last executing test programs: 4.786466831s ago: executing program 0 (id=30408): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 4.301175075s ago: executing program 0 (id=30411): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 3.91422257s ago: executing program 2 (id=30413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000100ab3d7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000e60a0a00020079"], 0x28}, 0x1, 0x0, 0x0, 0xd5}, 0x4040000) 3.573642255s ago: executing program 0 (id=30415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x40000}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 3.544494809s ago: executing program 2 (id=30417): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_cswp={0x58, 0x118, 0x9, {{0xffffffff, 0x1}, 0x0, 0x0, 0x40000000007, 0x489, 0x10000000000000fe, 0x8003, 0x30}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x58}], 0x70, 0x20008011}, 0x0) 3.090131982s ago: executing program 2 (id=30419): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) 3.08530971s ago: executing program 0 (id=30429): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x4) listen(r0, 0x80) 2.741156948s ago: executing program 2 (id=30423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 2.677708208s ago: executing program 0 (id=30424): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.521888563s ago: executing program 1 (id=30426): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8935, &(0x7f0000000040)={0x0, {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x105, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0xc, 0xfffe}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000500)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@nolazytime}, {@noinit_itable}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@init_itable}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") 2.282046175s ago: executing program 2 (id=30428): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 2.273428024s ago: executing program 4 (id=30430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 2.205132231s ago: executing program 0 (id=30431): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xfa, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1a6fc899adb3871e, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xf6, 0x5, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.108031889s ago: executing program 3 (id=30432): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 1.814430961s ago: executing program 3 (id=30433): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040), 0xff, 0x258, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 1.799340354s ago: executing program 4 (id=30434): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000140)='.\x00', 0x329500, 0x112) preadv(r0, 0x0, 0x0, 0x0, 0x3) 1.671348122s ago: executing program 1 (id=30435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRESOCT], 0x2c}}, 0x80) 1.578394888s ago: executing program 3 (id=30436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.500899214s ago: executing program 4 (id=30437): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) 1.212013961s ago: executing program 4 (id=30438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 1.188500094s ago: executing program 1 (id=30448): r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @remote, 0x4, 0x3}, 0x20) 1.119560818s ago: executing program 3 (id=30439): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x17) 915.890813ms ago: executing program 4 (id=30440): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 877.91373ms ago: executing program 1 (id=30441): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 663.573128ms ago: executing program 3 (id=30442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x98d, 0xfffffffffffffffd}) 444.031663ms ago: executing program 1 (id=30443): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) ftruncate(r0, 0x2008001) 425.724976ms ago: executing program 4 (id=30444): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 247.481842ms ago: executing program 3 (id=30445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070002"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 84.476317ms ago: executing program 2 (id=30446): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)='!', 0x1e000, 0x2000c8c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 1 (id=30447): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0xe01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): 96589][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27472'. [ 3137.131804][ T5479] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 3137.190253][T14892] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 3137.325833][ T5479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3137.363700][ T5479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3137.398495][T14892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3137.430100][ T5479] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 3137.443078][T14892] usb 2-1: too many endpoints for config 1 interface 0 altsetting 93: 251, using maximum allowed: 30 [ 3137.464992][ T5479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.480166][T14892] usb 2-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 3137.513110][T14892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3137.538637][T14892] usb 2-1: New USB device found, idVendor=0525, idProduct=bca1, bcdDevice= 0.40 [ 3137.550740][ T5479] usb 4-1: config 0 descriptor?? [ 3137.570054][T14892] usb 2-1: New USB device strings: Mfr=0, Product=252, SerialNumber=1 [ 3137.610549][T14892] usb 2-1: Product: syz [ 3137.630081][T14892] usb 2-1: SerialNumber: syz [ 3137.716562][T14892] usb 2-1: bad CDC descriptors [ 3137.743997][T29751] kernel write not supported for file /input/mouse0 (pid: 29751 comm: kworker/0:0) [ 3137.837961][T15382] macvtap1: entered promiscuous mode [ 3137.858259][T15382] syz_tun: entered promiscuous mode [ 3137.928334][T15367] usb 2-1: USB disconnect, device number 106 [ 3137.935354][T15382] syz_tun: left promiscuous mode [ 3138.061962][ T5479] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 3138.163204][ T5479] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected [ 3138.275016][ T5479] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 3138.338658][ T5479] usb 4-1: USB disconnect, device number 7 [ 3138.357867][ T5479] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected [ 3138.818664][T15422] ªªªªªªAc°ŸÂ¥›,á speed is unknown, defaulting to 1000 [ 3138.869523][T15418] fido_id[15418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3139.054672][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27487'. [ 3140.532426][ T5479] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3140.605978][T15485] macvtap1: entered promiscuous mode [ 3140.615240][T15485] syz_tun: entered promiscuous mode [ 3140.667368][T15485] syz_tun: left promiscuous mode [ 3140.692543][ T5479] usb 2-1: Using ep0 maxpacket: 8 [ 3140.725415][ T5479] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3140.746208][ T5479] usb 2-1: config 4 interface 0 has no altsetting 0 [ 3140.792127][ T5479] usb 2-1: string descriptor 0 read error: -22 [ 3140.804576][ T5479] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3140.824771][ T5479] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 3140.991641][ T5479] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3141.031836][ T5479] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3141.207693][ T5479] dvb_usb_au6610 2-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 3141.367283][ T5479] usb 2-1: USB disconnect, device number 107 [ 3141.628232][ T29] audit: type=1326 audit(2000000919.951:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3141.654661][ T29] audit: type=1326 audit(2000000919.961:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3141.707066][ T29] audit: type=1326 audit(2000000919.961:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3141.822128][ T29] audit: type=1326 audit(2000000919.961:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3141.890021][ T29] audit: type=1326 audit(2000000919.961:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3142.002475][ T29] audit: type=1326 audit(2000000919.971:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3142.090755][ T29] audit: type=1326 audit(2000000919.971:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3142.219953][ T29] audit: type=1326 audit(2000000919.981:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3142.286232][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27503'. [ 3142.294240][T15533] overlayfs: failed to resolve './file0': -2 [ 3142.308998][ T29] audit: type=1326 audit(2000000919.981:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.3.27499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3144.113241][T15579] loop4: detected capacity change from 0 to 2048 [ 3144.122970][T15575] overlayfs: failed to resolve './file0': -2 [ 3144.259668][T15579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3148.520467][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27559'. [ 3150.006989][T15707] genirq: Flags mismatch irq 24. 00200000 (pcmmio) vs. 00200000 (virtio3-config) [ 3150.123516][T15709] loop4: detected capacity change from 0 to 512 [ 3150.162436][T15709] EXT4-fs: Ignoring removed bh option [ 3150.262388][T15709] EXT4-fs (loop4): 1 truncate cleaned up [ 3150.307476][T15709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3150.797627][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3151.265407][T15737] netlink: 56 bytes leftover after parsing attributes in process `syz.4.27577'. [ 3151.421487][T29751] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3151.588639][T29751] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3151.588789][T29751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.591381][T29751] usb 2-1: Product: syz [ 3151.591480][T29751] usb 2-1: Manufacturer: syz [ 3151.591576][T29751] usb 2-1: SerialNumber: syz [ 3151.665948][T29751] usb 2-1: config 0 descriptor?? [ 3151.728205][T29751] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3152.351185][T29751] gspca_sunplus: reg_r err -71 [ 3152.351536][T29751] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 3152.384204][T29751] usb 2-1: USB disconnect, device number 108 [ 3153.016734][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3154.373308][T15799] loop4: detected capacity change from 0 to 256 [ 3154.519945][T29751] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3154.676225][T15799] FAT-fs (loop4): Directory bread(block 64) failed [ 3154.699241][T29751] usb 2-1: Using ep0 maxpacket: 16 [ 3154.730183][T15799] FAT-fs (loop4): Directory bread(block 65) failed [ 3154.737185][T15799] FAT-fs (loop4): Directory bread(block 66) failed [ 3154.754714][T29751] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 3154.771309][T29751] usb 2-1: config 0 has no interface number 0 [ 3154.778077][T29751] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.802702][T15799] FAT-fs (loop4): Directory bread(block 67) failed [ 3154.819184][T15799] FAT-fs (loop4): Directory bread(block 68) failed [ 3154.827999][T29751] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3154.842658][T15799] FAT-fs (loop4): Directory bread(block 69) failed [ 3154.860565][T29751] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3154.873007][T15799] FAT-fs (loop4): Directory bread(block 70) failed [ 3154.888901][T29751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3154.901634][T15799] FAT-fs (loop4): Directory bread(block 71) failed [ 3154.919483][T15799] FAT-fs (loop4): Directory bread(block 72) failed [ 3154.930652][T29751] usb 2-1: config 0 descriptor?? [ 3154.942652][T15799] FAT-fs (loop4): Directory bread(block 73) failed [ 3155.425204][T29751] uclogic 0003:28BD:0071.0042: interface is invalid, ignoring [ 3155.593880][T14892] usb 2-1: USB disconnect, device number 109 [ 3157.662785][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27618'. [ 3157.764514][T15864] vlan0: entered promiscuous mode [ 3158.228890][T15880] pim6reg: entered allmulticast mode [ 3158.249252][T15884] pim6reg: left allmulticast mode [ 3158.418196][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27625'. [ 3162.150239][T15984] netlink: 9 bytes leftover after parsing attributes in process `syz.1.27662'. [ 3162.172221][T15984] netlink: 9 bytes leftover after parsing attributes in process `syz.1.27662'. [ 3168.778938][T16125] tipc: Cannot configure node identity twice [ 3170.372297][ T5351] IPVS: starting estimator thread 0... [ 3170.492312][T16166] IPVS: using max 240 ests per chain, 12000 per kthread [ 3171.616558][T16200] loop4: detected capacity change from 0 to 512 [ 3171.644818][T16200] EXT4-fs: Ignoring removed orlov option [ 3171.683418][T16200] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 3171.766823][T16200] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3171.822189][T16200] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.27754: bg 0: block 255: padding at end of block bitmap is not set [ 3171.869883][T16200] loop4: lost filesystem error report for type 5 error -117 [ 3171.877890][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 3171.892055][ C0] EXT4-fs (loop4): initial error at time 2000000950: ext4_validate_block_bitmap:441 [ 3171.901924][ C0] EXT4-fs (loop4): last error at time 2000000950: ext4_validate_block_bitmap:441 [ 3171.928616][T16200] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 3171.978317][T16200] loop4: lost filesystem error report for type 5 error -117 [ 3171.981384][T16200] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.27754: invalid indirect mapped block 1 (level 1) [ 3172.017056][T16200] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 3172.018645][T16200] EXT4-fs (loop4): 1 truncate cleaned up [ 3172.053584][T16200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 3172.246250][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3172.688562][T14892] kernel write not supported for file /adsp1 (pid: 14892 comm: kworker/1:2) [ 3172.878147][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27763'. [ 