ 3162.178209][T15870] erspan0: entered promiscuous mode [ 3162.186040][T15870] bridge0: port 4(erspan0) entered blocking state [ 3162.193145][T15870] bridge0: port 4(erspan0) entered forwarding state [ 3162.244407][ T24] hdpvr 5-1:0.0: device init failed [ 3162.250367][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 3162.288182][ T24] usb 5-1: USB disconnect, device number 91 [ 3163.522217][T15904] loop1: detected capacity change from 0 to 256 [ 3165.247959][T15941] tmpfs: User quota inode hardlimit too large. [ 3165.290416][T16085] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3165.460817][T16085] usb 2-1: Using ep0 maxpacket: 32 [ 3165.480643][T16085] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 3165.489409][T16085] usb 2-1: config 0 has no interface number 0 [ 3165.495757][T16085] usb 2-1: config 0 interface 12 has no altsetting 0 [ 3165.583484][T16085] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3165.593063][T16085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.601571][T16085] usb 2-1: Product: syz [ 3165.605968][T16085] usb 2-1: Manufacturer: syz [ 3165.611112][T16085] usb 2-1: SerialNumber: syz [ 3165.717277][T16085] usb 2-1: config 0 descriptor?? [ 3165.782945][T16085] f81534 2-1:0.12: required endpoints missing [ 3165.969055][T20314] usb 2-1: USB disconnect, device number 109 [ 3166.957682][T15986] loop2: detected capacity change from 0 to 512 [ 3167.057973][T15986] ext4: Unknown parameter 'fsuuid' [ 3167.805261][T16004] loop1: detected capacity change from 0 to 512 [ 3168.055886][T16004] __quota_error: 18 callbacks suppressed [ 3168.055971][T16004] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 3168.074164][T16004] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3168.084623][T16004] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.15431: Failed to acquire dquot type 1 [ 3168.137512][T16018] netlink: 'syz.4.15434': attribute type 2 has an invalid length. [ 3168.189507][T16004] EXT4-fs (loop1): 1 truncate cleaned up [ 3168.197825][T16004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3168.286352][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15435'. [ 3168.650828][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3168.969081][T20314] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 3169.261795][T20314] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3169.271361][T20314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3169.281556][T20314] usb 5-1: Product: syz [ 3169.290650][T20314] usb 5-1: Manufacturer: syz [ 3169.295932][T20314] usb 5-1: SerialNumber: syz [ 3169.455967][T20314] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3169.581982][ T5842] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3170.149912][T16085] usb 5-1: USB disconnect, device number 92 [ 3170.162452][ C0] vkms_vblank_simulate: vblank timer overrun [ 3170.581669][ T5842] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3170.589715][ T5842] ath9k_htc: Failed to initialize the device [ 3170.666421][T16085] usb 5-1: ath9k_htc: USB layer deinitialized [ 3171.339946][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15450'. [ 3171.392256][T16088] loop3: detected capacity change from 0 to 256 [ 3171.610504][T16088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 3172.245054][T16106] netlink: 'syz.3.15456': attribute type 10 has an invalid length. [ 3172.253706][T16106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15456'. [ 3172.884740][T16123] loop3: detected capacity change from 0 to 8 [ 3173.003113][T16123] cramfs: Error -3 while decompressing! [ 3173.008896][T16123] cramfs: ffffffff94e485e8(26)->ffff888058a7b000(4096) [ 3173.017863][T16123] cramfs: Error -3 while decompressing! [ 3173.024131][T16123] cramfs: ffffffff94e48602(26)->ffff88805e8f9000(4096) [ 3173.031640][T16123] cramfs: Error -3 while decompressing! [ 3173.037383][T16123] cramfs: ffffffff94e485e8(26)->ffff888058a7b000(4096) [ 3173.051197][ T30] audit: type=1800 audit(3314.400:973): pid=16123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15463" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 3173.720581][T16140] snd_dummy snd_dummy.0: control 3:0:8:syz0:0 is already present [ 3174.378202][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15473'. [ 3174.388586][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15473'. [ 3174.399416][T16154] netlink: 148 bytes leftover after parsing attributes in process `syz.3.15473'. [ 3174.786332][T16161] delete_channel: no stack [ 3174.812067][T16163] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15477'. [ 3174.835534][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15477'. [ 3175.649398][T16180] snd_dummy snd_dummy.0: control 3:0:8:syz0:0 is already present [ 3176.058935][T16189] netlink: 'syz.1.15487': attribute type 33 has an invalid length. [ 3177.131919][ T30] audit: type=1326 audit(3318.767:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.3.15494" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 3178.380200][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15506'. [ 3178.638410][T16238] loop3: detected capacity change from 0 to 4096 [ 3178.845448][T16249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3178.915325][T16238] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 3178.989382][T16238] Remounting filesystem read-only [ 3179.308548][T16258] rose0: entered allmulticast mode [ 3179.712770][T16268] loop2: detected capacity change from 0 to 128 [ 3179.767562][T16268] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 3180.979920][T16297] netlink: 'syz.2.15525': attribute type 13 has an invalid length. [ 3180.988078][T16297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15525'. [ 3181.020408][T16297] syz_tun: refused to change device tx_queue_len [ 3181.027145][T16297] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3181.123271][T16295] loop1: detected capacity change from 0 to 4096 [ 3181.138536][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15526'. [ 3181.292484][T16295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3181.397991][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3181.969165][T16323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3181.995309][ T5842] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 3182.200540][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3182.211359][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3182.278439][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 3182.287909][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3182.296483][ T5842] usb 3-1: SerialNumber: syz [ 3182.356736][ T5842] usb 3-1: 0:2 : does not exist [ 3182.809637][ T24] usb 3-1: USB disconnect, device number 110 [ 3182.943550][T16350] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15538'. [ 3183.089450][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3183.916583][T16377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15545'. [ 3184.584486][T16385] loop1: detected capacity change from 0 to 4096 [ 3184.607659][T16385] EXT4-fs: Ignoring removed orlov option [ 