last executing test programs: 3.584976299s ago: executing program 2 (id=2871): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1010000, &(0x7f00000005c0)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}]}, 0x1, 0x36e, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4097, 0x1001) 3.284506723s ago: executing program 2 (id=2864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x30, r1, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.147020756s ago: executing program 2 (id=2866): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) close_range(r0, 0xffffffffffffffff, 0x0) 2.933646326s ago: executing program 2 (id=2870): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) 2.799901331s ago: executing program 2 (id=2873): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.173390022s ago: executing program 0 (id=2881): set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3c) 1.6892903s ago: executing program 0 (id=2890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 1.519889318s ago: executing program 0 (id=2883): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES8], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 1.406024566s ago: executing program 0 (id=2884): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fallocate(r0, 0x41, 0x0, 0x3fe) 1.302611516s ago: executing program 0 (id=2886): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x550f, &(0x7f00000089c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") 1.160891989s ago: executing program 3 (id=2888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffe9, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 1.160266649s ago: executing program 1 (id=2889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 1.009222331s ago: executing program 2 (id=2891): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1458c2, 0x1c2) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 955.34627ms ago: executing program 3 (id=2892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x8}]}}]}, 0x40}}, 0x0) 946.123659ms ago: executing program 1 (id=2893): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x400000000000027d, &(0x7f0000000000)=[{}]}) 801.001381ms ago: executing program 1 (id=2894): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 800.267971ms ago: executing program 3 (id=2895): setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 587.945071ms ago: executing program 1 (id=2896): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001300010026bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="00100000002404002c002b8008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000200000000000000ff00", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0a000100aa"], 0x58}, 0x1, 0x0, 0x0, 0x20010891}, 0x20040040) 579.291589ms ago: executing program 3 (id=2897): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r0, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 421.685969ms ago: executing program 3 (id=2898): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 316.17684ms ago: executing program 1 (id=2899): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x2, [@enum={0x0, 0xa, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {0x0, 0x1}]}]}}, 0x0, 0xd2}, 0x20) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 243.974196ms ago: executing program 3 (id=2900): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5e, 0x9}}, 0x30) 130.096514ms ago: executing program 1 (id=2901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x20008080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): 9][ T6532] loop3: detected capacity change from 0 to 4096 [ 110.960030][ T6532] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 110.989870][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.084036][ T6532] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 111.252715][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.284693][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.307207][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 111.327884][ T9] usb 3-1: New USB device strings: Mfr=0, Product=159, SerialNumber=0 [ 111.348166][ T9] usb 3-1: Product: syz [ 111.364996][ T9] usb 3-1: config 0 descriptor?? [ 111.369256][ T5778] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 111.719355][ T5852] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.869261][ T9] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 111.924138][ T5852] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.939251][ T5852] usb 1-1: config 0 has no interface number 0 [ 111.951196][ T5852] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 111.963233][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.982230][ T6540] loop3: detected capacity change from 0 to 32768 [ 111.995434][ T6540] (syz.3.258,6540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.001048][ T5852] usb 1-1: config 0 descriptor?? [ 112.046350][ T5852] usb 1-1: selecting invalid altsetting 1 [ 112.047393][ T6540] (syz.3.258,6540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.071323][ T5852] dvb_ttusb_budget: ttusb_init_controller: error [ 112.088062][ T5852] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 112.153341][ T6540] JBD2: Ignoring recovery information on journal [ 112.187851][ T2177] usb 3-1: USB disconnect, device number 3 [ 112.277989][ T5852] DVB: Unable to find symbol cx22700_attach() [ 112.367981][ T6540] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 112.492601][ T6549] fido_id[6549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.514720][ T5852] DVB: Unable to find symbol tda10046_attach() [ 112.538826][ T5852] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 112.566242][ T5852] usb 1-1: USB disconnect, device number 2 [ 112.570763][ T6540] (syz.3.258,6540,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 112.911024][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 113.336789][ T6577] loop1: detected capacity change from 0 to 512 [ 113.427097][ T6577] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 113.436286][ T6573] loop2: detected capacity change from 0 to 4096 [ 113.454128][ T6577] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 113.488233][ T6577] EXT4-fs (loop1): 1 truncate cleaned up [ 113.488819][ T6573] __ntfs_error: 6 callbacks suppressed [ 113.488832][ T6573] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 113.511764][ T6573] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.533643][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.554427][ T6573] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 113.566138][ T6573] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 113.594829][ T6573] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 113.613348][ T6573] ntfs: volume version 3.1. [ 113.646847][ T6573] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 113.670026][ T6577] EXT4-fs: user quota file already specified [ 113.689781][ T6573] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 113.762646][ T6573] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 113.794160][ T6573] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 113.804265][ T6589] loop3: detected capacity change from 0 to 1764 [ 113.808161][ T6573] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 113.843438][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.871004][ T6589] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 113.960163][ T6589] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 114.077302][ T6594] loop1: detected capacity change from 0 to 1024 [ 114.089462][ T6594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.195987][ T6594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.304251][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 114.323143][ T6594] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 114.359728][ T6594] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.434012][ T6594] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 114.474833][ T6594] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.474833][ T6594] [ 114.518045][ T6594] EXT4-fs (loop1): Total free blocks count 0 [ 114.525660][ T6604] loop3: detected capacity change from 0 to 2048 [ 114.532140][ T6594] EXT4-fs (loop1): Free/Dirty block details [ 114.538190][ T6594] EXT4-fs (loop1): free_blocks=20480 [ 114.558921][ T6594] EXT4-fs (loop1): dirty_blocks=80 [ 114.578945][ T6594] EXT4-fs (loop1): Block reservation details [ 114.601688][ T6594] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 114.662445][ T6609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.708268][ T6611] loop0: detected capacity change from 0 to 256 [ 114.864206][ T146] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 115.069654][ T6617] CUSE: unknown device info "ÿ" [ 115.085108][ T6617] CUSE: unknown device info "" [ 115.112235][ T6617] CUSE: DEVNAME unspecified [ 115.541212][ T6626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.571169][ T6634] loop2: detected capacity change from 0 to 2048 [ 115.592746][ T6634] EXT4-fs: Ignoring removed oldalloc option [ 115.676471][ T6635] loop0: detected capacity change from 0 to 4096 [ 115.689856][ T6634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.734221][ T6634] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.297: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 115.755675][ T6626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.816446][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.043834][ T6626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.165636][ T6648] loop0: detected capacity change from 0 to 2048 [ 116.227439][ T6626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.295969][ T6648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.361149][ T6653] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 116.518467][ T6626] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552673][ T6626] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.587185][ T6626] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.627854][ T6626] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.809621][ T6651] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 118.115140][ T6677] loop2: detected capacity change from 0 to 32768 [ 118.298016][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 119.958136][ T6729] loop2: detected capacity change from 0 to 32768 [ 120.004718][ T6729] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.089778][ T6729] XFS (loop2): Ending clean mount [ 120.230343][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.177030][ T6769] loop3: detected capacity change from 0 to 32768 [ 121.194840][ T6769] XFS: attr2 mount option is deprecated. [ 121.267439][ T6769] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.562345][ T6769] XFS (loop3): Ending clean mount [ 121.600075][ T6769] XFS (loop3): Quotacheck needed: Please wait. [ 121.627735][ T6798] netlink: 296 bytes leftover after parsing attributes in process `syz.0.364'. [ 121.720793][ T6769] XFS (loop3): Quotacheck: Done. [ 121.807078][ T6778] loop2: detected capacity change from 0 to 32768 [ 121.925076][ T6778] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 121.943280][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.017686][ T6811] tipc: Started in network mode [ 122.028049][ T6811] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 122.081690][ T6811] tipc: Enabled bearer , priority 0 [ 122.113888][ T6778] XFS (loop2): Ending clean mount [ 122.139559][ T9] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 122.177337][ T9] XFS (loop2): Unmount and run xfs_repair [ 122.202840][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 122.248197][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 122.289520][ T9] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 122.309336][ T9] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 122.318248][ T9] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 122.350791][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 122.382137][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 122.399184][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.408105][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.448422][ T6778] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 122.479656][ T6778] XFS (loop2): Failed to initialize disk quotas. [ 122.642843][ T2129] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x8 [ 122.667167][ T2129] XFS (loop2): Unmount and run xfs_repair [ 122.683882][ T2129] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 122.698537][ T2129] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 122.715344][ T2129] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 122.725726][ T2129] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 122.739180][ T2129] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 122.752887][ T2129] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 122.767139][ T2129] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.782889][ T2129] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.794866][ T2129] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 122.838855][ T6778] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8 len 8 error 74 [ 122.901394][ T6778] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 122.942525][ T6778] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 123.106058][ T5771] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 123.140184][ T2129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.201186][ T9] tipc: Node number set to 11578026 [ 123.349237][ T2129] usb 1-1: Using ep0 maxpacket: 32 [ 123.351027][ T2129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.389322][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 123.389338][ T28] audit: type=1326 audit(1772252023.