3174.221356][T16252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27774'. [ 3174.266533][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27774'. [ 3174.303862][T16252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3175.252544][ C1] sd 0:0:1:0: [sda] tag#8406 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3175.263736][ C1] sd 0:0:1:0: [sda] tag#8406 CDB: Read(6) 08 00 f9 56 e4 47 [ 3175.425278][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27785'. [ 3176.268019][ T5351] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3176.453887][ T5351] usb 3-1: Using ep0 maxpacket: 8 [ 3176.470363][ T5351] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3176.490726][ T5351] usb 3-1: config 179 has no interface number 0 [ 3176.500618][ T5351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3176.514230][T16314] netlink: 'syz.1.27794': attribute type 1 has an invalid length. [ 3176.555660][ T5351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3176.587682][ T5351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3176.617416][ T5351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3176.633456][ T5351] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3176.648897][ T5351] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3176.707756][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.732756][T16300] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3177.214203][T14892] usb 3-1: USB disconnect, device number 111 [ 3177.214203][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3177.214423][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3177.763503][T16347] loop4: detected capacity change from 0 to 1024 [ 3177.944939][T16347] hfsplus: b-tree write err: -5, ino 2 [ 3177.996951][T16347] hfsplus: b-tree write err: -5, ino 2 [ 3178.180218][ T2040] hfsplus: b-tree write err: -5, ino 25 [ 3178.186694][ T2040] hfsplus: b-tree write err: -5, ino 4 [ 3178.227875][ T2040] hfsplus: b-tree write err: -5, ino 2 [ 3178.630343][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27812'. [ 3178.643668][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27812'. [ 3178.657867][T16368] netlink: 'syz.2.27812': attribute type 19 has an invalid length. [ 3178.666121][T16368] netlink: 'syz.2.27812': attribute type 20 has an invalid length. [ 3179.608070][T16390] loop4: detected capacity change from 0 to 256 [ 3179.816102][T16390] FAT-fs (loop4): Directory bread(block 64) failed [ 3179.848017][T16390] FAT-fs (loop4): Directory bread(block 65) failed [ 3179.854985][T16390] FAT-fs (loop4): Directory bread(block 66) failed [ 3179.930144][T16390] FAT-fs (loop4): Directory bread(block 67) failed [ 3179.949475][T16390] FAT-fs (loop4): Directory bread(block 68) failed [ 3179.961839][T16390] FAT-fs (loop4): Directory bread(block 69) failed [ 3179.982495][T16390] FAT-fs (loop4): Directory bread(block 70) failed [ 3180.027656][T16390] FAT-fs (loop4): Directory bread(block 71) failed [ 3180.053873][T16390] FAT-fs (loop4): Directory bread(block 72) failed [ 3180.071700][T16390] FAT-fs (loop4): Directory bread(block 73) failed [ 3181.314917][T16427] loop4: detected capacity change from 0 to 512 [ 3181.409841][T16427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3181.558888][T16427] EXT4-fs (loop4): 1 truncate cleaned up [ 3181.566955][T16427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3181.870081][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3182.917859][ T5479] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 3183.080158][ T5479] usb 1-1: Using ep0 maxpacket: 16 [ 3183.106349][ T5479] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3183.151590][ T5479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3183.176498][ T5479] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 3183.202578][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.266815][ T5479] usb 1-1: config 0 descriptor?? [ 3183.598110][T16478] netlink: 'syz.2.27850': attribute type 5 has an invalid length. [ 3183.749941][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.775494][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.796634][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.805801][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.823857][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.850096][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.868791][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.876341][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.917795][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.935362][ T5479] logitech 0003:046D:C626.0043: unknown main item tag 0x0 [ 3183.980910][ T5479] logitech 0003:046D:C626.0043: hidraw0: USB HID v0.08 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 3184.070098][ T5479] usb 1-1: USB disconnect, device number 109 [ 3184.504910][T16494] fido_id[16494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3184.812624][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27859'. [ 3186.397640][ T5479] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 3186.578094][ T5479] usb 1-1: Using ep0 maxpacket: 16 [ 3186.614475][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3186.659776][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3186.697327][ T5479] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 3186.720031][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.739983][ T5479] usb 1-1: config 0 descriptor?? [ 3187.256379][ T5479] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 3187.416430][ T5351] usb 1-1: USB disconnect, device number 110 [ 3187.524655][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27886'. [ 3187.580816][T16599] netlink: 104 bytes leftover after parsing attributes in process `syz.2.27886'. [ 3187.634930][T16599] netlink: 104 bytes leftover after parsing attributes in process `syz.2.27886'. [ 3187.740481][T16583] fido_id[16583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3188.239504][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27889'. [ 3188.270123][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27889'. [ 3188.883707][T16625] input input115: cannot allocate more than FF_MAX_EFFECTS effects [ 3189.937407][T16652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27908'. [ 3189.967575][T16652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27908'. [ 3190.947270][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27919'. [ 3194.394597][T16758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.27955'. [ 3194.571460][T16763] /dev/loop0: Can't open blockdev [ 3194.746815][T16767] vlan0: entered promiscuous mode [ 3194.752064][T16767] syz_tun: entered promiscuous mode [ 3195.303669][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27963'. [ 3195.446939][T16790] netlink: 168 bytes leftover after parsing attributes in process `syz.0.27976'. [ 3195.880566][T16800] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 3195.880566][T16800] program syz.4.27970 not setting count and/or reply_len properly [ 3195.919854][ T5479] kernel write not supported for file /input/mouse0 (pid: 5479 comm: kworker/1:3) [ 3196.869538][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27982'. [ 3197.908929][T16852] loop4: detected capacity change from 0 to 16 [ 3197.980051][T16852] erofs (device loop4): DAX unsupported by block device. Turning off DAX. [ 3198.390298][T16852] erofs (device loop4): mounted with root inode @ nid 36. [ 3198.430531][ T5784] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 3198.444502][T16852] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 3198.460779][T16852] erofs (device loop4): read error -117 @ 0 of nid 89 [ 3198.477003][ T29] audit: type=1800 audit(2000000976.794:528): pid=16852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.27992" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 3200.963495][T16917] loop4: detected capacity change from 0 to 64 [ 3201.020205][T16922] netlink: 'syz.1.28021': attribute type 11 has an invalid length. [ 3201.059125][T16922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28021'. [ 3201.114117][T16920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28022'. [ 3201.149031][T16920] netlink: 100 bytes leftover after parsing attributes in process `syz.0.28022'. [ 3201.175207][T16925] sit0: Master is either lo or non-ether device [ 3201.369357][ T5791] hfs: node 4:3 still has 1 user(s)! [ 3202.006304][ T5351] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3202.176226][ T5351] usb 3-1: Using ep0 maxpacket: 8 [ 3202.218737][ T5351] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3202.249391][ T5351] usb 3-1: config 4 interface 0 has no altsetting 0 [ 3202.292691][ T5351] usb 3-1: string descriptor 0 read error: -22 [ 3202.308907][ T5351] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3202.319914][ T5351] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 3202.421484][ T5351] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3202.507795][ T5351] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3202.627978][ T5351] dvb_usb_au6610 3-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 3202.670612][ T5351] usb 3-1: USB disconnect, device number 112 [ 3205.549419][ T5479] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 3205.734253][ T5479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3205.752538][ T5479] usb 3-1: too many endpoints for config 1 interface 0 altsetting 93: 251, using maximum allowed: 30 [ 3205.777237][ T5479] usb 3-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 3205.806364][ T5479] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3205.833504][ T5479] usb 3-1: New USB device found, idVendor=0525, idProduct=bca1, bcdDevice= 0.40 [ 3205.843775][ T5479] usb 3-1: New USB device strings: Mfr=0, Product=252, SerialNumber=1 [ 3205.864432][ T5479] usb 3-1: Product: syz [ 3205.874700][ T5479] usb 3-1: SerialNumber: syz [ 3205.923540][ T5479] usb 3-1: bad CDC descriptors [ 3206.160786][ T5351] usb 3-1: USB disconnect, device number 113 [ 3206.808104][ T5479] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 3207.001887][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9990, setting to 1024 [ 3207.019591][ T5479] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 3207.038836][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3207.072940][ T5479] usb 1-1: config 0 descriptor?? [ 3207.089346][ T5351] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 3207.093388][T17081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3207.259597][ T5351] usb 4-1: Using ep0 maxpacket: 16 [ 3207.278311][T17105] loop4: detected capacity change from 0 to 512 [ 3207.295851][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3207.338514][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3207.368793][ T5351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3207.406761][ T5351] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3207.417764][T17105] EXT4-fs (loop4): 1 truncate cleaned up [ 3207.425505][T17105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3207.461245][ T5351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3207.502960][ T5351] usb 4-1: config 0 descriptor?? [ 3207.707781][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3207.740198][ T5479] input: HID 28bd:0935 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.0045/input/input116 [ 3207.938121][ T5479] uclogic 0003:28BD:0935.0045: input,hidraw0: USB HID v7f.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0 [ 3208.043240][ T5479] usb 1-1: USB disconnect, device number 111 [ 3208.055620][ T5351] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 3208.195472][ T5351] microsoft 0003:045E:07DA.0046: report is too long [ 3208.274257][ T5351] microsoft 0003:045E:07DA.0046: item 0 4 0 8 parsing failed [ 3208.330607][ T5351] microsoft 0003:045E:07DA.0046: parse failed [ 3208.374160][ T5351] microsoft 0003:045E:07DA.0046: probe with driver microsoft failed with error -22 [ 3208.452067][ T5351] usb 4-1: USB disconnect, device number 8 [ 3208.713331][T17127] fido_id[17127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3209.971180][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28090'. [ 3211.081652][ T5351] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 3211.205863][ T5479] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 3211.260869][ T5351] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 3211.285796][ T5351] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3211.295080][ T5351] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3211.318317][ T5351] usb 1-1: config 220 has no interface number 2 [ 3211.325002][ T5351] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 3211.342453][ T5351] usb 1-1: config 220 interface 0 has no altsetting 0 [ 3211.353910][ T5351] usb 1-1: config 220 interface 76 has no altsetting 0 [ 3211.363812][ T5351] usb 1-1: config 220 interface 1 has no altsetting 0 [ 3211.383902][ T5351] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3211.398355][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.404550][ T5479] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 3211.415709][ T5351] usb 1-1: Product: syz [ 3211.434842][ T5351] usb 1-1: Manufacturer: syz [ 3211.443964][T17219] loop4: detected capacity change from 0 to 164 [ 3211.446179][ T5479] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3211.451062][ T5351] usb 1-1: SerialNumber: syz [ 3211.482740][ T5479] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3211.504312][ T5479] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 3211.542150][ T5479] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3211.559790][ T5479] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 3211.598581][ T5479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.709010][ T5479] usb 4-1: config 0 descriptor?? [ 3211.820583][ T5351] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 3211.836561][ T5351] uvcvideo 1-1:220.0: No valid video chain found. [ 3211.862566][ T5351] usb 1-1: selecting invalid altsetting 0 [ 3211.934638][ T5351] usb 1-1: selecting invalid altsetting 0 [ 3211.956774][ T5351] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 3211.999929][ T5351] usb 1-1: USB disconnect, device