3184.613669][T16385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3184.723504][T16385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3184.871030][T16385] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 3184.882329][T16385] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 3184.892460][T16385] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.15548: Failed to acquire dquot type 1 [ 3185.052684][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3185.414876][T16411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15557'. [ 3185.425957][T16411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15557'. [ 3185.435389][T16411] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15557'. [ 3185.874005][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 3186.075043][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3186.084317][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3186.094920][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3186.104154][ T24] usb 5-1: config 1 has no interface number 0 [ 3186.110804][ T24] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 3186.121957][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 3186.159356][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3186.171043][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.179269][ T24] usb 5-1: Product: syz [ 3186.184068][ T24] usb 5-1: Manufacturer: syz [ 3186.188884][ T24] usb 5-1: SerialNumber: syz [ 3186.458982][ T24] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3186.545186][ T24] usb 5-1: USB disconnect, device number 93 [ 3187.149729][T16456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15568'. [ 3187.541431][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15572'. [ 3187.733708][ T30] audit: type=1326 audit(3330.161:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.2.15573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3187.755537][ C0] vkms_vblank_simulate: vblank timer overrun [ 3187.817963][ T30] audit: type=1326 audit(3330.204:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.2.15573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3187.840394][ T30] audit: type=1326 audit(3330.204:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.2.15573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3187.865091][ T30] audit: type=1326 audit(3330.204:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.2.15573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3188.874815][T16487] loop3: detected capacity change from 0 to 2048 [ 3188.999451][T16487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3189.888414][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15590'. [ 3190.203866][T16525] IPv6: NLM_F_CREATE should be specified when creating new route [ 3190.515161][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15594'. [ 3190.986164][T16536] loop3: detected capacity change from 0 to 2048 [ 3190.996416][T16541] binfmt_misc: register: failed to install interpreter file ./file1/file2 [ 3191.089091][T16536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3191.162322][T16545] loop1: detected capacity change from 0 to 256 [ 3191.209998][T16545] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3191.221257][T16545] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 3191.382858][T16545] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 3192.546905][T16577] loop3: detected capacity change from 0 to 64 [ 3194.616148][ T5842] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 3194.826413][ T5842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 3194.835998][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3194.898718][ T5842] usb 5-1: config 0 descriptor?? [ 3195.270707][T16648] lo speed is unknown, defaulting to 1000 [ 3195.311857][ T5842] ath6kl: Failed to read usb control message: -71 [ 3195.319105][ T5842] ath6kl: Unable to read the bmi data from the device: -71 [ 3195.326840][ T5842] ath6kl: Unable to recv target info: -71 [ 3195.397525][ T5842] ath6kl: Failed to init ath6kl core: -71 [ 3195.408975][ T5842] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3195.498180][ T5842] usb 5-1: USB disconnect, device number 94 [ 3196.289269][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15637'. [ 3196.298833][T16675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15637'. [ 3197.440493][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 3197.684645][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3197.694249][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3197.702856][ T24] usb 4-1: Product: syz [ 3197.707258][ T24] usb 4-1: Manufacturer: syz [ 3197.712302][ T24] usb 4-1: SerialNumber: syz [ 3197.825189][ T24] usb 4-1: config 0 descriptor?? [ 3198.029100][T16716] loop2: detected capacity change from 0 to 512 [ 3198.040711][T16718] binfmt_misc: register: failed to install interpreter file ./bus [ 3198.057664][ T24] hso 4-1:0.0: Failed to find BULK IN ep [ 3198.090155][ T24] usb-storage 4-1:0.0: USB Mass Storage device detected [ 3198.245765][ T24] usb 4-1: USB disconnect, device number 79 [ 3198.390449][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.15651: corrupted inode contents [ 3198.443374][T16716] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.15651: mark_inode_dirty error [ 3198.494249][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.15651: corrupted inode contents [ 3198.577957][T16716] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.15651: mark_inode_dirty error [ 3198.676107][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.15651: corrupted inode contents [ 3198.800716][T16716] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 3198.850263][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.15651: corrupted inode contents [ 3198.959021][T16716] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.15651: mark_inode_dirty error [ 3199.025585][T16716] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 3199.124281][T16716] EXT4-fs (loop2): 1 truncate cleaned up [ 3199.132555][T16716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3199.175230][T30549] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3199.185746][T30549] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 3199.363227][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15660'. [ 3199.372719][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15660'. [ 3199.380459][T16716] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3199.382428][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15660'. [ 3199.392423][T16716] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3199.411283][T16716] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.15651: Failed to acquire dquot type 1 [ 3199.784152][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3199.809101][T30964] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3199.821344][T30964] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 3199.995010][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15664'. [ 3200.507450][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15665'. [ 3200.516894][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15665'. [ 3200.972044][T16820] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.15672'. [ 