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7fc00000 [ 123.417345][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.429268][ T2129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.453710][ T2129] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.464704][ T2129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.477696][ T2129] usb 1-1: config 0 descriptor?? [ 123.485900][ T2129] hub 1-1:0.0: USB hub found [ 123.716705][ T6848] sctp: [Deprecated]: syz.3.384 (pid 6848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.716705][ T6848] Use struct sctp_sack_info instead [ 123.734132][ T2129] hub 1-1:0.0: 1 port detected [ 123.766614][ T6848] sctp: [Deprecated]: syz.3.384 (pid 6848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.766614][ T6848] Use struct sctp_sack_info instead [ 123.936639][ T2129] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 123.953442][ T2129] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 123.980041][ T2129] usbhid 1-1:0.0: can't add hid device: -71 [ 123.986136][ T2129] usbhid: probe of 1-1:0.0 failed with error -71 [ 124.043260][ T2129] usb 1-1: USB disconnect, device number 3 [ 124.262148][ T6863] loop3: detected capacity change from 0 to 256 [ 124.339238][ T6863] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 124.365514][ T6863] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 126.609201][ T2129] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.822391][ T2129] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 126.856036][ T2129] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 126.875823][ T2129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.900373][ T2129] usb 4-1: config 0 descriptor?? [ 126.930689][ T2129] usb 4-1: bad CDC descriptors [ 126.962897][ T2129] usb 4-1: bad CDC descriptors [ 127.078826][ T6952] tipc: Started in network mode [ 127.085303][ T6952] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 127.094915][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 127.114547][ T2177] usb 4-1: USB disconnect, device number 3 [ 127.478173][ T6966] vivid-000: ================= START STATUS ================= [ 127.499259][ T6966] vivid-000: Radio HW Seek Mode: Bounded [ 127.506090][ T6966] vivid-000: Radio Programmable HW Seek: false [ 127.519168][ T6966] vivid-000: RDS Rx I/O Mode: Block I/O [ 127.525259][ T6966] vivid-000: Generate RBDS Instead of RDS: false [ 127.532516][ T6966] vivid-000: RDS Reception: true [ 127.537528][ T6966] vivid-000: RDS Program Type: 0 inactive [ 127.545101][ T6966] vivid-000: RDS PS Name: inactive [ 127.550633][ T6966] vivid-000: RDS Radio Text: inactive [ 127.556248][ T6966] vivid-000: RDS Traffic Announcement: false inactive [ 127.563417][ T6966] vivid-000: RDS Traffic Program: false inactive [ 127.570104][ T6966] vivid-000: RDS Music: false inactive [ 127.576604][ T6966] vivid-000: ================== END STATUS ================== [ 127.881882][ T6982] sctp: [Deprecated]: syz.2.448 (pid 6982) Use of int in maxseg socket option. [ 127.881882][ T6982] Use struct sctp_assoc_value instead [ 128.054939][ T6985] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 128.059690][ T6986] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 128.076418][ T6985] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 128.316208][ T6992] loop3: detected capacity change from 0 to 512 [ 128.414395][ T6992] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 128.427016][ T6992] EXT4-fs (loop3): mount failed [ 128.693296][ T7005] loop3: detected capacity change from 0 to 64 [ 129.056813][ T7014] mkiss: ax0: crc mode is auto. [ 129.630517][ C1] sd 0:0:1:0: [sda] tag#4233 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 129.641078][ C1] sd 0:0:1:0: [sda] tag#4233 CDB: Read(6) 08 00 00 00 00 00 [ 129.860687][ T7041] ipvlan2: entered promiscuous mode [ 129.877478][ T7041] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 130.716011][ T7058] loop3: detected capacity change from 0 to 8192 [ 130.954943][ T7058] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 130.997407][ T7058] FAT-fs (loop3): Filesystem has been set read-only [ 131.048992][ T7063] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 132.163050][ T7097] loop3: detected capacity change from 0 to 2048 [ 132.224844][ T7097] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 132.255380][ T7097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.194923][ T2177] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.200450][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.212911][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.329285][ T5804] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.382504][ T2177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.401465][ T2177] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.421107][ T2177] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 133.436083][ T2177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.446407][ T2177] usb 3-1: Product: syz [ 133.453580][ T2177] usb 3-1: Manufacturer: syz [ 133.458362][ T2177] usb 3-1: SerialNumber: syz [ 133.472960][ T2177] usb 3-1: config 0 descriptor?? [ 133.519195][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 133.527010][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.540588][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.551832][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.565302][ T5804] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.575059][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.587913][ T5804] usb 4-1: config 0 descriptor?? [ 133.695155][ T965] usb 3-1: USB disconnect, device number 4 [ 133.890487][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 133.915486][ T7140] vlan2: entered promiscuous mode [ 133.923006][ T7140] gretap0: entered promiscuous mode [ 134.015609][ T5804] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 134.041053][ T5804] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 134.072936][ T5804] microsoft 0003:045E:07DA.0002: no inputs found [ 134.102251][ T5804] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 134.230519][ T5852] usb 4-1: USB disconnect, device number 4 [ 134.979347][ T5804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.089271][ T965] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.170648][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 135.183574][ T5804] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 135.196136][ T5804] usb 1-1: config 2 has no interface number 0 [ 135.204213][ T5804] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 135.218401][ T5804] usb 1-1: config 2 interface 88 has no altsetting 0 [ 135.233079][ T5804] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 135.245893][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.258733][ T5804] usb 1-1: Product: syz [ 135.264460][ T5804] usb 1-1: Manufacturer: syz [ 135.270787][ T5804] usb 1-1: SerialNumber: syz [ 135.279574][ T965] usb 4-1: Using ep0 maxpacket: 32 [ 135.286482][ T7157] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.302910][ T965] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 135.324166][ T965] usb 4-1: config 0 has no interface number 0 [ 135.341919][ T965] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.359195][ T965] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.369016][ T965] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.383896][ T965] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 135.399645][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.420455][ T965] usb 4-1: config 0 descriptor?? [ 135.872613][ T7192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.878712][ T965] logitech-djreceiver 0003:046D:C537.0003: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input6 [ 135.990274][ T7196] process 'syz.1.551' launched '/dev/fd/3' with NULL argv: empty string added [ 136.162515][ T5852] usb 4-1: USB disconnect, device number 5 [ 137.765160][ T7227] loop3: detected capacity change from 0 to 2048 [ 137.777685][ T5804] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.793274][ T7227] EXT4-fs: Ignoring removed i_version option [ 137.813821][ T5804] asix: probe of 1-1:2.88 failed with error -71 [ 137.863224][ T5804] usb 1-1: USB disconnect, device number 4 [ 137.898362][ T7227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.918676][ T7227] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.988609][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.149329][ T5803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.359214][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 140.370522][ T5803] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 140.382642][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.392311][ T5803] usb 3-1: Product: syz [ 140.397323][ T5803] usb 3-1: Manufacturer: syz [ 140.402699][ T5803] usb 3-1: SerialNumber: syz [ 140.411228][ T5803] usb 3-1: config 0 descriptor?? [ 140.458173][ T5803] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 140.479309][ T5803] dvb-usb: bulk message failed: -22 (2/0) [ 140.481791][ T28] audit: type=1326 audit(1772252040.296:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.507702][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.525819][ T5803] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 140.540226][ T5804] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.544418][ T28] audit: type=1326 audit(1772252040.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.562267][ T5803] usb 3-1: media controller created [ 140.577884][ T28] audit: type=1326 audit(1772252040.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.601111][ T28] audit: type=1326 audit(1772252040.316:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.628532][ T28] audit: type=1326 audit(1772252040.316:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.635596][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.651592][ T28] audit: type=1326 audit(1772252040.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.718614][ T7287] cxusb: i2c rd: len=80 is too big! [ 140.718614][ T7287] [ 140.746852][ T28] audit: type=1326 audit(1772252040.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 140.750837][ T5803] usb 3-1: selecting invalid altsetting 7 [ 140.797027][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.818274][ T5804] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 140.833931][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.843259][ T5803] cxusb: set interface failed [ 140.847986][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 140.856919][ T5804] usb 4-1: config 0 descriptor?? [ 140.874015][ T5804] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.916867][ T5803] DVB: Unable to find symbol lgdt330x_attach() [ 140.924100][ T5803] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 141.000432][ T5803] rc_core: IR keymap rc-dvico-portable not found [ 141.006858][ T5803] Registered IR keymap rc-empty [ 141.013368][ T5803] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 141.025333][ T5803] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 141.037579][ T5803] dvb-usb: schedule remote query interval to 100 msecs. [ 141.044688][ T5803] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 141.059409][ T5852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.059446][ T5803] usb 3-1: USB disconnect, device number 5 [ 141.154432][ T5803] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 141.253344][ T5852] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 141.264533][ T5852] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.274649][ T5852] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 141.287899][ T5852] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.295891][ T5852] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 141.305170][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.315052][ T5852] usb 1-1: config 0 descriptor?? [ 141.733121][ T5852] wacom 0003:056A:0028.0004: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 141.745016][ T5852] wacom 0003:056A:0028.0004: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0 [ 141.767022][ T5852] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.0004/input/input9 [ 141.938256][ T5804] usb 1-1: USB disconnect, device number 5 [ 143.299799][ T2129] usb 4-1: USB disconnect, device number 6 [ 143.320709][ T2177] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.529269][ T2177] usb 1-1: Using ep0 maxpacket: 32 [ 143.544795][ T2177] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.566133][ T2177] usb 1-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=f8.0f [ 143.590252][ T2177] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 143.608488][ T2177] usb 1-1: Product: syz [ 143.619145][ T2177] usb 1-1: SerialNumber: syz [ 143.637545][ T2177] usb 1-1: config 0 descriptor?? [ 143.873522][ T2177] usb 1-1: USB disconnect, device number 6 [ 144.222137][ T7362] ubi31: attaching mtd0 [ 144.242753][ T7362] ubi31 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 144.889797][ T7377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.633'. [ 144.909292][ T7378] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.460049][ T5803] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.489353][ T5774] Bluetooth: hci3: link tx timeout [ 145.497012][ T5774] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.653006][ T5803] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 145.669690][ T5803] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 145.689557][ T5803] usb 1-1: config 220 has no interface number 2 [ 145.699693][ T5803] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 145.719517][ T5803] usb 1-1: config 220 interface 0 has no altsetting 0 [ 145.726426][ T5803] usb 1-1: config 220 interface 76 has no altsetting 0 [ 145.738095][ T5803] usb 1-1: config 220 interface 1 has no altsetting 0 [ 145.749887][ T5803] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 145.769256][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.777421][ T5803] usb 1-1: Product: syz [ 145.799011][ T5803] usb 1-1: Manufacturer: syz [ 145.804861][ T5803] usb 1-1: SerialNumber: syz [ 146.057600][ T5803] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 146.066582][ T5803] usb 1-1: No valid video chain found. [ 146.078953][ T5803] usb 1-1: selecting invalid altsetting 0 [ 146.109622][ T5803] usb 1-1: selecting invalid altsetting 0 [ 146.110310][ T7425] netlink: 92 bytes leftover after parsing attributes in process `syz.1.657'. [ 146.115429][ T5803] usbtest: probe of 1-1:220.1 failed with error -22 [ 146.149789][ T5803] usb 1-1: USB disconnect, device number 7 [ 146.258566][ T7429] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 146.419063][ T7437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 146.425955][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.438900][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 146.521518][ T7438] usbip_core: unknown command [ 146.532590][ T7438] vhci_hcd: unknown pdu 0 [ 146.536971][ T7438] usbip_core: unknown command [ 146.566657][ T11] vhci_hcd: stop threads [ 146.572285][ T11] vhci_hcd: release socket [ 146.589187][ T11] vhci_hcd: disconnect device [ 146.632184][ T5803] vhci_hcd: vhci_device speed not set [ 146.710063][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.722689][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.730015][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.278768][ T7468] team_slave_0: entered promiscuous mode [ 147.284879][ T7468] team_slave_1: entered promiscuous mode [ 147.301181][ T7468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.589769][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 147.816220][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 148.122364][ T7495] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 148.198701][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.690'. [ 148.339274][ T7501] program syz.3.