last executing test programs: 6.06593948s ago: executing program 3 (id=6752): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000003c0)=ANY=[]) 5.869766302s ago: executing program 0 (id=6755): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.554288159s ago: executing program 3 (id=6756): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="176f9e5cba39", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x61, 0x0, 0x0, 0x2, 0x0, @multicast2, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x7}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a000101000000090400001602020000052412"], 0x0) 3.731117696s ago: executing program 2 (id=6768): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) 3.243056259s ago: executing program 0 (id=6769): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000380)={0x2, 0x0, 0x7, {0x609a614e, 0x4000, 0x4, 0x6d7}}) 3.035703695s ago: executing program 3 (id=6771): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000"], 0x7d) 2.954213917s ago: executing program 2 (id=6773): prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.677983873s ago: executing program 0 (id=6774): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x38) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x452342, 0xe0, 0x33}, 0x28) 2.385764247s ago: executing program 3 (id=6775): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r0, &(0x7f0000000180)=[@e], 0x8) 2.385597773s ago: executing program 1 (id=6776): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2.385495945s ago: executing program 2 (id=6777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000001300010000001f000000000006"], 0x14}], 0x1}, 0x0) 2.29764919s ago: executing program 0 (id=6778): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0}) 1.915284589s ago: executing program 2 (id=6789): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) 1.816537074s ago: executing program 1 (id=6780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x0) 1.613890411s ago: executing program 0 (id=6781): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x5}}}) 1.439887673s ago: executing program 4 (id=6782): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', 0x0}) 1.225704793s ago: executing program 1 (id=6783): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040), 0xea60, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.225524554s ago: executing program 3 (id=6784): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, &(0x7f0000000140)) 1.225426258s ago: executing program 4 (id=6785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000000000002000128008000100677265001400028006000e0005"], 0x40}}, 0x0) 1.19673379s ago: executing program 2 (id=6786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.020300096s ago: executing program 1 (id=6787): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0x40044104, 0x0) 809.705921ms ago: executing program 0 (id=6788): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003020000202505a1a440000000010109026400010100000009040000120206000005240600000524"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 759.741769ms ago: executing program 1 (id=6790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0xc0, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 543.695074ms ago: executing program 3 (id=6791): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x249, &(0x7f00000001c0)="$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") statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000, 0x0) 489.649118ms ago: executing program 4 (id=6792): r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 366.860251ms ago: executing program 4 (id=6793): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000038b000/0x3000)=nil, &(0x7f00007be000/0x2000)=nil, 0x0, 0x0, 0xfffffddb}) 182.345968ms ago: executing program 2 (id=6794): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, &(0x7f0000000a40)}) 124.967547ms ago: executing program 4 (id=6795): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x47524247}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 98.490808ms ago: executing program 1 (id=6796): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 0s ago: executing program 4 (id=6797): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): -1: Manufacturer: syz [ 918.724767][T11170] usb 2-1: SerialNumber: syz [ 918.815617][T15718] kernel profiling enabled (shift: 63) [ 918.821425][T15718] profiling shift: 63 too large [ 918.865249][T15719] VFS: Can't find a romfs filesystem on dev nullb0. [ 918.865249][T15719] [ 919.007565][T11170] usb 2-1: config 0 descriptor?? [ 919.307779][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4684'. [ 919.374298][T11170] usb 2-1: USB disconnect, device number 25 [ 919.588519][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.072971][ T5243] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 920.277297][ T5243] usb 1-1: Using ep0 maxpacket: 8 [ 920.314954][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 920.326715][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.339229][ T5243] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.352317][ T5243] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 920.363514][ T5243] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 920.373029][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.488775][ T5243] usb 1-1: config 0 descriptor?? [ 920.573374][T15731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 920.886065][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'. [ 921.029559][ T5195] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 921.030533][T11170] usb 1-1: USB disconnect, device number 26 [ 921.635437][T15755] loop2: detected capacity change from 0 to 256 [ 921.764237][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4702'. [ 921.865809][ T29] audit: type=1326 audit(2000000639.159:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.1.4699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 921.890487][ T29] audit: type=1326 audit(2000000639.159:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.1.4699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 921.912666][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.919899][ T29] audit: type=1326 audit(2000000639.189:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.1.4699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 921.942131][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.948861][ T29] audit: type=1326 audit(2000000639.189:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.1.4699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 922.271195][T15765] loop4: detected capacity change from 0 to 512 [ 922.370878][T15767] loop1: detected capacity change from 0 to 64 [ 923.491771][T15765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.505315][T15765] ext4 filesystem being mounted at /732/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 923.643823][T15786] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 923.657977][T15786] bond0: (slave lo): Error: Device can not be enslaved while up [ 924.076166][ T7508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.352868][T15794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4717'. [ 924.556281][T15802] kernel profiling enabled (shift: 63) [ 924.562038][T15802] profiling shift: 63 too large [ 924.754738][T11170] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 925.132567][T15809] netlink: 'syz.4.4725': attribute type 3 has an invalid length. [ 925.140572][T15809] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4725'. [ 925.172658][T11170] usb 4-1: Using ep0 maxpacket: 8 [ 925.185336][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 925.196886][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.206975][T11170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 925.217140][T11170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 925.227590][T11170] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 925.237059][T11170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.316607][T11170] usb 4-1: config 0 descriptor?? [ 925.324794][T15793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 925.931132][ T5195] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 925.948370][ T5243] usb 4-1: USB disconnect, device number 28 [ 925.999664][T15822] loop1: detected capacity change from 0 to 256 [ 926.334680][T15822] MINIX-fs: mounting file system with errors, running fsck is recommended [ 926.568192][T15827] loop2: detected capacity change from 0 to 512 [ 926.748599][T15830] kernel profiling enabled (shift: 63) [ 926.754536][T15830] profiling shift: 63 too large [ 926.870536][T15827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.883868][T15827] ext4 filesystem being mounted at /827/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 927.452362][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.015737][T15848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4744'. [ 928.800825][T15859] loop3: detected capacity change from 0 to 1024 [ 928.903539][T11170] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 929.077445][T15859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.499071][T13997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.802753][T11170] usb 2-1: Using ep0 maxpacket: 8 [ 929.873299][T11170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 929.885911][T11170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.896569][T11170] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.906628][T11170] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 929.917034][T11170] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 929.926464][T11170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.984107][T11170] usb 2-1: config 0 descriptor?? [ 930.094736][T15860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 930.691350][T15885] loop3: detected capacity change from 0 to 512 [ 930.730766][T13998] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 930.909628][ T5243] usb 2-1: USB disconnect, device number 26 [ 930.976891][T15885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.993286][T15885] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.283477][T15885] process 'syz.3.4756' launched './file1' with NULL argv: empty string added [ 931.649315][T13997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.891047][ T5243] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 932.053506][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 932.069680][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 932.111165][ T5243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 932.123856][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.132146][ T5243] usb 5-1: Product: syz [ 932.137625][ T5243] usb 5-1: Manufacturer: syz [ 932.142579][ T5243] usb 5-1: SerialNumber: syz [ 932.205653][ T5243] usb 5-1: config 0 descriptor?? [ 932.276191][ T5243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 932.283684][ T5243] pvrusb2: ********** [ 932.287845][ T5243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 932.298344][ T5243] pvrusb2: Important functionality might not be entirely working. [ 932.306480][ T5243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 932.321674][ T5243] pvrusb2: ********** [ 932.535100][ T2023] pvrusb2: Invalid write control endpoint [ 932.785063][ T5243] usb 5-1: USB disconnect, device number 16 [ 932.828942][T13998] Bluetooth: hci0: command 0x0406 tx timeout [ 932.939427][ T2023] pvrusb2: Invalid write control endpoint [ 932.946488][ T2023] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 932.956226][ T2023] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 932.964195][ T2023] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 932.974815][ T2023] pvrusb2: Device being rendered inoperable [ 932.980941][ T2023] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 932.988537][ T2023] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 932.998491][ T2023] pvrusb2: Attached sub-driver cx25840 [ 933.004266][ T2023] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 933.014722][ T2023] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 933.248519][T15920] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4775'. [ 933.421180][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4776'. [ 934.921221][T15947] tmpfs: Bad value for 'mpol' [ 935.157694][ T5243] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 935.344105][ T5243] usb 4-1: Using ep0 maxpacket: 32 [ 935.369358][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 935.436828][ T5243] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 935.446569][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.455200][ T5243] usb 4-1: Product: syz [ 935.459585][ T5243] usb 4-1: Manufacturer: syz [ 935.464537][ T5243] usb 4-1: SerialNumber: syz [ 935.565641][ T5243] usb 4-1: config 0 descriptor?? [ 935.624923][ T5243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 935.632200][ T5243] pvrusb2: ********** [ 935.637309][ T5243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 935.647783][ T5243] pvrusb2: Important functionality might not be entirely working. [ 935.655970][ T5243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 935.667726][ T5243] pvrusb2: ********** [ 935.836304][ T2023] pvrusb2: Invalid write control endpoint [ 936.094383][ T5243] usb 4-1: USB disconnect, device number 29 [ 936.217585][ T2023] pvrusb2: Invalid write control endpoint [ 936.223680][ T2023] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 936.233413][ T2023] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 936.241160][ T2023] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 936.251878][ T2023] pvrusb2: Device being rendered inoperable [ 936.259121][ T2023] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 936.266728][ T2023] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 936.276536][ T2023] pvrusb2: Attached sub-driver cx25840 [ 936.282219][ T2023] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 936.292734][ T2023] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 936.487484][T15970] netlink: 'syz.4.4798': attribute type 30 has an invalid length. [ 937.810533][T15971] loop2: detected capacity change from 0 to 4096 [ 937.895563][T15971] NILFS (loop2): invalid segment: Checksum error in segment payload [ 937.904436][T15971] NILFS (loop2): trying rollback from an earlier position [ 937.987352][T15971] NILFS (loop2): recovery complete [ 938.006332][T15991] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 