3200.982205][T16820] netlink: zone id is out of range [ 3200.987526][T16820] netlink: zone id is out of range [ 3201.571046][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 3201.782745][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3201.793518][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3201.811233][T16840] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 3201.829862][ T24] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 3201.839569][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3201.847798][ T24] usb 4-1: Product: syz [ 3201.852379][ T24] usb 4-1: Manufacturer: syz [ 3201.857352][ T24] usb 4-1: SerialNumber: syz [ 3201.886549][T16842] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3201.922208][T16842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3201.955952][ T24] usb 4-1: config 0 descriptor?? [ 3201.998695][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 3202.038744][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3202.063810][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 3202.072919][ T24] usb 4-1: media controller created [ 3202.163440][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3202.616667][ T24] DVB: Unable to find symbol tda10046_attach() [ 3202.623530][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 3202.632668][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 3202.864658][ T24] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 3202.913034][ T24] usb 4-1: USB disconnect, device number 80 [ 3206.173972][T16944] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 3206.183375][T16944] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 3206.195396][T16944] overlayfs: missing 'lowerdir' [ 3206.203065][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15713'. [ 3206.421239][T16950] netlink: 'syz.1.15714': attribute type 2 has an invalid length. [ 3206.553469][T16953] xt_hashlimit: max too large, truncated to 1048576 [ 3206.712101][T16953] SET target dimension over the limit! [ 3207.869025][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 3208.132061][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3208.141636][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.150164][ T24] usb 4-1: Product: syz [ 3208.154964][ T24] usb 4-1: Manufacturer: syz [ 3208.159902][ T24] usb 4-1: SerialNumber: syz [ 3208.245146][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3208.351116][T16085] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3208.809936][ T5842] usb 4-1: USB disconnect, device number 81 [ 3208.955509][T16995] loop2: detected capacity change from 0 to 2048 [ 3209.064642][T16995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3209.343220][T16085] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3209.351361][T16085] ath9k_htc: Failed to initialize the device [ 3209.388489][ T5842] usb 4-1: ath9k_htc: USB layer deinitialized [ 3210.072432][T17027] tunl0: entered promiscuous mode [ 3210.127166][T17027] netlink: 'syz.2.15735': attribute type 4 has an invalid length. [ 3210.135483][T17027] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15735'. [ 3210.630962][T17037] bond0: (slave bond_slave_0): Releasing backup interface [ 3211.054647][T17046] netlink: 'syz.4.15744': attribute type 10 has an invalid length. [ 3211.069390][T17046] 8021q: adding VLAN 0 to HW filter on device team0 [ 3211.087824][T17046] bond0: (slave team0): Enslaving as an active interface with an up link [ 3211.127978][T17047] loop1: detected capacity change from 0 to 128 [ 3211.579719][T16085] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3211.786922][T16085] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 3211.795730][T16085] usb 2-1: config 0 has no interface number 1 [ 3211.802073][T16085] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 3211.812790][T16085] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3211.883725][T16085] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 3211.894482][T16085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3211.903189][T16085] usb 2-1: SerialNumber: syz [ 3211.935516][T16085] usb 2-1: config 0 descriptor?? [ 3212.159658][T16085] usb 2-1: Found UVC 0.00 device (0002:0000) [ 3212.167151][T16085] usb 2-1: No valid video chain found. [ 3212.292866][T16085] usb 2-1: USB disconnect, device number 110 [ 3212.494039][T17086] program syz.0.15754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3213.378875][T17105] loop1: detected capacity change from 0 to 164 [ 3213.498361][T17105] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 3213.606319][ T7245] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 3213.816275][ T7245] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 3213.825754][ T7245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3213.869937][ T7245] usb 5-1: config 0 descriptor?? [ 3214.033551][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15766'. [ 3214.044668][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15766'. [ 3214.093099][T17126] loop3: detected capacity change from 0 to 256 [ 3214.307219][ T7245] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 3214.314772][ T7245] hackrf 5-1:0.0: Could not detect board [ 3214.320951][ T7245] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 3214.429476][ T7245] usb 5-1: USB disconnect, device number 95 [ 3214.508496][T17126] FAT-fs (loop3): Directory bread(block 64) failed [ 3214.518114][T17126] FAT-fs (loop3): Directory bread(block 65) failed [ 3214.525693][T17126] FAT-fs (loop3): Directory bread(block 66) failed [ 3214.532451][T17126] FAT-fs (loop3): Directory bread(block 67) failed [ 3214.539634][T17126] FAT-fs (loop3): Directory bread(block 68) failed [ 3214.546542][T17126] FAT-fs (loop3): Directory bread(block 69) failed [ 3214.553573][T17126] FAT-fs (loop3): Directory bread(block 70) failed [ 3214.560325][T17126] FAT-fs (loop3): Directory bread(block 71) failed [ 3214.567461][T17126] FAT-fs (loop3): Directory bread(block 72) failed [ 3214.574499][T17126] FAT-fs (loop3): Directory bread(block 73) failed [ 3214.988329][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15770'. [ 3215.382368][T17150] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15771'. [ 3215.392175][T17150] @: entered promiscuous mode [ 3215.397470][T17150] bond_slave_1: entered promiscuous mode [ 3216.575930][T17179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15781'. [ 3217.134023][ T30] audit: type=1326 audit(3361.683:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.0.15787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3217.220628][T17192] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3217.249797][ T30] audit: type=1326 audit(3361.747:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.0.15787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3217.272557][ T30] audit: type=1326 audit(3361.747:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.0.15787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 3217.294497][ C1] vkms_vblank_simulate: vblank timer overrun [ 3217.724605][T17199] delete_channel: no stack [ 