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.470283][ T7507] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 148.615696][ T5852] IPVS: starting estimator thread 0... [ 148.749533][ T7518] IPVS: using max 19 ests per chain, 45600 per kthread [ 149.089334][ T5852] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.159290][ T5803] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.279300][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 149.288925][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.299770][ T5852] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 149.308829][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.318825][ T5852] usb 3-1: config 0 descriptor?? [ 149.333880][ T5852] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 149.349299][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 149.358375][ T5803] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.369236][ T965] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 149.377309][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.388983][ T5803] usb 1-1: Product: syz [ 149.394895][ T5803] usb 1-1: Manufacturer: syz [ 149.401932][ T5803] usb 1-1: SerialNumber: syz [ 149.408635][ T5803] r8152-cfgselector 1-1: config 0 descriptor?? [ 149.575975][ T965] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 149.585261][ T965] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 149.595699][ T965] usb 4-1: Product: syz [ 149.600001][ T965] usb 4-1: Manufacturer: syz [ 149.604679][ T965] usb 4-1: SerialNumber: syz [ 149.631243][ T965] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 149.646429][ T5803] r8152-cfgselector 1-1: Needed 1 retries to read version [ 149.657132][ T5803] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 149.857077][ T5803] usb 1-1: USB disconnect, device number 8 [ 150.026698][ T965] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 150.037855][ T965] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 150.268568][ T5852] usb 4-1: USB disconnect, device number 7 [ 150.639337][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 151.001243][ T7579] overlayfs: workdir and upperdir must be separate subtrees [ 151.119263][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 151.155553][ T7586] hfs: can't find a HFS filesystem on dev nullb0 [ 151.671120][ T7606] nbd: couldn't find device at index 10240 [ 151.863460][ T9] usb 3-1: USB disconnect, device number 6 [ 152.325570][ T9] IPVS: starting estimator thread 0... [ 152.336534][ T7625] IPVS: ip_vs_edit_dest(): server weight less than zero [ 152.419749][ T7626] IPVS: using max 16 ests per chain, 38400 per kthread [ 152.675328][ T7632] Invalid ELF header magic: != ELF [ 154.329710][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'. [ 154.395498][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 154.705886][ T7701] netlink: 'syz.1.787': attribute type 2 has an invalid length. [ 154.710049][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 154.924717][ T7711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 154.936595][ T7711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 154.954603][ T7711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 156.589237][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.618272][ T28] audit: type=1326 audit(1772252056.426:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.653465][ T28] audit: type=1326 audit(1772252056.426:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.687798][ T28] audit: type=1326 audit(1772252056.426:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.785446][ T28] audit: type=1326 audit(1772252056.426:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.818299][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.820540][ T7764] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.855450][ T7764] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 156.860686][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.863791][ T28] audit: type=1326 audit(1772252056.426:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.887480][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.917609][ T7764] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 156.930337][ T7764] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 156.937596][ T7764] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.948463][ T28] audit: type=1326 audit(1772252056.426:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 156.953329][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 156.980877][ T7764] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 156.998447][ T7764] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 157.016849][ T7764] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 157.025116][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.036886][ T28] audit: type=1326 audit(1772252056.426:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 157.060035][ T7764] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 157.085597][ T9] usb 3-1: config 0 descriptor?? [ 157.095653][ T7764] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 157.117358][ T7764] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 157.144631][ T7764] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 157.550128][ T9] acrux 0003:1A34:0802.0005: unknown main item tag 0x5 [ 157.586258][ T9] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 157.617806][ T9] acrux 0003:1A34:0802.0005: no inputs found [ 157.630233][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.823'. [ 157.641075][ T9] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 157.779928][ T9] usb 3-1: USB disconnect, device number 7 [ 157.911483][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 158.507216][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 159.291607][ T7854] Zero length message leads to an empty skb [ 159.731282][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.856'. [ 160.129423][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.341971][ T9] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 160.360374][ T9] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 160.378335][ T9] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 160.389128][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.397262][ T9] usb 1-1: Product: syz [ 160.409470][ T9] usb 1-1: Manufacturer: syz [ 160.414113][ T9] usb 1-1: SerialNumber: syz [ 160.722944][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 160.911639][ T5852] usb 1-1: USB disconnect, device number 9 [ 161.139582][ T7925] hugetlbfs: Bad value 'm' for mount option 'nr_inodes' [ 161.139582][ T7925] [ 162.610898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.389645][ T8014] tipc: Started in network mode [ 163.399180][ T8014] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 163.408178][ T8014] tipc: Enabling of bearer rejected, failed to enable media [ 163.652284][ T8028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.299681][ T8045] team0: entered allmulticast mode [ 164.304870][ T8045] team_slave_0: entered allmulticast mode [ 164.329257][ T8045] team_slave_1: entered allmulticast mode [ 165.150229][ T8078] vivid-004: ================= START STATUS ================= [ 165.171480][ T8078] vivid-004: Radio HW Seek Mode: Bounded [ 165.196533][ T8078] vivid-004: Radio Programmable HW Seek: false [ 165.208318][ T8078] vivid-004: RDS Rx I/O Mode: Block I/O [ 165.214917][ T8078] vivid-004: Generate RBDS Instead of RDS: false [ 165.221794][ T8078] vivid-004: RDS Reception: true [ 165.229007][ T8078] vivid-004: RDS Program Type: 0 inactive [ 165.247255][ T8078] vivid-004: RDS PS Name: inactive [ 165.267535][ T8078] vivid-004: RDS Radio Text: inactive [ 165.289753][ T8078] vivid-004: RDS Traffic Announcement: false inactive [ 165.308230][ T8078] vivid-004: RDS Traffic Program: false inactive [ 165.329273][ T8078] vivid-004: RDS Music: false inactive [ 165.334825][ T8078] vivid-004: ================== END STATUS ================== [ 166.455852][ T8110] smc: net device bond0 applied user defined pnetid SYZ0 [ 167.291720][ T8136] team0: entered allmulticast mode [ 167.309280][ T8136] team_slave_0: entered allmulticast mode [ 167.315069][ T8136] team_slave_1: entered allmulticast mode [ 167.840269][ T8152] ipvlan2: entered promiscuous mode [ 167.853844][ T8152] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 170.170396][ T8223] ipvlan2: entered promiscuous mode [ 170.176848][ T8223] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.160717][ T5805] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.371983][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.389118][ T5805] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.421952][ T5805] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 174.431073][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.439053][ T5805] usb 1-1: Product: syz [ 174.453372][ T5805] usb 1-1: Manufacturer: syz [ 174.457976][ T5805] usb 1-1: SerialNumber: syz [ 174.480959][ T5805] usb 1-1: config 0 descriptor?? [ 174.731858][ T9] usb 1-1: USB disconnect, device number 10 [ 176.259222][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.453811][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.478694][ T5852] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.511900][ T5852] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 176.525790][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.537671][ T5852] usb 2-1: Product: syz [ 176.542333][ T5852] usb 2-1: Manufacturer: syz [ 176.546979][ T5852] usb 2-1: SerialNumber: syz [ 176.563335][ T5852] usb 2-1: config 0 descriptor?? [ 176.824669][ T5852] usb 2-1: USB disconnect, device number 4 [ 177.370027][ T28] audit: type=1326 audit(1772252077.186:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.394178][ T28] audit: type=1326 audit(1772252077.186:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.462980][ T28] audit: type=1326 audit(1772252077.206:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.493993][ T28] audit: type=1326 audit(1772252077.206:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.559502][ T28] audit: type=1326 audit(1772252077.206:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.624508][ T28] audit: type=1326 audit(1772252077.226:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.651924][ T28] audit: type=1326 audit(1772252077.226:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 177.677253][ T28] audit: type=1326 audit(1772252077.226:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.0.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 178.349335][ T5805] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.595697][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.609126][ T5805] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.634555][ T5805] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 178.649205][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.669124][ T5805] usb 4-1: Product: syz [ 178.679396][ T5805] usb 4-1: Manufacturer: syz [ 178.684038][ T5805] usb 4-1: SerialNumber: syz [ 178.726746][ T5805] usb 4-1: config 0 descriptor?? [ 179.007897][ T5805] usb 4-1: USB disconnect, device number 8 [ 179.701501][ T8481] ubi31: attaching mtd0 [ 179.705691][ T8481] ubi31 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 179.892181][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.959190][ T2177] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 180.079163][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 180.087936][ T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 180.097195][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.108005][ T9] usb 1-1: Product: syz [ 180.112317][ T9] usb 1-1: Manufacturer: syz [ 180.116931][ T9] usb 1-1: SerialNumber: syz [ 180.124967][ T9] usb 1-1: config 0 descriptor?? [ 180.133449][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 180.141277][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 180.152539][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.162342][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 180.169238][ T2177] usb 3-1: Using ep0 maxpacket: 16 [ 180.170483][ T9] usb 1-1: media controller created [ 180.182784][ T2177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.196749][ T2177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.199434][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.211174][ T2177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.228461][ T9] usb 1-1: selecting invalid altsetting 7 [ 180.235083][ T9] cxusb: set interface failed [ 180.236808][ T2177] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.239863][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 180.261026][ T2177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.274598][ T2177] usb 3-1: config 0 descriptor?? [ 180.310020][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 180.316393][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 180.362085][ T8475] cxusb: i2c rd: len=80 is too big! [ 180.362085][ T8475] [ 180.410007][ T9] rc_core: IR keymap rc-dvico-portable not found [ 180.417719][ T9] Registered IR keymap rc-empty [ 180.425717][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 180.437877][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 180.452406][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 180.459663][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 180.472649][ T9] usb 1-1: USB disconnect, device number 11 [ 180.595589][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 180.724623][ T2177] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 180.743365][ T2177] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 180.760124][ T2177] microsoft 0003:045E:07DA.0006: no inputs found [ 180.766529][ T2177] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 180.949504][ T5803] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.969169][ T2177] usb 3-1: USB disconnect, device number 8 [ 181.159341][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 