last executing test programs: 2.733916131s ago: executing program 2 (id=14351): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000100)={0x0, 0x0, "e7249adabd0aabc94fc7311bef1b12b1cf9c32e6e691d5eb"}) 2.574774394s ago: executing program 2 (id=14353): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x0, 0x0, [@mcast2]}, 0x18) 2.37725634s ago: executing program 2 (id=14357): io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000300)) 2.14095953s ago: executing program 2 (id=14359): r0 = syz_open_dev$video(&(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) 1.937544967s ago: executing program 2 (id=14361): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) 1.703396877s ago: executing program 2 (id=14366): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x5df, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100111f625408d0405903d40010203010902cd0501a47a20090904"], 0x0) 1.603340065s ago: executing program 1 (id=14367): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5601, 0x0) 1.462709717s ago: executing program 3 (id=14371): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x80000000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x59565955}}) 1.364742495s ago: executing program 1 (id=14372): r0 = socket(0x1d, 0x2, 0x6) accept4$llc(r0, 0x0, 0x0, 0x0) 1.31069124s ago: executing program 4 (id=14374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) 1.267419094s ago: executing program 3 (id=14375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x38, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) 1.217614478s ago: executing program 1 (id=14376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000b06030000000000000000000000000005000100070000000900020073797a3000000000140007"], 0x5c}}, 0x0) 1.151746023s ago: executing program 4 (id=14378): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x41c7ebaf4977b07c, 0x4, 0x1, 0xffffffff}, 0x2, 0x1, 0x6}) 1.047461992s ago: executing program 4 (id=14379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280050016000100000004001200080015008399bd"], 0x54}}, 0x0) 1.013381095s ago: executing program 3 (id=14380): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 1.000155116s ago: executing program 1 (id=14381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 977.469098ms ago: executing program 0 (id=14382): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=iso8859-14,iocharset=cp936,rodir,uni_xlate=1,rodir,rodir,utf8=0,nfs,uni_xlate=1,iocharset=iso8859-9,uni_xlate=0,shortname=lower,shortname=mixed,shortname=lower,shortname=mixed,shortname=lower,fmask=00000000000000020000005,uid=', @ANYRESDEC=0x0, @ANYBLOB="428fb61a87902da848"], 0x1, 0x36b, &(0x7f0000002e00)="$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") open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 847.227639ms ago: executing program 3 (id=14383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000240), 0x0}, 0x20) 824.956171ms ago: executing program 1 (id=14384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) 780.494804ms ago: executing program 4 (id=14385): r0 = socket(0x1e, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 672.241504ms ago: executing program 1 (id=14386): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x0, 0x0, 0x6, "dee6eb642785"}, 0x0, 0x0, 0x0, 0x0}) 644.681556ms ago: executing program 3 (id=14387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x178, 0x1170, 0x1170, 0x178, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x7fffff80, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x108, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x403, 0x9859, 0x4, 0x0, 0x0, "cbabff2e0697a58667525dcf4c820891158a796c7aed8598e1e75ffdbf5a1f6674c8d2564d609f43454bd0f666ab9f24fd9be53312fb51066bb182cffc604c72"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f7) 564.907452ms ago: executing program 4 (id=14388): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xc8, 0xc8, 0x230, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x140, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'ipvlan1\x00', {}, 0x0, 0x3}}, @common=@unspec=@physdev={{0x68}, {'bridge_slave_0\x00', {}, 'ip6erspan0\x00', {}, 0x0, 0x1b}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 472.1986ms ago: executing program 3 (id=14389): syz_usb_connect(0x0, 0x3bf, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004af96b40b822276082d2010203010902ad0301000000000904b90010020a000009050503000200074a07"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 433.840123ms ago: executing program 4 (id=14390): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x81, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 410.784095ms ago: executing program 0 (id=14391): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000101401000000000000000000040021"], 0x18}}, 0x0) 216.961012ms ago: executing program 0 (id=14392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) 172.802776ms ago: executing program 0 (id=14393): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 80.192413ms ago: executing program 0 (id=14394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 0 (id=14395): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x21, 0x9e85, &(0x7f000000a040)="$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") creat(&(0x7f0000000240)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 533440][ T27] audit: type=1326 audit(2000000032.626:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1748 comm="syz.2.13194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1226.588794][ T27] audit: type=1326 audit(2000000032.626:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1748 comm="syz.2.13194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1226.610132][ T1753] loop2: detected capacity change from 0 to 512 [ 1226.626588][ T27] audit: type=1326 audit(2000000032.626:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1748 comm="syz.2.13194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1226.650920][ T27] audit: type=1326 audit(2000000032.626:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1748 comm="syz.2.13194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1226.667357][ T9070] usb 4-1: config 0 has an invalid interface