938.695294][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4812'. [ 938.762711][T16003] syz.3.4814: attempt to access beyond end of device [ 938.762711][T16003] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 938.782133][T16003] syz.3.4814: attempt to access beyond end of device [ 938.782133][T16003] loop3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 938.797713][T16003] Mount JFS Failure: -5 [ 938.802081][T16003] jfs_mount failed w/return code = -5 [ 939.583579][T16011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.744438][ T5243] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 939.952727][ T5243] usb 2-1: Using ep0 maxpacket: 32 [ 940.381948][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 940.420414][ T5243] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 940.430091][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.438637][ T5243] usb 2-1: Product: syz [ 940.443140][ T5243] usb 2-1: Manufacturer: syz [ 940.447981][ T5243] usb 2-1: SerialNumber: syz [ 940.472260][ T5243] usb 2-1: config 0 descriptor?? [ 940.499759][ T5243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 940.510693][ T5243] pvrusb2: ********** [ 940.519298][ T5243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 940.530961][ T5243] pvrusb2: Important functionality might not be entirely working. [ 940.539095][ T5243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 940.550852][ T5243] pvrusb2: ********** [ 940.569020][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4825'. [ 940.857295][ T2023] pvrusb2: Invalid write control endpoint [ 941.037758][T11170] usb 2-1: USB disconnect, device number 27 [ 941.173256][ T2023] pvrusb2: Invalid write control endpoint [ 941.179213][ T2023] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 941.189010][ T2023] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 941.196914][ T2023] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 941.207592][ T2023] pvrusb2: Device being rendered inoperable [ 941.213812][ T2023] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 941.221136][ T2023] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 941.237905][ T2023] pvrusb2: Attached sub-driver cx25840 [ 941.245012][ T2023] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 941.255523][ T2023] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 942.037736][ T5195] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 942.105627][T16045] loop3: detected capacity change from 0 to 256 [ 942.393726][T16045] FAT-fs (loop3): Directory bread(block 64) failed [ 942.400652][T16045] FAT-fs (loop3): Directory bread(block 65) failed [ 942.408373][T16045] FAT-fs (loop3): Directory bread(block 66) failed [ 942.415932][T16045] FAT-fs (loop3): Directory bread(block 67) failed [ 942.423079][T16045] FAT-fs (loop3): Directory bread(block 68) failed [ 942.429848][T16045] FAT-fs (loop3): Directory bread(block 69) failed [ 942.437035][T16045] FAT-fs (loop3): Directory bread(block 70) failed [ 942.443947][T16045] FAT-fs (loop3): Directory bread(block 71) failed [ 942.450847][T16045] FAT-fs (loop3): Directory bread(block 72) failed [ 942.460554][T16045] FAT-fs (loop3): Directory bread(block 73) failed [ 943.385718][T16061] loop4: detected capacity change from 0 to 256 [ 943.591281][T16067] netlink: 'syz.3.4842': attribute type 15 has an invalid length. [ 943.599781][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 946.130673][ T5195] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 946.141986][ T5195] Bluetooth: hci1: Injecting HCI hardware error event [ 946.162340][ T5195] Bluetooth: hci1: hardware error 0x00 [ 946.379692][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4867'. [ 946.813126][T16119] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 947.613829][T16133] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 947.652962][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4877'. [ 948.310680][ T5195] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 948.912785][T16157] IPv6: NLM_F_CREATE should be specified when creating new route [ 949.316395][ T5248] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 949.491370][ T5248] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 949.501076][ T5248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.549568][ T5248] usb 1-1: config 0 descriptor?? [ 949.655898][T16172] set match dimension is over the limit! [ 949.681571][ T5248] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 949.822032][T16174] loop1: detected capacity change from 0 to 256 [ 950.464347][ T5248] gp8psk: usb out operation failed. [ 950.469777][ T5248] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 950.487193][ T5248] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 950.699252][ T5248] usb 1-1: USB disconnect, device number 27 [ 950.784211][T16174] FAT-fs (loop1): Directory bread(block 64) failed [ 950.791154][T16174] FAT-fs (loop1): Directory bread(block 65) failed [ 950.798926][T16174] FAT-fs (loop1): Directory bread(block 66) failed [ 950.805896][T16174] FAT-fs (loop1): Directory bread(block 67) failed [ 950.813148][T16174] FAT-fs (loop1): Directory bread(block 68) failed [ 950.820115][T16174] FAT-fs (loop1): Directory bread(block 69) failed [ 950.827440][T16174] FAT-fs (loop1): Directory bread(block 70) failed [ 950.834376][T16174] FAT-fs (loop1): Directory bread(block 71) failed [ 950.841300][T16174] FAT-fs (loop1): Directory bread(block 72) failed [ 950.848256][T16174] FAT-fs (loop1): Directory bread(block 73) failed [ 951.312972][ T5243] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 951.391463][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4904'. [ 951.401004][T16193] tc_dump_action: action bad kind [ 951.491342][ T5243] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.502185][ T5243] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 951.511790][ T5243] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 951.521303][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.655773][ T5243] usb 4-1: config 0 descriptor?? [ 952.075922][T16200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.436901][ T5243] Bluetooth: Can't get version to change to load ram patch err [ 952.444918][ T5243] Bluetooth: Loading patch file failed [ 952.450728][ T5243] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 952.575585][ T5243] usb 4-1: USB disconnect, device number 30 [ 952.631394][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 952.809563][T16215] trusted_key: encrypted_key: insufficient parameters specified [ 953.161939][T16222] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.4918'. [ 953.172042][T16222] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 953.181820][T16222] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 954.726051][T16244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4929'. [ 955.142985][ T5243] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 955.323107][ T5243] usb 3-1: Using ep0 maxpacket: 8 [ 955.359876][ T5243] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 955.371992][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.383074][ T5243] usb 3-1: Product: syz [ 955.387491][ T5243] usb 3-1: Manufacturer: syz [ 955.392336][ T5243] usb 3-1: SerialNumber: syz [ 955.431091][ T5243] usb 3-1: config 0 descriptor?? [ 955.453071][ T5243] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 955.564220][ T5248] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 955.585339][T16257] loop4: detected capacity change from 0 to 128 [ 955.706468][T16257] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 955.724335][T16257] ext4 filesystem being mounted at /783/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.761410][ T5248] usb 4-1: Using ep0 maxpacket: 32 [ 955.819681][ T5248] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 955.821018][T16263] loop1: detected capacity change from 0 to 64 [ 955.829376][ T5248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.844689][ T5248] usb 4-1: Product: syz [ 955.849100][ T5248] usb 4-1: Manufacturer: syz [ 955.854247][ T5248] usb 4-1: SerialNumber: syz [ 955.881514][ T5248] usb 4-1: config 0 descriptor?? [ 955.906882][ T5243] gspca_m5602: Failed to find a sensor [ 955.912775][ T5243] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 955.963512][T16257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.4937: bg 0: bad block bitmap checksum [ 956.039462][ T5243] usb 3-1: USB disconnect, device number 26 [ 956.280724][ T7508] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 956.380958][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.389323][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.534851][ T5243] usb 4-1: USB disconnect, device number 31 [ 956.542047][ T5243] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 956.551359][ T5243] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 956.925881][T16273] loop4: detected capacity change from 0 to 1024 [ 957.118590][T16273] EXT4-fs (loop4): orphan cleanup on readonly fs [ 957.249395][T16273] EXT4-fs (loop4): 1 truncate cleaned up [ 957.268465][T16273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 957.828303][ T7508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.746177][T16297] set match dimension is over the limit! [ 958.955588][T16303] netlink: 'syz.2.4954': attribute type 11 has an invalid length. [ 958.964182][T16303] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4954'. [ 960.013073][T16319] sock: sock_set_timeout: `syz.1.4962' (pid 16319) tries to set negative timeout [ 960.069673][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4963'. [ 960.572239][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4968'. [ 962.559822][T16365] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 963.010117][T16374] netlink: 'syz.2.4984': attribute type 14 has an invalid length. [ 963.293237][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 963.566020][ T25] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 963.574735][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.586252][ T25] usb 1-1: config 0 has no interface number 0 [ 963.593268][ T25] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 963.603523][ T25] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.800696][ T25] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 963.810457][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.818969][ T25] usb 1-1: Product: syz [ 963.823527][ T25] usb 1-1: Manufacturer: syz [ 963.828355][ T25] usb 1-1: SerialNumber: syz [ 963.949008][T16391] netlink: 'syz.1.4997': attribute type 32 has an invalid length. [ 963.960759][T16391] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 964.069648][ T25] usb 1-1: config 0 descriptor?? [ 964.556113][T11170] usb 1-1: USB disconnect, device number 28 [ 967.023601][T16435] netlink: 'syz.0.5018': attribute type 4 has an invalid length. [ 967.034524][T16435] netlink: 'syz.0.5018': attribute type 3 has an invalid length. [ 967.046386][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5018'. [ 967.908990][T16446] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5024'. [ 967.921011][T16430] loop4: detected capacity change from 0 to 4096 [ 968.521071][T16455] loop2: detected capacity change from 0 to 164 [ 969.623489][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 969.822979][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 969.862222][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 969.872094][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.995891][ T25] usb 1-1: config 0 descriptor?? [ 970.052620][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 970.237280][ T25] usb 1-1: Detected FT232B [ 970.368860][T16479] netlink: 872 bytes leftover after parsing attributes in process `syz.2.5039'. [ 970.552810][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 970.565790][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 970.578564][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 970.605731][ T25] usb 1-1: USB disconnect, device number 29 [ 970.668822][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 970.683434][ T25] ftdi_sio 1-1:0.0: device disconnected [ 972.304141][T16508] syz.3.5054: attempt to access beyond end of device [ 972.304141][T16508] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 972.317455][T16508] vxfs: unable to read disk superblock at 1 [ 972.324017][T16508] syz.3.5054: attempt to access beyond end of device [ 972.324017][T16508] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 972.337372][T16508] vxfs: unable to read disk superblock at 8 [ 972.343735][T16508] vxfs: can't find superblock. [ 972.790446][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'. [ 974.127110][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5070'. [ 974.136587][T16542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5070'. [ 974.146930][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5070'. [ 974.248478][ T5243] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 974.773752][ T5243] usb 2-1: Using ep0 maxpacket: 32 [ 974.963295][ T5243] usb 2-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=f6.19 [ 974.974877][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.983653][ T5243] usb 2-1: Product: syz [ 974.988057][ T5243] usb 2-1: Manufacturer: syz [ 974.993130][ T5243] usb 2-1: SerialNumber: syz [ 975.003895][ T5243] usb 2-1: config 0 descriptor?? [ 975.021825][ T5243] usb-storage 2-1:0.0: USB Mass Storage device detected [ 975.169885][T16558] loop2: detected capacity change from 0 to 512 [ 975.234363][T16558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 975.247740][ T5243] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 975.499926][T16558] EXT4-fs (loop2): 1 truncate cleaned up [ 975.507695][T16558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.626836][T11170] usb 2-1: USB disconnect, device number 28 [ 975.656400][T16558] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5078: corrupted in-inode xattr: overlapping e_value [ 975.757654][T16558] EXT4-fs (loop2): Remounting filesystem read-only [ 975.764777][T16558] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.5078: unable to update i_inline_off [ 976.051182][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.570484][ T5243] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 976.715692][T16584] loop1: detected capacity change from 0 to 1024 [ 976.972328][T16584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.079264][T16580] loop2: detected capacity change from 0 to 4096 [ 977.108107][T16580] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 977.156714][ T5200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.520780][ T5243] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 977.531452][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.541050][ T5243] usb 5-1: Product: syz [ 977.546716][ T5243] usb 5-1: Manufacturer: syz [ 977.551574][ T5243] usb 5-1: SerialNumber: syz [ 977.645400][ T5243] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 977.725001][ T5248] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 977.855715][T16595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5092'. [ 978.249814][T16580] ntfs3(loop2): failed to convert "c46c" to cp861 [ 978.334360][T11170] usb 5-1: USB disconnect, device number 17 [ 978.965387][ T5248] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 978.973763][ T5248] ath9k_htc: Failed to initialize the device [ 978.985145][T11170] usb 5-1: ath9k_htc: USB layer deinitialized [ 979.854507][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5107'. [ 980.767805][T16641] netlink: 'syz.0.5115': attribute type 2 has an invalid length. [ 981.668696][T16655] loop1: detected capacity change from 0 to 256 [ 981.723080][T15119] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 981.893122][ T5248] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 982.073048][T15119] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 982.086744][T15119] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 982.100786][T15119] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 982.122892][T15119] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.132269][T15119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 982.140676][T15119] usb 1-1: SerialNumber: syz [ 982.387331][ T5248] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 982.402871][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.414165][ T5248] usb 5-1: Product: syz [ 982.418751][ T5248] usb 5-1: Manufacturer: syz [ 982.424008][ T5248] usb 5-1: SerialNumber: syz [ 982.451141][T16649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 982.471675][ T5248] usb 5-1: config 0 descriptor?? [ 982.519083][T15119] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 982.838559][T15119] usb 1-1: USB disconnect, device number 30 [ 982.861750][ T5248] hso 5-1:0.0: Failed to find BULK IN ep [ 982.889051][ T5248] usb-storage 5-1:0.0: USB Mass Storage device detected [ 983.073983][T16669] tmpfs: Bad value for 'mpol' [ 983.144900][ T5248] usb 5-1: USB disconnect, device number 18 [ 984.895584][T16698] ipt_REJECT: ECHOREPLY no longer supported. [ 985.280312][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5146'. [ 986.701591][T16726] loop1: detected capacity change from 0 to 24 [ 986.741860][T16726] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 987.349294][T16731] loop2: detected capacity change from 0 to 2048 [ 987.584177][T16731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.758348][T16761] loop2: detected capacity change from 0 to 24 [ 988.845990][T16761] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 989.173651][T16767] befs: (nbd0): No write support. Marking filesystem read-only [ 989.181693][T16767] syz.0.5187: attempt to access beyond end of device [ 989.181693][T16767] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 989.196193][T16767] befs: (nbd0): unable to read superblock [ 989.833235][T16775] binder: 16774:16775 ioctl 400c620e 0 returned -14 [ 990.009656][T16779] tmpfs: Bad value for 'size' [ 991.277158][T16803] loop4: detected capacity change from 0 to 1024 [ 991.328587][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5195'. [ 991.763337][T11170] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 991.944913][T11170] usb 4-1: Using ep0 maxpacket: 8 [ 992.001506][T16803] fuse: Bad value for 'fd' [ 992.010489][T11170] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 992.020074][T11170] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 992.030062][T11170] usb 4-1: config 0 has no interface number 0 [ 992.036864][T11170] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.048882][T11170] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 992.060504][T11170] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 992.070781][T11170] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 992.080305][T11170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.224298][T11170] usb 4-1: config 0 descriptor?? [ 992.285186][ T3188] hfsplus: b-tree write err: -5, ino 4 [ 992.589095][ T5248] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 992.974142][T11170] usb 4-1: USB disconnect, device number 32 [ 993.057611][ T5248] usb 2-1: Using ep0 maxpacket: 32 [ 993.106214][ T5248] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 993.160543][ T5248] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 993.170314][ T5248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.178824][ T5248] usb 2-1: Product: syz [ 993.183580][ T5248] usb 2-1: Manufacturer: syz [ 993.188432][ T5248] usb 2-1: SerialNumber: syz [ 993.235517][ T5248] usb 2-1: config 0 descriptor?? [ 993.245939][T16817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 993.376598][ T5248] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 993.507056][ T3188] usb 2-1: Failed to submit usb control message: -71 [ 993.514415][ T3188] usb 2-1: unable to send the bmi data to the device: -71 [ 993.521819][ T3188] usb 2-1: unable to get target info from device [ 993.528658][ T3188] usb 2-1: could not get target info (-71) [ 993.534853][ T3188] usb 2-1: could not probe fw (-71) [ 993.546431][ T5248] usb 2-1: USB disconnect, device number 29 [ 994.297212][T16845] loop4: detected capacity change from 0 to 8 [ 994.370842][T16845] SQUASHFS error: Failed to read block 0x738: -5 [ 994.378946][T16845] SQUASHFS error: Unable to read metadata cache entry [736] [ 994.477328][ T29] audit: type=1400 audit(2000000711.549:155): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F26 pid=16842 comm="syz.2.5211" [ 994.838219][T16850] loop2: detected capacity change from 0 to 256 [ 995.580651][T16850] FAT-fs (loop2): Directory bread(block 64) failed [ 995.587730][T16850] FAT-fs (loop2): Directory bread(block 65) failed [ 995.595003][T16850] FAT-fs (loop2): Directory bread(block 66) failed [ 995.602921][T16850] FAT-fs (loop2): Directory bread(block 67) failed [ 995.612041][T16850] FAT-fs (loop2): Directory bread(block 68) failed [ 995.618953][T16850] FAT-fs (loop2): Directory bread(block 69) failed [ 995.626136][T16850] FAT-fs (loop2): Directory bread(block 70) failed [ 995.633017][T16850] FAT-fs (loop2): Directory bread(block 71) failed [ 995.639932][T16850] FAT-fs (loop2): Directory bread(block 72) failed [ 995.646865][T16850] FAT-fs (loop2): Directory bread(block 73) failed [ 995.882890][T16867] netlink: 'syz.0.5222': attribute type 7 has an invalid length. [ 995.890885][T16867] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5222'. [ 996.199583][T16871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 996.483366][ T5248] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 996.684636][ T29] audit: type=1326 audit(2000000713.979:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.2.5226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 996.707279][ T29] audit: type=1326 audit(2000000713.979:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.2.5226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 996.752316][ T5248] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 996.761851][ T5248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.770570][ T5248] usb 2-1: Product: syz [ 996.775124][ T5248] usb 2-1: Manufacturer: syz [ 996.779964][ T5248] usb 2-1: SerialNumber: syz [ 996.890291][ T29] audit: type=1326 audit(2000000714.079:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.2.5226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 996.914008][ T29] audit: type=1326 audit(2000000714.089:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.2.5226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 996.938537][ T29] audit: type=1326 audit(2000000714.089:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.2.5226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 996.993104][ T5248] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 997.124654][ T5243] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 997.343730][ T5248] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 997.374678][T16885] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5230'. [ 997.656669][ T5248] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 997.667013][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.677290][ T5248] usb 5-1: Product: syz [ 997.682629][ T5248] usb 5-1: Manufacturer: syz [ 997.688092][ T5248] usb 5-1: SerialNumber: syz [ 997.961511][ T25] usb 2-1: USB disconnect, device number 30 [ 998.048597][ T5248] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 998.136307][T15119] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 998.185123][ T5243] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 998.195100][ T5243] ath9k_htc: Failed to initialize the device [ 998.230185][ T25] usb 2-1: ath9k_htc: USB layer deinitialized [ 998.443370][T16888] XFS (nullb0): Invalid superblock magic number [ 998.793063][ T25] usb 5-1: USB disconnect, device number 19 [ 999.439041][T15119] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 999.447589][T15119] ath9k_htc: Failed to initialize the device [ 999.458329][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 999.665796][T16920] ipt_rpfilter: unknown options [ 1000.042825][ T5243] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1000.077695][T16927] CIFS: VFS: Malformed UNC in devname [ 1000.241888][ T5243] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 1000.250868][ T5243] usb 1-1: config 0 has no interface number 0 [ 1000.257678][ T5243] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1000.267955][ T5243] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1000.277530][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.405941][ T5243] usb 1-1: config 0 descriptor?? [ 1000.423353][ T5248] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1000.460199][ T5243] ttusbir 1-1:0.83: cannot find expected altsetting [ 1000.622010][ T5248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.674362][ T5248] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1000.684080][ T5248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.692368][ T5248] usb 2-1: Product: syz [ 1000.702020][ T5248] usb 2-1: Manufacturer: syz [ 1000.707388][ T5248] usb 2-1: SerialNumber: syz [ 1000.816161][ T5248] usb 2-1: config 0 descriptor?? [ 1000.873852][ T5248] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.071474][ T25] usb 1-1: USB disconnect, device number 31 [ 1001.259523][ T5248] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1001.390824][ T5248] usb 2-1: USB disconnect, device number 31 [ 1001.479092][T16946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.713970][T16951] netlink: get zone limit has 8 unknown bytes [ 1002.115012][ T5422] udevd[5422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.494104][T16957] loop2: detected capacity change from 0 to 64 [ 1002.862789][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1002.981277][ T5248] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 1003.202818][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1003.316980][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 1003.396164][ T5248] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1003.407872][ T5248] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1003.419239][ T5248] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1003.423048][ T25] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1003.428757][ T5248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.438135][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.454452][ T25] usb 5-1: Product: syz [ 1003.458863][ T25] usb 5-1: Manufacturer: syz [ 1003.464230][ T25] usb 5-1: SerialNumber: syz [ 1003.514489][T16964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1003.655549][T16972] netlink: 'syz.1.5264': attribute type 1 has an invalid length. [ 1003.669320][ T25] usb 5-1: config 0 descriptor?? [ 1003.680006][T16960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1003.969553][ T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1003.980015][ T5248] usb 1-1: string descriptor 0 read error: -71 [ 1003.981877][ T5248] hub 1-1:32.0: USB hub found [ 1004.153751][ T5248] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 1004.291691][ T2563] usb 5-1: Failed to submit usb control message: -71 [ 1004.298939][ T2563] usb 5-1: unable to send the bmi data to the device: -71 [ 1004.308949][ T2563] usb 5-1: unable to get target info from device [ 1004.318839][ T2563] usb 5-1: could not get target info (-71) [ 1004.325929][ T2563] usb 5-1: could not probe fw (-71) [ 1004.343968][ T5248] usb 1-1: USB disconnect, device number 32 [ 1004.368266][ T25] usb 5-1: USB disconnect, device number 20 [ 1006.054701][T17007] netlink: 'syz.3.5282': attribute type 10 has an invalid length. [ 1006.063200][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1006.072708][T17007] macvtap0: entered promiscuous mode [ 1006.079182][T17007] macvtap0: entered allmulticast mode [ 1006.085218][T17007] veth0_macvtap: entered allmulticast mode [ 1006.094318][T17007] bridge0: port 3(macvtap0) entered blocking state [ 1006.101594][T17007] bridge0: port 3(macvtap0) entered disabled state [ 1006.113586][T17007] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1006.396579][T17012] loop1: detected capacity change from 0 to 1024 [ 1006.399271][T17012] EXT4-fs: Ignoring removed orlov option [ 1006.560681][T17012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.613489][T17012] EXT4-fs error (device loop1): ext4_xattr_set_entry:1668: inode #13: comm syz.1.5284: corrupted xattr entries [ 1007.119657][T17024] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5288'. [ 1007.419666][T17031] sock: sock_set_timeout: `syz.0.5290' (pid 17031) tries to set negative timeout [ 1007.594685][ T5200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.982653][T11170] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1008.325985][T11170] usb 4-1: Using ep0 maxpacket: 32 [ 1008.349616][T11170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 1008.784458][T11170] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1008.794321][T11170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.802788][T11170] usb 4-1: Product: syz [ 1008.808013][T11170] usb 4-1: Manufacturer: syz [ 1008.813246][T11170] usb 4-1: SerialNumber: syz [ 1008.852013][T11170] usb 4-1: config 0 descriptor?? [ 1008.884428][T17025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1008.990318][T17056] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5302'. [ 1009.134581][T11170] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1009.278451][ T2587] usb 4-1: Failed to submit usb control message: -71 [ 1009.286700][ T2587] usb 4-1: unable to send the bmi data to the device: -71 [ 1009.294601][ T2587] usb 4-1: unable to get target info from device [ 1009.301242][ T2587] usb 4-1: could not get target info (-71) [ 1009.307702][ T2587] usb 4-1: could not probe fw (-71) [ 1009.344765][ T5248] usb 4-1: USB disconnect, device number 33 [ 1010.674748][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5314'. [ 1011.113983][T17090] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 1011.121765][T17090] ecryptfs_parse_options: eCryptfs: unrecognized option [aᆏ4c [ 1011.121765][T17090] WLw>""j䏞.dC] [ 1011.135308][T17090] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 1011.143609][T17090] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1011.157239][T17090] Error parsing options; rc = [-22] [ 1011.564500][T17095] loop1: detected capacity change from 0 to 1024 [ 1012.009004][ T3188] hfsplus: b-tree write err: -5, ino 4 [ 1012.506238][T17111] netlink: 'syz.3.5328': attribute type 10 has an invalid length. [ 1013.209559][T17120] loop1: detected capacity change from 0 to 64 [ 1013.332664][T17120] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1013.530807][ T29] audit: type=1326 audit(2000000730.809:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17124 comm="syz.4.5335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1013.553980][ T29] audit: type=1326 audit(2000000730.809:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17124 comm="syz.4.5335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1013.576918][ T29] audit: type=1326 audit(2000000730.849:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17124 comm="syz.4.5335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1013.599867][ T29] audit: type=1326 audit(2000000730.849:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17124 comm="syz.4.5335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1013.624566][ T29] audit: type=1326 audit(2000000730.849:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17124 comm="syz.4.5335" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1014.349521][T17136] tmpfs: Bad value for 'mpol' [ 1015.549765][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1016.133210][T17167] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1017.254005][T17174] loop2: detected capacity change from 0 to 4096 [ 1017.754581][T17195] loop1: detected capacity change from 0 to 2048 [ 1017.874973][T17195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.894097][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1017.900947][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1018.020907][T17199] program syz.0.5367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1018.093912][T17190] orangefs_mount: mount request failed with -4 [ 1018.571629][T17204] sctp: [Deprecated]: syz.2.5372 (pid 17204) Use of int in max_burst socket option. [ 1018.571629][T17204] Use struct sctp_assoc_value instead [ 1019.133816][T17213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.144666][T17213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.155869][T17213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.168576][T17213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.179092][T17213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.190241][T17213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.200436][T17213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.211246][T17213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.973366][T17227] binfmt_misc: register: failed to install interpreter file ./file0 [ 1020.230578][T17231] loop2: detected capacity change from 0 to 256 [ 1020.287596][T17232] netlink: 'syz.1.5386': attribute type 15 has an invalid length. [ 1020.502135][T17228] loop3: detected capacity change from 0 to 1764 [ 1020.774677][ T29] audit: type=1800 audit(2000000738.059:166): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5384" name="file0" dev="loop2" ino=1048673 res=0 errno=0 [ 1022.105926][T17257] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1022.178690][T17258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1022.251206][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5400'. [ 1022.397626][T17264] syz.3.5412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1023.018647][T17276] netlink: 4256 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1023.028799][T17276] netlink: 4256 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1023.132537][T17274] XFS (nullb0): Invalid superblock magic number [ 1023.608211][T17288] loop1: detected capacity change from 0 to 2048 [ 1023.788469][T17288] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1023.806330][T17288] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1023.814479][T17288] UDF-fs: Scanning with blocksize 512 failed [ 1023.955060][T17300] netlink: 'syz.4.5414': attribute type 10 has an invalid length. [ 1024.087572][T17288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1024.194294][T17294] XFS (nullb0): Invalid superblock magic number [ 1025.296858][T15119] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1025.571228][T15119] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1025.582101][T15119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.590701][T15119] usb 1-1: Product: syz [ 1025.595312][T15119] usb 1-1: Manufacturer: syz [ 1025.600157][T15119] usb 1-1: SerialNumber: syz [ 1025.701606][T15119] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1025.843897][ T5243] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1026.100111][T17331] XFS (nullb0): Invalid superblock magic number [ 1026.462246][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1026.474644][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1026.881333][T17344] netlink: 'syz.2.5430': attribute type 10 has an invalid length. [ 1027.010161][T17341] netlink: 'syz.4.5432': attribute type 11 has an invalid length. [ 1027.018418][T17341] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5432'. [ 1027.245195][ T5243] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1027.271904][ T5243] ath9k_htc: Failed to initialize the device [ 1027.397256][T17346] netlink: 'syz.3.5435': attribute type 10 has an invalid length. [ 1028.579762][ T5248] usb 1-1: USB disconnect, device number 33 [ 1028.643666][ T5248] usb 1-1: ath9k_htc: USB layer deinitialized [ 1028.762229][T17351] loop4: detected capacity change from 0 to 64 [ 1029.592869][T17363] usb usb8: check_ctrlrecip: process 17363 (syz.4.5442) requesting ep 01 but needs 81 [ 1029.608017][T17363] usb usb8: usbfs: process 17363 (syz.4.5442) did not claim interface 0 before use [ 1030.890195][T17381] loop1: detected capacity change from 0 to 8 [ 1031.299920][T17381] SQUASHFS error: xz decompression failed, data probably corrupt [ 1031.308140][T17381] SQUASHFS error: Failed to read block 0x60: -5 [ 1031.353900][T17381] SQUASHFS error: xz decompression failed, data probably corrupt [ 1031.361979][T17381] SQUASHFS error: Failed to read block 0x60: -5 [ 1031.419329][ T29] audit: type=1800 audit(2000000748.669:167): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5451" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1031.542737][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5454'. [ 1031.553680][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5454'. [ 1031.554216][T17391] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1031.725632][T17394] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1031.780903][T11170] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1032.057745][T17402] loop4: detected capacity change from 0 to 128 [ 1032.165714][T11170] usb 4-1: Using ep0 maxpacket: 16 [ 1032.179337][T11170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.222320][T11170] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1032.232041][T11170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.240544][T11170] usb 4-1: Product: syz [ 1032.245094][T11170] usb 4-1: Manufacturer: syz [ 1032.249947][T11170] usb 4-1: SerialNumber: syz [ 1032.262240][T17402] FAT-fs (loop4): Directory bread(block 32) failed [ 1032.270852][T17402] FAT-fs (loop4): Directory bread(block 33) failed [ 1032.278342][T17402] FAT-fs (loop4): Directory bread(block 34) failed [ 1032.285286][T17402] FAT-fs (loop4): Directory bread(block 35) failed [ 1032.292196][T17402] FAT-fs (loop4): Directory bread(block 36) failed [ 1032.299188][T17402] FAT-fs (loop4): Directory bread(block 37) failed [ 1032.306228][T17402] FAT-fs (loop4): Directory bread(block 38) failed [ 1032.313320][T17402] FAT-fs (loop4): Directory bread(block 39) failed [ 1032.320235][T17402] FAT-fs (loop4): Directory bread(block 40) failed [ 1032.327133][T17402] FAT-fs (loop4): Directory bread(block 41) failed [ 1032.580981][T11170] usb 4-1: config 0 descriptor?? [ 1032.641753][T17406] loop1: detected capacity change from 0 to 512 [ 1032.664003][T17402] syz.4.5457: attempt to access beyond end of device [ 1032.664003][T17402] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 1032.683970][T17402] FAT-fs (loop4): Filesystem has been set read-only [ 1032.691504][T17402] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1032.873263][ T5248] usb 4-1: USB disconnect, device number 34 [ 1032.994372][T17406] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1033.003349][T17406] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1033.011597][T17406] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.5462: bad orphan inode 13 [ 1033.094763][T17406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.244246][ T5200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.071094][T17424] xfrm1: entered promiscuous mode [ 1034.076611][T17424] xfrm1: entered allmulticast mode [ 1034.698046][T17435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1035.298245][T17428] loop1: detected capacity change from 0 to 4096 [ 1035.332895][T17438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1035.339726][T17438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1035.349141][T17438] vhci_hcd vhci_hcd.0: Device attached [ 1035.370067][T17444] vhci_hcd: connection closed [ 1035.371401][ T2563] vhci_hcd: stop threads [ 1035.381394][ T2563] vhci_hcd: release socket [ 1035.387810][ T2563] vhci_hcd: disconnect device [ 1035.409754][T17446] loop3: detected capacity change from 0 to 64 [ 1035.852789][T17450] loop2: detected capacity change from 0 to 256 [ 1035.991270][T17450] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1036.904367][ T5248] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1037.299104][ T5248] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1037.309023][ T5248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.317553][ T5248] usb 3-1: Product: syz [ 1037.321965][ T5248] usb 3-1: Manufacturer: syz [ 1037.327110][ T5248] usb 3-1: SerialNumber: syz [ 1037.344418][ T5248] usb 3-1: config 0 descriptor?? [ 1037.397681][ T5248] ch341 3-1:0.0: ch341-uart converter detected [ 1037.509701][ T5243] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1037.764931][ T29] audit: type=1326 audit(2000000754.869:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17470 comm="syz.1.5492" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 1038.075443][ T5248] usb 3-1: failed to send control message: -71 [ 1038.082048][ T5248] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1038.132837][ T5248] usb 3-1: USB disconnect, device number 27 [ 1038.141332][ T5248] ch341 3-1:0.0: device disconnected [ 1038.335452][ T5243] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.346188][ T5243] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.357959][ T5243] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.371384][ T5243] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.380958][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.454616][ T5243] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1038.463364][ T5243] usb 1-1: invalid MIDI out EP 0 [ 1038.789769][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.335245][T17481] loop3: detected capacity change from 0 to 4096 [ 1039.497021][ T5243] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1039.561781][ T5243] usb 1-1: USB disconnect, device number 34 [ 1039.853559][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1040.512814][ T5243] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1040.792809][ T25] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1040.806716][T17509] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1040.816650][T17509] 0XD: renamed from gretap0 (while UP) [ 1040.877127][T17509] 0XD: entered allmulticast mode [ 1040.892913][ T5243] usb 1-1: Using ep0 maxpacket: 16 [ 1040.917826][ T5243] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1040.928384][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.936923][ T5243] usb 1-1: Product: syz [ 1040.941331][ T5243] usb 1-1: Manufacturer: syz [ 1040.946400][ T5243] usb 1-1: SerialNumber: syz [ 1040.997808][ T5243] usb 1-1: config 0 descriptor?? [ 1041.024575][ T5243] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1041.068548][ T25] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1041.079780][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.088797][ T25] usb 2-1: Product: syz [ 1041.093286][ T25] usb 2-1: Manufacturer: syz [ 1041.098153][ T25] usb 2-1: SerialNumber: syz [ 1041.187601][ T25] usb 2-1: config 0 descriptor?? [ 1041.234999][ T25] usb 2-1: selecting invalid altsetting 3 [ 1041.241054][ T25] comedi comedi0: could not set alternate setting 3 in high speed [ 1041.249545][ T25] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1041.364385][ T25] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1041.475456][ T5243] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1041.573743][ T5243] usb 1-1: USB disconnect, device number 35 [ 1041.744790][ T5248] usb 2-1: USB disconnect, device number 32 [ 1043.750054][T17560] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1044.288862][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1044.299092][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1046.255792][T17608] x_tables: duplicate underflow at hook 2 [ 