181.171357][ T5803] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 181.180509][ T5803] usb 2-1: config 2 has no interface number 0 [ 181.186619][ T5803] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 181.196658][ T5803] usb 2-1: config 2 interface 88 has no altsetting 0 [ 181.205581][ T5803] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 181.214940][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.223026][ T5803] usb 2-1: Product: syz [ 181.227203][ T5803] usb 2-1: Manufacturer: syz [ 181.234162][ T5803] usb 2-1: SerialNumber: syz [ 181.243260][ T8490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.823495][ T8510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.867660][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1157'. [ 182.007599][ T8516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.508731][ T8530] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1165'. [ 182.896853][ T5774] Bluetooth: hci3: link tx timeout [ 183.509298][ T2177] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.699601][ T2177] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 183.713775][ T5803] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 183.729162][ T2177] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x89 has invalid wMaxPacketSize 0 [ 183.739962][ T5803] asix: probe of 2-1:2.88 failed with error -71 [ 183.768260][ T2177] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.769201][ T5803] usb 2-1: USB disconnect, device number 5 [ 183.823835][ T2177] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.842825][ T2177] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 183.866242][ T2177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.890396][ T2177] usb 4-1: config 0 descriptor?? [ 183.977135][ T5774] Bluetooth: hci3: link tx timeout [ 184.233018][ T5803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.314945][ T2177] wacom 0003:056A:0028.0007: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 184.325897][ T2177] wacom 0003:056A:0028.0007: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 184.340866][ T2177] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0007/input/input14 [ 184.422938][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 184.432671][ T5803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.443528][ T5803] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=f8.0f [ 184.455375][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 184.463810][ T5803] usb 2-1: Product: syz [ 184.467975][ T5803] usb 2-1: SerialNumber: syz [ 184.479724][ T5803] usb 2-1: config 0 descriptor?? [ 184.534488][ T2177] usb 4-1: USB disconnect, device number 9 [ 184.722766][ T2129] usb 2-1: USB disconnect, device number 6 [ 184.848749][ T8567] ubi31: attaching mtd0 [ 184.878550][ T8567] ubi31 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 185.215575][ T8574] team_slave_0: entered promiscuous mode [ 185.221365][ T8574] team_slave_1: entered promiscuous mode [ 185.245304][ T8574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.505921][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 185.807051][ T8596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 185.813639][ T8596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.825795][ T8596] vhci_hcd vhci_hcd.0: Device attached [ 185.920254][ T8597] usbip_core: unknown command [ 185.929371][ T8597] vhci_hcd: unknown pdu 0 [ 185.933783][ T8597] usbip_core: unknown command [ 185.940789][ T3480] vhci_hcd: stop threads [ 185.945065][ T3480] vhci_hcd: release socket [ 185.949941][ T3480] vhci_hcd: disconnect device [ 186.019356][ T2129] vhci_hcd: vhci_device speed not set [ 186.156173][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.163981][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.172102][ T8611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.301119][ T5803] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.321478][ T2177] IPVS: starting estimator thread 0... [ 186.409426][ T8618] IPVS: using max 16 ests per chain, 38400 per kthread [ 186.509907][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 186.521401][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.566615][ T5803] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=f8.0f [ 186.586239][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 186.601004][ T5803] usb 4-1: Product: syz [ 186.604304][ T8629] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 186.605199][ T5803] usb 4-1: SerialNumber: syz [ 186.611700][ T8629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.614761][ T8629] vhci_hcd vhci_hcd.0: Device attached [ 186.626998][ T5803] usb 4-1: config 0 descriptor?? [ 186.693157][ T8630] usbip_core: unknown command [ 186.697913][ T8630] vhci_hcd: unknown pdu 0 [ 186.702891][ T8630] usbip_core: unknown command [ 186.716692][ T11] vhci_hcd: stop threads [ 186.721387][ T11] vhci_hcd: release socket [ 186.725805][ T11] vhci_hcd: disconnect device [ 186.877347][ T2177] usb 4-1: USB disconnect, device number 10 [ 187.181448][ T8636] program syz.1.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.194655][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1210'. [ 187.689337][ T8656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 187.695932][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.751758][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 187.769851][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 187.927488][ T8657] usbip_core: unknown command [ 187.937025][ T8657] vhci_hcd: unknown pdu 0 [ 187.947559][ T8657] usbip_core: unknown command [ 187.959936][ T12] vhci_hcd: stop threads [ 187.964378][ T12] vhci_hcd: release socket [ 187.979034][ T12] vhci_hcd: disconnect device [ 188.019198][ T5803] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 188.026736][ T5803] usb 39-1: enqueue for inactive port 0 [ 188.150231][ T5803] vhci_hcd: vhci_device speed not set [ 188.479396][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 188.572105][ T8687] overlayfs: workdir and upperdir must be separate subtrees [ 188.682361][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 188.699249][ T9] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 188.719199][ T9] usb 3-1: Product: syz [ 188.723479][ T9] usb 3-1: Manufacturer: syz [ 188.728100][ T9] usb 3-1: SerialNumber: syz [ 188.745034][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 188.783756][ T8695] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 188.875825][ T5804] IPVS: starting estimator thread 0... [ 188.970455][ T8700] IPVS: using max 21 ests per chain, 50400 per kthread [ 189.177229][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 189.204980][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 189.423226][ T9] usb 3-1: USB disconnect, device number 9 [ 189.473314][ T8721] hfs: can't find a HFS filesystem on dev nullb0 [ 189.593272][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 189.682408][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 189.811744][ T8731] Invalid ELF header magic: != ELF [ 190.809244][ T2129] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 191.014173][ T2129] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 191.039259][ T2129] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 191.057673][ T2129] usb 1-1: Product: syz [ 191.079442][ T2129] usb 1-1: Manufacturer: syz [ 191.084096][ T2129] usb 1-1: SerialNumber: syz [ 191.108066][ T2129] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 191.219868][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 191.525583][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 191.534978][ T2129] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 191.555918][ T2129] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 191.785263][ T9] usb 1-1: USB disconnect, device number 12 [ 192.504733][ T8817] netlink: 'syz.0.1304': attribute type 2 has an invalid length. [ 194.604472][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1324'. [ 194.639682][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.646925][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.771034][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 195.250156][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1332'. [ 195.261208][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1331'. [ 195.290563][ T8900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 195.309235][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1332'. [ 195.328571][ T8900] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 195.339689][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1332'. [ 195.359444][ T8900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 195.367027][ T8900] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 195.405887][ T8900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 195.439242][ T8900] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 195.446158][ T8900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 195.459468][ T8900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 195.479287][ T8900] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 195.499254][ T8900] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 195.529318][ T8900] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 195.535929][ T8900] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 195.559691][ T8909] netlink: 'syz.3.1334': attribute type 2 has an invalid length. [ 195.909385][ T5774] Bluetooth: hci1: command tx timeout [ 196.911367][ T8954] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 196.931594][ T8954] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 196.943890][ T8954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 196.964633][ T8954] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 196.983157][ T8954] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 196.999648][ T8954] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 197.012820][ T8954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.033173][ T8954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.079284][ T8954] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 197.105043][ T8954] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 197.125605][ T8954] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 197.149466][ T8954] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 197.160843][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'. [ 197.369656][ T5803] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.498779][ T8974] tipc: Started in network mode [ 197.505440][ T8974] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 197.528420][ T8974] tipc: Enabling of bearer rejected, failed to enable media [ 197.561353][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.572532][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.582847][ T5803] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.596322][ T5803] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 197.605921][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.638267][ T5803] usb 2-1: config 0 descriptor?? [ 198.094106][ T5803] acrux 0003:1A34:0802.0008: unknown main item tag 0x5 [ 198.122912][ T5803] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 198.155868][ T5803] acrux 0003:1A34:0802.0008: no inputs found [ 198.172563][ T5803] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 198.299325][ T9004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1374'. [ 198.383502][ T5805] usb 2-1: USB disconnect, device number 7 [ 199.080354][ T9032] tipc: Enabling of bearer rejected, failed to enable media [ 199.198331][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 199.889280][ T5805] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.919224][ T5803] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.072299][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.083687][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.093501][ T5805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.106457][ T5805] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 200.110928][ T5803] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 200.115781][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.137121][ T5803] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 200.139806][ T5805] usb 1-1: config 0 descriptor?? [ 200.151606][ T5803] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 200.161171][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.169584][ T5803] usb 2-1: Product: syz [ 200.174914][ T5803] usb 2-1: Manufacturer: syz [ 200.180106][ T5803] usb 2-1: SerialNumber: syz [ 200.574070][ T5805] acrux 0003:1A34:0802.0009: unknown main item tag 0x5 [ 200.585928][ T5805] acrux 0003:1A34:0802.0009: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 200.609276][ T5805] acrux 0003:1A34:0802.0009: no inputs found [ 200.619552][ T5805] acrux 0003:1A34:0802.0009: Failed to enable force feedback support, error: -19 [ 200.642830][ T2129] usb 2-1: USB disconnect, device number 8 [ 200.807033][ T5805] usb 1-1: USB disconnect, device number 13 [ 201.835037][ T9065] Bluetooth: hci1: command 0x0406 tx timeout [ 201.844548][ T5773] Bluetooth: hci2: command 0x0401 tx timeout [ 201.846892][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 202.120754][ T9115] hugetlbfs: Bad value 'm' for mount option 'nr_inodes' [ 202.120754][ T9115] [ 202.179213][ T2129] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.381287][ T2129] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 202.405650][ T2129] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 202.420584][ T2129] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 202.447214][ T2129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.458342][ T2129] usb 4-1: Product: syz [ 202.465490][ T2129] usb 4-1: Manufacturer: syz [ 202.473004][ T2129] usb 4-1: SerialNumber: syz [ 202.950544][ T5803] usb 4-1: USB disconnect, device number 11 [ 204.386956][ T9193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.394859][ T9193] IPv6: NLM_F_CREATE should be set when creating new route [ 204.402236][ T9193] IPv6: NLM_F_CREATE should be set when creating new route [ 205.824601][ T9239] sit0: entered promiscuous mode [ 205.846076][ T9239] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 205.869156][ T9239] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1486'. [ 205.886440][ T9245] warning: `syz.3.1488' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 206.310449][ T9260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.310522][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 