number 112 [ 3212.292412][ T5479] ryos 0003:1E7D:3138.0047: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 3212.445302][T11252] usb 4-1: USB disconnect, device number 9 [ 3212.750329][T17247] fido_id[17247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3214.013375][T17293] loop4: detected capacity change from 0 to 512 [ 3214.461550][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3214.720521][T17310] netlink: 56 bytes leftover after parsing attributes in process `syz.1.28128'. [ 3215.972130][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28143'. [ 3216.002651][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28143'. [ 3216.385884][ T5479] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 3216.558742][ T5479] usb 4-1: Using ep0 maxpacket: 16 [ 3216.596826][ T5479] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 3216.635943][ T5479] usb 4-1: config 0 has no interface number 0 [ 3216.642325][ T5479] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3216.696695][ T5479] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3216.727218][ T5479] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3216.740933][ T5479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.790557][ T5479] usb 4-1: config 0 descriptor?? [ 3217.340469][ T5479] uclogic 0003:28BD:0071.0048: interface is invalid, ignoring [ 3217.498468][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28157'. [ 3217.523463][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28158'. [ 3217.547034][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28157'. [ 3217.563472][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28158'. [ 3217.569386][ T5479] usb 4-1: USB disconnect, device number 10 [ 3217.901342][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28160'. [ 3218.012332][T17406] vlan0: entered promiscuous mode [ 3220.043010][T17461] loop4: detected capacity change from 0 to 256 [ 3220.218230][T17461] FAT-fs (loop4): Directory bread(block 64) failed [ 3220.281340][T17461] FAT-fs (loop4): Directory bread(block 65) failed [ 3220.294524][T17461] FAT-fs (loop4): Directory bread(block 66) failed [ 3220.350209][T17461] FAT-fs (loop4): Directory bread(block 67) failed [ 3220.381279][T17461] FAT-fs (loop4): Directory bread(block 68) failed [ 3220.394289][T17461] FAT-fs (loop4): Directory bread(block 69) failed [ 3220.426914][T17461] FAT-fs (loop4): Directory bread(block 70) failed [ 3220.433685][T17461] FAT-fs (loop4): Directory bread(block 71) failed [ 3220.506140][T17461] FAT-fs (loop4): Directory bread(block 72) failed [ 3220.514254][T17461] FAT-fs (loop4): Directory bread(block 73) failed [ 3220.695321][ T5479] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 3220.877775][ T5479] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3220.925168][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3220.933408][ T5479] usb 4-1: Product: syz [ 3220.970474][ T5479] usb 4-1: Manufacturer: syz [ 3220.996097][ T5479] usb 4-1: SerialNumber: syz [ 3221.026563][ T5479] usb 4-1: config 0 descriptor?? [ 3221.076284][ T5479] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3221.659385][ T5479] gspca_sunplus: reg_r err -71 [ 3221.664787][T17498] [U] k [ 3221.673320][ T5479] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 3221.717380][ T5479] usb 4-1: USB disconnect, device number 11 [ 3221.788208][T11255] udevd[11255]: setting owner of /dev/bus/usb/004/011 to uid=0, gid=0 failed: No such file or directory [ 3222.741243][T17531] pim6reg: entered allmulticast mode [ 3222.762736][T17534] pim6reg: left allmulticast mode [ 3223.605967][T17555] loop4: detected capacity change from 0 to 1024 [ 3223.736051][T17555] hfsplus: bad catalog entry type [ 3223.958686][T16788] hfsplus: b-tree write err: -5, ino 25 [ 3223.987926][T16788] hfsplus: b-tree write err: -5, ino 4 [ 3223.993810][T16788] hfsplus: b-tree write err: -5, ino 2 [ 3227.104453][T17639] loop4: detected capacity change from 0 to 4096 [ 3227.389960][T17650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3228.786909][T17677] loop4: detected capacity change from 0 to 64 [ 3229.853039][T17706] tipc: Cannot configure node identity twice [ 3230.818127][ T2040] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3230.849862][ T2040] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3230.889367][ T2040] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3231.973894][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28291'. [ 3232.002162][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28291'. [ 3232.035525][T17763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3234.426910][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28314'. [ 3235.208190][ C1] sd 0:0:1:0: [sda] tag#8443 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3235.219318][ C1] sd 0:0:1:0: [sda] tag#8443 CDB: Read(6) 08 00 f9 56 e4 47 [ 3235.609386][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28329'. [ 3236.690098][T17876] netlink: 'syz.3.28336': attribute type 1 has an invalid length. [ 3239.586593][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28360'. [ 3241.080932][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28375'. [ 3241.156651][T17976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28376'. [ 3243.260670][T18022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3243.357904][T18025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.28398'. [ 3243.926526][T18035] netlink: 'syz.3.28401': attribute type 5 has an invalid length. [ 3244.473029][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28405'. [ 3247.334742][ T5479] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3247.503747][ T5479] usb 2-1: Using ep0 maxpacket: 16 [ 3247.520407][ T5479] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.544462][ T5479] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3247.562339][ T5479] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 3247.584028][ T5479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3247.610365][ T5479] usb 2-1: config 0 descriptor?? [ 3248.134593][ T5479] hid_parser_main: 28 callbacks suppressed [ 3248.134696][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.148869][T18147] netlink: 168 bytes leftover after parsing attributes in process `syz.4.28447'. [ 3248.186774][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.218656][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.237247][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.258304][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.289544][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.328314][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.363756][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.392361][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.416758][ T5479] logitech 0003:046D:C626.0049: unknown main item tag 0x0 [ 3248.466210][ T5479] logitech 0003:046D:C626.0049: hidraw0: USB HID v0.08 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 3248.548257][ T5479] usb 2-1: USB disconnect, device number 110 [ 3248.983272][T18163] fido_id[18163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3254.105428][T18284] hugetlbfs: Bad value for 'uid' [ 3254.110578][T18284] hugetlbfs: Bad value for 'uid' [ 3254.801943][T18292] loop4: detected capacity change from 0 to 4096 [ 3254.871451][T18297] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3255.621379][T18314] loop4: detected capacity change from 0 to 256 [ 3256.100325][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28513'. [ 3256.482617][T18331] vlan0: entered promiscuous mode [ 3256.490669][T18331] syz_tun: entered promiscuous mode [ 3261.671793][T18448] genirq: Flags mismatch irq 24. 00200000 (pcmmio) vs. 00200000 (virtio3-config) [ 3262.561008][T18467] binder: 18465:18467 ioctl c00c620f 800005c0 returned -22 [ 3262.860686][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28572'. [ 3265.535344][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28608'. [ 3265.575443][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28608'. [ 3268.130224][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28620'. [ 3268.140599][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28620'. [ 3268.878465][T18616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28629'. [ 3268.880521][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28628'. [ 3268.928251][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28628'. [ 3269.960047][T18641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28635'. [ 3269.992975][T18641] netlink: 100 bytes leftover after parsing attributes in process `syz.2.28635'. [ 3271.440112][T18682] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 3271.440112][T18682] program syz.4.28651 not setting count and/or reply_len properly [ 3272.018745][T18696] UHID_CREATE from different security context by process 11067 (syz.4.28656), this is not allowed. [ 3272.502434][ T5479] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 3272.675764][ T5479] usb 1-1: Using ep0 maxpacket: 8 [ 3272.720654][ T5479] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3272.748753][ T5479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.771502][ T5479] usb 1-1: Product: syz [ 3272.782570][ T5479] usb 1-1: Manufacturer: syz [ 3272.795148][ T5479] usb 1-1: SerialNumber: syz [ 3272.810398][ T5479] usb 1-1: config 0 descriptor?? [ 3272.867415][T18723] sp0: Synchronizing with TNC [ 3273.071842][ T5479] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3273.497326][ T5479] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3273.559011][ T5479] usb 1-1: USB disconnect, device number 113 [ 3273.846640][ T29] audit: type=1326 audit(2000001052.178:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3273.912374][ T29] audit: type=1326 audit(2000001052.208:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3273.969345][ T29] audit: type=1326 audit(2000001052.208:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.054766][ T29] audit: type=1326 audit(2000001052.208:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.116372][ T29] audit: type=1326 audit(2000001052.208:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.188077][ T29] audit: type=1326 audit(2000001052.218:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.252323][ T29] audit: type=1326 audit(2000001052.218:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.312799][ T29] audit: type=1326 audit(2000001052.218:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.376090][ T29] audit: type=1326 audit(2000001052.218:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.445599][ T29] audit: type=1326 audit(2000001052.218:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.1.28671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3274.723812][ T5479] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3274.887583][ T5479] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 3274.900086][ T5479] usb 3-1: config 0 has no interface number 0 [ 3274.907839][ T5479] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3274.935500][ T5479] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3274.948193][ T5479] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 3274.968658][ T5479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3274.989540][ T5479] usb 3-1: config 0 descriptor?? [ 3275.459541][T18793] tipc: Enabling of bearer rejected, failed to enable media [ 3275.475512][ T5479] hid_parser_main: 28 callbacks suppressed [ 3275.475613][ T5479] uclogic 0003:5543:0522.004A: unknown main item tag 0x0 [ 3275.514265][ T5479] uclogic 0003:5543:0522.004A: unknown main item tag 0x0 [ 3275.533719][ T5479] uclogic 0003:5543:0522.004A: unknown main item tag 0x0 [ 3275.541532][ T5479] uclogic 0003:5543:0522.004A: unknown main item tag 0x0 [ 3275.549798][ T5479] uclogic 0003:5543:0522.004A: unknown main item tag 0x0 [ 3275.578368][ T5479] uclogic 0003:5543:0522.004A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input17 [ 3275.672615][ T5479] usb 3-1: USB disconnect, device number 114 [ 3275.897953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3276.291395][T18807] fido_id[18807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3276.455534][T18829] tipc: Enabling of bearer rejected, failed to enable media [ 3276.722417][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28693'. [ 3276.764490][T18835] netlink: 'syz.3.28693': attribute type 30 has an invalid length. [ 3276.819465][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28693'. [ 3276.891550][T18839] netlink: 'syz.0.28695': attribute type 1 has an invalid length. [ 3277.222146][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28699'. [ 3277.256289][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28699'. [ 3277.545276][T18855] loop4: detected capacity change from 0 to 256 [ 3277.896302][T18855] FAT-fs (loop4): Directory bread(block 64) failed [ 3277.933021][T18855] FAT-fs (loop4): Directory bread(block 65) failed [ 3277.939925][T18855] FAT-fs (loop4): Directory bread(block 66) failed [ 3277.977207][T18855] FAT-fs (loop4): Directory bread(block 67) failed [ 3278.026242][T18855] FAT-fs (loop4): Directory bread(block 68) failed [ 3278.084194][T18855] FAT-fs (loop4): Directory bread(block 69) failed [ 3278.098230][T18855] FAT-fs (loop4): Directory bread(block 70) failed [ 3278.125820][T18855] FAT-fs (loop4): Directory bread(block 71) failed [ 3278.148930][T18855] FAT-fs (loop4): Directory bread(block 72) failed [ 3278.157540][T18855] FAT-fs (loop4): Directory bread(block 73) failed [ 3278.200554][ T5479] kernel write not supported for file /uhid (pid: 5479 comm: kworker/1:3) [ 3278.302243][T18873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.28709'. [ 3278.352428][T18874] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 3278.645766][T18883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.28712'. [ 3278.989928][T18892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28716'. [ 3279.035263][T18892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28716'. [ 3279.746008][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28724'. [ 3280.706630][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28731'. [ 