1048.465928][ T5248] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1048.662796][ T5248] usb 5-1: Using ep0 maxpacket: 8 [ 1048.680441][ T5248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.692125][ T5248] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1048.704967][ T5248] usb 5-1: config 1 has no interface number 1 [ 1048.711333][ T5248] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1048.724756][ T5248] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.761148][ T5248] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1048.771026][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.779497][ T5248] usb 5-1: Product: syz [ 1048.784029][ T5248] usb 5-1: Manufacturer: syz [ 1048.788898][ T5248] usb 5-1: SerialNumber: syz [ 1048.934534][T17654] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 1049.111854][ T5248] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1049.120562][ T5248] usb 5-1: 2:1 : unsupported format bits 0x80 [ 1049.198758][T17658] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1049.292064][ T5248] usb 5-1: USB disconnect, device number 21 [ 1049.510362][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.538077][ T5248] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1050.643348][T17681] CIFS: VFS: Malformed UNC in devname [ 1050.723089][ T5248] usb 5-1: Using ep0 maxpacket: 16 [ 1050.823872][ T5248] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1050.832374][ T5248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.843935][ T5248] usb 5-1: config 0 has no interface number 0 [ 1051.246818][ T5248] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1051.256490][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.264928][ T5248] usb 5-1: Product: syz [ 1051.269341][ T5248] usb 5-1: Manufacturer: syz [ 1051.274515][ T5248] usb 5-1: SerialNumber: syz [ 1051.296596][ T5248] usb 5-1: config 0 descriptor?? [ 1051.331298][ T5248] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1051.338506][ T5248] usb 5-1: No valid video chain found. [ 1051.590974][ T25] usb 5-1: USB disconnect, device number 22 [ 1052.435325][T17700] netlink: 'syz.1.5599': attribute type 2 has an invalid length. [ 1053.584213][T17730] kAFS: unable to lookup cell '(>.DzsfIvNh\D%aD'+i8BcNo~F^($)3k 8S72gՑfo$ .~' [ 1053.971899][T17738] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1054.243397][ T5248] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1054.409903][ T5248] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1054.418841][ T5248] usb 2-1: config 0 has no interface number 0 [ 1054.425485][ T5248] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1054.435721][ T5248] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1054.448437][ T5248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.549112][ T5248] usb 2-1: config 0 descriptor?? [ 1054.568381][ T5248] ttusbir 2-1:0.83: cannot find expected altsetting [ 1054.788854][ T5248] usb 2-1: USB disconnect, device number 33 [ 1056.603818][T17782] fuse: Bad value for 'fd' [ 1057.054274][ T5243] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1057.233100][ T5243] usb 5-1: Using ep0 maxpacket: 8 [ 1057.284956][ T5243] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 1057.511938][ T5243] usb 5-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=98.e6 [ 1057.521542][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.532023][ T5243] usb 5-1: Product: syz [ 1057.537405][ T5243] usb 5-1: Manufacturer: syz [ 1057.542239][ T5243] usb 5-1: SerialNumber: syz [ 1057.620753][ T29] audit: type=1326 audit(2000000774.909:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1057.644282][ T29] audit: type=1326 audit(2000000774.909:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1057.658320][ T5243] usb 5-1: config 0 descriptor?? [ 1057.796437][ T5243] usb 5-1: bad CDC descriptors [ 1057.804046][ T5243] cdc_acm 5-1:0.0: Zero length descriptor references [ 1057.810991][ T5243] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1057.934326][ T5243] usb 5-1: USB disconnect, device number 23 [ 1058.257029][T17804] netlink: 'syz.3.5650': attribute type 6 has an invalid length. [ 1058.944993][T17814] loop3: detected capacity change from 0 to 256 [ 1059.172649][T17821] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1060.780053][T17845] autofs: Bad value for 'fd' [ 1061.164182][T17855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1061.173650][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1061.409890][T17859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1061.419371][T17859] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1061.882726][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1062.064288][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1062.113034][ T25] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1062.122755][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.225456][ T25] usb 5-1: config 0 descriptor?? [ 1062.296351][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1062.539167][T17879] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 1062.548377][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5685'. [ 1062.728789][ T25] gspca_nw80x: reg_r err -71 [ 1062.734167][ T25] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 1062.813256][ T25] usb 5-1: USB disconnect, device number 24 [ 1063.195266][T17889] kAFS: unable to lookup cell '.,' [ 1064.094533][T17903] loop1: detected capacity change from 0 to 2048 [ 1064.210668][T17903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1065.908894][T17934] program syz.4.5714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.470071][T17945] QAT: failed to copy from user cfg_data. [ 1067.463740][T17965] netlink: 'syz.2.5727': attribute type 27 has an invalid length. [ 1067.471879][T17965] netlink: 'syz.2.5727': attribute type 3 has an invalid length. [ 1067.480092][T17965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5727'. [ 1068.407509][T17981] loop1: detected capacity change from 0 to 8 [ 1068.585065][T17985] loop4: detected capacity change from 0 to 256 [ 1068.612926][T17981] SQUASHFS error: Corrupted symlink [ 1069.267175][T17985] FAT-fs (loop4): Directory bread(block 64) failed [ 1069.274324][T17985] FAT-fs (loop4): Directory bread(block 65) failed [ 1069.281248][T17985] FAT-fs (loop4): Directory bread(block 66) failed [ 1069.288221][T17985] FAT-fs (loop4): Directory bread(block 67) failed [ 1069.295287][T17985] FAT-fs (loop4): Directory bread(block 68) failed [ 1069.302074][T17985] FAT-fs (loop4): Directory bread(block 69) failed [ 1069.309253][T17985] FAT-fs (loop4): Directory bread(block 70) failed [ 1069.316177][T17985] FAT-fs (loop4): Directory bread(block 71) failed [ 1069.323691][T17985] FAT-fs (loop4): Directory bread(block 72) failed [ 1069.331471][T17985] FAT-fs (loop4): Directory bread(block 73) failed [ 1069.764746][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5745'. [ 1069.960541][T18001] nft_compat: unsupported protocol 133 [ 1070.013276][T18003] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1070.045701][T17999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5746'. [ 1070.838386][T18013] loop3: detected capacity change from 0 to 256 [ 1070.952061][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1071.117864][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1071.157867][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1071.190841][ T25] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1071.201426][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1071.315180][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1071.325070][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.333536][ T25] usb 1-1: Product: syz [ 1071.337938][ T25] usb 1-1: Manufacturer: aኖ剾ﵴ赅靐⿤볡瀟ꕌ䂠顧⃲դ鱂ꉆ뛼񙑯塌职鮅멁段ꯏམ别䡯嵦⻳ఖﰧ㚵괰蛱㷋苑械倴㊃쟓횽㶀㚍䊸谵쿡躏磠衟ꫡ麕놤秴♲浠ﭥｕ뮶઎鳈䇅鼯婄≀俄穆䔰辋쉰䧶菊房ᕉ猳먱䍢龻ꍻ潅㏬ힽ፟⒭ᨓꕝ [ 1071.368320][ T25] usb 1-1: SerialNumber: syz [ 1071.490488][T18009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1072.294196][ T25] usb 1-1: USB disconnect, device number 36 [ 1072.654454][T18031] loop2: detected capacity change from 0 to 1024 [ 1073.512032][T18045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5768'. [ 1073.664659][T18049] loop1: detected capacity change from 0 to 256 [ 1073.902240][T18051] loop4: detected capacity change from 0 to 2048 [ 1073.980298][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1073.990287][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1073.999685][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1074.002349][T18051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1074.009446][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1074.029991][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1074.269445][T18049] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 1074.978092][T18059] loop2: detected capacity change from 0 to 1764 [ 1075.347587][T18059] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1075.487650][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5779'. [ 1075.498198][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5779'. [ 1075.514300][T18059] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1075.700232][T18077] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1076.755766][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.766742][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.777280][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.788285][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.799508][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.812879][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.823737][T18089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.834662][T18089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.266336][T18100] binder: 18099:18100 unknown command 33 [ 1077.272790][T18100] binder: 18099:18100 ioctl c0306201 20000380 returned -22 [ 1077.496654][T18105] loop4: detected capacity change from 0 to 128 [ 1077.549755][T18105] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1077.635575][T18105] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1077.908395][T18105] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 1077.919067][T18105] ext4 filesystem being remounted at /945/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.074967][ T7508] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1078.174925][T18118] loop1: detected capacity change from 0 to 16 [ 1078.268392][T18118] erofs: (device loop1): mounted with root inode @ nid 36. [ 1078.323457][T18118] syz.1.5804: attempt to access beyond end of device [ 1078.323457][T18118] loop1: rw=0, sector=4295114751, nr_sectors = 8 limit=16 [ 1079.208315][T18129] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1079.339380][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.346368][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.642213][T18138] --map-set only usable from mangle table [ 1079.829673][T18141] loop4: detected capacity change from 0 to 256 [ 1080.447945][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1080.695142][T18150] binfmt_misc: register: failed to install interpreter file ./file0 [ 1081.562040][T18169] netlink: 'syz.3.5831': attribute type 1 has an invalid length. [ 1083.329265][T18201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1085.476722][T18239] netlink: 'syz.2.5861': attribute type 10 has an invalid length. [ 1085.658726][T18245] netlink: 'syz.1.5865': attribute type 1 has an invalid length. [ 1085.667242][T18245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5865'. [ 1085.942744][T18249] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5866'. [ 1086.522809][T18261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5872'. [ 1087.059941][T18272] netlink: 'syz.1.5878': attribute type 10 has an invalid length. [ 1087.231533][ T5248] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1087.500199][ T5248] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.511918][ T5248] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1087.523464][ T5248] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.540529][ T5248] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1087.550351][ T5248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.966857][ T5248] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1087.980178][ T5248] usb 4-1: invalid MIDI out EP 0 [ 1088.535980][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.787833][ T5248] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1088.852953][ T5248] usb 4-1: USB disconnect, device number 35 [ 1089.103599][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1089.607597][ T29] audit: type=1400 audit(2000000806.749:171): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 188 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1089.968030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.412391][T18323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1091.004236][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1091.013823][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1091.030821][T18333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1091.543867][T11170] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1091.988019][T18352] netlink: 'syz.2.5913': attribute type 29 has an invalid length. [ 1092.676548][T11170] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1092.687425][T11170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.696152][T11170] usb 4-1: Product: syz [ 1092.700570][T11170] usb 4-1: Manufacturer: syz [ 1092.706908][T11170] usb 4-1: SerialNumber: syz [ 1092.743742][T11170] usb 4-1: config 0 descriptor?? [ 1092.970139][T11170] usb 4-1: selecting invalid altsetting 3 [ 1092.976437][T11170] comedi comedi0: could not set alternate setting 3 in high speed [ 1092.985994][T11170] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1093.015322][T11170] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1093.180140][ T5248] usb 4-1: USB disconnect, device number 36 [ 1095.558459][T18408] loop3: detected capacity change from 0 to 1024 [ 1095.727969][T18410] loop1: detected capacity change from 0 to 1024 [ 1095.788632][T18410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1095.943438][T11170] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1096.195264][T11170] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1096.204787][T11170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.213251][T11170] usb 3-1: Product: syz [ 1096.217659][T11170] usb 3-1: Manufacturer: syz [ 1096.222681][T11170] usb 3-1: SerialNumber: syz [ 1096.340067][T11170] usb 3-1: config 0 descriptor?? [ 1096.855496][T11170] hso 3-1:0.0: Failed to find BULK IN ep [ 1096.869311][T11170] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1097.295091][ T25] usb 3-1: USB disconnect, device number 28 [ 1097.829429][T11170] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1098.982909][T11170] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1098.992310][T11170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.000790][T11170] usb 5-1: Product: syz [ 1099.005414][T11170] usb 5-1: Manufacturer: syz [ 1099.010262][T11170] usb 5-1: SerialNumber: syz [ 1099.065601][T11170] usb 5-1: config 0 descriptor?? [ 1099.079828][T11170] ch341 5-1:0.0: ch341-uart converter detected [ 1099.587801][T11170] usb 5-1: failed to send control message: -71 [ 1099.594701][T11170] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1099.665284][T11170] usb 5-1: USB disconnect, device number 25 [ 1099.674886][T11170] ch341 5-1:0.0: device disconnected [ 1102.312080][T18521] kAFS: unable to lookup cell '(>.DzsfIvNh\D%aD'+i8BcNo~F^($)3k 8S72gՑfo$ .