206.310569][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 206.781425][ T9265] sit0: entered promiscuous mode [ 206.798589][ T9265] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 206.798613][ T9265] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1499'. [ 207.734335][ T9300] autofs4:pid:9300:autofs_fill_super: called with bogus options [ 208.349453][ T5852] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 208.559145][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 208.577061][ T5852] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.598059][ T5852] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 208.607412][ T5852] usb 1-1: config 13 has no interface number 0 [ 208.614385][ T5852] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 208.653908][ T5852] usb 1-1: config 13 interface 50 has no altsetting 0 [ 208.688527][ T5852] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 208.708098][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.718592][ T5852] usb 1-1: Product: syz [ 208.723905][ T5852] usb 1-1: Manufacturer: syz [ 208.732045][ T5852] usb 1-1: SerialNumber: syz [ 208.741386][ T9313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.993817][ T5852] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 209.009454][ T5852] usb 1-1: MIDIStreaming interface descriptor not found [ 209.114383][ T5852] usb 1-1: USB disconnect, device number 14 [ 209.213441][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.668374][ T9360] autofs4:pid:9360:autofs_fill_super: called with bogus options [ 210.439185][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.629155][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 210.631462][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.631520][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 210.631543][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.634684][ T9] usb 1-1: config 0 descriptor?? [ 210.638389][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 213.176288][ T5803] usb 1-1: USB disconnect, device number 15 [ 213.219345][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 213.429999][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 213.437534][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.459688][ T9] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 213.476832][ T9] usb 3-1: config 13 has no interface number 0 [ 213.488572][ T9] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 213.507581][ T9] usb 3-1: config 13 interface 50 has no altsetting 0 [ 213.533318][ T9] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 213.549252][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.565818][ T9] usb 3-1: Product: syz [ 213.575643][ T9] usb 3-1: Manufacturer: syz [ 213.580648][ T9] usb 3-1: SerialNumber: syz [ 213.614496][ T9434] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.865603][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 213.876223][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 213.939549][ T9] usb 3-1: USB disconnect, device number 10 [ 214.089852][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.257039][ T9474] netlink: 'syz.1.1599': attribute type 5 has an invalid length. [ 214.681433][ T9488] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[9488] [ 216.084839][ T9545] raw_sendmsg: syz.2.1635 forgot to set AF_INET. Fix it! [ 216.229635][ T5805] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 216.455718][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.489305][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.508978][ T5805] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 216.527691][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.558698][ T5805] usb 4-1: config 0 descriptor?? [ 216.701806][ T9569] MPI: mpi too large (113288 bits) [ 216.817281][ T9572] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[9572] [ 216.949358][ T5852] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 217.013720][ T5805] kye 0003:0458:5005.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 217.049715][ T5805] kye 0003:0458:5005.000A: hidraw0: USB HID v10.00 Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 217.067929][ T5805] kye 0003:0458:5005.000A: tablet-enabling feature report not found [ 217.083039][ T5805] kye 0003:0458:5005.000A: tablet enabling failed [ 217.146758][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.168423][ T5852] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 217.179014][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.200272][ T5852] usb 2-1: config 0 descriptor?? [ 217.242134][ T5852] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 217.299996][ T965] usb 4-1: USB disconnect, device number 12 [ 217.604356][ T9596] netlink: 'syz.0.1667': attribute type 22 has an invalid length. [ 217.615029][ T9596] netlink: 'syz.0.1667': attribute type 22 has an invalid length. [ 217.623030][ T9596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1667'. [ 217.736041][ T9600] Bluetooth: MGMT ver 1.22 [ 218.349206][ T2177] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 218.443739][ T9624] netlink: 'syz.3.1671': attribute type 22 has an invalid length. [ 218.453965][ T9624] netlink: 'syz.3.1671': attribute type 22 has an invalid length. [ 218.462412][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1671'. [ 218.546174][ T2177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.573878][ T2177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.606056][ T2177] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 218.633651][ T2177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.652057][ T2177] usb 3-1: config 0 descriptor?? [ 219.043623][ T9642] MPI: mpi too large (113288 bits) [ 219.107382][ T2177] kye 0003:0458:5005.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 219.134271][ T2177] kye 0003:0458:5005.000B: hidraw0: USB HID v10.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 219.146096][ T2177] kye 0003:0458:5005.000B: tablet-enabling feature report not found [ 219.154663][ T2177] kye 0003:0458:5005.000B: tablet enabling failed [ 219.327386][ T965] usb 3-1: USB disconnect, device number 11 [ 219.671772][ T2177] usb 2-1: USB disconnect, device number 9 [ 219.755748][ T9651] netlink: 'syz.1.1683': attribute type 22 has an invalid length. [ 219.769656][ T9651] netlink: 'syz.1.1683': attribute type 22 has an invalid length. [ 219.782336][ T9651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 223.137221][ T9762] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 225.298658][ T28] audit: type=1326 audit(1772252125.106:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.358974][ T28] audit: type=1326 audit(1772252125.106:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.395598][ T28] audit: type=1326 audit(1772252125.106:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.451561][ T28] audit: type=1326 audit(1772252125.106:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.520537][ T28] audit: type=1326 audit(1772252125.106:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.612774][ T28] audit: type=1326 audit(1772252125.106:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 225.679251][ T28] audit: type=1326 audit(1772252125.106:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdc8c99c799 code=0x7ffc0000 [ 226.055971][ T28] audit: type=1326 audit(1772252125.866:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0dd9c799 code=0x7ffc0000 [ 226.106337][ T28] audit: type=1326 audit(1772252125.896:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0dd9c799 code=0x7ffc0000 [ 226.159289][ T28] audit: type=1326 audit(1772252125.896:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2c0dd9c799 code=0x7ffc0000 [ 226.669442][ T5805] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.869152][ T5805] usb 4-1: Using ep0 maxpacket: 8 [ 226.880785][ T5805] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 226.891712][ T5805] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 226.909180][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.917225][ T5805] usb 4-1: Product: syz [ 226.925179][ T5805] usb 4-1: Manufacturer: syz [ 226.929971][ T5805] usb 4-1: SerialNumber: syz [ 226.937288][ T5805] usb 4-1: config 0 descriptor?? [ 226.953036][ T5805] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 226.961450][ T5805] usb 4-1: setting power ON [ 226.965990][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 226.975490][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.986296][ T5805] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 227.039968][ T5805] usb 4-1: media controller created [ 227.106635][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.155828][ T9877] dvb-usb: bulk message failed: -22 (3/0) [ 227.171187][ T9877] cxusb: i2c wr: len=79 is too big! [ 227.171187][ T9877] [ 227.184980][ T5805] usb 4-1: selecting invalid altsetting 6 [ 227.208047][ T5805] usb 4-1: digital interface selection failed (-22) [ 227.225016][ T5805] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 227.241182][ T5805] usb 4-1: setting power OFF [ 227.246425][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 227.279129][ T5805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 227.288490][ T5805] (NULL device *): no alternate interface [ 227.431166][ T5805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 227.500493][ T5805] usb 4-1: USB disconnect, device number 13 [ 228.297171][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'. [ 230.754599][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 231.772290][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 232.122888][T10013] netlink: 'syz.0.1857': attribute type 11 has an invalid length. [ 232.529354][ T2129] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.731797][ T2129] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.750241][ T2129] usb 1-1: config 0 has no interface number 0 [ 232.756451][ T2129] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.777954][ T2129] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.799152][ T2129] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 232.808230][ T2129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.832813][ T2129] usb 1-1: config 0 descriptor?? [ 233.039736][T10059] netlink: 'syz.2.1880': attribute type 18 has an invalid length. [ 233.284457][ T2129] prodikeys 0003:041E:2801.000C: item fetching failed at offset 5/7 [ 233.315073][ T2129] prodikeys 0003:041E:2801.000C: hid parse failed [ 233.334323][ T2129] prodikeys: probe of 0003:041E:2801.000C failed with error -22 [ 233.523014][ T965] usb 1-1: USB disconnect, device number 16 [ 234.560689][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 235.068230][T10110] netlink: 'syz.3.1903': attribute type 11 has an invalid length. [ 235.810648][T10137] netlink: 'syz.1.1916': attribute type 11 has an invalid length. [ 236.709325][ T5852] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 236.900647][ T5852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.911026][ T5852] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 236.920172][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.930448][ T5852] usb 1-1: config 0 descriptor?? [ 236.940403][ T5852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 239.436716][ T965] usb 1-1: USB disconnect, device number 17 [ 239.524970][T10157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.199027][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 243.237811][ T28] audit: type=1326 audit(1772252143.006:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.1.2001" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8c99c799 code=0x0 [ 243.888204][T10336] can0: slcan on ptm0. [ 244.058947][T10334] can0 (unregistered): slcan off ptm0. [ 244.737281][ T51] Bluetooth: hci0: unknown advertising packet type: 0x17 [ 244.737369][ T51] Bluetooth: hci0: Malformed LE Event: 0x02 [ 244.816230][ T28] audit: type=1326 audit(1772252144.626:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.2026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c0dd9c799 code=0x0 [ 246.143799][ T28] audit: type=1326 audit(1772252145.956:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10430 comm="syz.0.2045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b4f9c799 code=0x0 [ 246.157377][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 246.711011][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'. [ 247.286246][T10472] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 247.303196][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 247.307429][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 249.152751][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 249.745161][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 249.757877][T10558] tipc: Enabling of bearer rejected, failed to enable media [ 249.922586][ T28] audit: type=1326 audit(1772252149.736:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 249.974201][ T28] audit: type=1326 audit(1772252149.756:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.021714][ T28] audit: type=1326 audit(1772252149.766:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.075995][ T28] audit: type=1326 audit(1772252149.766:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.117669][ T28] audit: type=1326 audit(1772252149.766:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.142070][ T28] audit: type=1326 audit(1772252149.766:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.209278][ T28] audit: type=1326 audit(1772252149.766:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.327258][ T28] audit: type=1326 audit(1772252149.766:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.393099][ T28] audit: type=1326 audit(1772252149.766:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.419443][ T28] audit: type=1326 audit(1772252149.766:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 250.964922][T10606] tipc: Enabling of bearer rejected, failed to enable media [ 252.759254][ T965] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.951837][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 252.965504][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.986809][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.013674][ T965] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 253.031729][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.056450][ T965] usb 3-1: config 0 descriptor?? [ 253.520948][ T965] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 253.539533][ T965] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 