3218.320343][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3218.327226][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3218.497363][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15799'. [ 3220.264678][T17260] overlayfs: unescaped trailing colons in lowerdir mount option. [ 3220.893931][T17273] syz.2.15818 (17273): drop_caches: 0 [ 3221.493222][T17286] xt_ecn: cannot match TCP bits for non-tcp packets [ 3221.511647][T17285] loop2: detected capacity change from 0 to 256 [ 3221.737860][T17285] FAT-fs (loop2): Directory bread(block 64) failed [ 3221.745329][T17285] FAT-fs (loop2): Directory bread(block 65) failed [ 3221.752691][T17285] FAT-fs (loop2): Directory bread(block 66) failed [ 3221.759555][T17285] FAT-fs (loop2): Directory bread(block 67) failed [ 3221.766696][T17285] FAT-fs (loop2): Directory bread(block 68) failed [ 3221.774846][T17285] FAT-fs (loop2): Directory bread(block 69) failed [ 3221.782384][T17285] FAT-fs (loop2): Directory bread(block 70) failed [ 3221.789359][T17285] FAT-fs (loop2): Directory bread(block 71) failed [ 3221.796424][T17285] FAT-fs (loop2): Directory bread(block 72) failed [ 3221.803284][T17285] FAT-fs (loop2): Directory bread(block 73) failed [ 3221.875815][T17290] loop3: detected capacity change from 0 to 128 [ 3221.941852][ T52] Bluetooth: hci0: unexpected cc 0x0c2d length: 5 > 4 [ 3221.949226][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 3222.067820][T17295] QAT: failed to copy from user. [ 3223.752197][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15840'. [ 3226.047753][T17380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3226.344967][T17390] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3228.049968][T17427] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15872'. [ 3228.059631][T17427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15872'. [ 3228.208036][T17430] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15873'. [ 3228.218080][T17430] 0: renamed from veth0_virt_wifi (while UP) [ 3228.327185][T17430] 0: entered allmulticast mode [ 3228.335702][T17430] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 3229.029114][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15878'. [ 3229.511900][ T7245] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3229.653924][T17461] SET target dimension over the limit! [ 3229.682974][ T7245] usb 3-1: Using ep0 maxpacket: 8 [ 3229.733878][ T7245] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3229.742746][ T7245] usb 3-1: config 179 has no interface number 0 [ 3229.749571][ T7245] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3229.761044][ T7245] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3229.772690][ T7245] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3229.783170][ T7245] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3229.798167][ T7245] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3229.807840][ T7245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.995978][T17450] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3230.237394][T16085] usb 3-1: USB disconnect, device number 111 [ 3230.379081][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 3230.557246][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 3230.572233][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15890'. [ 3230.583028][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15890'. [ 3230.593321][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15890'. [ 3230.630365][ T24] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 3230.641159][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3230.654183][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 3230.666046][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 3230.676697][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3230.699322][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3230.708974][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3230.717461][ T24] usb 5-1: Manufacturer: syz [ 3230.744074][ T24] usb 5-1: config 0 descriptor?? [ 3231.129663][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15892'. [ 3231.226466][ T24] rc_core: IR keymap rc-hauppauge not found [ 3231.232734][ T24] Registered IR keymap rc-empty [ 3231.290960][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.332233][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.371178][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3231.441849][T17506] program syz.3.15894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3231.446783][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 3231.516599][T17506] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3231.544707][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.579203][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.623262][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.670999][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.723435][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.772680][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.808842][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.844069][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.853287][T17515] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15896'. [ 3231.886022][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.944111][ T24] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3231.985754][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3231.994443][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3232.085793][ T24] usb 5-1: USB disconnect, device number 96 [ 3232.107343][T17522] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15897'. [ 3232.523846][T17538] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 3232.850979][T17543] loop2: detected capacity change from 0 to 16 [ 3232.956959][T17543] erofs (device loop2): mounted with root inode @ nid 36. [ 3233.231299][ T7245] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3233.443533][ T7245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 3233.455246][ T7245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024 [ 3233.598910][ T7245] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3233.609688][ T7245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.618330][ T7245] usb 3-1: Product: syz [ 3233.623021][ T7245] usb 3-1: Manufacturer: syz [ 3233.627849][ T7245] usb 3-1: SerialNumber: syz [ 3233.717972][ T7245] usb 3-1: config 0 descriptor?? [ 3233.726856][T17543] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3233.786215][ T7245] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 3233.794840][ T7245] usb 3-1: No valid video chain found. [ 3233.795534][T16085] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 3233.916732][T17573] netlink: 1176 bytes leftover after parsing attributes in process `syz.1.15909'. [ 3233.975237][ T7245] usb 3-1: USB disconnect, device number 112 [ 3233.994971][ T8477] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 3234.022380][T16085] usb 5-1: Using ep0 maxpacket: 8 [ 3234.047299][T16085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 3234.105696][T16085] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3234.116080][T16085] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3234.124426][T16085] usb 