~' [ 1102.376300][T18522] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1102.957167][T18530] ip6t_REJECT: ECHOREPLY is not supported [ 1103.014099][T18532] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1103.025909][T18532] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1103.243768][T18538] netlink: 'syz.4.6001': attribute type 2 has an invalid length. [ 1104.395631][T18558] binder: 18555:18558 ioctl c0046209 0 returned -22 [ 1104.722386][T18560] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1105.820453][T18578] loop4: detected capacity change from 0 to 1024 [ 1106.097396][ T5243] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1106.104626][T18578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1106.146299][T18587] loop2: detected capacity change from 0 to 64 [ 1106.215663][T18587] Bad inode number on dev loop2: 6 is out of range [ 1106.232049][T18578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.283670][ T5243] usb 1-1: Using ep0 maxpacket: 16 [ 1106.325742][ T5243] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1106.334891][ T5243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.345632][ T5243] usb 1-1: config 0 has no interface number 0 [ 1106.378238][ T5243] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1106.387993][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.398780][ T5243] usb 1-1: Product: syz [ 1106.406373][ T5243] usb 1-1: Manufacturer: syz [ 1106.412018][ T5243] usb 1-1: SerialNumber: syz [ 1106.454784][ T5243] usb 1-1: config 0 descriptor?? [ 1106.493556][ T5243] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1106.503845][ T5243] usb 1-1: No valid video chain found. [ 1106.735911][ T5243] usb 1-1: USB disconnect, device number 37 [ 1106.752066][ T7508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.818686][T18609] netlink: 'syz.0.6034': attribute type 6 has an invalid length. [ 1108.880695][T18631] dlm: no locking on control device [ 1109.366499][ T29] audit: type=1326 audit(2000000826.659:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.1.6049" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 1109.860531][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1109.870114][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1110.508774][T18658] netlink: 'syz.1.6057': attribute type 1 has an invalid length. [ 1110.615717][T18667] kernel read not supported for file /  (pid: 18667 comm: syz.0.6060) [ 1110.650453][ T29] audit: type=1800 audit(2000000827.919:173): pid=18667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6060" name=2001 dev="mqueue" ino=49123 res=0 errno=0 [ 1111.804837][T18685] SET target dimension over the limit! [ 1112.317226][T18696] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1112.688270][T18700] netlink: 'syz.0.6075': attribute type 1 has an invalid length. [ 1112.697257][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1114.307979][T18730] QAT: failed to copy from user cfg_data. [ 1114.646374][T18734] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1117.455346][T18786] IPv6: Can't replace route, no match found [ 1117.916544][T18793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6125'. [ 1118.132186][T18794] loop2: detected capacity change from 0 to 164 [ 1118.158248][T18798] loop1: detected capacity change from 0 to 512 [ 1118.260340][T18800] dvmrp8: entered allmulticast mode [ 1118.361272][T18798] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.6121: corrupted in-inode xattr: invalid ea_ino [ 1118.363091][ T5243] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1118.431050][T18798] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6121: couldn't read orphan inode 15 (err -117) [ 1118.526981][T18798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.602351][ T5243] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1118.613055][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.715536][ T5243] usb 1-1: config 0 descriptor?? [ 1118.768449][ T5243] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1118.823520][T18808] loop2: detected capacity change from 0 to 16 [ 1118.934652][ T5200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.374126][ T5243] gspca_sunplus: reg_w_riv err -71 [ 1119.379785][ T5243] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1119.574498][ T5243] usb 1-1: USB disconnect, device number 38 [ 1120.641857][T18830] loop2: detected capacity change from 0 to 1024 [ 1120.919915][T18830] hfsplus: bad catalog entry type [ 1120.977900][T18835] loop3: detected capacity change from 0 to 256 [ 1121.002054][T18834] loop4: detected capacity change from 0 to 512 [ 1121.195111][T18834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.206823][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1121.208975][T18834] ext4 filesystem being mounted at /1012/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.467011][T18835] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 1121.527680][T18846] binder: Bad value for 'stats' [ 1121.692866][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1121.734284][ T7508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.998324][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1122.044828][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.055448][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1122.112995][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.122387][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1122.130877][ T25] usb 3-1: SerialNumber: syz [ 1122.209238][ T25] cdc_acm 3-1:1.0: skipping garbage [ 1122.487335][ T5243] usb 3-1: USB disconnect, device number 29 [ 1122.799744][T18856] loop1: detected capacity change from 0 to 256 [ 1124.713574][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1125.114223][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1125.123884][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1125.470254][T18905] loop1: detected capacity change from 0 to 2048 [ 1125.673650][T18903] libceph: resolve '. [ 1125.673650][T18903] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1125.673650][T18903] ' (ret=-3): failed [ 1125.828584][T18905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1125.951417][ T5243] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1126.164431][ T5243] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1126.176433][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.187325][ T5243] usb 5-1: Product: syz [ 1126.191747][ T5243] usb 5-1: Manufacturer: syz [ 1126.197104][ T5243] usb 5-1: SerialNumber: syz [ 1126.207790][ T5243] usb 5-1: config 0 descriptor?? [ 1126.776850][ T5243] usb 5-1: USB disconnect, device number 26 [ 1126.801117][ T5422] udevd[5422]: setting mode of /dev/bus/usb/005/026 to 020664 failed: No such file or directory [ 1126.898838][ T5422] udevd[5422]: setting owner of /dev/bus/usb/005/026 to uid=0, gid=0 failed: No such file or directory [ 1127.764010][T18931] ip6t_srh: unknown srh match flags 4108 [ 1129.089443][T18960] netlink: 'syz.2.6201': attribute type 8 has an invalid length. [ 1129.097663][T18960] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1130.659789][T18983] netlink: 'syz.0.6213': attribute type 1 has an invalid length. [ 1132.421529][T19021] xt_policy: too many policy elements [ 1132.557610][T19019] loop3: detected capacity change from 0 to 512 [ 1132.672256][T19019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1132.680437][T19019] UDF-fs: Scanning with blocksize 512 failed [ 1132.746505][T19019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1132.754811][T19019] UDF-fs: Scanning with blocksize 1024 failed [ 1132.758386][T19024] loop4: detected capacity change from 0 to 512 [ 1132.798478][T19019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1132.806397][T19019] UDF-fs: Scanning with blocksize 2048 failed [ 1132.931226][T19019] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1133.080805][T19019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1133.157716][T19024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.170952][T19024] ext4 filesystem being mounted at /1026/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.334821][T19024] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.6230: invalid size [ 1133.446959][T19024] EXT4-fs (loop4): Remounting filesystem read-only [ 1133.593450][T19038] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6237'. [ 1133.607256][T19040] netlink: 'syz.0.6248': attribute type 1 has an invalid length. [ 1133.615981][T19040] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1133.819276][ T7508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.841685][T15372] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1133.856119][T15372] Quota error (device loop4): write_blk: dquota write failed [ 1133.864797][T15372] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 1133.875756][T15372] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1133.887057][T15372] Quota error (device loop4): write_blk: dquota write failed [ 1133.894947][T15372] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 1134.922995][ T29] audit: type=1326 audit(2000000852.149:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.0.6245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1134.945682][ T29] audit: type=1326 audit(2000000852.149:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.0.6245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1134.970472][ T29] audit: type=1326 audit(2000000852.169:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.0.6245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1134.996193][ T29] audit: type=1326 audit(2000000852.169:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.0.6245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1135.019626][ T29] audit: type=1326 audit(2000000852.169:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.0.6245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1135.393851][T19069] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1136.099147][T19079] loop4: detected capacity change from 0 to 128 [ 1136.186766][T19079] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1136.642722][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1136.819177][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1136.839197][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6263'. [ 1136.862888][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1136.884445][ T25] usb 5-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1136.895130][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1137.010231][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1137.021754][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1137.030802][ T25] usb 5-1: SerialNumber: syz [ 1137.266266][ T25] cdc_ether 5-1:1.0: skipping garbage [ 1137.271976][ T25] usb 5-1: bad CDC descriptors [ 1137.382336][T19096] xfrm1: entered promiscuous mode [ 1137.387777][T19096] xfrm1: entered allmulticast mode [ 1137.504326][T11170] usb 5-1: USB disconnect, device number 27 [ 1137.744027][ T5243] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1138.010283][T19107] netlink: 'syz.3.6269': attribute type 12 has an invalid length. [ 1138.053980][ T5243] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.065195][ T5243] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.076848][ T5243] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.090271][ T5243] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.099895][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.130969][ T5243] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1138.146579][ T5243] usb 3-1: invalid MIDI out EP 0 [ 1138.437923][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1138.438987][ T5243] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1138.480979][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.647239][ T5243] usb 3-1: USB disconnect, device number 30 [ 1138.978646][T19116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1138.988759][T19116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1139.952069][T19131] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 1139.960858][T19131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6280'. [ 1140.304723][T19135] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1140.681323][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.688315][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1141.009945][T19147] netlink: 'syz.1.6290': attribute type 4 has an invalid length. [ 1141.021042][T19147] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6290'. [ 1141.148432][T19147] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1142.168137][T19166] loop3: detected capacity change from 0 to 256 [ 1142.354704][T19166] FAT-fs (loop3): Directory bread(block 64) failed [ 1142.361527][T19166] FAT-fs (loop3): Directory bread(block 65) failed [ 1142.369034][T19166] FAT-fs (loop3): Directory bread(block 66) failed [ 1142.375945][T19166] FAT-fs (loop3): Directory bread(block 67) failed [ 1142.383209][T19166] FAT-fs (loop3): Directory bread(block 68) failed [ 1142.389994][T19166] FAT-fs (loop3): Directory bread(block 69) failed [ 1142.403158][T19166] FAT-fs (loop3): Directory bread(block 70) failed [ 1142.409966][T19166] FAT-fs (loop3): Directory bread(block 71) failed [ 1142.417103][T19166] FAT-fs (loop3): Directory bread(block 72) failed [ 1142.424101][T19166] FAT-fs (loop3): Directory bread(block 73) failed [ 1143.154976][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6306'. [ 