253.555231][ T965] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 253.588393][ T965] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 253.632585][ T965] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 253.819351][ T2177] usb 3-1: USB disconnect, device number 12 [ 254.492560][T10724] Bluetooth: MGMT ver 1.22 [ 254.584296][T10727] can0: slcan on ttyprintk. [ 254.739243][ T2177] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 254.740210][T10726] can0 (unregistered): slcan off ttyprintk. [ 254.952962][ T2177] usb 4-1: Using ep0 maxpacket: 32 [ 254.980930][ T2177] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 255.015881][ T2177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.044117][ T2177] usb 4-1: Product: syz [ 255.065789][ T2177] usb 4-1: Manufacturer: syz [ 255.079175][ T2177] usb 4-1: SerialNumber: syz [ 255.090682][ T2177] usb 4-1: config 0 descriptor?? [ 255.121530][ T2177] dw2102: su3000_identify_state [ 255.126737][ T2177] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 255.153325][ T2177] dw2102: su3000_power_ctrl: 1, initialized 0 [ 255.171108][ T2177] dvb-usb: bulk message failed: -22 (2/0) [ 255.209022][ T2177] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.246810][ T2177] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 255.266538][ T2177] usb 4-1: media controller created [ 255.279653][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.285919][ T2177] dw2102: i2c transfer failed. [ 255.300623][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.307576][ T2177] dw2102: i2c transfer failed. [ 255.317719][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.327893][ T2177] dw2102: i2c transfer failed. [ 255.336666][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.379426][ T2177] dw2102: i2c transfer failed. [ 255.387198][T10722] dvb-usb: bulk message failed: -22 (3/0) [ 255.398999][T10722] dw2102: i2c transfer failed. [ 255.418040][T10722] dvb-usb: bulk message failed: -22 (4/0) [ 255.435392][T10722] dw2102: i2c transfer failed. [ 255.443952][T10722] dvb-usb: bulk message failed: -22 (3/0) [ 255.452827][T10722] dw2102: i2c transfer failed. [ 255.457767][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.466991][ T2177] dw2102: i2c transfer failed. [ 255.477145][ T2177] dvb-usb: bulk message failed: -22 (6/0) [ 255.483468][ T2177] dw2102: i2c transfer failed. [ 255.503001][ T2177] dvb-usb: MAC address: 02:02:02:02:02:02 [ 255.559466][ T2177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.610766][ T2177] dvb-usb: bulk message failed: -22 (3/0) [ 255.624885][ T2177] dw2102: command 0x0e transfer failed. [ 255.639716][ T2177] dvb-usb: bulk message failed: -22 (3/0) [ 255.651564][ T2177] dw2102: command 0x0e transfer failed. [ 255.979313][ T2177] dvb-usb: bulk message failed: -22 (3/0) [ 255.985942][ T2177] dw2102: command 0x0e transfer failed. [ 256.014830][ T2177] dvb-usb: bulk message failed: -22 (3/0) [ 256.026489][ T2177] dw2102: command 0x0e transfer failed. [ 256.043250][ T2177] dvb-usb: bulk message failed: -22 (1/0) [ 256.069771][ T2177] dw2102: command 0x51 transfer failed. [ 256.086156][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095852][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.249289][ T2177] DVB: Unable to find symbol ds3000_attach() [ 256.264904][ T2177] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 256.355994][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 256.459235][ T2177] rc_core: IR keymap rc-su3000 not found [ 256.464950][ T2177] Registered IR keymap rc-empty [ 256.484799][ T2177] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 256.530190][ T2177] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 256.565098][ T2129] kernel read not supported for file /bus/input/devices (pid: 2129 comm: kworker/1:2) [ 256.575730][ T2177] dvb-usb: schedule remote query interval to 150 msecs. [ 256.587070][ T2177] dw2102: su3000_power_ctrl: 0, initialized 1 [ 256.619188][ T2177] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 256.682711][ T2177] usb 4-1: USB disconnect, device number 14 [ 256.790592][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 256.790609][ T28] audit: type=1326 audit(1772252156.606:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 256.865654][ T2177] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 256.888075][ T28] audit: type=1326 audit(1772252156.606:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 257.009264][ T28] audit: type=1326 audit(1772252156.606:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 257.109307][ T28] audit: type=1326 audit(1772252156.606:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 257.185148][ T28] audit: type=1326 audit(1772252156.616:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25b4f9c799 code=0x7ffc0000 [ 257.247910][ T28] audit: type=1326 audit(1772252156.616:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25b4f9c502 code=0x7ffc0000 [ 257.281336][ T28] audit: type=1326 audit(1772252156.626:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25b4f5cfce code=0x7ffc0000 [ 257.339186][ T28] audit: type=1326 audit(1772252156.626:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25b4f9c5c7 code=0x7ffc0000 [ 257.361845][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 257.426063][ T28] audit: type=1326 audit(1772252156.656:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b4f5cfce code=0x7ffc0000 [ 257.441580][T10825] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[10825] [ 257.453963][T10823] can0: slcan on ttyprintk. [ 257.480885][ T28] audit: type=1326 audit(1772252156.656:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25b4f9c42b code=0x7ffc0000 [ 257.580231][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 257.590270][T10822] can0 (unregistered): slcan off ttyprintk. [ 257.597789][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 257.629267][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.662720][ T9] usb 3-1: Product: syz [ 257.666945][ T9] usb 3-1: Manufacturer: syz [ 257.690396][ T9] usb 3-1: SerialNumber: syz [ 257.707949][ T9] usb 3-1: config 0 descriptor?? [ 257.733148][ T9] dw2102: su3000_identify_state [ 257.758707][ T9] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 257.769307][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 257.775453][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 257.794656][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.805212][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 257.829748][ T9] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 257.829803][ T9] usb 3-1: media controller created [ 257.829832][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.829914][ T9] dw2102: i2c transfer failed. [ 257.829961][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.829977][ T9] dw2102: i2c transfer failed. [ 257.830002][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.830018][ T9] dw2102: i2c transfer failed. [ 257.830036][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.830050][ T9] dw2102: i2c transfer failed. [ 257.830069][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.830084][ T9] dw2102: i2c transfer failed. [ 257.830102][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.830116][ T9] dw2102: i2c transfer failed. [ 257.830128][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 257.873220][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.895287][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 257.895311][ T9] dw2102: command 0x0e transfer failed. [ 257.895361][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 257.895375][ T9] dw2102: command 0x0e transfer failed. [ 257.999307][ T5804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 258.199654][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 258.207292][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.225022][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 258.232400][ T9] dw2102: command 0x0e transfer failed. [ 258.240129][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.242909][ T5852] kernel write not supported for file /input/mice (pid: 5852 comm: kworker/1:5) [ 258.259202][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 258.264395][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 258.265521][ T5804] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 258.289235][ T9] dw2102: command 0x0e transfer failed. [ 258.299187][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 258.312768][ T9] dw2102: command 0x51 transfer failed. [ 258.321715][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.333029][T10814] dvb-usb: bulk message failed: -22 (3/0) [ 258.341008][T10814] dw2102: i2c transfer failed. [ 258.352756][T10814] dvb-usb: bulk message failed: -22 (4/0) [ 258.365478][ T5804] usb 1-1: config 0 descriptor?? [ 258.379541][T10814] dw2102: i2c transfer failed. [ 258.405562][T10814] dvb-usb: bulk message failed: -22 (3/0) [ 258.425841][T10814] dw2102: i2c transfer failed. [ 258.452353][ T9] DVB: Unable to find symbol ds3000_attach() [ 258.467425][ T9] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 258.599259][ T9] rc_core: IR keymap rc-su3000 not found [ 258.605017][ T9] Registered IR keymap rc-empty [ 258.618588][ T9] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 258.641830][ T9] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input18 [ 258.662700][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 258.670490][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 258.676653][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 258.692252][ T9] usb 3-1: USB disconnect, device number 13 [ 258.755662][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 258.802880][ T5804] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 258.834320][ T5804] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 258.849454][ T5804] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 258.866934][ T5804] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 258.893288][ T5804] konepure 0003:1E7D:2DB4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 259.076208][ T9] usb 1-1: USB disconnect, device number 18 [ 259.491393][T10885] can0: slcan on ttyprintk. [ 259.549338][T10884] can0 (unregistered): slcan off ttyprintk. [ 259.789261][T10895] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.222544][T10915] netlink: 'syz.3.2251': attribute type 3 has an invalid length. [ 260.542126][ T5804] kernel write not supported for file /input/mice (pid: 5804 comm: kworker/0:4) [ 260.820926][T10941] netlink: 'syz.0.2263': attribute type 3 has an invalid length. [ 261.959268][T10987] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.733662][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 264.129521][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2328'. [ 264.165237][T11073] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 264.181208][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 264.967011][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 265.191498][T11108] binder: 11107:11108 ioctl c0306201 0 returned -14 [ 265.221431][T11108] binder: 11107:11108 ioctl c00c6211 0 returned -14 [ 265.392856][T11116] usb usb8: usbfs: process 11116 (syz.3.2349) did not claim interface 1 before use [ 265.555965][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 265.571623][T11120] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 265.580786][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2350'. [ 265.852598][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 270.813054][T11333] netlink: 'syz.2.2456': attribute type 8 has an invalid length. [ 271.202868][T11345] block device autoloading is deprecated and will be removed. [ 271.371938][T11360] netlink: 'syz.3.2467': attribute type 8 has an invalid length. [ 271.793560][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 271.793578][ T28] audit: type=1400 audit(1772252171.606:137): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A2F2F206D61785F7374617465735F7065725F696E736E203020746F74616C5F7374617465732030207065616B5F7374617465732030206D61726B5F726561642030 pid=11376 comm="syz.3.2476" [ 271.980649][T11384] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2479'. [ 272.000360][T11384] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2479'. [ 272.239474][ T965] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 272.473160][ T965] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.499546][ T965] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 272.508483][ T965] usb 1-1: config 220 has an invalid descriptor of length 191, skipping remainder of the config [ 272.539211][ T965] usb 1-1: config 220 has no interface number 2 [ 272.545576][ T965] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.569077][ T965] usb 1-1: config 220 interface 0 has no altsetting 0 [ 272.576948][ T965] usb 1-1: config 220 interface 76 has no altsetting 0 [ 272.599447][ T965] usb 1-1: config 220 interface 1 has no altsetting 0 [ 272.608877][ T965] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 272.628229][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.653238][ T965] usb 1-1: Product: syz [ 272.657463][ T965] usb 1-1: Manufacturer: syz [ 272.668355][ T965] usb 1-1: SerialNumber: syz [ 272.913486][ T965] uvcvideo 1-1:220.1: Unknown video format 4591ea68-95c5-d955-8939-39a945c50b19 [ 272.939151][ T965] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 272.945582][ T965] usb 1-1: No valid video chain found. [ 272.959388][ T965] usb 1-1: selecting invalid altsetting 0 [ 272.981495][ T965] usb 1-1: selecting invalid altsetting 0 [ 272.987360][ T965] usbtest: probe of 1-1:220.1 failed with error -22 [ 273.009975][ T965] usb 1-1: USB disconnect, device number 19 [ 273.032794][T11409] netlink: 'syz.3.2490': attribute type 2 has an invalid length. [ 273.367573][T11417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.374681][T11417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.382931][T11415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2493'. [ 273.392706][T11417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.399301][T11417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.406717][T11417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.413197][T11417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.420262][T11417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.426719][T11417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.439912][T11417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.446454][T11417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.772073][T11433] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2499'. [ 