3280.830804][T18938] gtp1: entered promiscuous mode [ 3280.866109][T18938] team0: Device gtp1 is of different type [ 3282.020704][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28744'. [ 3282.092946][T18976] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 3282.092946][T18976] program syz.2.28745 not setting count and/or reply_len properly [ 3282.584300][T11252] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3282.752055][T11252] usb 2-1: Using ep0 maxpacket: 16 [ 3282.766132][T11252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3282.811876][T11252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3282.834895][T11252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3282.861037][T11252] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3282.888519][T11252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3282.916715][T11252] usb 2-1: config 0 descriptor?? [ 3283.403117][T11252] microsoft 0003:045E:07DA.004B: ignoring exceeding usage max [ 3283.476259][T11252] microsoft 0003:045E:07DA.004B: report is too long [ 3283.492643][T11252] microsoft 0003:045E:07DA.004B: item 0 4 0 8 parsing failed [ 3283.532724][T11252] microsoft 0003:045E:07DA.004B: parse failed [ 3283.539320][T11252] microsoft 0003:045E:07DA.004B: probe with driver microsoft failed with error -22 [ 3283.643587][T11252] usb 2-1: USB disconnect, device number 111 [ 3284.231876][T15367] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3284.416479][T15367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9990, setting to 1024 [ 3284.437125][T19047] tipc: Cannot configure node identity twice [ 3284.449164][T15367] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 3284.470916][T15367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3284.502198][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28763'. [ 3284.504759][T15367] usb 3-1: config 0 descriptor?? [ 3284.543565][T19036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3284.547515][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28763'. [ 3285.093335][T19063] /dev/loop0: Can't open blockdev [ 3285.122223][T15367] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.004C/input/input117 [ 3285.270132][T15367] uclogic 0003:28BD:0935.004C: input,hidraw0: USB HID v7f.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 3285.383083][T15367] usb 3-1: USB disconnect, device number 115 [ 3285.809402][T19078] fido_id[19078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3288.226183][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28799'. [ 3289.761358][T15367] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3289.941943][T15367] usb 3-1: Using ep0 maxpacket: 16 [ 3289.959935][T15367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3289.981923][T15367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3290.002054][T15367] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 3290.021629][T15367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.045953][T15367] usb 3-1: config 0 descriptor?? [ 3290.141807][ T5479] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3290.321551][ T5479] usb 1-1: Using ep0 maxpacket: 16 [ 3290.338307][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3290.370188][ T5479] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 3290.411725][ T5479] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 3290.430916][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.466843][ T5479] usb 1-1: config 0 descriptor?? [ 3290.561502][T15367] apple 0003:05AC:024B.004D: unknown main item tag 0x3 [ 3290.568878][T15367] apple 0003:05AC:024B.004D: unknown main item tag 0x0 [ 3290.612189][T15367] apple 0003:05AC:024B.004D: item fetching failed at offset 24/69 [ 3290.630552][T15367] apple 0003:05AC:024B.004D: parse failed [ 3290.653776][T15367] apple 0003:05AC:024B.004D: probe with driver apple failed with error -22 [ 3290.693312][T19209] netlink: 72 bytes leftover after parsing attributes in process `syz.4.28816'. [ 3290.724272][T19209] netem: invalid attributes len -24 [ 3290.740906][T15367] usb 3-1: USB disconnect, device number 116 [ 3290.753205][T19209] netem: change failed [ 3290.975735][ T5479] logitech 0003:046D:C293.004E: unknown main item tag 0x6 [ 3291.004708][ T5479] logitech 0003:046D:C293.004E: report_id 1915 is invalid [ 3291.041722][ T5479] logitech 0003:046D:C293.004E: item 0 2 1 8 parsing failed [ 3291.059304][ T5479] logitech 0003:046D:C293.004E: parse failed [ 3291.067797][ T5479] logitech 0003:046D:C293.004E: probe with driver logitech failed with error -22 [ 3291.167616][ T5479] usb 1-1: USB disconnect, device number 114 [ 3291.418268][T19225] loop4: detected capacity change from 0 to 4096 [ 3291.461517][T19225] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 3291.513311][T19225] ntfs3(loop4): ino=3, mi_enum_attr [ 3291.636673][T19225] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 3291.716529][T19225] ntfs3(loop4): ino=1f, "file2" failed to open parent directory r=5 to update [ 3291.868889][T19246] netlink: 44 bytes leftover after parsing attributes in process `syz.3.28824'. [ 3291.912583][T19246] netlink: 'syz.3.28824': attribute type 6 has an invalid length. [ 3291.934245][T16804] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update [ 3291.945894][T19246] netlink: 'syz.3.28824': attribute type 5 has an invalid length. [ 3291.974297][T19246] netlink: 'syz.3.28824': attribute type 4 has an invalid length. [ 3293.198643][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28835'. [ 3297.086116][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28870'. [ 3297.119191][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28880'. [ 3299.673892][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28894'. [ 3299.718377][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28894'. [ 3301.850710][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28909'. [ 3301.923033][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28909'. [ 3302.159135][T19471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.28907'. [ 3302.195708][T19473] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 3302.207637][T19474] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 1 [ 3302.222529][T19475] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 2 [ 3302.237088][T19477] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 3 [ 3302.732474][T19486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28925'. [ 3302.790050][T19490] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 3304.061981][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28924'. [ 3304.101329][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28924'. [ 3304.442282][T19520] loop4: detected capacity change from 0 to 64 [ 3304.537008][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 3304.537083][ T29] audit: type=1326 audit(2000001082.860:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3304.655299][ T29] audit: type=1326 audit(2000001082.870:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3304.733876][ T29] audit: type=1326 audit(2000001082.880:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3304.787245][ T29] audit: type=1326 audit(2000001082.880:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3304.842397][ T29] audit: type=1326 audit(2000001082.880:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3304.923155][ T29] audit: type=1326 audit(2000001082.880:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3305.022396][ T29] audit: type=1326 audit(2000001082.880:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3305.098763][ T29] audit: type=1326 audit(2000001082.880:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.2.28931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3305.160595][ T29] audit: type=1326 audit(2000001082.890:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3305.220731][ T29] audit: type=1326 audit(2000001082.890:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3307.090587][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28949'. [ 3307.161924][T19580] netlink: 104 bytes leftover after parsing attributes in process `syz.0.28949'. [ 3307.218233][T19580] netlink: 104 bytes leftover after parsing attributes in process `syz.0.28949'. [ 3310.584443][T19658] loop4: detected capacity change from 0 to 8 [ 3311.129826][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28980'. [ 3311.180331][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28980'. [ 3311.611606][ T5479] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 3311.780230][ T5479] usb 1-1: Using ep0 maxpacket: 32 [ 3311.830773][ T5479] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3311.869504][ T5479] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3311.893812][ T5479] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3311.914695][ T5479] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3311.942715][ T5479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3311.949663][ T5479] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 3311.980244][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.004657][ T5479] usb 1-1: config 0 descriptor?? [ 3312.012349][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28996'. [ 3312.052595][T19702] netlink: 104 bytes leftover after parsing attributes in process `syz.4.28996'. [ 3312.110314][T19702] netlink: 104 bytes leftover after parsing attributes in process `syz.4.28996'. [ 3312.229222][T19709] gtp3: entered promiscuous mode [ 3312.236522][T19709] team0: Device gtp3 is of different type [ 3312.494871][ T5479] hid-thrustmaster 0003:044F:B65D.004F: unknown main item tag 0x0 [ 3312.540236][ T5479] hid-thrustmaster 0003:044F:B65D.004F: unknown main item tag 0x0 [ 3312.548418][ T5479] hid-thrustmaster 0003:044F:B65D.004F: unknown main item tag 0x0 [ 3312.570240][ T5479] hid-thrustmaster 0003:044F:B65D.004F: unknown main item tag 0x0 [ 3312.586807][ T5479] hid-thrustmaster 0003:044F:B65D.004F: unknown main item tag 0x0 [ 3312.616361][ T5479] hid-thrustmaster 0003:044F:B65D.004F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 3312.650973][ T5479] hid-thrustmaster 0003:044F:B65D.004F: Wrong number of endpoints? [ 3312.691790][ C1] hid-thrustmaster 0003:044F:B65D.004F: URB to get model id failed with error -71 [ 3312.731502][ T5479] usb 1-1: USB disconnect, device number 115 [ 3312.961391][T19723] fido_id[19723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3313.212376][T19746] macsec0: entered promiscuous mode [ 3313.224901][T19746] macsec0: entered allmulticast mode [ 3314.051640][T19766] tipc: Enabling of bearer rejected, failed to enable media [ 3314.240163][ T5479] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 3314.400150][ T5479] usb 4-1: Using ep0 maxpacket: 32 [ 3314.430087][ T5479] usb 4-1: config 1 has an invalid interface number: 67 but max is 0 [ 3314.444061][ T5479] usb 4-1: config 1 has no interface number 0 [ 3314.454258][ T5479] usb 4-1: config 1 interface 67 has no altsetting 0 [ 3314.478999][ T5479] usb 4-1: New USB device found, idVendor=0bba, idProduct=ff22, bcdDevice=56.79 [ 3314.520133][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.539121][ T5479] usb 4-1: Product: syz [ 3314.543957][ T5479] usb 4-1: Manufacturer: syz [ 3314.548736][ T5479] usb 4-1: SerialNumber: syz [ 3314.826429][ T5479] usb-storage 4-1:1.67: USB Mass Storage device detected [ 3314.959569][ T5479] usb 4-1: USB disconnect, device number 12 [ 3315.272598][T19810] /dev/loop0: Can't open blockdev [ 3315.451180][T19818] syz_tun: refused to change device tx_queue_len [ 3315.457716][T19818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3315.540182][ T5479] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3315.715668][ T5479] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 3315.735583][ T5479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3315.771861][ T5479] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 3315.789937][ T5479] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 3315.810230][ T5479] usb 3-1: Manufacturer: syz [ 3315.836332][ T5479] usb 3-1: config 0 descriptor?? [ 3316.390495][ T5479] rc_core: IR keymap rc-hauppauge not found [ 3316.417686][ T5479] Registered IR keymap rc-empty [ 3316.460890][ T5479] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3316.502772][ T5479] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input118 [ 3316.555475][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 3316.555554][ T29] audit: type=1326 audit(2000001094.891:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.628439][T19843] loop4: detected capacity change from 0 to 512 [ 3316.668362][T19843] EXT4-fs: Ignoring removed nobh option [ 3316.710268][ T29] audit: type=1326 audit(2000001094.891:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.759896][ T29] audit: type=1326 audit(2000001094.921:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.765329][T19843] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 3316.819959][ T29] audit: type=1326 audit(2000001094.931:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.852765][ T5479] usb 3-1: USB disconnect, device number 117 [ 3316.860144][ T29] audit: type=1326 audit(2000001094.931:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.889767][T19843] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 3316.902836][ T29] audit: type=1326 audit(2000001094.931:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3316.927188][T19843] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.29034: inode has both inline data and extents flags [ 3316.979932][T19843] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 3316.989767][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 3317.005738][ C0] EXT4-fs (loop4): initial error at time 2000001095: ext4_orphan_get:1397: inode 13 [ 3317.015549][ C0] EXT4-fs (loop4): last error at time 2000001095: ext4_orphan_get:1397: inode 13 [ 3317.025886][T19843] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.29034: couldn't read orphan inode 13 (err -117) [ 3317.049880][ T29] audit: type=1326 audit(2000001094.941:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3317.094258][T19843] loop4: lost filesystem error report for type 5 error -117 [ 