1143.500951][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6306'. [ 1143.650482][T19190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1144.089995][T19197] loop2: detected capacity change from 0 to 164 [ 1144.163255][T19197] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1144.668419][T19208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1144.839464][T19212] loop2: detected capacity change from 0 to 1024 [ 1145.611159][ T745] hfsplus: b-tree write err: -5, ino 4 [ 1145.762871][ T5248] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1145.857759][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1145.955532][ T5248] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1145.965189][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.973827][ T5248] usb 5-1: Product: syz [ 1145.978228][ T5248] usb 5-1: Manufacturer: syz [ 1145.983201][ T5248] usb 5-1: SerialNumber: syz [ 1146.151792][ T5248] usb 5-1: config 0 descriptor?? [ 1146.317452][ T5248] usb 5-1: selecting invalid altsetting 3 [ 1146.324962][ T5248] comedi comedi0: could not set alternate setting 3 in high speed [ 1146.337174][ T5248] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1146.366538][ T5248] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 1146.550179][ T5248] usb 5-1: USB disconnect, device number 28 [ 1146.658459][T19237] loop3: detected capacity change from 0 to 16 [ 1146.729673][T19237] cramfs: empty filesystem [ 1147.508970][T19252] tmpfs: Bad value for 'mpol' [ 1148.580200][T19264] loop4: detected capacity change from 0 to 1024 [ 1148.725910][T19264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1148.737651][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1148.792913][ T5243] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1149.034589][ T5243] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1149.044153][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.052660][ T5243] usb 1-1: Product: syz [ 1149.057068][ T5243] usb 1-1: Manufacturer: syz [ 1149.061912][ T5243] usb 1-1: SerialNumber: syz [ 1149.167743][ T5243] usb 1-1: config 0 descriptor?? [ 1149.281862][ T5243] ch341 1-1:0.0: ch341-uart converter detected [ 1149.840191][ T5243] usb 1-1: failed to send control message: -71 [ 1149.847017][ T5243] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1149.985225][ T5243] usb 1-1: USB disconnect, device number 39 [ 1149.993987][ T5243] ch341 1-1:0.0: device disconnected [ 1150.606886][T11170] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1151.338585][T11170] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1151.348836][T11170] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1151.360867][T11170] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.473060][T11170] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.482895][T11170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.491174][T11170] usb 5-1: Product: syz [ 1151.495765][T11170] usb 5-1: Manufacturer: syz [ 1151.500629][T11170] usb 5-1: SerialNumber: syz [ 1151.707827][T19309] loop2: detected capacity change from 0 to 256 [ 1152.013576][T19309] FAT-fs (loop2): Directory bread(block 64) failed [ 1152.020430][T19309] FAT-fs (loop2): Directory bread(block 65) failed [ 1152.027916][T19309] FAT-fs (loop2): Directory bread(block 66) failed [ 1152.034911][T19309] FAT-fs (loop2): Directory bread(block 67) failed [ 1152.041854][T19309] FAT-fs (loop2): Directory bread(block 68) failed [ 1152.048913][T19309] FAT-fs (loop2): Directory bread(block 69) failed [ 1152.056179][T19309] FAT-fs (loop2): Directory bread(block 70) failed [ 1152.063213][T19309] FAT-fs (loop2): Directory bread(block 71) failed [ 1152.073171][T19309] FAT-fs (loop2): Directory bread(block 72) failed [ 1152.079979][T19309] FAT-fs (loop2): Directory bread(block 73) failed [ 1152.108902][T11170] usb 5-1: 0:2 : does not exist [ 1152.195789][T11170] usb 5-1: USB disconnect, device number 29 [ 1152.438397][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.143653][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1154.194098][T19345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1154.382112][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1154.391887][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.400613][ T25] usb 5-1: Product: syz [ 1154.405130][ T25] usb 5-1: Manufacturer: syz [ 1154.409972][ T25] usb 5-1: SerialNumber: syz [ 1154.526315][ T25] usb 5-1: config 0 descriptor?? [ 1154.824812][ T25] hso 5-1:0.0: Failed to find BULK IN ep [ 1154.850845][T19353] netlink: 'syz.2.6389': attribute type 27 has an invalid length. [ 1154.886932][ T25] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1155.070118][ T25] usb 5-1: USB disconnect, device number 30 [ 1155.211949][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1155.221368][T19359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1155.230818][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1155.241922][T19359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1155.252901][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1156.333807][T19375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1156.343397][T19375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1156.368762][T19379] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1156.408112][T19377] loop1: detected capacity change from 0 to 24 [ 1156.712294][T19377] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1156.795508][T19383] loop2: detected capacity change from 0 to 764 [ 1157.009090][T19383] rock: directory entry would overflow storage [ 1157.015674][T19383] rock: sig=0x4f50, size=4, remaining=3 [ 1157.021549][T19383] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1158.782066][T19414] loop3: detected capacity change from 0 to 256 [ 1159.413077][T19414] FAT-fs (loop3): Directory bread(block 64) failed [ 1159.420234][T19414] FAT-fs (loop3): Directory bread(block 65) failed [ 1159.427746][T19414] FAT-fs (loop3): Directory bread(block 66) failed [ 1159.434732][T19414] FAT-fs (loop3): Directory bread(block 67) failed [ 1159.448171][T19414] FAT-fs (loop3): Directory bread(block 68) failed [ 1159.456105][T19414] FAT-fs (loop3): Directory bread(block 69) failed [ 1159.465292][T19414] FAT-fs (loop3): Directory bread(block 70) failed [ 1159.472685][T19414] FAT-fs (loop3): Directory bread(block 71) failed [ 1159.479632][T19414] FAT-fs (loop3): Directory bread(block 72) failed [ 1159.486609][T19414] FAT-fs (loop3): Directory bread(block 73) failed [ 1160.807573][T19448] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1163.203379][T16982] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1163.412886][T16982] usb 3-1: Using ep0 maxpacket: 32 [ 1163.621329][T19499] kernel read not supported for file /  (pid: 19499 comm: syz.1.6458) [ 1163.703261][ T29] audit: type=1800 audit(2000000880.919:179): pid=19499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6458" name=2001 dev="mqueue" ino=53513 res=0 errno=0 [ 1163.833372][T19501] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 1163.860808][T16982] usb 3-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 1163.870671][T16982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.879206][T16982] usb 3-1: Product: syz [ 1163.883755][T16982] usb 3-1: Manufacturer: syz [ 1163.888608][T16982] usb 3-1: SerialNumber: syz [ 1163.952909][T16982] usb 3-1: config 0 descriptor?? [ 1164.000257][T16982] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1164.441773][ T5243] usb 3-1: USB disconnect, device number 31 [ 1164.442354][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6461'. [ 1166.304952][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1166.317121][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1166.344285][T19542] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1166.808682][T19546] netlink: 'syz.2.6478': attribute type 2 has an invalid length. [ 1167.184099][T19544] infiniband syz2: set active [ 1167.189066][T19544] infiniband syz2: added bond_slave_1 [ 1167.416888][T19557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6483'. [ 1167.530312][T19544] RDS/IB: syz2: added [ 1167.537986][T19544] smc: adding ib device syz2 with port count 1 [ 1167.545425][T19544] smc: ib device syz2 port 1 has pnetid [ 1167.810897][ T29] audit: type=1400 audit(2000000885.089:180): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1168.422203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.609615][T19628] loop3: detected capacity change from 0 to 64 [ 1172.967684][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6519'. [ 1174.438857][T19651] loop2: detected capacity change from 0 to 512 [ 1175.443328][T19644] kexec: Could not allocate control_code_buffer [ 1175.530889][T19651] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6529: corrupted in-inode xattr: invalid ea_ino [ 1175.633494][T16982] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1175.650642][T19651] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6529: couldn't read orphan inode 15 (err -117) [ 1175.741678][T19651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.845492][T16982] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1175.854975][T16982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.878057][T19663] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6534'. [ 1175.895496][T16982] usb 2-1: config 0 descriptor?? [ 1175.950126][T16982] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1176.156844][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.385930][T16982] gspca_sunplus: reg_w_riv err -71 [ 1176.391567][T16982] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1176.455216][T16982] usb 2-1: USB disconnect, device number 34 [ 1177.553477][T19682] IPv6: Can't replace route, no match found [ 1178.638538][T19704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1179.014228][T19712] SET target dimension over the limit! [ 1179.584696][T19719] netlink: 'syz.4.6562': attribute type 1 has an invalid length. [ 1179.673996][T19722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6563'. [ 1179.699586][T19722] gre1: entered allmulticast mode [ 1180.549356][T19737] syz_tun: tun_net_xmit 54 [ 1180.814705][T19739] netlink: 416 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1180.824182][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1183.921680][ T25] syz_tun: tun_net_xmit 110 [ 1184.798576][ T25] syz_tun: tun_net_xmit 110 [ 1184.853562][T19802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6602'. [ 1184.990908][T19806] netlink: 'syz.1.6604': attribute type 8 has an invalid length. [ 1184.999489][T19806] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6604'. [ 1185.357429][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1185.367121][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1185.593179][T19814] netlink: 'syz.2.6609': attribute type 1 has an invalid length. [ 1186.839770][T19825] loop1: detected capacity change from 0 to 4096 [ 1186.919476][T19825] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1187.910681][T19825] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1188.449578][T19856] loop2: detected capacity change from 0 to 512 [ 1188.736493][T19856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.750342][T19856] ext4 filesystem being mounted at /1222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.924553][T19856] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.6630: invalid size [ 1188.956751][T19856] EXT4-fs (loop2): Remounting filesystem read-only [ 1189.080050][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.151704][ T3188] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1189.162910][ T3188] Quota error (device loop2): write_blk: dquota write failed [ 1189.170518][ T3188] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 1189.180166][ T3188] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1189.191099][ T3188] Quota error (device loop2): write_blk: dquota write failed [ 1189.200872][ T3188] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 1189.250054][T19869] cifs: Bad value for 'source' [ 1189.827030][T19882] netlink: 'syz.3.6638': attribute type 5 has an invalid length. [ 1189.835306][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 1189.854106][ T5243] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1190.074640][ T5243] usb 3-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.086965][ T5243] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1190.098372][ T5243] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1190.108721][ T5243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1190.230024][ T5243] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 1190.239912][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.248476][ T5243] usb 3-1: Product: syz [ 1190.253093][ T5243] usb 3-1: Manufacturer: syz [ 1190.257924][ T5243] usb 3-1: SerialNumber: syz [ 1190.389786][ T5243] usb 3-1: config 0 descriptor?? [ 1190.414849][T19886] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1190.668717][ T5243] usbtest 3-1:0.0: Linux user mode ISO test driver [ 1190.679725][ T5243] usbtest 3-1:0.0: high-speed {control iso-in} tests (+alt) [ 1190.892168][ T5243] usb 3-1: USB disconnect, device number 32 [ 1191.560130][T19900] loop1: detected capacity change from 0 to 1024 [ 1191.924283][T19904] autofs4:pid:19904:validate_dev_ioctl: path string terminator missing for cmd(0xc018937c) [ 1192.543931][T19918] netlink: 'syz.0.6659': attribute type 22 has an invalid length. [ 1192.552142][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1192.561642][T19918] netlink: 'syz.0.6659': attribute type 22 has an invalid length. [ 1192.588022][T19917] loop2: detected capacity change from 0 to 512 [ 1192.710583][T19917] EXT4-fs: Ignoring removed oldalloc option [ 1192.735822][T19917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1193.035384][T19917] EXT4-fs (loop2): 1 truncate cleaned up [ 1193.043668][T19917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.167332][T19929] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1193.468893][T19925] loop1: detected capacity change from 0 to 512 [ 1193.526167][T19917] tmpfs: Bad value for 'mpol' [ 1193.573067][T19925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1193.974420][T19925] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.6660: bad orphan inode 15 [ 1194.068861][T19925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.108456][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.161313][T19948] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.198370][ T29] audit: type=1326 audit(2000000911.359:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19943 