274.545635][T11461] loop2: detected capacity change from 0 to 256 [ 275.419397][T11486] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2525'. [ 275.459509][ T5805] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 275.663181][ T5805] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.673913][ T5805] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 275.681663][T11497] netlink: 209824 bytes leftover after parsing attributes in process `syz.2.2531'. [ 275.687580][ T5805] usb 2-1: config 220 has no interface number 2 [ 275.705691][ T5805] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 275.726560][ T5805] usb 2-1: config 220 interface 0 has no altsetting 0 [ 275.734179][ T5805] usb 2-1: config 220 interface 76 has no altsetting 0 [ 275.783544][ T5805] usb 2-1: config 220 interface 1 has no altsetting 0 [ 275.812152][ T5805] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.849012][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.857374][ T5805] usb 2-1: Product: syz [ 275.874552][ T5805] usb 2-1: Manufacturer: syz [ 275.881302][ T5805] usb 2-1: SerialNumber: syz [ 276.132314][ T5805] usb 2-1: selecting invalid altsetting 0 [ 276.139782][ T5805] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 276.168808][ T5805] usb 2-1: No valid video chain found. [ 276.196163][ T5805] usb 2-1: selecting invalid altsetting 0 [ 276.205575][ T5805] usbtest: probe of 2-1:220.1 failed with error -22 [ 276.220018][ T5805] usb 2-1: USB disconnect, device number 10 [ 276.673669][ T28] audit: type=1326 audit(1772252176.486:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.697324][ T5852] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 276.721963][ T28] audit: type=1326 audit(1772252176.486:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.745887][ T28] audit: type=1326 audit(1772252176.516:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.799706][ T28] audit: type=1326 audit(1772252176.526:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.851480][ T28] audit: type=1326 audit(1772252176.526:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.899485][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 276.911600][ T28] audit: type=1326 audit(1772252176.526:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.916652][ T5852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.967646][ T28] audit: type=1326 audit(1772252176.526:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 276.979237][ T5852] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 277.007072][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.044798][ T5852] usb 1-1: config 0 descriptor?? [ 277.050493][ T28] audit: type=1326 audit(1772252176.526:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d499c799 code=0x7ffc0000 [ 277.093439][ T5852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 277.363351][T11552] loop2: detected capacity change from 0 to 1024 [ 277.416017][T11552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.568208][T11552] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 277.686019][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.396064][T11594] loop2: detected capacity change from 0 to 128 [ 278.429967][T11594] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.443235][T11594] ext4 filesystem being mounted at /611/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.512455][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.813867][T11610] loop2: detected capacity change from 0 to 64 [ 279.456333][ T2177] usb 1-1: USB disconnect, device number 20 [ 279.595892][T11626] netlink: 'syz.1.2591': attribute type 1 has an invalid length. [ 279.624737][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 280.203602][ T51] Bluetooth: hci3: link tx timeout [ 280.208922][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 280.217495][ T51] Bluetooth: hci3: link tx timeout [ 280.223162][ T51] Bluetooth: hci3: link tx timeout [ 280.228379][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 280.236686][ T51] Bluetooth: hci3: link tx timeout [ 281.053157][T11669] mmap: syz.2.2609 (11669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.679659][T11695] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2620'. [ 282.319387][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 283.317150][T11760] tipc: Cannot configure node identity twice [ 283.584855][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 283.663618][T11772] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.673665][T11772] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.682592][T11772] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.691443][T11772] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.159494][ T965] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.329456][ T5803] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 284.369207][ T965] usb 3-1: Using ep0 maxpacket: 32 [ 284.376703][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.398068][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.409817][ T965] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.423201][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.442819][ T965] usb 3-1: config 0 descriptor?? [ 284.474670][ T965] hub 3-1:0.0: USB hub found [ 284.546792][ T5803] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 284.568507][ T5803] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 284.587509][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.626653][ T5803] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 284.635432][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.680604][ T5803] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 284.716954][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.744809][ T965] hub 3-1:0.0: 2 ports detected [ 284.753004][ T5803] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 284.767615][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.788371][ T5803] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 284.812119][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.826075][ T5803] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 284.845174][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.874341][ T5803] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 284.892369][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.908308][ T5803] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 284.928044][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.943398][ T5803] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.970491][ T965] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 284.976899][ T965] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 284.989145][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.007494][ T5803] usb 4-1: Product: syz [ 285.012680][ T5803] usb 4-1: Manufacturer: syz [ 285.019476][ T5803] usb 4-1: SerialNumber: syz [ 285.024282][ T965] usbhid 3-1:0.0: can't add hid device: -71 [ 285.045744][ T965] usbhid: probe of 3-1:0.0 failed with error -71 [ 285.049594][ T5803] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 285.100263][ T965] usb 3-1: USB disconnect, device number 14 [ 285.139884][ T5804] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 285.775679][T11828] vlan2: entered allmulticast mode [ 285.803598][T11828] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 285.806008][ T965] usb 4-1: USB disconnect, device number 15 [ 286.394514][ T5804] usb 4-1: Service connection timeout for: 256 [ 286.424906][ T5804] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 286.455327][ T5804] ath9k_htc: Failed to initialize the device [ 286.483202][ T965] usb 4-1: ath9k_htc: USB layer deinitialized [ 286.698458][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 287.278025][T11880] loop2: detected capacity change from 0 to 128 [ 287.344620][T11880] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 287.372711][T11880] hpfs: filesystem error: improperly stopped [ 287.378785][T11880] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 287.409151][T11880] hpfs: You really don't want any checks? You are crazy... [ 287.416879][T11880] hpfs: hpfs_map_sector(): read error [ 287.449213][T11880] hpfs: code page support is disabled [ 287.455027][T11880] hpfs: hpfs_map_4sectors(): unaligned read [ 287.485034][T11880] hpfs: hpfs_map_4sectors(): unaligned read [ 287.499884][T11880] hpfs: filesystem error: unable to find root dir [ 287.631577][T11880] hpfs: bad mount options. [ 288.263496][T11914] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2729'. [ 288.562791][T11927] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 288.764983][T11933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2738'. [ 288.799417][ T5804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 288.982427][ T5804] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 288.995814][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.010267][ T5804] usb 4-1: config 0 descriptor?? [ 289.024833][ T5804] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 289.057831][ T5804] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 289.223052][ T2177] usb 4-1: USB disconnect, device number 16 [ 289.424080][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 290.394842][T11978] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 290.415255][T11978] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 290.440349][T11978] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 290.465602][T11978] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 290.490883][T11978] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 290.497999][T11978] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 290.529427][T11978] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 290.536197][T11978] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 290.562786][T11978] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 290.593916][T11978] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 290.619576][T11978] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 290.649430][T11978] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 290.655969][T11978] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 290.678515][T11978] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 290.745608][T11993] loop2: detected capacity change from 0 to 2048 [ 290.820665][T11993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.886289][T11993] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.2766: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 290.914497][T11993] EXT4-fs (loop2): Remounting filesystem read-only [ 290.921320][ T5805] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 291.034362][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.122540][ T5805] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.137993][ T5805] usb 4-1: config 0 has no interface number 0 [ 291.159644][ T5805] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 291.168810][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.193891][ T5805] usb 4-1: config 0 descriptor?? [ 291.208924][ T5805] usb 4-1: selecting invalid altsetting 1 [ 291.230637][ T5805] dvb_ttusb_budget: ttusb_init_controller: error [ 291.237133][ T5805] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 291.385848][ T5805] DVB: Unable to find symbol cx22700_attach() [ 291.475670][ T5805] DVB: Unable to find symbol tda10046_attach() [ 291.489194][ T5852] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 291.500807][ T5805] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 291.516142][ T5805] usb 4-1: USB disconnect, device number 17 [ 291.684384][ T5852] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 291.693286][ T5852] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 291.709549][ T5852] usb 1-1: config 220 has no interface number 2 [ 291.717262][ T5852] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 291.736360][ T2177] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 291.750118][ T5852] usb 1-1: config 220 interface 0 has no altsetting 0 [ 291.774263][ T5852] usb 1-1: config 220 interface 76 has no altsetting 0 [ 291.794080][ T5852] usb 1-1: config 220 interface 1 has no altsetting 0 [ 291.816498][ T5852] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 291.827694][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.843952][ T5852] usb 1-1: Product: syz [ 291.848171][ T5852] usb 1-1: Manufacturer: syz [ 291.855105][ T5852] usb 1-1: SerialNumber: syz [ 291.957388][ T2177] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.981432][ T2177] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 291.997622][ T2177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.032648][ T2177] usb 2-1: config 0 descriptor?? [ 292.043545][ T2177] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 292.107642][ T5852] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 292.114795][ T5852] usb 1-1: No valid video chain found. [ 292.136529][ T5852] usb 1-1: selecting invalid altsetting 0 [ 292.173000][ T5852] usb 1-1: selecting invalid altsetting 0 [ 292.178812][ T5852] usbtest: probe of 1-1:220.1 failed with error -22 [ 292.197650][ T5852] usb 1-1: USB disconnect, device number 21 [ 292.599481][ T2177] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 292.801100][ T2177] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.816998][ T2177] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.826841][ T2177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.834948][ T2177] usb 3-1: SerialNumber: syz [ 292.846181][ T2177] usb 3-1: bad CDC descriptors [ 293.857308][T12085] netlink: 'syz.0.2808': attribute type 30 has an invalid length. [ 293.952996][T12088] binder: BINDER_SET_CONTEXT_MGR already set [ 293.961125][T12088] binder: 12086:12088 ioctl 40046207 0 returned -16 [ 294.059997][T12091] vlan2: entered allmulticast mode [ 294.070796][T12091] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 294.352212][T12100] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 294.515762][ T5804] usb 2-1: USB disconnect, device number 11 [ 294.657363][T12109] net_ratelimit: 66 callbacks suppressed [ 294.657385][T12109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.669757][T12109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.682637][T12109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.689194][T12109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.697768][T12109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.704287][T12109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.711634][T12109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.718090][T12109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.725469][T12109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.731986][T12109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.014785][T12120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2824'. [ 