5-1: Product: syz [ 3234.129065][T16085] usb 5-1: Manufacturer: syz [ 3234.133879][T16085] usb 5-1: SerialNumber: syz [ 3234.194117][ T8477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3234.205291][ T8477] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3234.217455][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 3234.229059][ T8477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3234.239817][ T8477] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3234.284971][ T8477] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3234.294915][ T8477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3234.303758][ T8477] usb 4-1: Product: syz [ 3234.308396][ T8477] usb 4-1: Manufacturer: syz [ 3234.313657][ T8477] usb 4-1: SerialNumber: syz [ 3234.368211][T16085] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 3234.377231][T16085] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 3234.385299][T16085] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 3234.393715][T16085] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 3234.406592][ T8477] usb 4-1: config 0 descriptor?? [ 3234.571233][T16085] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 3234.580539][T16085] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 3234.608129][T16085] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 3234.692289][ T8477] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 3234.723910][T16085] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 3234.852184][T16085] usb 5-1: USB disconnect, device number 97 [ 3234.877335][ T8477] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 3234.886533][ T8477] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 3234.897964][ T8477] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 3234.925208][T16085] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 3234.996595][T16085] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 3235.010942][T16085] visor 5-1:1.0: device disconnected [ 3235.096762][ T8477] usb 4-1: USB disconnect, device number 82 [ 3235.483238][T17627] loop1: detected capacity change from 0 to 256 [ 3235.600203][T17627] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 3237.686350][T17675] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3238.056725][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15934'. [ 3239.595217][T17709] loop1: detected capacity change from 0 to 1764 [ 3240.489850][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15953'. [ 3240.523303][T17733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3241.551278][T17762] netlink: 'syz.2.15962': attribute type 32 has an invalid length. [ 3241.560168][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15962'. [ 3241.570484][T17762] netlink: 'syz.2.15962': attribute type 32 has an invalid length. [ 3242.402633][ T30] audit: type=1800 audit(3388.795:982): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.15964" name="/newroot/3240/file0" dev="tmpfs" ino=16441 res=0 errno=0 [ 3243.415445][T17798] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 3243.507556][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15977'. [ 3244.601074][T17826] tmpfs: Unknown parameter '' [ 3245.344867][T17844] loop3: detected capacity change from 0 to 8 [ 3246.121453][ T30] audit: type=1326 audit(2000000002.059:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.16000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.144248][ T30] audit: type=1326 audit(2000000002.070:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.16000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.167037][ T30] audit: type=1326 audit(2000000002.070:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.2.16000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3247.134679][T17884] syz.1.16008: attempt to access beyond end of device [ 3247.134679][T17884] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3247.148494][T17884] FAT-fs (loop3): unable to read boot sector [ 3247.734542][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16014'. [ 3248.373534][T17913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16019'. [ 3249.597713][T17939] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16029'. [ 3249.842796][T17949] netlink: 'syz.2.16033': attribute type 3 has an invalid length. [ 3252.993422][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16059'. [ 3253.158038][ T30] audit: type=1326 audit(2000000009.591:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.1.16061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 3253.288579][ T30] audit: type=1326 audit(2000000009.656:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.1.16061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 3253.311515][ T30] audit: type=1326 audit(2000000009.656:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.1.16061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 3253.669452][T18034] loop3: detected capacity change from 0 to 128 [ 3253.745026][ T7245] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 3253.752611][T18034] FAT-fs (loop3): bogus logical sector size 65535 [ 3253.760417][T18034] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3253.774123][T18039] netlink: 296 bytes leftover after parsing attributes in process `syz.4.16065'. [ 3253.979957][ T7245] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 3253.988693][ T7245] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3254.004058][ T7245] usb 3-1: config 0 has no interface number 0 [ 3254.123710][ T7245] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3254.134383][ T7245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3254.146565][ T7245] usb 3-1: Product: syz [ 3254.150989][ T7245] usb 3-1: Manufacturer: syz [ 3254.157508][ T7245] usb 3-1: SerialNumber: syz [ 3254.288624][ T7245] usb 3-1: config 0 descriptor?? [ 3254.345872][ T7245] hub 3-1:0.31: bad descriptor, ignoring hub [ 3254.352316][ T7245] hub 3-1:0.31: probe with driver hub failed with error -5 [ 3254.366599][ T7245] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 3254.373792][ T7245] usb 3-1: No valid video chain found. [ 3254.515279][ T7245] usb 3-1: USB disconnect, device number 113 [ 3254.930229][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16072'. [ 3254.940072][T18066] netlink: 'syz.3.16072': attribute type 1 has an invalid length. [ 3254.948326][T18066] netlink: 'syz.3.16072': attribute type 1 has an invalid length. [ 3254.956450][T18066] netlink: 'syz.3.16072': attribute type 2 has an invalid length. [ 3254.964486][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16072'. [ 3255.052602][T18070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16073'. [ 3256.949619][T18107] netlink: 116 bytes leftover after parsing attributes in process `syz.0.16088'. [ 3256.959608][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16088'. [ 3256.969257][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16088'. [ 3256.978532][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16088'. [ 3258.913977][T18130] syz.2.16096 (18130): drop_caches: 2 [ 3260.068457][T18168] IPv6: Can't