3317.105410][T19843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3317.123576][ T29] audit: type=1326 audit(2000001094.941:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="syz.1.29032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3317.219771][ T29] audit: type=1326 audit(2000001094.951:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3317.278850][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29035'. [ 3317.289984][ T29] audit: type=1326 audit(2000001094.951:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19841 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3317.302835][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29035'. [ 3317.444130][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3317.842567][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29038'. [ 3318.390434][T19890] netlink: 'syz.1.29044': attribute type 11 has an invalid length. [ 3318.798211][T19899] loop4: detected capacity change from 0 to 512 [ 3318.853664][T19899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3318.945134][T19899] EXT4-fs (loop4): 1 truncate cleaned up [ 3318.993097][T19899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3319.882298][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29055'. [ 3319.898206][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3320.600811][ T5479] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3320.775690][ T5479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3320.797793][ T5479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3320.831415][ T5479] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 3320.869670][ T5479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3320.903722][ T5479] usb 2-1: config 0 descriptor?? [ 3321.589501][ T5479] razer 0003:1532:010E.0050: failed to enable macro keys: -71 [ 3321.626969][ T5479] razer 0003:1532:010E.0050: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 3321.698210][ T5479] usb 2-1: USB disconnect, device number 112 [ 3322.138750][T19975] fido_id[19975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3322.940356][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29081'. [ 3323.262396][T20008] 8021q: VLANs not supported on lo [ 3323.409448][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 3323.409522][ T29] audit: type=1326 audit(2000001101.741:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.484230][ T29] audit: type=1326 audit(2000001101.781:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.528432][ T29] audit: type=1326 audit(2000001101.781:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.558306][T20017] loop4: detected capacity change from 0 to 512 [ 3323.568937][T20017] EXT4-fs: Ignoring removed nobh option [ 3323.637421][T20017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3323.669854][ T29] audit: type=1326 audit(2000001101.781:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.712749][ T29] audit: type=1326 audit(2000001101.781:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.738497][ T29] audit: type=1326 audit(2000001101.781:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.765815][ T29] audit: type=1326 audit(2000001101.781:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.0.29085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3323.797171][T20017] EXT4-fs (loop4): 1 truncate cleaned up [ 3323.831752][T20017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3324.104425][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3324.247579][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29091'. [ 3324.330046][T20031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29091'. [ 3325.240421][T20060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29104'. [ 3325.666911][T20072] loop4: detected capacity change from 0 to 24 [ 3325.782879][T20072] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 3327.231845][T20101] CIFS mount error: No usable UNC path provided in device string! [ 3327.231845][T20101] [ 3327.279172][T20101] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3327.790618][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29125'. [ 3327.819276][ T29] audit: type=1326 audit(2000001106.121:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20114 comm="syz.3.29127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3327.907902][ T29] audit: type=1326 audit(2000001106.151:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20114 comm="syz.3.29127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3328.021890][ T29] audit: type=1326 audit(2000001106.211:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20114 comm="syz.3.29127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x7ffc0000 [ 3328.239220][T11252] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 3328.436057][T11252] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 3328.457002][T11252] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 3328.629081][T11252] usb 1-1: Product: syz [ 3328.638773][T11252] usb 1-1: Manufacturer: syz [ 3328.658154][T11252] usb 1-1: SerialNumber: syz [ 3328.691505][T11252] usb 1-1: config 0 descriptor?? [ 3328.949069][T11252] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 3329.152505][T11252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 3329.179937][T11252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 3329.186977][T11252] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 3329.411418][T11252] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 3329.564115][T11252] usb 1-1: USB disconnect, device number 116 [ 3330.090568][T20298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29141'. [ 3330.328206][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 3330.328286][ T29] audit: type=1326 audit(2000001108.652:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.451683][ T29] audit: type=1326 audit(2000001108.662:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.539045][ T29] audit: type=1326 audit(2000001108.672:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.622486][ T29] audit: type=1326 audit(2000001108.712:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.711053][ T29] audit: type=1326 audit(2000001108.712:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.779303][ T29] audit: type=1326 audit(2000001108.712:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.864377][ T29] audit: type=1326 audit(2000001108.712:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.922149][ T29] audit: type=1326 audit(2000001108.712:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3330.996595][ T29] audit: type=1326 audit(2000001108.722:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3331.069823][ T29] audit: type=1326 audit(2000001108.722:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20301 comm="syz.1.29142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3332.080053][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29161'. [ 3332.102249][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29161'. [ 3333.871420][T20386] sp0: Synchronizing with TNC [ 3333.893503][T20380] [U] è` [ 3335.007732][T20419] loop4: detected capacity change from 0 to 2048 [ 3335.163862][T20430] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3335.501094][T20430] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 3335.538757][T20430] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 3335.589844][T20430] Remounting filesystem read-only [ 3336.562050][T20464] loop4: detected capacity change from 0 to 1024 [ 3336.667008][T20464] hfsplus: bad catalog entry type [ 3336.904913][T16804] hfsplus: b-tree write err: -5, ino 25 [ 3336.914852][T16804] hfsplus: b-tree write err: -5, ino 4 [ 3336.934805][T16804] hfsplus: b-tree write err: -5, ino 2 [ 3337.264253][T20482] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 3337.333894][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3337.788867][ T5479] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3337.961688][ T5479] usb 3-1: Using ep0 maxpacket: 32 [ 3337.991724][ T5479] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 3338.021265][ T5479] usb 3-1: config 0 has no interface number 0 [ 3338.027698][ T5479] usb 3-1: config 0 interface 12 has no altsetting 0 [ 3338.084883][ T5479] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3338.122006][ T5479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.164963][ T5479] usb 3-1: Product: syz [ 3338.182907][ T5479] usb 3-1: Manufacturer: syz [ 3338.191643][ T5479] usb 3-1: SerialNumber: syz [ 3338.213139][ T5479] usb 3-1: config 0 descriptor?? [ 3338.309417][T11252] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3338.353769][ T5351] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3338.470551][T11252] usb 4-1: Using ep0 maxpacket: 8 [ 3338.488814][T11252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3338.519168][ T5351] usb 1-1: Using ep0 maxpacket: 8 [ 3338.524753][T11252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3338.558986][ T5351] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 3338.583547][T11252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3338.599894][ T5351] usb 1-1: config 2 has no interface number 0 [ 3338.606234][ T5351] usb 1-1: config 2 interface 31 has no altsetting 0 [ 3338.635202][T11252] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 3338.641109][T20529] loop4: detected capacity change from 0 to 256 [ 3338.654562][ T5351] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3338.686061][T11252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3338.708059][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.740529][ T5351] usb 1-1: Product: syz [ 3338.744926][ T5351] usb 1-1: Manufacturer: syz [ 3338.769730][ T5351] usb 1-1: SerialNumber: syz [ 3338.777945][T11252] usb 4-1: config 0 descriptor?? [ 3338.922236][ T5479] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 3338.963505][ T5479] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 3338.998049][ T5479] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3339.029904][ T5479] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 3339.122599][ T5479] usb 3-1: USB disconnect, device number 118 [ 3339.272842][T11252] dragonrise 0003:0079:0006.0051: unbalanced collection at end of report description [ 3339.366733][T11252] dragonrise 0003:0079:0006.0051: parse failed [ 3339.475332][T11252] dragonrise 0003:0079:0006.0051: probe with driver dragonrise failed with error -22 [ 3339.549830][ T5351] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 3339.579864][T11252] usb 4-1: USB disconnect, device number 13 [ 3339.671715][ T5351] usb 1-1: USB disconnect, device number 117 [ 3340.369572][T20585] loop4: detected capacity change from 0 to 256 [ 3340.547775][T20585] FAT-fs (loop4): Directory bread(block 64) failed [ 3340.595571][T20585] FAT-fs (loop4): Directory bread(block 65) failed [ 3340.650849][T20585] FAT-fs (loop4): Directory bread(block 66) failed [ 3340.657663][T20585] FAT-fs (loop4): Directory bread(block 67) failed [ 3340.667922][T20585] FAT-fs (loop4): Directory bread(block 68) failed [ 3340.701039][T20585] FAT-fs (loop4): Directory bread(block 69) failed [ 3340.708026][T20585] FAT-fs (loop4): Directory bread(block 70) failed [ 3340.731861][T20585] FAT-fs (loop4): Directory bread(block 71) failed [ 3340.749007][T20585] FAT-fs (loop4): Directory bread(block 72) failed [ 3340.755777][T20585] FAT-fs (loop4): Directory bread(block 73) failed [ 3340.882819][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29233'. [ 3341.396861][T20607] loop4: detected capacity change from 0 to 512 [ 3341.805837][T20615] netlink: 80 bytes leftover after parsing attributes in process `syz.0.29241'. [ 3341.903552][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29243'. [ 3341.940120][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29243'. [ 3342.067617][T20627] loop4: detected capacity change from 0 to 1024 [ 3342.208942][T20627] hfsplus: xattr searching failed [ 3342.921416][T20646] loop4: detected capacity change from 0 to 16 [ 3343.787562][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29258'. [ 3343.808731][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29258'. [ 3343.919705][ T2040] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3343.955129][ T2040] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3343.988411][ T2040] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3345.309375][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29277'. [ 3345.371267][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29277'. [ 3345.651738][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29279'. [ 3345.993402][T20728] option changes via remount are deprecated (pid=20727 comm=syz.0.29281) [ 3348.891351][T20782] netlink: 'syz.2.29304': attribute type 1 has an invalid length. [ 3351.868280][ T5479] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 3352.057860][ T5479] usb 4-1: Using ep0 maxpacket: 32 [ 3352.082283][ T5479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3352.141840][ T5479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3352.197135][ T5479] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 3352.224500][ T5479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.270181][ T5479] usb 4-1: config 0 descriptor?? [ 3353.010029][ T5479] koneplus 0003:1E7D:2D51.0052: unbalanced collection at end of report description [ 3353.056392][ T5479] koneplus 0003:1E7D:2D51.0052: parse failed [ 3353.087339][ T5479] koneplus 0003:1E7D:2D51.0052: probe with driver koneplus failed with error -22 [ 3353.255930][ T5479] usb 4-1: USB disconnect, device number 14 [ 3354.577761][T11252] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3354.673941][T20905] loop4: detected capacity change from 0 to 512 [ 3354.734827][T20905] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 3354.775175][T11252] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 3354.786054][T20905] EXT4-fs (loop4): 1 truncate cleaned up [ 3354.796799][T20905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3354.808824][T11252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3354.881575][T11252] usb 1-1: config 0 descriptor?? [ 