295.405626][ T5852] usb 3-1: USB disconnect, device number 15 [ 295.782128][T12151] netlink: 209824 bytes leftover after parsing attributes in process `syz.3.2840'. [ 297.188359][T12202] loop2: detected capacity change from 0 to 256 [ 297.247364][T12202] FAT-fs (loop2): Directory bread(block 64) failed [ 297.259192][T12202] FAT-fs (loop2): Directory bread(block 65) failed [ 297.266039][T12202] FAT-fs (loop2): Directory bread(block 66) failed [ 297.273284][T12202] FAT-fs (loop2): Directory bread(block 67) failed [ 297.281071][T12202] FAT-fs (loop2): Directory bread(block 68) failed [ 297.288177][T12202] FAT-fs (loop2): Directory bread(block 69) failed [ 297.296682][T12202] FAT-fs (loop2): Directory bread(block 70) failed [ 297.303760][T12202] FAT-fs (loop2): Directory bread(block 71) failed [ 297.311186][T12202] FAT-fs (loop2): Directory bread(block 72) failed [ 297.317875][T12202] FAT-fs (loop2): Directory bread(block 73) failed [ 298.309258][ T5804] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 298.404030][T12236] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2879'. [ 298.545678][ T5804] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 298.559197][ T5804] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 298.599076][ T5804] usb 3-1: config 220 has no interface number 2 [ 298.620573][ T5804] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 298.663562][ T5804] usb 3-1: config 220 interface 0 has no altsetting 0 [ 298.679347][ T5804] usb 3-1: config 220 interface 76 has no altsetting 0 [ 298.694930][ T5804] usb 3-1: config 220 interface 1 has no altsetting 0 [ 298.714647][ T5804] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 298.727068][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.735590][ T5804] usb 3-1: Product: syz [ 298.749953][ T5804] usb 3-1: Manufacturer: syz [ 298.759545][ T5804] usb 3-1: SerialNumber: syz [ 299.020017][ T5804] usb 3-1: selecting invalid altsetting 0 [ 299.026303][ T5804] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 299.036805][ T5804] usb 3-1: No valid video chain found. [ 299.052567][ T5804] usb 3-1: selecting invalid altsetting 0 [ 299.059615][ T5804] usbtest: probe of 3-1:220.1 failed with error -22 [ 299.070576][ T5804] usb 3-1: USB disconnect, device number 16 [ 299.628858][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 300.180279][T12272] netlink: 'syz.1.2896': attribute type 2 has an invalid length. [ 300.198425][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2896'. [ 300.235229][T12272] net_ratelimit: 66 callbacks suppressed [ 300.235249][T12272] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 300.465358][T12263] loop2: detected capacity change from 0 to 32768 [ 300.560460][T12263] JBD2: Ignoring recovery information on journal [ 300.631751][T12263] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 300.709777][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 300.772739][ T28] audit: type=1800 audit(1772252200.576:146): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2891" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 300.815064][T12263] [ 300.817455][T12263] ====================================================== [ 300.824498][T12263] WARNING: possible circular locking dependency detected [ 300.831544][T12263] syzkaller #0 Not tainted [ 300.835970][T12263] ------------------------------------------------------ [ 300.842985][T12263] syz.2.2891/12263 is trying to acquire lock: [ 300.849047][T12263] ffff88805dce2658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 300.862288][T12263] [ 300.862288][T12263] but task is already holding lock: [ 300.869650][T12263] ffff88805a4a3ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 300.879158][T12263] [ 300.879158][T12263] which lock already depends on the new lock. [ 300.879158][T12263] [ 300.889560][T12263] [ 300.889560][T12263] the existing dependency chain (in reverse order) is: [ 300.898590][T12263] [ 300.898590][T12263] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 300.906438][T12263] down_read+0x46/0x2e0 [ 300.911152][T12263] ocfs2_init_acl+0x30a/0x770 [ 300.916375][T12263] ocfs2_mknod+0x140f/0x2300 [ 300.921498][T12263] ocfs2_create+0x196/0x430 [ 300.926533][T12263] path_openat+0x12a0/0x3230 [ 300.931647][T12263] do_filp_open+0x1f5/0x430 [ 300.936672][T12263] do_sys_openat2+0x134/0x1d0 [ 300.941878][T12263] __x64_sys_openat+0x139/0x160 [ 300.947256][T12263] do_syscall_64+0x55/0xa0 [ 300.952199][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.958624][T12263] [ 300.958624][T12263] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 300.967148][T12263] down_read+0x46/0x2e0 [ 300.971837][T12263] ocfs2_start_trans+0x3a8/0x6f0 [ 300.977300][T12263] ocfs2_modify_bh+0xe4/0x4c0 [ 300.982501][T12263] ocfs2_local_read_info+0x1445/0x1800 [ 300.988485][T12263] dquot_load_quota_sb+0x757/0xb80 [ 300.994126][T12263] dquot_load_quota_inode+0x2dc/0x5d0 [ 301.000028][T12263] ocfs2_enable_quotas+0x1c9/0x490 [ 301.005665][T12263] ocfs2_fill_super+0x417d/0x5010 [ 301.011215][T12263] mount_bdev+0x221/0x2d0 [ 301.016066][T12263] legacy_get_tree+0xea/0x180 [ 301.021268][T12263] vfs_get_tree+0x8c/0x280 [ 301.026207][T12263] do_new_mount+0x24b/0xa40 [ 301.031240][T12263] __se_sys_mount+0x2e7/0x3d0 [ 301.036455][T12263] do_syscall_64+0x55/0xa0 [ 301.041426][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.047850][T12263] [ 301.047850][T12263] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 301.055340][T12263] ocfs2_start_trans+0x2a9/0x6f0 [ 301.060800][T12263] ocfs2_mknod+0xf1d/0x2300 [ 301.065827][T12263] ocfs2_create+0x196/0x430 [ 301.070856][T12263] path_openat+0x12a0/0x3230 [ 301.075968][T12263] do_filp_open+0x1f5/0x430 [ 301.080992][T12263] do_sys_openat2+0x134/0x1d0 [ 301.086196][T12263] __x64_sys_openat+0x139/0x160 [ 301.091581][T12263] do_syscall_64+0x55/0xa0 [ 301.096527][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.102944][T12263] [ 301.102944][T12263] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 301.113469][T12263] down_write+0x97/0x200 [ 301.118241][T12263] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 301.124923][T12263] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 301.131786][T12263] ocfs2_mknod+0xebb/0x2300 [ 301.136816][T12263] ocfs2_create+0x196/0x430 [ 301.141842][T12263] path_openat+0x12a0/0x3230 [ 301.146955][T12263] do_filp_open+0x1f5/0x430 [ 301.151981][T12263] do_sys_openat2+0x134/0x1d0 [ 301.157182][T12263] __x64_sys_openat+0x139/0x160 [ 301.162562][T12263] do_syscall_64+0x55/0xa0 [ 301.167506][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.173925][T12263] [ 301.173925][T12263] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 301.184457][T12263] __lock_acquire+0x2df1/0x7d40 [ 301.189836][T12263] lock_acquire+0x19e/0x420 [ 301.194862][T12263] down_write+0x97/0x200 [ 301.199641][T12263] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 301.206064][T12263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 301.212921][T12263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 301.219082][T12263] ocfs2_xattr_set+0xc3f/0x13e0 [ 301.224473][T12263] __vfs_setxattr+0x431/0x470 [ 301.229680][T12263] __vfs_setxattr_noperm+0x12d/0x5e0 [ 301.235491][T12263] vfs_setxattr+0x16b/0x2f0 [ 301.240521][T12263] path_setxattr+0x3f3/0x5d0 [ 301.245635][T12263] __x64_sys_setxattr+0xbb/0xd0 [ 301.251010][T12263] do_syscall_64+0x55/0xa0 [ 301.255952][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.262371][T12263] [ 301.262371][T12263] other info that might help us debug this: [ 301.262371][T12263] [ 301.272600][T12263] Chain exists of: [ 301.272600][T12263] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 301.272600][T12263] [ 301.289564][T12263] Possible unsafe locking scenario: [ 301.289564][T12263] [ 301.297102][T12263] CPU0 CPU1 [ 301.302472][T12263] ---- ---- [ 301.307833][T12263] lock(&oi->ip_xattr_sem); [ 301.312427][T12263] lock(&journal->j_trans_barrier); [ 301.320239][T12263] lock(&oi->ip_xattr_sem); [ 301.327353][T12263] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 301.334649][T12263] [ 301.334649][T12263] *** DEADLOCK *** [ 301.334649][T12263] [ 301.342794][T12263] 3 locks held by syz.2.2891/12263: [ 301.347992][T12263] #0: ffff88805b86a418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 301.357238][T12263] #1: ffff88805a4a42d8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 301.367693][T12263] #2: ffff88805a4a3ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 301.377623][T12263] [ 301.377623][T12263] stack backtrace: [ 301.383514][T12263] CPU: 1 PID: 12263 Comm: syz.2.2891 Not tainted syzkaller #0 [ 301.390973][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.401028][T12263] Call Trace: [ 301.404310][T12263] [ 301.407246][T12263] dump_stack_lvl+0x18c/0x250 [ 301.411941][T12263] ? load_image+0x400/0x400 [ 301.416455][T12263] ? show_regs_print_info+0x20/0x20 [ 301.421667][T12263] ? print_circular_bug+0x12b/0x1a0 [ 301.426876][T12263] check_noncircular+0x2fc/0x400 [ 301.431822][T12263] ? print_deadlock_bug+0x5d0/0x5d0 [ 301.437024][T12263] ? lockdep_lock+0xf5/0x230 [ 301.441624][T12263] ? _find_first_zero_bit+0xd3/0x100 [ 301.446919][T12263] __lock_acquire+0x2df1/0x7d40 [ 301.451788][T12263] ? __lock_acquire+0x7d40/0x7d40 [ 301.456819][T12263] ? verify_lock_unused+0x140/0x140 [ 301.462027][T12263] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 301.467671][T12263] ? do_raw_spin_lock+0x11f/0x2c0 [ 301.472715][T12263] ? mutex_unlock+0x10/0x10 [ 301.477230][T12263] lock_acquire+0x19e/0x420 [ 301.481736][T12263] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 301.487814][T12263] ? ocfs2_get_system_file_inode+0x202/0x850 [ 301.493799][T12263] ? __might_sleep+0xe0/0xe0 [ 301.498395][T12263] ? read_lock_is_recursive+0x20/0x20 [ 301.503776][T12263] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 301.509938][T12263] ? verify_lock_unused+0x140/0x140 [ 301.515138][T12263] ? check_noncircular+0x18a/0x400 [ 301.520256][T12263] down_write+0x97/0x200 [ 301.524512][T12263] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 301.530587][T12263] ? down_read_killable+0x340/0x340 [ 301.535796][T12263] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 301.541703][T12263] ? mark_lock+0x94/0x320 [ 301.546040][T12263] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 301.552027][T12263] ? lock_chain_count+0x20/0x20 [ 301.556887][T12263] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 301.562790][T12263] ? lockdep_hardirqs_on+0x98/0x150 [ 301.567995][T12263] ? ocfs2_block_group_search+0x470/0x470 [ 301.573726][T12263] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 301.579624][T12263] ? _raw_spin_unlock+0x40/0x40 [ 301.584479][T12263] ? stack_trace_save+0xaa/0x100 [ 301.589423][T12263] ? stack_trace_snprint+0xf0/0xf0 [ 301.594546][T12263] ? __stack_depot_save+0x560/0x630 [ 301.599755][T12263] ? kasan_set_track+0x5f/0x70 [ 301.604613][T12263] ? kasan_set_track+0x4e/0x70 [ 301.609382][T12263] ? __kasan_kmalloc+0x8f/0xa0 [ 301.614148][T12263] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 301.620662][T12263] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 301.626477][T12263] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 301.631509][T12263] ? __vfs_setxattr+0x431/0x470 [ 301.636367][T12263] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 301.641833][T12263] ? vfs_setxattr+0x16b/0x2f0 [ 301.646516][T12263] ? path_setxattr+0x3f3/0x5d0 [ 301.651296][T12263] ? __x64_sys_setxattr+0xbb/0xd0 [ 301.656340][T12263] ? do_syscall_64+0x55/0xa0 [ 301.660941][T12263] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.667030][T12263] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 301.673371][T12263] ? ocfs2_init_steal_slots+0x160/0x160 [ 301.678927][T12263] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 301.684575][T12263] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 301.690217][T12263] ? ocfs2_xattr_set+0xc05/0x13e0 [ 301.695252][T12263] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 301.701327][T12263] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 301.707576][T12263] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 301.713477][T12263] ? down_write+0x16e/0x200 [ 301.717996][T12263] ? down_read_killable+0x340/0x340 [ 301.723204][T12263] ? up_write+0x1c3/0x410 [ 301.727542][T12263] ocfs2_xattr_set+0xc3f/0x13e0 [ 301.732411][T12263] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 301.738143][T12263] ? __lock_acquire+0x1347/0x7d40 [ 301.743175][T12263] ? verify_lock_unused+0x140/0x140 [ 301.748383][T12263] ? ____kasan_slab_free+0x126/0x1e0 [ 301.753693][T12263] ? evm_protected_xattr_common+0x170/0x190 [ 301.759616][T12263] ? ocfs2_xattr_security_get+0x40/0x40 [ 301.765171][T12263] __vfs_setxattr+0x431/0x470 [ 301.769864][T12263] __vfs_setxattr_noperm+0x12d/0x5e0 [ 301.775168][T12263] vfs_setxattr+0x16b/0x2f0 [ 301.779681][T12263] ? xattr_permission+0x470/0x470 [ 301.784717][T12263] ? __mnt_want_write+0x223/0x2a0 [ 301.789753][T12263] ? path_setxattr+0x3a1/0x5d0 [ 301.794525][T12263] path_setxattr+0x3f3/0x5d0 [ 301.799127][T12263] ? simple_xattrs_free+0x150/0x150 [ 301.804339][T12263] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 301.810324][T12263] ? lock_chain_count+0x20/0x20 [ 301.815183][T12263] __x64_sys_setxattr+0xbb/0xd0 [ 301.820048][T12263] do_syscall_64+0x55/0xa0 [ 301.824477][T12263] ? clear_bhb_loop+0x40/0x90 [ 301.829160][T12263] ? clear_bhb_loop+0x40/0x90 [ 301.833845][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.839744][T12263] RIP: 0033:0x7f2c0dd9c799 [ 301.844173][T12263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.863803][T12263] RSP: 002b:00007f2c0bff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 301.872234][T12263] RAX: ffffffffffffffda RBX: 00007f2c0e015fa0 RCX: 00007f2c0dd9c799 [ 301.880221][T12263] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 301.888199][T12263] RBP: 00007f2c0de32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 301.896175][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.904151][T12263] R13: 00007f2c0e016038 R14: 00007f2c0e015fa0 R15: 00007fff905e7d28 [ 301.912135][T12263] [ 302.022809][ T5771] ocfs2: Unmounting device (7,2) on (node local)