replace route, no match found [ 3260.261279][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16113'. [ 3260.940492][ T7245] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 3261.131646][ T7245] usb 4-1: Using ep0 maxpacket: 8 [ 3261.154686][ T7245] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3261.197201][ T7245] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 3261.207145][ T7245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3261.215592][ T7245] usb 4-1: Product: syz [ 3261.220085][ T7245] usb 4-1: Manufacturer: syz [ 3261.224915][ T7245] usb 4-1: SerialNumber: syz [ 3261.266036][ T7245] usb 4-1: config 0 descriptor?? [ 3261.301782][ T7245] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 3261.308380][ T7245] usb 4-1: selecting invalid altsetting 1 [ 3261.518717][ T7245] gspca_stk014: init reg: 0x00 [ 3261.523955][ T7245] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 3261.717831][ T7245] usb 4-1: USB disconnect, device number 83 [ 3262.228502][T18227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16129'. [ 3262.748559][T18236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16132'. [ 3262.758584][T18236] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3262.790755][T18239] loop2: detected capacity change from 0 to 512 [ 3262.877789][T18239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3262.884971][T18239] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 3262.954518][T18239] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3262.970706][T18239] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.16133: attempt to clear invalid blocks 2 len 1 [ 3263.009972][T18239] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.16133: invalid indirect mapped block 1819239214 (level 0) [ 3263.097548][T18239] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.16133: invalid indirect mapped block 1819239214 (level 1) [ 3263.143956][T18239] EXT4-fs (loop2): 1 truncate cleaned up [ 3263.152188][T18239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3263.179772][T18239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3264.901874][ T7245] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3265.167989][ T7245] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3265.177792][ T7245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3265.186921][ T7245] usb 3-1: Product: syz [ 3265.191561][ T7245] usb 3-1: Manufacturer: syz [ 3265.197779][ T7245] usb 3-1: SerialNumber: syz [ 3265.214695][T18296] netlink: 'syz.1.16148': attribute type 21 has an invalid length. [ 3265.223104][T18296] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16148'. [ 3265.233157][T18296] netlink: 'syz.1.16148': attribute type 4 has an invalid length. [ 3265.241367][T18296] netlink: 'syz.1.16148': attribute type 5 has an invalid length. [ 3265.249577][T18296] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16148'. [ 3265.343797][ T7245] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3265.484071][ T5842] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3265.888242][T16085] usb 3-1: USB disconnect, device number 114 [ 3266.101245][T18315] loop3: detected capacity change from 0 to 256 [ 3266.555593][ T5842] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3266.563515][ T5842] ath9k_htc: Failed to initialize the device [ 3266.635522][T16085] usb 3-1: ath9k_htc: USB layer deinitialized [ 3266.804116][T18334] netlink: 'syz.0.16158': attribute type 1 has an invalid length. [ 3267.133470][T18339] netlink: 184 bytes leftover after parsing attributes in process `syz.2.16159'. [ 3267.352462][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16163'. [ 3269.164856][T18387] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16178'. [ 3269.174724][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16178'. [ 3270.247267][T18409] SET target dimension over the limit! [ 3270.630042][T18419] loop3: detected capacity change from 0 to 256 [ 3270.666682][T18419] exfat: Deprecated parameter 'utf8' [ 3270.673471][T18419] exfat: Deprecated parameter 'namecase' [ 3270.812252][T18419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 3272.647392][T18483] netlink: 'syz.4.16204': attribute type 10 has an invalid length. [ 3272.689189][T18483] team0: Port device virt_wifi0 added [ 3273.271708][ T5842] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3273.477183][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 3273.519255][ T5842] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 3273.528051][ T5842] usb 3-1: config 4 has no interface number 0 [ 3273.534788][ T5842] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3273.546330][ T5842] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3273.556749][ T5842] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3273.566255][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3273.676021][T18507] veth1_vlan: left allmulticast mode [ 3273.744840][ T5842] hub 3-1:4.128: USB hub found [ 3273.833293][T18507] team0: Port device macvlan0 removed [ 3273.935108][ T5842] hub 3-1:4.128: 2 ports detected [ 3273.940468][ T5842] hub 3-1:4.128: Using single TT (err -22) [ 3274.065646][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16215'. [ 3274.131978][ T5842] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 3274.139076][ T5842] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 3274.251499][ T5842] usb 3-1: USB disconnect, device number 115 [ 3275.151467][T18543] netlink: 'syz.1.16223': attribute type 3 has an invalid length. [ 3275.614167][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3275.620944][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3275.789996][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16229'. [ 3275.915896][T18562] veth1_vlan: left allmulticast mode [ 3276.117700][T18562] team0: Port device macvlan0 removed [ 3277.346091][T18592] netlink: 'syz.2.16241': attribute type 13 has an invalid length. [ 3278.375959][T18615] Scaler: ================= START STATUS ================= [ 3278.383912][T18615] Scaler: ================== END STATUS ================== [ 3278.744285][T18624] netlink: 696 bytes leftover after parsing attributes in process `syz.3.16252'. [ 3278.797941][T18627] ipt_REJECT: ECHOREPLY no longer supported. [ 3279.213164][T18633] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.16255'. [ 3280.024961][T18653] tmpfs: Bad value for 'mpol' [ 3282.142742][T18696] openvswitch: netlink: Key type 221 is out of range max 32 [ 3285.462496][ T7245] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 3285.692957][ T7245] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 3285.705619][ T7245] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 3285.717458][ T7245] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 3285.729543][ T7245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3285.739592][ T7245] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 3285.846133][ T7245] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3285.855877][ T7245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.864588][ T7245] usb 4-1: Product: syz [ 3285.868960][ T7245] usb 4-1: Manufacturer: syz [ 3285.873904][ T7245] usb 4-1: SerialNumber: syz [ 3285.975066][ T7245] usb 4-1: config 0 descriptor?? [ 3285.987652][T18761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3286.035583][ T7245] usb 4-1: ucan: probing device on interface #0 [ 3286.042227][ T7245] usb 4-1: ucan: invalid out_ep MaxPacketSize [ 3286.048520][ T7245] usb 4-1: ucan: probe failed; try to update the device firmware [ 3286.232589][T16085] usb 4-1: USB disconnect, device number 84 [ 3286.502713][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.523911][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 3287.858429][T18824] loop2: detected capacity change from 0 to 512 [ 3288.036615][T18824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3288.049816][T18824] ext4 filesystem being mounted at /3153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3288.342876][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3291.298304][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16350'. [ 3292.025282][ T7245] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 3292.220179][ T7245] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 3292.229066][ T7245] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3292.237921][ T7245] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3292.248613][ T7245] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3292.258046][ T7245] usb 4-1: config 1 has no interface number 0 [ 3292.264450][ T7245] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3292.273976][ T7245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.402654][ T7245] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 3292.621325][ T7245] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 3292.630834][ T7245] snd_usb_pod 4-1:1.1: invalid control EP [ 3292.640160][ T7245] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 3292.647944][ T7245] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 3292.657904][ T7245] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 3292.771824][T18936] loop1: detected capacity change from 0 to 256 [ 3292.817132][ T8477] usb 4-1: USB disconnect, device number 85 [ 3292.995119][T18936] FAT-fs (loop1): Directory bread(block 64) failed [ 3293.002115][T18936] FAT-fs (loop1): Directory bread(block 65) failed [ 3293.010268][T18936] FAT-fs (loop1): Directory bread(block 66) failed [ 3293.017331][T18936] FAT-fs (loop1): Directory bread(block 67) failed [ 3293.024589][T18936] FAT-fs (loop1): Directory bread(block 68) failed [ 3293.031540][T18936] FAT-fs (loop1): Directory bread(block 69) failed [ 3293.038479][T18936] FAT-fs (loop1): Directory bread(block 70) failed [ 3293.045410][T18936] FAT-fs (loop1): Directory bread(block 71) failed [ 3293.052441][T18936] FAT-fs (loop1): Directory bread(block 72) failed [ 3293.059397][T18936] FAT-fs (loop1): Directory bread(block 73) failed [ 3295.305326][T18997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16381'. [ 3295.684842][T19005] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3295.696992][T19005] (unnamed net_device) (uninitialized): option arp_validate: invalid value (256) [ 3297.830825][T19056] loop1: detected capacity change from 0 to 256 [ 3298.348063][T19056] FAT-fs (loop1): Directory bread(block 64) failed [ 3298.355908][T19056] FAT-fs (loop1): Directory bread(block 65) failed [ 3298.363138][T19056] FAT-fs (loop1): Directory bread(block 66) failed [ 3298.369917][T19056] FAT-fs (loop1): Directory bread(block 67) failed [ 3298.377133][T19056] FAT-fs (loop1): Directory bread(block 68) failed [ 3298.384115][T19056] FAT-fs (loop1): Directory bread(block 69) failed [ 3298.391131][T19056] FAT-fs (loop1): Directory bread(block 70) failed [ 3298.397883][T19056] FAT-fs (loop1): Directory bread(block 71) failed [ 3298.404937][T19056] FAT-fs (loop1): Directory bread(block 72) failed [ 3298.413345][T19056] FAT-fs (loop1): Directory bread(block 73) failed [ 3298.586775][ T30] audit: type=1800 audit(2000000058.355:989): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16401" name="file2" dev="loop1" ino=76 res=0 errno=0 [ 3301.031538][T19129] netlink: 'syz.1.16426': attribute type 3 has an invalid length. [ 3301.509322][T19138] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16428'. [ 3302.680858][ T52] Bluetooth: hci0: connection err: -111 [ 3303.632717][T19191] loop1: detected capacity change from 0 to 256 [ 3303.988622][T19191] FAT-fs (loop1): Directory bread(block 64) failed [ 3303.995791][T19191] FAT-fs (loop1): Directory bread(block 65) failed [ 3304.002989][T19191] FAT-fs (loop1): Directory bread(block 66) failed [ 3304.009746][T19191] FAT-fs (loop1): Directory bread(block 67) failed [ 3304.016828][T19191] FAT-fs (loop1): Directory bread(block 68) failed [ 3304.023836][T19191] FAT-fs (loop1): Directory bread(block 69) failed [ 3304.030916][T19191] FAT-fs (loop1): Directory bread(block 70) failed [ 3304.037719][T19191] FAT-fs (loop1): Directory bread(block 71) failed [ 3304.047155][T19191] FAT-fs (loop1): Directory bread(block 72) failed [ 3304.054482][T19191] FAT-fs (loop1): Directory bread(block 73) failed [ 3308.006997][T19284] netlink: 'syz.1.16484': attribute type 10 has an invalid length. [ 3308.087191][T19284] team0: Port device geneve0 added [ 3308.271526][ T7245] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 3308.443874][ T7245] usb 5-1: Using ep0 maxpacket: 8 [ 3308.503588][ T7245] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 3308.512327][ T7245] usb 5-1: config 2 has no interface number 0 [ 3308.518729][ T7245] usb 5-1: config 2 interface 31 has no altsetting 0 [ 3308.617343][ T7245] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3308.628194][ T7245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3308.636983][ T7245] usb 5-1: Product: syz [ 3308.641373][ T7245] usb 5-1: Manufacturer: syz [ 3308.646328][ T7245] usb 5-1: SerialNumber: syz [ 3309.180059][ T7245] ===================================================== [ 3309.187923][ T7245] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0 [ 3309.198368][ T7245] mii_nway_restart+0x119/0x1e0 [ 3309.204075][ T7245] ch9200_bind+0x238/0xeb0 [ 3309.208737][ T7245] usbnet_probe+0xda1/0x3f40 [ 3309.213807][ T7245] usb_probe_interface+0xd42/0x12f0 [ 3309.219275][ T7245] really_probe+0x4dc/0xd90 [ 3309.224086][ T7245] __driver_probe_device+0x2ab/0x5d0 [ 3309.229596][ T7245] driver_probe_device+0x72/0x890 [ 3309.235500][ T7245] __device_attach_driver+0x568/0x9e0 [ 3309.241294][ T7245] bus_for_each_drv+0x403/0x620 [ 3309.246361][ T7245] __device_attach+0x3c1/0x650 [ 3309.251502][ T7245] device_initial_probe+0x32/0x40 [ 3309.256741][ T7245] bus_probe_device+0x3dc/0x5c0 [ 3309.262310][ T7245] device_add+0x13aa/0x1ba0 [ 3309.267154][ T7245] usb_set_configuration+0x31ea/0x38f0 [ 3309.272885][ T7245] usb_generic_driver_probe+0x109/0x2a0 [ 3309.281170][ T7245] usb_probe_device+0x3a7/0x690 [ 3309.286493][ T7245] really_probe+0x4dc/0xd90 [ 3309.293335][ T7245] __driver_probe_device+0x2ab/0x5d0 [ 3309.299324][ T7245] driver_probe_device+0x72/0x890 [ 3309.304831][ T7245] __device_attach_driver+0x568/0x9e0 [ 3309.310475][ T7245] bus_for_each_drv+0x403/0x620 [ 3309.315656][ T7245] __device_attach+0x3c1/0x650 [ 3309.320657][ T7245] device_initial_probe+0x32/0x40 [ 3309.326135][ T7245] bus_probe_device+0x3dc/0x5c0 [ 3309.331200][ T7245] device_add+0x13aa/0x1ba0 [ 3309.336037][ T7245] usb_new_device+0x15f8/0x2480 [ 3309.341127][ T7245] hub_event+0x4ffe/0x72d0 [ 3309.346245][ T7245] process_scheduled_works+0xc1d/0x1e80 [ 3309.352110][ T7245] worker_thread+0xea3/0x1500 [ 3309.357017][ T7245] kthread+0x6ce/0xf10 [ 3309.361486][ T7245] ret_from_fork+0x6d/0x90 [ 3309.366148][ T7245] ret_from_fork_asm+0x1a/0x30 [ 3309.371551][ T7245] [ 3309.374019][ T7245] Local variable buff created at: [ 3309.379268][ T7245] ch9200_mdio_read+0x3c/0x100 [ 3309.386261][ T7245] mii_nway_restart+0x8a/0x1e0 [ 3309.391689][ T7245] [ 3309.394166][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: kworker/0:2 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 3309.408306][ T7245] Tainted: [W]=WARN [ 3309.412237][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3309.422602][ T7245] Workqueue: usb_hub_wq hub_event [ 3309.428051][ T7245] ===================================================== [ 3309.435251][ T7245] Disabling lock debugging due to kernel taint [ 3309.441552][ T7245] Kernel panic - not syncing: kmsan.panic set ... [ 3309.448138][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: kworker/0:2 Tainted: G B W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 3309.462123][ T7245] Tainted: [B]=BAD_PAGE, [W]=WARN [ 3309.467269][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3309.477499][ T7245] Workqueue: usb_hub_wq hub_event [ 3309.482770][ T7245] Call Trace: [ 3309.486173][ T7245] [ 3309.489218][ T7245] dump_stack_lvl+0x216/0x2d0 [ 3309.494092][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.500082][ T7245] dump_stack+0x1e/0x24 [ 3309.504414][ T7245] panic+0x4e5/0xcf0 [ 3309.508494][ T7245] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 3309.515071][ T7245] kmsan_report+0x2ca/0x2d0 [ 3309.519727][ T7245] ? bus_probe_device+0x3dc/0x5c0 [ 3309.524925][ T7245] ? ret_from_fork+0x6d/0x90 [ 3309.529707][ T7245] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 3309.535775][ T7245] ? __msan_warning+0x95/0x120 [ 3309.540729][ T7245] ? mii_nway_restart+0x119/0x1e0 [ 3309.545988][ T7245] ? ch9200_bind+0x238/0xeb0 [ 3309.550745][ T7245] ? usbnet_probe+0xda1/0x3f40 [ 3309.555707][ T7245] ? usb_probe_interface+0xd42/0x12f0 [ 3309.561311][ T7245] ? really_probe+0x4dc/0xd90 [ 3309.566195][ T7245] ? __driver_probe_device+0x2ab/0x5d0 [ 3309.571867][ T7245] ? driver_probe_device+0x72/0x890 [ 3309.577256][ T7245] ? __device_attach_driver+0x568/0x9e0 [ 3309.582993][ T7245] ? bus_for_each_drv+0x403/0x620 [ 3309.588198][ T7245] ? __device_attach+0x3c1/0x650 [ 3309.593345][ T7245] ? device_initial_probe+0x32/0x40 [ 3309.598752][ T7245] ? bus_probe_device+0x3dc/0x5c0 [ 3309.603939][ T7245] ? device_add+0x13aa/0x1ba0 [ 3309.608781][ T7245] ? usb_set_configuration+0x31ea/0x38f0 [ 3309.614621][ T7245] ? usb_generic_driver_probe+0x109/0x2a0 [ 3309.620547][ T7245] ? usb_probe_device+0x3a7/0x690 [ 3309.625786][ T7245] ? really_probe+0x4dc/0xd90 [ 3309.630673][ T7245] ? __driver_probe_device+0x2ab/0x5d0 [ 3309.636352][ T7245] ? driver_probe_device+0x72/0x890 [ 3309.641755][ T7245] ? __device_attach_driver+0x568/0x9e0 [ 3309.647530][ T7245] ? bus_for_each_drv+0x403/0x620 [ 3309.652730][ T7245] ? __device_attach+0x3c1/0x650 [ 3309.657858][ T7245] ? device_initial_probe+0x32/0x40 [ 3309.663258][ T7245] ? bus_probe_device+0x3dc/0x5c0 [ 3309.668447][ T7245] ? device_add+0x13aa/0x1ba0 [ 3309.673315][ T7245] ? usb_new_device+0x15f8/0x2480 [ 3309.678554][ T7245] ? hub_event+0x4ffe/0x72d0 [ 3309.683359][ T7245] ? process_scheduled_works+0xc1d/0x1e80 [ 3309.689262][ T7245] ? worker_thread+0xea3/0x1500 [ 3309.694279][ T7245] ? kthread+0x6ce/0xf10 [ 3309.698728][ T7245] ? ret_from_fork+0x6d/0x90 [ 3309.703522][ T7245] ? ret_from_fork_asm+0x1a/0x30 [ 3309.708725][ T7245] ? kmsan_get_metadata+0x13e/0x1c0 [ 3309.714100][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.720105][ T7245] __msan_warning+0x95/0x120 [ 3309.724922][ T7245] mii_nway_restart+0x119/0x1e0 [ 3309.729991][ T7245] ch9200_bind+0x238/0xeb0 [ 3309.734568][ T7245] ? __pfx_ch9200_bind+0x10/0x10 [ 3309.739654][ T7245] usbnet_probe+0xda1/0x3f40 [ 3309.744473][ T7245] ? kmsan_get_metadata+0x13e/0x1c0 [ 3309.749843][ T7245] ? __pfx_usbnet_probe+0x10/0x10 [ 3309.755061][ T7245] usb_probe_interface+0xd42/0x12f0 [ 3309.760496][ T7245] ? __pfx_usb_probe_interface+0x10/0x10 [ 3309.766353][ T7245] really_probe+0x4dc/0xd90 [ 3309.771057][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.777046][ T7245] __driver_probe_device+0x2ab/0x5d0 [ 3309.782547][ T7245] driver_probe_device+0x72/0x890 [ 3309.787760][ T7245] ? kmsan_get_metadata+0x13e/0x1c0 [ 3309.793139][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.799130][ T7245] __device_attach_driver+0x568/0x9e0 [ 3309.804729][ T7245] bus_for_each_drv+0x403/0x620 [ 3309.809757][ T7245] ? __pfx___device_attach_driver+0x10/0x10 [ 3309.815908][ T7245] __device_attach+0x3c1/0x650 [ 3309.820903][ T7245] device_initial_probe+0x32/0x40 [ 3309.826125][ T7245] bus_probe_device+0x3dc/0x5c0 [ 3309.831161][ T7245] device_add+0x13aa/0x1ba0 [ 3309.835870][ T7245] usb_set_configuration+0x31ea/0x38f0 [ 3309.841551][ T7245] ? usb_set_configuration+0x901/0x38f0 [ 3309.847363][ T7245] usb_generic_driver_probe+0x109/0x2a0 [ 3309.853085][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.859065][ T7245] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 3309.865324][ T7245] usb_probe_device+0x3a7/0x690 [ 3309.870383][ T7245] ? __pfx_usb_probe_device+0x10/0x10 [ 3309.876047][ T7245] really_probe+0x4dc/0xd90 [ 3309.880760][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.886793][ T7245] __driver_probe_device+0x2ab/0x5d0 [ 3309.892297][ T7245] driver_probe_device+0x72/0x890 [ 3309.897510][ T7245] ? kmsan_get_metadata+0x13e/0x1c0 [ 3309.902878][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.908861][ T7245] __device_attach_driver+0x568/0x9e0 [ 3309.914451][ T7245] bus_for_each_drv+0x403/0x620 [ 3309.919482][ T7245] ? __pfx___device_attach_driver+0x10/0x10 [ 3309.925613][ T7245] __device_attach+0x3c1/0x650 [ 3309.930597][ T7245] device_initial_probe+0x32/0x40 [ 3309.935803][ T7245] bus_probe_device+0x3dc/0x5c0 [ 3309.940853][ T7245] device_add+0x13aa/0x1ba0 [ 3309.945564][ T7245] usb_new_device+0x15f8/0x2480 [ 3309.950620][ T7245] hub_event+0x4ffe/0x72d0 [ 3309.955277][ T7245] ? kmsan_get_metadata+0x13e/0x1c0 [ 3309.960669][ T7245] ? __pfx_hub_event+0x10/0x10 [ 3309.965685][ T7245] process_scheduled_works+0xc1d/0x1e80 [ 3309.971452][ T7245] worker_thread+0xea3/0x1500 [ 3309.976321][ T7245] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 3309.982324][ T7245] kthread+0x6ce/0xf10 [ 3309.986566][ T7245] ? __pfx_worker_thread+0x10/0x10 [ 3309.991871][ T7245] ? __pfx_kthread+0x10/0x10 [ 3309.996646][ T7245] ret_from_fork+0x6d/0x90 [ 3310.001250][ T7245] ? __pfx_kthread+0x10/0x10 [ 3310.006028][ T7245] ret_from_fork_asm+0x1a/0x30 [ 3310.011011][ T7245] [ 3310.014490][ T7245] Kernel Offset: disabled [ 3310.018906][ T7245] Rebooting in 86400 seconds..