3355.207152][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3355.564193][T11252] usb 1-1: Cannot set autoneg [ 3355.579667][T11252] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 3355.676960][T11252] usb 1-1: USB disconnect, device number 118 [ 3357.138415][T20966] usb usb1: check_ctrlrecip: process 20966 (syz.2.29364) requesting ep 01 but needs 81 [ 3358.028758][T20986] netlink: 'syz.3.29372': attribute type 5 has an invalid length. [ 3358.464632][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 3358.464713][ T29] audit: type=1326 audit(2000001136.803:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3358.577827][ T29] audit: type=1326 audit(2000001136.803:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3358.677423][ T29] audit: type=1326 audit(2000001136.883:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3358.768913][ T29] audit: type=1326 audit(2000001136.883:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3358.885378][ T29] audit: type=1326 audit(2000001136.883:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=469 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3358.939636][ T29] audit: type=1326 audit(2000001136.883:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3359.033132][ T29] audit: type=1326 audit(2000001136.883:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3359.124906][ T29] audit: type=1326 audit(2000001136.883:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3359.226247][ T29] audit: type=1326 audit(2000001136.883:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3359.317397][T11252] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3359.325765][ T29] audit: type=1326 audit(2000001136.883:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.29373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3359.380753][T21010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.29382'. [ 3359.410338][T21010] netlink: 35 bytes leftover after parsing attributes in process `syz.2.29382'. [ 3359.539201][T11252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3359.552998][T11252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3359.585002][T11252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3359.637584][T11252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3359.664652][T11252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.751563][T11252] usb 2-1: config 0 descriptor?? [ 3359.793296][T21018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3359.963156][T21021] loop4: detected capacity change from 0 to 764 [ 3360.018409][T21021] rock: directory entry would overflow storage [ 3360.024886][T21021] rock: sig=0x4654, size=5, remaining=4 [ 3360.237555][T11252] plantronics 0003:047F:FFFF.0053: reserved main item tag 0xe [ 3360.263762][T11252] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 3360.334169][T11252] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3360.423723][T11252] usb 2-1: USB disconnect, device number 113 [ 3361.034679][T21039] fido_id[21039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3363.801621][T21115] loop4: detected capacity change from 0 to 1024 [ 3363.865880][T21115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3364.176724][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3365.032595][T21141] loop4: detected capacity change from 0 to 1024 [ 3365.126724][T21141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3365.399429][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3365.996344][T21161] loop4: detected capacity change from 0 to 4096 [ 3366.053797][T21161] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 3366.237733][T21161] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 3366.261030][T21161] ntfs3(loop4): Failed to load $Extend (-22). [ 3366.279457][T21161] ntfs3(loop4): Failed to initialize $Extend. [ 3366.557247][ T5351] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3366.773821][ T5351] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 3366.797362][ T5351] usb 2-1: config 0 has no interface number 0 [ 3366.818112][ T5351] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.856919][ T5351] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.888786][ T5351] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 3366.921776][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.970445][ T5351] usb 2-1: config 0 descriptor?? [ 3367.256314][T21192] loop4: detected capacity change from 0 to 128 [ 3367.342329][T21192] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 3367.479641][ T5351] uclogic 0003:5543:0522.0054: unknown main item tag 0x0 [ 3367.497607][ T5351] uclogic 0003:5543:0522.0054: unknown main item tag 0x0 [ 3367.505217][ T5351] uclogic 0003:5543:0522.0054: unknown main item tag 0x0 [ 3367.543256][ T5351] uclogic 0003:5543:0522.0054: unknown main item tag 0x0 [ 3367.587035][ T5351] uclogic 0003:5543:0522.0054: unknown main item tag 0x0 [ 3367.626522][ T5351] uclogic 0003:5543:0522.0054: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input17 [ 3367.685882][ T5351] usb 2-1: USB disconnect, device number 114 [ 3368.130337][T21209] fido_id[21209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3369.263263][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29460'. [ 3370.082535][T21279] tipc: Enabling of bearer rejected, failed to enable media [ 3372.577333][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29494'. [ 3372.609503][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29494'. [ 3373.759298][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29515'. [ 3373.766003][T21372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.29504'. [ 3373.781628][T21372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29504'. [ 3373.794078][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29504'. [ 3374.568967][T21391] netlink: 826 bytes leftover after parsing attributes in process `syz.1.29511'. [ 3376.073196][T21435] netlink: 'syz.3.29532': attribute type 8 has an invalid length. [ 3376.451268][T21444] netlink: 'syz.2.29536': attribute type 3 has an invalid length. [ 3377.211150][T21462] gretap0: left allmulticast mode [ 3377.254535][T21462] netlink: 136 bytes leftover after parsing attributes in process `syz.4.29542'. [ 3377.299264][T21462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3377.843211][T21476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29549'. [ 3380.256328][ T29] audit: type=1326 audit(2000001158.584:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.326314][ T29] audit: type=1326 audit(2000001158.594:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.416352][ T29] audit: type=1326 audit(2000001158.594:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.466794][ T29] audit: type=1326 audit(2000001158.614:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.552287][ T29] audit: type=1326 audit(2000001158.614:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.606520][ T29] audit: type=1326 audit(2000001158.614:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.678471][ T29] audit: type=1326 audit(2000001158.644:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.766358][ T29] audit: type=1326 audit(2000001158.644:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.1.29572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 3380.812826][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29586'. [ 3380.849461][T21540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29586'. [ 3381.239953][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29581'. [ 3382.986670][ T5351] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 3383.179702][ T5351] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 3383.216210][ T5351] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3383.239094][ T5351] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3383.285496][ T5351] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3383.306351][ T5351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3383.313290][ T5351] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 3383.344751][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.368983][ T5351] usb 3-1: config 0 descriptor?? [ 3383.956103][ T5351] hid-alps 0003:044E:120C.0055: unknown main item tag 0x0 [ 3383.963703][ T5351] hid-alps 0003:044E:120C.0055: unknown main item tag 0x0 [ 3383.986813][ T5351] hid-alps 0003:044E:120C.0055: unknown main item tag 0x0 [ 3383.994250][ T5351] hid-alps 0003:044E:120C.0055: unbalanced collection at end of report description [ 3384.087469][ T5351] hid-alps 0003:044E:120C.0055: parse failed [ 3384.094004][ T5351] hid-alps 0003:044E:120C.0055: probe with driver hid-alps failed with error -22 [ 3384.127422][T21615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29608'. [ 3384.180825][ T5351] usb 3-1: USB disconnect, device number 119 [ 3384.478245][T21636] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 3385.603120][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29621'. [ 3385.744902][T21661] loop4: detected capacity change from 0 to 4096 [ 3385.916344][T21661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3386.304865][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3386.389615][T21684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29626'. [ 3388.274779][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29642'. [ 3389.014924][T21741] loop4: detected capacity change from 0 to 164 [ 3391.177777][T21904] loop4: detected capacity change from 0 to 2048 [ 3391.268583][T21913] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3391.323240][ T29] audit: type=1800 audit(2000001169.655:636): pid=21904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29661" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 3391.386353][T21904] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 3391.418489][T21904] Remounting filesystem read-only [ 3392.059219][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29669'. [ 3393.240628][T21948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3393.248247][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 3393.255956][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 3393.263784][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 3394.256140][T21966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29687'. [ 3395.183545][T21983] loop4: detected capacity change from 0 to 4096 [ 3395.246499][T21983] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 3395.281748][T21983] ntfs3(loop4): ino=3, mi_enum_attr [ 3395.418221][T21983] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 3395.438508][T21983] ntfs3(loop4): ino=1a, mi_enum_attr [ 3395.456384][T21983] ntfs3(loop4): ino=1a, mi_enum_attr [ 3395.461991][T21983] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 3396.196015][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29703'. [ 3397.555261][ T5479] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 3397.736533][ T5479] usb 4-1: Using ep0 maxpacket: 32 [ 3397.771534][ T5479] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 3397.804822][ T5479] usb 4-1: config 0 has no interface number 0 [ 3397.811550][ T5479] usb 4-1: config 0 interface 216 has no altsetting 0 [ 3397.871356][ T5479] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 3397.904105][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3397.926592][ T5479] usb 4-1: Product: syz [ 3397.930973][ T5479] usb 4-1: Manufacturer: syz [ 3397.948528][ T5479] usb 4-1: SerialNumber: syz [ 3397.970833][ T5479] usb 4-1: config 0 descriptor?? [ 3398.222429][ T5479] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 3398.685569][ T5479] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 3398.770848][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3398.777103][T22077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29726'. [ 3398.819026][T22077] netem: incorrect gi model size [ 3398.835404][T22077] netem: change failed [ 3398.836307][T22081] IPVS: length: 8 != 3390824 [ 3399.082871][ T5479] usb 4-1: failed to restore interface 216 altsetting 143 (error=-71) [ 3399.113554][ T5479] ueagle-atm 4-1:0.216: usbatm_usb_probe: bind failed: -19! [ 3399.189454][ T5479] usb 4-1: USB disconnect, device number 15 [ 3400.207735][ T5479] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 3400.366781][ T5479] usb 4-1: Using ep0 maxpacket: 8 [ 3400.380839][ T5479] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 3400.412984][ T5479] usb 4-1: config 2 has no interface number 0 [ 3400.435891][ T5479] usb 4-1: config 2 interface 31 has no altsetting 0 [ 3400.463579][ T5479] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3400.504351][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3400.517178][ T5479] usb 4-1: Product: syz [ 3400.521542][ T5479] usb 4-1: Manufacturer: syz [ 3400.557279][ T5479] usb 4-1: SerialNumber: syz [ 3401.230806][ T5479] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 3401.292526][ T5479] usb 4-1: USB disconnect, device number 16 [ 3401.431043][T22147] loop4: detected capacity change from 0 to 64 [ 3402.319188][T22162] overlayfs: failed to resolve './file0': -2 [ 3402.628127][T22167] sp0: Synchronizing with TNC [ 3404.632944][T22232] loop4: detected capacity change from 0 to 16 [ 3404.689698][T22232] erofs (device loop4): mounted with root inode @ nid 36. [ 3404.773487][T22232] erofs (device loop4): per-inode big pcluster without sb feature for nid 36 [ 3404.801551][T22232] erofs (device loop4): read error -117 @ 0 of nid 36 [ 3404.825836][T22232] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 3405.491181][T22254] batadv0: entered promiscuous mode [ 3405.497594][T22254] batadv0: left allmulticast mode [ 3407.560651][T22314] loop4: detected capacity change from 0 to 128 [ 3408.138125][T22332] loop4: detected capacity change from 0 to 1024 [ 3408.245141][T22332] hfsplus: bad catalog entry type [ 3408.455306][T16804] hfsplus: b-tree write err: -5, ino 25 [ 3408.461362][T16804] hfsplus: b-tree write err: -5, ino 4 [ 3408.475288][T16804] hfsplus: b-tree write err: -5, ino 2 [ 3411.034855][T22396] sp0: Synchronizing with TNC [ 3411.881810][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29842'. [ 3411.966412][T22426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.29842'. [ 