comm="syz.3.6672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 1194.221734][ T29] audit: type=1326 audit(2000000911.359:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19943 comm="syz.3.6672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 1194.379579][ T29] audit: type=1326 audit(2000000911.629:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19943 comm="syz.3.6672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 1194.403195][ T29] audit: type=1326 audit(2000000911.629:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19943 comm="syz.3.6672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 1194.425370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.433200][ T29] audit: type=1326 audit(2000000911.629:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19943 comm="syz.3.6672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 1194.455800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.905908][ T5200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.208906][ T29] audit: type=1326 audit(2000000913.479:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1196.231691][ T29] audit: type=1326 audit(2000000913.489:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1196.254372][ T29] audit: type=1326 audit(2000000913.509:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1196.276951][ T29] audit: type=1326 audit(2000000913.509:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1196.299504][ T29] audit: type=1326 audit(2000000913.509:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1197.029552][T16982] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1197.110278][T19995] netlink: 'syz.4.6693': attribute type 11 has an invalid length. [ 1197.243662][T16982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1197.284878][T16982] usb 1-1: not running at top speed; connect to a high speed hub [ 1197.326121][T16982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.337998][T16982] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1197.349435][T16982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1197.359483][T16982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1197.369710][T16982] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1197.608042][T16982] usb 1-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 1197.617958][T16982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.626834][T16982] usb 1-1: Product: syz [ 1197.631284][T16982] usb 1-1: Manufacturer: syz [ 1197.636993][T16982] usb 1-1: SerialNumber: syz [ 1197.739578][T16982] ipaq 1-1:1.0: PocketPC PDA converter detected [ 1197.815206][T20002] binder: Bad value for 'stats' [ 1197.985218][T16982] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 1198.203047][ T25] usb 1-1: USB disconnect, device number 40 [ 1198.284863][ T25] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1198.296234][ T25] ipaq 1-1:1.0: device disconnected [ 1198.523074][T20012] netlink: 'syz.4.6703': attribute type 21 has an invalid length. [ 1198.531497][T20012] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 1199.370342][T20028] netlink: 'syz.0.6711': attribute type 4 has an invalid length. [ 1199.379610][T20028] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1199.580607][T20021] loop2: detected capacity change from 0 to 1764 [ 1199.876288][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6713'. [ 1199.888660][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6713'. [ 1200.517812][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6720'. [ 1202.126069][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.132949][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.338585][T20072] loop2: detected capacity change from 0 to 1764 [ 1202.526278][T20072] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1203.253592][T20087] tmpfs: Bad value for 'mpol' [ 1204.776191][T20119] affs: Unrecognized mount option "" or missing value [ 1204.783502][T20119] affs: Error parsing options [ 1204.975797][ T25] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1205.405152][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1205.426895][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1205.436414][ T25] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1205.447278][ T25] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1205.457324][ T25] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1205.467482][ T25] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1205.477751][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1205.484750][ T25] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1205.494228][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.607607][ T25] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1205.616663][T16982] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1206.039331][T16982] usb 4-1: Using ep0 maxpacket: 16 [ 1206.076275][T16982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.086828][T16982] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1206.115480][T16982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.124966][T16982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1206.134540][T16982] usb 4-1: SerialNumber: syz [ 1206.177723][ T25] scsi host1: usb-storage 1-1:1.0 [ 1206.244508][T16982] cdc_acm 4-1:1.0: skipping garbage [ 1206.301834][ T25] usb 1-1: USB disconnect, device number 41 [ 1206.418611][T20143] loop1: detected capacity change from 0 to 256 [ 1206.474376][T16982] usb 4-1: USB disconnect, device number 37 [ 1206.813055][T20143] FAT-fs (loop1): Directory bread(block 64) failed [ 1206.820079][T20143] FAT-fs (loop1): Directory bread(block 65) failed [ 1206.827411][T20143] FAT-fs (loop1): Directory bread(block 66) failed [ 1206.834328][T20143] FAT-fs (loop1): Directory bread(block 67) failed [ 1206.841357][T20143] FAT-fs (loop1): Directory bread(block 68) failed [ 1206.848452][T20143] FAT-fs (loop1): Directory bread(block 69) failed [ 1206.858294][T20143] FAT-fs (loop1): Directory bread(block 70) failed [ 1206.868858][T20143] FAT-fs (loop1): Directory bread(block 71) failed [ 1206.876880][T20143] FAT-fs (loop1): Directory bread(block 72) failed [ 1206.884019][T20143] FAT-fs (loop1): Directory bread(block 73) failed [ 1207.444600][T20151] loop4: detected capacity change from 0 to 256 [ 1207.788953][T20151] FAT-fs (loop4): Directory bread(block 64) failed [ 1207.796103][T20151] FAT-fs (loop4): Directory bread(block 65) failed [ 1207.803437][T20151] FAT-fs (loop4): Directory bread(block 66) failed [ 1207.810281][T20151] FAT-fs (loop4): Directory bread(block 67) failed [ 1207.817670][T20151] FAT-fs (loop4): Directory bread(block 68) failed [ 1207.824605][T20151] FAT-fs (loop4): Directory bread(block 69) failed [ 1207.831514][T20151] FAT-fs (loop4): Directory bread(block 70) failed [ 1207.838478][T20151] FAT-fs (loop4): Directory bread(block 71) failed [ 1207.845719][T20151] FAT-fs (loop4): Directory bread(block 72) failed [ 1207.852672][T20151] FAT-fs (loop4): Directory bread(block 73) failed [ 1208.691426][T20173] netlink: 'syz.4.6779': attribute type 27 has an invalid length. [ 1209.419607][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6785'. [ 1210.062270][T20196] loop3: detected capacity change from 0 to 256 [ 1210.198997][T20200] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1210.232966][T16982] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1210.434086][T16982] usb 1-1: Using ep0 maxpacket: 32 [ 1210.457493][T16982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1210.501292][T16982] usb 1-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1210.503082][T20202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6796'. [ 1210.511932][T16982] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1210.553565][T20204] ===================================================== [ 1210.561039][T20204] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 1210.567406][T20196] FAT-fs (loop3): Directory bread(block 64) failed [ 1210.568461][T20204] _copy_to_user+0xbc/0x110 [ 1210.575475][T20196] FAT-fs (loop3): Directory bread(block 65) failed [ 1210.579606][T20204] con_font_op+0x14a2/0x1710 [ 1210.579709][T20204] vt_compat_ioctl+0x79b/0x990 [ 1210.586719][T20196] FAT-fs (loop3): Directory bread(block 66) failed [ 1210.591029][T20204] tty_compat_ioctl+0x801/0xce0 [ 1210.591164][T20204] __se_compat_sys_ioctl+0x785/0x1080 [ 1210.596121][T20196] FAT-fs (loop3): Directory bread(block 67) failed [ 1210.596399][T20196] FAT-fs (loop3): Directory bread(block 68) failed [ 1210.602912][T20204] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1210.603050][T20204] ia32_sys_call+0x32a2/0x40d0 [ 1210.608381][T20196] FAT-fs (loop3): Directory bread(block 69) failed [ 1210.613522][T20204] __do_fast_syscall_32+0xb0/0x110 [ 1210.620257][T20196] FAT-fs (loop3): Directory bread(block 70) failed [ 1210.626671][T20204] do_fast_syscall_32+0x38/0x80 [ 1210.632109][T20196] FAT-fs (loop3): Directory bread(block 71) failed [ 1210.636952][T20204] do_SYSENTER_32+0x1f/0x30 [ 1210.646662][T20196] FAT-fs (loop3): Directory bread(block 72) failed [ 1210.650610][T20204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1210.660815][T20196] FAT-fs (loop3): Directory bread(block 73) failed [ 1210.661723][T20204] [ 1210.661745][T20204] Uninit was created at: [ 1210.661935][T20204] ___kmalloc_large_node+0x22c/0x370 [ 1210.706591][T20204] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 1210.712750][T20204] __kmalloc_node_noprof+0x9d6/0xf50 [ 1210.718252][T20204] __kvmalloc_node_noprof+0xc0/0x2d0 [ 1210.723850][T20204] con_font_op+0x659/0x1710 [ 1210.728542][T20204] vt_compat_ioctl+0x79b/0x990 [ 1210.733650][T20204] tty_compat_ioctl+0x801/0xce0 [ 1210.738704][T20204] __se_compat_sys_ioctl+0x785/0x1080 [ 1210.745295][T20204] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1210.752815][T20204] ia32_sys_call+0x32a2/0x40d0 [ 1210.757811][T20204] __do_fast_syscall_32+0xb0/0x110 [ 1210.763257][T20204] do_fast_syscall_32+0x38/0x80 [ 1210.768305][T20204] do_SYSENTER_32+0x1f/0x30 [ 1210.773220][T20204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1210.779755][T20204] [ 1210.782175][T20204] Bytes 65536-131071 of 131072 are uninitialized [ 1210.788781][T20204] Memory access of size 131072 starts at ffff88805ec00000 [ 1210.796128][T20204] Data copied to user address 0000000020000a40 [ 1210.802399][T20204] [ 1210.804998][T20204] CPU: 1 UID: 0 PID: 20204 Comm: syz.2.6794 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1210.812146][T20206] netlink: 'syz.4.6797': attribute type 8 has an invalid length. [ 1210.816022][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1210.816085][T20204] ===================================================== [ 1210.816118][T20204] Disabling lock debugging due to kernel taint [ 1210.816172][T20204] Kernel panic - not syncing: kmsan.panic set ... [ 1210.816237][T20204] CPU: 1 UID: 0 PID: 20204 Comm: syz.2.6794 Tainted: G B 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 1210.816376][T20204] Tainted: [B]=BAD_PAGE [ 1210.816414][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1210.816472][T20204] Call Trace: [ 1210.816507][T20204] [ 1210.816544][T20204] dump_stack_lvl+0x216/0x2d0 [ 1210.816683][T20204] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1210.816799][T20204] dump_stack+0x1e/0x30 [ 1210.816917][T20204] panic+0x4e2/0xcf0 [ 1210.817044][T20204] ? kmsan_get_metadata+0xe1/0x1c0 [ 1210.817160][T20204] kmsan_report+0x2c7/0x2d0 [ 1210.817320][T20204] ? kmsan_internal_check_memory+0x48c/0x560 [ 1210.817465][T20204] ? kmsan_copy_to_user+0xd5/0xf0 [ 1210.817607][T20204] ? _copy_to_user+0xbc/0x110 [ 1210.817728][T20204] ? con_font_op+0x14a2/0x1710 [ 1210.817825][T20204] ? vt_compat_ioctl+0x79b/0x990 [ 1210.817972][T20204] ? tty_compat_ioctl+0x801/0xce0 [ 1210.818102][T20204] ? __se_compat_sys_ioctl+0x785/0x1080 [ 1210.818229][T20204] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 1210.818353][T20204] ? ia32_sys_call+0x32a2/0x40d0 [ 1210.818499][T20204] ? __do_fast_syscall_32+0xb0/0x110 [ 1210.818629][T20204] ? do_fast_syscall_32+0x38/0x80 [ 1210.818756][T20204] ? do_SYSENTER_32+0x1f/0x30 [ 1210.818880][T20204] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1210.819020][T20204] ? kmsan_get_metadata+0x13e/0x1c0 [ 1210.819123][T20204] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1210.819276][T20204] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1210.819426][T20204] ? irqentry_enter+0x37/0x60 [ 1210.819540][T20204] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1210.819680][T20204] ? virt_to_page_or_null+0x63/0x150 [ 1210.819791][T20204] kmsan_internal_check_memory+0x48c/0x560 [ 1210.819950][T20204] kmsan_copy_to_user+0xd5/0xf0 [ 1210.820118][T20204] ? should_fail_usercopy+0x2e/0x40 [ 1210.820255][T20204] _copy_to_user+0xbc/0x110 [ 1210.820381][T20204] con_font_op+0x14a2/0x1710 [ 1210.820496][T20204] ? kmsan_get_metadata+0x13e/0x1c0 [ 1210.820607][T20204] vt_compat_ioctl+0x79b/0x990 [ 1210.820757][T20204] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1210.820867][T20204] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 1210.821020][T20204] tty_compat_ioctl+0x801/0xce0 [ 1210.821151][T20204] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1210.821262][T20204] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1210.821394][T20204] __se_compat_sys_ioctl+0x785/0x1080 [ 1210.821522][T20204] ? kmsan_get_metadata+0x13e/0x1c0 [ 1210.821622][T20204] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1210.821771][T20204] ? kmsan_get_metadata+0x13e/0x1c0 [ 1210.821881][T20204] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1210.822022][T20204] ia32_sys_call+0x32a2/0x40d0 [ 1210.822171][T20204] __do_fast_syscall_32+0xb0/0x110 [ 1210.822305][T20204] ? irqentry_exit+0x16/0x60 [ 1210.822422][T20204] do_fast_syscall_32+0x38/0x80 [ 1210.822554][T20204] do_SYSENTER_32+0x1f/0x30 [ 1210.822680][T20204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1210.822808][T20204] RIP: 0023:0xf741d579 [ 1210.822876][T20204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1210.822984][T20204] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1210.823081][T20204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 1210.823154][T20204] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1210.823221][T20204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1210.823282][T20204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1210.823347][T20204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1210.823428][T20204] [ 1210.824264][T20204] Kernel Offset: disabled