3412.891895][T22446] loop4: detected capacity change from 0 to 256 [ 3415.196881][T22513] xt_socket: unknown flags 0x4 [ 3416.095109][T22536] loop4: detected capacity change from 0 to 1024 [ 3416.443243][T16788] hfsplus: b-tree write err: -5, ino 25 [ 3416.462202][T16788] hfsplus: b-tree write err: -5, ino 4 [ 3416.491879][T16788] hfsplus: b-tree write err: -5, ino 2 [ 3417.149414][T22553] loop4: detected capacity change from 0 to 4096 [ 3417.515020][T22553] ntfs3(loop4): ino=5, "/" fiemap is not supported for compressed file [ 3418.579801][ T29] audit: type=1326 audit(2000001196.917:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22594 comm="syz.2.29905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7fc00000 [ 3418.999700][T22609] usb usb1: check_ctrlrecip: process 22609 (syz.2.29909) requesting ep 01 but needs 81 [ 3419.064109][T22609] usb usb1: usbfs: process 22609 (syz.2.29909) did not claim interface 0 before use [ 3420.350152][T22635] loop4: detected capacity change from 0 to 8192 [ 3421.474760][ T5351] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 3421.641614][ T5351] usb 4-1: Using ep0 maxpacket: 16 [ 3421.661709][ T5351] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 3421.685553][ T5351] usb 4-1: config 127 has no interface number 0 [ 3421.692383][ T5351] usb 4-1: config 127 interface 124 has no altsetting 0 [ 3421.752943][ T5351] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 3421.779776][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3421.798508][ T5351] usb 4-1: Product: syz [ 3421.804992][ T5351] usb 4-1: Manufacturer: syz [ 3421.809788][ T5351] usb 4-1: SerialNumber: syz [ 3421.964327][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29936'. [ 3421.994033][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29936'. [ 3422.003310][T22686] netlink: 'syz.1.29936': attribute type 13 has an invalid length. [ 3422.023549][T22686] netlink: 'syz.1.29936': attribute type 12 has an invalid length. [ 3422.280936][ T29] audit: type=1326 audit(2000001200.617:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22693 comm="syz.0.29940" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 3422.734013][ T5351] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 3422.914338][ T5351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3422.939171][ T5351] usb 4-1: device firmware changed [ 3422.987097][ T5351] usb 4-1: USB disconnect, device number 17 [ 3423.079548][ T5479] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3423.243931][ T5479] usb 2-1: Using ep0 maxpacket: 8 [ 3423.279460][ T5479] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 3423.293060][ T5479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3423.324204][ T5479] usb 2-1: Product: syz [ 3423.334232][ T5479] usb 2-1: Manufacturer: syz [ 3423.344613][ T5479] usb 2-1: SerialNumber: syz [ 3423.537800][T22729] loop4: detected capacity change from 0 to 64 [ 3423.779020][ T5479] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 3423.806486][ T5479] kalmia 2-1:1.0: probe with driver kalmia failed with error -71 [ 3423.889370][ T5479] usb 2-1: USB disconnect, device number 115 [ 3423.922923][ T5791] hfs: node 4:3 still has 1 user(s)! [ 3424.648000][T22764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29955'. [ 3425.073780][ T5479] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3425.274195][ T5479] usb 4-1: Using ep0 maxpacket: 16 [ 3425.286066][ T5479] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 3425.306285][ T5479] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 3425.330745][ T5479] usb 4-1: config 0 has no interface number 0 [ 3425.347910][ T5479] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 3425.389926][ T5479] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3425.424650][ T5479] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3425.441504][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.474400][ T5479] usb 4-1: Product: syz [ 3425.478790][ T5479] usb 4-1: Manufacturer: syz [ 3425.506516][ T5479] usb 4-1: SerialNumber: syz [ 3425.545873][ T5479] usb 4-1: config 0 descriptor?? [ 3425.579748][T22769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3425.604695][T22769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3425.907167][T22769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3425.915272][T22769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3426.063873][T11252] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3426.244419][T11252] usb 2-1: Using ep0 maxpacket: 16 [ 3426.277650][T11252] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 3426.296585][T11252] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3426.308178][T11252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3426.319831][T11252] usb 2-1: Product: syz [ 3426.326554][T11252] usb 2-1: Manufacturer: syz [ 3426.332008][T11252] usb 2-1: SerialNumber: syz [ 3426.366618][ T5479] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3426.393578][ T5479] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 3426.398927][T11252] r8152-cfgselector 2-1: Unknown version 0x0000 [ 3426.415737][T11252] r8152-cfgselector 2-1: config 0 descriptor?? [ 3426.425990][ T5479] asix 4-1:0.251: probe with driver asix failed with error -71 [ 3426.467406][ T5479] usb 4-1: USB disconnect, device number 18 [ 3426.666271][T11252] r8152-cfgselector 2-1: Needed 1 retries to read version [ 3426.670802][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29970'. [ 3426.819056][T22822] devtmpfs: Too few inodes for current use [ 3426.892200][T11252] r8152-cfgselector 2-1: USB disconnect, device number 116 [ 3428.169829][T22858] sg_write: data in/out 1062856226/14 bytes for SCSI command 0x2-- guessing data in; [ 3428.169829][T22858] program syz.0.29985 not setting count and/or reply_len properly [ 3428.603546][ T5479] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3428.781585][ T5479] usb 4-1: Using ep0 maxpacket: 32 [ 3428.820208][ T5479] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 3428.841473][ T5479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3428.863143][ T5479] usb 4-1: config 0 has no interface number 0 [ 3428.869983][ T5479] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3428.907037][ T5479] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 3428.926475][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.937680][ T5479] usb 4-1: Product: syz [ 3428.942060][ T5479] usb 4-1: Manufacturer: syz [ 3428.947384][ T5479] usb 4-1: SerialNumber: syz [ 3428.966525][ T5479] usb 4-1: config 0 descriptor?? [ 3428.999905][ T5479] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 3429.009269][ T5479] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 3429.193620][ T5479] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 3429.201666][ T5479] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 3429.404722][ T5479] usb 4-1: USB disconnect, device number 19 [ 3431.506015][T22954] support for cryptoloop has been removed. Use dm-crypt instead. [ 3432.242991][T22973] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 3432.286254][T22973] ALSA: mixer_oss: invalid OSS volume 'TREB' [ 3433.142468][T22997] trusted_key: encrypted_key: insufficient parameters specified [ 3433.595603][T23008] netlink: 80 bytes leftover after parsing attributes in process `syz.3.30041'. [ 3433.620836][T23008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30041'. [ 3433.767705][T23013] loop4: detected capacity change from 0 to 256 [ 3433.963124][T23013] FAT-fs (loop4): Directory bread(block 64) failed [ 3433.969878][T23013] FAT-fs (loop4): Directory bread(block 65) failed [ 3433.994746][T23013] FAT-fs (loop4): Directory bread(block 66) failed [ 3434.013981][T23019] Bluetooth: MGMT ver 1.23 [ 3434.021594][T23013] FAT-fs (loop4): Directory bread(block 67) failed [ 3434.073850][T23013] FAT-fs (loop4): Directory bread(block 68) failed [ 3434.080624][T23013] FAT-fs (loop4): Directory bread(block 69) failed [ 3434.113543][T23013] FAT-fs (loop4): Directory bread(block 70) failed [ 3434.120318][T23013] FAT-fs (loop4): Directory bread(block 71) failed [ 3434.160742][T23013] FAT-fs (loop4): Directory bread(block 72) failed [ 3434.186288][T23013] FAT-fs (loop4): Directory bread(block 73) failed [ 3434.859473][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30050'. [ 3436.070323][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30059'. [ 3436.100876][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30059'. [ 3436.124883][T23189] netlink: 'syz.1.30059': attribute type 14 has an invalid length. [ 3436.145037][T23189] netlink: 'syz.1.30059': attribute type 12 has an invalid length. [ 3436.432614][T23200] A link change request failed with some changes committed already. Interface ªªªªªªAc°ŸÂ¥›,á may have been left with an inconsistent configuration, please check. [ 3438.484909][T23253] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 3438.851910][T23263] devtmpfs: Too few inodes for current use [ 3439.526880][T23283] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 3440.801407][T23314] tipc: Invalid UDP bearer configuration [ 3440.801617][T23314] tipc: Enabling of bearer rejected, failed to enable media [ 3441.147327][T23324] netlink: 71 bytes leftover after parsing attributes in process `syz.0.30120'. [ 3441.341401][T23330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30121'. [ 3442.187910][T23355] loop4: detected capacity change from 0 to 512 [ 3442.205440][T23355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3442.250699][T23355] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.30131: bad orphan inode 131083 [ 3442.275313][T23355] loop4: lost filesystem error report for type 5 error -117 [ 3442.278655][T23355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3442.333116][ T5351] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3442.539405][ T5351] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3442.555970][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3442.559158][ T5351] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3442.612951][ T5351] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3442.648335][ T5351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3442.692663][ T5351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3442.737324][ T5351] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3442.768799][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3442.800061][ T5351] usb 2-1: Product: syz [ 3442.811246][ T5351] usb 2-1: Manufacturer: syz [ 3442.897569][ T5351] cdc_wdm 2-1:1.0: skipping garbage [ 3442.914239][ T5351] cdc_wdm 2-1:1.0: skipping garbage [ 3442.950917][ T5351] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3442.960265][ T5351] cdc_wdm 2-1:1.0: Unknown control protocol [ 3443.300696][ T5351] usb 2-1: USB disconnect, device number 117 [ 3443.328903][T23384] mkiss: ax0: crc mode is auto. [ 3443.758349][T23385] loop4: detected capacity change from 0 to 8192 [ 3444.595030][T23422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30150'. [ 3445.635246][ T5479] kernel read not supported for file /12489/cgroup (pid: 5479 comm: kworker/1:3) [ 3446.855258][T23482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30175'. [ 3446.892421][T23482] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 3448.074182][T23521] xt_l2tp: missing protocol rule (udp|l2tpip) [ 3448.172390][ T5351] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3448.332649][ T5351] usb 3-1: Using ep0 maxpacket: 8 [ 3448.367525][ T5351] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 3448.392448][ T5351] usb 3-1: config 2 has no interface number 0 [ 3448.412956][ T5351] usb 3-1: config 2 interface 31 has no altsetting 0 [ 3448.478996][ T5351] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3448.499889][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3448.539498][ T5351] usb 3-1: Product: syz [ 3448.556851][ T5351] usb 3-1: Manufacturer: syz [ 3448.561705][ T5351] usb 3-1: SerialNumber: syz [ 3449.264106][ T5351] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 3449.295252][ T5351] usb 3-1: USB disconnect, device number 120 [ 3449.641813][T23558] loop4: detected capacity change from 0 to 4096 [ 3449.768978][T23558] ntfs3(loop4): ino=b, mi_enum_attr [ 3449.795426][T23558] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 3449.825392][T23558] ntfs3(loop4): Failed to load $Extend (-22). [ 3449.831752][T23558] ntfs3(loop4): Failed to initialize $Extend. [ 3449.913194][T23558] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 3450.622973][ T5351] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 3450.793998][ T5351] usb 4-1: Using ep0 maxpacket: 16 [ 3450.808005][ T5351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3450.831219][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3450.845937][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3450.856542][ T5351] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 3450.869325][ T5351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3450.923585][ T5351] usb 4-1: config 0 descriptor?? [ 3451.084678][T23604] IPVS: length: 8 != 3390824 [ 3451.408283][ T5351] hid-picolcd 0003:04D8:F002.0056: unknown main item tag 0x0 [ 3451.437165][ T5351] hid-picolcd 0003:04D8:F002.0056: unknown main item tag 0x0 [ 3451.456015][ T5351] hid-picolcd 0003:04D8:F002.0056: unknown main item tag 0x0 [ 3451.471878][ T5351] hid-picolcd 0003:04D8:F002.0056: unknown main item tag 0x0 [ 3451.490467][ T5351] hid-picolcd 0003:04D8:F002.0056: unknown main item tag 0x0 [ 3451.582980][ T5351] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf3 found [ 3451.583098][ T5351] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf4 found [ 3451.590919][ T5351] usb 4-1: USB disconnect, device number 20 [ 3452.198643][T23651] loop4: detected capacity change from 0 to 512 [ 3452.259679][T23651] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #12: comm syz.4.30224: corrupted in-inode xattr: bad e_name length [ 3452.296328][T23651] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 3452.302039][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 3452.318074][ C0] EXT4-fs (loop4): initial error at time 2000001230: ext4_iget_extra_inode:5040: inode 12 [ 3452.328548][ C0] EXT4-fs (loop4): last error at time 2000001230: ext4_iget_extra_inode:5040: inode 12 [ 3452.366673][T23651] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.30224: couldn't read orphan inode 12 (err -117) [ 3452.404892][T23651] loop4: lost filesystem error report for type 5 error -117 [ 3452.408287][T23651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3452.512388][T23661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30227'. [ 3452.635528][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3457.296790][T23788] netlink: 220 bytes leftover after parsing attributes in process `syz.4.30280'. [ 3458.632030][ T5351] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3458.802362][ T5351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3458.825941][ T5351] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3458.856022][ T5351] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3458.885545][ T5351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3458.908581][ T5351] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 3458.933736][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3458.974807][ T5351] usb 2-1: config 0 descriptor?? [ 3459.232713][T10131] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3459.392107][T10131] usb 4-1: Using ep0 maxpacket: 16 [ 3459.451879][T10131] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3459.472128][ T5351] kye 0003:0458:5015.0057: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 3459.483229][T10131] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 3459.497879][ T5351] kye 0003:0458:5015.0057: unbalanced collection at end of report description [ 3459.508741][T10131] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3459.523116][T10131] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 3459.534079][ T5351] kye 0003:0458:5015.0057: parse failed [ 3459.540047][ T5351] kye 0003:0458:5015.0057: probe with driver kye failed with error -22 [ 3459.572117][T10131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3459.606592][T10131] usb 4-1: config 0 descriptor?? [ 3459.650204][ T5479] usb 2-1: USB disconnect, device number 118 [ 3460.051326][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.059434][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.068835][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.087770][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.118944][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.163810][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.187556][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.195659][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.204340][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3460.205884][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.219479][T10131] steelseries 0003:1038:12C2.0058: unknown main item tag 0x0 [ 3460.288803][T10131] usb 4-1: USB disconnect, device number 21 [ 3460.703443][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30311'. [ 3461.361943][ T5479] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3461.556425][T23920] sp0: Synchronizing with TNC [ 3461.563947][ T5479] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 3461.582191][ T5479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3461.613090][ T5479] usb 4-1: config 0 has no interface number 0 [ 3461.637073][ T5479] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 3461.668906][ T5479] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3461.765920][ T5479] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 3461.791583][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3461.799882][ T5479] usb 4-1: Product: syz [ 3461.834582][ T5479] usb 4-1: Manufacturer: syz [ 3461.839440][ T5479] usb 4-1: SerialNumber: syz [ 3461.897413][ T5479] usb 4-1: config 0 descriptor?? [ 3462.010235][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30323'. [ 3462.052303][T23936] netlink: 72 bytes leftover after parsing attributes in process `syz.4.30323'. [ 3462.465360][T23949] comedi comedi3: dt2817: I/O port conflict (0x3,5) [ 3462.566457][ T5479] usb 4-1: USB disconnect, device number 22 [ 3463.173607][T23974] loop4: detected capacity change from 0 to 64 [ 3463.394390][T23979] sg_write: data in/out 443358/706 bytes for SCSI command 0x0-- guessing data in; [ 3463.394390][T23979] program syz.3.30339 not setting count and/or reply_len properly [ 3464.159372][ T29] audit: type=1326 audit(2000001242.489:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24000 comm="syz.4.30347" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef6c code=0x0 [ 3464.656564][T24013] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 3464.682033][T24013] ALSA: mixer_oss: invalid index 137438 [ 3465.699549][T24044] loop4: detected capacity change from 0 to 256 [ 3466.203353][T24056] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 3467.346838][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30382'. [ 3467.383187][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30382'. [ 3467.418501][T24085] netlink: 'syz.0.30382': attribute type 13 has an invalid length. [ 3467.451735][T24085] netlink: 'syz.0.30382': attribute type 12 has an invalid length. [ 3468.971438][ T5479] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3469.146452][ T5479] usb 3-1: Using ep0 maxpacket: 16 [ 3469.177134][ T5479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3469.210069][ T5479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3469.251349][ T5479] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3469.281545][ T5479] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3469.305396][ T5479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3469.329633][ T5479] usb 3-1: config 0 descriptor?? [ 3469.840005][ T5479] input: HID 0955:7214 Haptics as /devices/virtual/input/input121 [ 3470.005974][ T5479] shield 0003:0955:7214.0059: Registered Thunderstrike controller [ 3470.043425][ T5479] shield 0003:0955:7214.0059: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 3470.165953][T15367] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3470.180474][ T5479] usb 3-1: USB disconnect, device number 121 [ 3470.211375][T15367] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3470.255081][T15367] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3470.318956][T15367] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3470.353638][T24148] loop4: detected capacity change from 0 to 4096 [ 3470.392157][T24148] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 3470.706176][T24148] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 3470.803545][T24148] ntfs3(loop4): ino=1e, mi_enum_attr [ 3471.867434][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30421'. [ 3472.037196][T24218] netlink: 806 bytes leftover after parsing attributes in process `syz.0.30424'. [ 3472.752033][T10131] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3472.931737][T10131] usb 3-1: Using ep0 maxpacket: 16 [ 3472.956662][T10131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3472.988957][T10131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3473.018546][T10131] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 3473.037715][T10131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3473.052688][T10131] usb 3-1: Product: syz [ 3473.057736][T10131] usb 3-1: Manufacturer: syz [ 3473.066301][T10131] usb 3-1: SerialNumber: syz [ 3473.083852][T10131] usb 3-1: config 0 descriptor?? [ 3473.101965][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30435'. [ 3473.369304][T10131] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input122 [ 3473.725125][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3473.734000][T10131] imon:send_packet: packet tx failed (-71) [ 3473.761733][T10131] imon 3-1:0.0: panel buttons/knobs setup failed [ 3473.854988][T24276] loop4: detected capacity change from 0 to 128 [ 3473.947100][T10131] rc_core: IR keymap rc-imon-pad not found [ 3473.955109][T10131] Registered IR keymap rc-empty [ 3473.981602][T10131] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3474.001218][T10131] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3474.031931][T10131] imon:send_packet: packet tx failed (-71) [ 3474.062392][T10131] imon 3-1:0.0: remote input dev register failed [ 3474.069465][T10131] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 3474.189878][T10131] imon 3-1:0.0: unable to initialize intf0, err 0 [ 3474.218706][T10131] imon:imon_probe: failed to initialize context! [ 3474.234703][T10131] imon 3-1:0.0: unable to register, err -19 [ 3474.310167][T10131] usb 3-1: USB disconnect, device number 122 [ 3474.561904][T16788] ===================================================== [ 3474.571689][T16788] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x77e/0xf00 [ 3474.584453][T16788] n_tty_receive_buf_closing+0x77e/0xf00 [ 3474.591183][T16788] n_tty_receive_buf_common+0x19c6/0x2610 [ 3474.598238][T16788] n_tty_receive_buf2+0x4c/0x60 [ 3474.604414][T16788] tty_ldisc_receive_buf+0xc6/0x2c0 [ 3474.610408][T16788] tty_port_default_receive_buf+0xd7/0x1a0 [ 3474.619307][T16788] flush_to_ldisc+0x43e/0xe40 [ 3474.625309][T16788] process_scheduled_works+0xb82/0x1e80 [ 3474.632038][T16788] worker_thread+0xee4/0x1590 [ 3474.638176][T16788] kthread+0x53f/0x600 [ 3474.644704][T16788] ret_from_fork+0x20f/0x910 [ 3474.651310][T16788] ret_from_fork_asm+0x1a/0x30 [ 3474.657137][T16788] [ 3474.660213][T16788] Uninit was created at: [ 3474.671568][T16788] __kmalloc_noprof+0x486/0x1680 [ 3474.677532][T16788] __tty_buffer_request_room+0x3d4/0x7a0 [ 3474.684372][T16788] __tty_insert_flip_string_flags+0x157/0x6e0 [ 3474.691724][T16788] uart_insert_char+0x368/0x930 [ 3474.697479][T16788] serial8250_read_char+0x1ba/0x670 [ 3474.704114][T16788] serial8250_handle_irq_locked+0x6d4/0xa40 [ 3474.711016][T16788] serial8250_handle_irq+0x187/0x730 [ 3474.717164][T16788] serial8250_default_handle_irq+0x116/0x370 [ 3474.724461][T16788] serial8250_interrupt+0xcb/0x420 [ 3474.730448][T16788] __handle_irq_event_percpu+0x13c/0xf90 [ 3474.738476][T16788] handle_irq_event+0xe0/0x2a0 [ 3474.744797][T16788] handle_edge_irq+0x2a9/0xb30 [ 3474.751134][T16788] __common_interrupt+0x9d/0x180 [ 3474.756906][T16788] common_interrupt+0x94/0xb0 [ 3474.763477][T16788] asm_common_interrupt+0x2b/0x40 [ 3474.769380][T16788] [ 3474.772766][T16788] CPU: 0 UID: 0 PID: 16788 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 3474.785228][T16788] Tainted: [L]=SOFTLOCKUP [ 3474.790334][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3474.801934][T16788] Workqueue: events_unbound flush_to_ldisc [ 3474.808883][T16788] ===================================================== [ 3474.817279][T16788] Disabling lock debugging due to kernel taint [ 3474.948825][T16788] Kernel panic - not syncing: kmsan.panic set ... [ 3474.955760][T16788] CPU: 1 UID: 0 PID: 16788 Comm: kworker/u8:5 Tainted: G B L syzkaller #0 PREEMPT(full) [ 3474.967165][T16788] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 3474.972823][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3474.983301][T16788] Workqueue: events_unbound flush_to_ldisc [ 3474.989403][T16788] Call Trace: [ 3474.992838][T16788] [ 3474.995868][T16788] __dump_stack+0x26/0x30 [ 3475.000376][T16788] dump_stack_lvl+0x50/0x1c0 [ 3475.005185][T16788] ? dump_stack+0x12/0x25 [ 3475.009709][T16788] dump_stack+0x1e/0x25 [ 3475.014072][T16788] vpanic+0x7b4/0x1430 [ 3475.018353][T16788] panic+0x15d/0x160 [ 3475.022520][T16788] kmsan_report+0x31a/0x320 [ 3475.027271][T16788] ? __msan_warning+0x1b/0x30 [ 3475.032144][T16788] ? n_tty_receive_buf_closing+0x77e/0xf00 [ 3475.038243][T16788] ? n_tty_receive_buf_common+0x19c6/0x2610 [ 3475.044341][T16788] ? n_tty_receive_buf2+0x4c/0x60 [ 3475.049646][T16788] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 3475.055199][T16788] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 3475.061373][T16788] ? flush_to_ldisc+0x43e/0xe40 [ 3475.066397][T16788] ? process_scheduled_works+0xb82/0x1e80 [ 3475.072298][T16788] ? worker_thread+0xee4/0x1590 [ 3475.077413][T16788] ? kthread+0x53f/0x600 [ 3475.081853][T16788] ? ret_from_fork+0x20f/0x910 [ 3475.086888][T16788] ? ret_from_fork_asm+0x1a/0x30 [ 3475.092366][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 3475.097638][T16788] ? raw_irqentry_exit_cond_resched+0xe/0x80 [ 3475.104099][T16788] ? irqentry_exit+0x8f/0x6c0 [ 3475.108980][T16788] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 3475.115600][T16788] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3475.121934][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 3475.127197][T16788] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 3475.133906][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 3475.139189][T16788] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3475.145348][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 3475.150713][T16788] __msan_warning+0x1b/0x30 [ 3475.155399][T16788] n_tty_receive_buf_closing+0x77e/0xf00 [ 3475.161375][T16788] n_tty_receive_buf_common+0x19c6/0x2610 [ 3475.167500][T16788] ? raw_irqentry_exit_cond_resched+0x3f/0x80 [ 3475.173899][T16788] ? n_tty_receive_buf_common+0x7b1/0x2610 [ 3475.180015][T16788] n_tty_receive_buf2+0x4c/0x60 [ 3475.185057][T16788] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 3475.190798][T16788] tty_ldisc_receive_buf+0xc6/0x2c0 [ 3475.196157][T16788] tty_port_default_receive_buf+0xd7/0x1a0 [ 3475.202743][T16788] flush_to_ldisc+0x43e/0xe40 [ 3475.207664][T16788] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 3475.214341][T16788] ? __pfx_flush_to_ldisc+0x10/0x10 [ 3475.219681][T16788] process_scheduled_works+0xb82/0x1e80 [ 3475.225426][T16788] worker_thread+0xee4/0x1590 [ 3475.230367][T16788] kthread+0x53f/0x600 [ 3475.234627][T16788] ? __pfx_worker_thread+0x10/0x10 [ 3475.240017][T16788] ? __pfx_kthread+0x10/0x10 [ 3475.244797][T16788] ret_from_fork+0x20f/0x910 [ 3475.249530][T16788] ? __switch_to+0x51c/0x750 [ 3475.254400][T16788] ? __pfx_kthread+0x10/0x10 [ 3475.259142][T16788] ret_from_fork_asm+0x1a/0x30 [ 3475.264105][T16788] [ 3475.267506][T16788] Kernel Offset: disabled [ 3475.271885][T16788] Rebooting in 86400 seconds..