number: 77 but max is 0 [ 1226.673271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.697591][ T3970] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1226.713659][ T1753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1226.715878][ T9070] usb 4-1: config 0 has no interface number 0 [ 1226.733147][ T1753] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.792426][T27844] EXT4-fs (loop2): unmounting filesystem. [ 1226.836539][ T3724] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1226.868676][ T14] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1226.900672][ T9070] usb 4-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=9c.d5 [ 1226.910271][ T9070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.919955][ T9070] usb 4-1: Product: syz [ 1226.927438][ T9070] usb 4-1: Manufacturer: syz [ 1226.932106][ T9070] usb 4-1: SerialNumber: syz [ 1226.955171][ T9070] usb 4-1: config 0 descriptor?? [ 1226.975574][ T3970] usb 1-1: Using ep0 maxpacket: 32 [ 1227.119710][ T1766] netlink: 484 bytes leftover after parsing attributes in process `syz.2.13200'. [ 1227.125522][ T3970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1227.246325][ T1770] netlink: 'syz.2.13202': attribute type 29 has an invalid length. [ 1227.255144][ T1770] netlink: 'syz.2.13202': attribute type 29 has an invalid length. [ 1227.268768][ T5051] usb 4-1: USB disconnect, device number 33 [ 1227.285755][ T14] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 1227.296643][ T14] usb 5-1: config 0 has no interface number 0 [ 1227.328745][ T3970] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1227.338190][ T3970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.346711][ T3970] usb 1-1: Product: syz [ 1227.351757][ T3970] usb 1-1: Manufacturer: syz [ 1227.356391][ T3970] usb 1-1: SerialNumber: syz [ 1227.372777][ T3970] usb 1-1: config 0 descriptor?? [ 1227.386743][ T1772] loop2: detected capacity change from 0 to 2048 [ 1227.393738][ T1741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1227.415375][ T3970] hub 1-1:0.0: bad descriptor, ignoring hub [ 1227.419493][ T1772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1227.421372][ T3970] hub: probe of 1-1:0.0 failed with error -5 [ 1227.441863][ T3970] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input88 [ 1227.451654][ T3724] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1227.461296][ T3724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.478005][ T14] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 1227.488332][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.505059][ T3724] usb 2-1: Product: syz [ 1227.509367][ T3724] usb 2-1: Manufacturer: syz [ 1227.517975][ T14] usb 5-1: Product: syz [ 1227.523087][ T14] usb 5-1: Manufacturer: syz [ 1227.533342][ T3724] usb 2-1: SerialNumber: syz [ 1227.538718][ T14] usb 5-1: SerialNumber: syz [ 1227.561046][ T14] usb 5-1: config 0 descriptor?? [ 1227.618036][ T3724] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1227.706531][ T3970] usb 1-1: USB disconnect, device number 36 [ 1227.713144][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1227.723929][ T1774] rdma_rxe: rxe_register_device failed with error -23 [ 1227.731091][ T1774] rdma_rxe: failed to add lo [ 1227.887784][ T3724] usb 5-1: USB disconnect, device number 32 [ 1228.130222][ T1785] loop2: detected capacity change from 0 to 2048 [ 1228.153355][ T1785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1228.280007][ T14] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1228.281630][ T1790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13212'. [ 1228.359312][ T1790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13212'. [ 1228.386080][ T1790] IPv6: sit1: Disabled Multicast RS [ 1228.726537][ T3970] usb 2-1: USB disconnect, device number 40 [ 1228.856236][ T1814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1229.143580][ T1824] loop4: detected capacity change from 0 to 64 [ 1229.391494][ T14] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1229.398589][ T14] ath9k_htc: Failed to initialize the device [ 1229.450956][ T3970] usb 2-1: ath9k_htc: USB layer deinitialized [ 1229.604580][ T1843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13239'. [ 1229.648050][ T1843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13239'. [ 1229.906429][ T27] audit: type=1326 audit(2000000035.788:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1854 comm="syz.1.13245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d677dff9 code=0x7ffc0000 [ 1229.985494][ T27] audit: type=1326 audit(2000000035.807:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1854 comm="syz.1.13245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f42d677dff9 code=0x7ffc0000 [ 1229.990338][ T9070] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1230.022884][ T1858] loop4: detected capacity change from 0 to 64 [ 1230.073145][ T27] audit: type=1326 audit(2000000035.807:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1854 comm="syz.1.13245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d677dff9 code=0x7ffc0000 [ 1230.171610][ T27] audit: type=1326 audit(2000000035.807:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1854 comm="syz.1.13245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d677dff9 code=0x7ffc0000 [ 1230.343054][ T9070] usb 3-1: Using ep0 maxpacket: 8 [ 1230.391810][ T1870] loop0: detected capacity change from 0 to 512 [ 1230.438157][ T1870] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.13252: bg 0: block 5: invalid block bitmap [ 1230.471481][ T9070] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1230.490558][ T1870] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1230.491538][ T9070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.521059][ T9070] usb 3-1: config 0 descriptor?? [ 1230.533345][ T1870] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13252: invalid indirect mapped block 3 (level 2) [ 1230.542269][ T1844] loop3: detected capacity change from 0 to 32768 [ 1230.564129][ T1844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13238 (1844) [ 1230.579054][ T9070] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1230.598608][ T1870] EXT4-fs (loop0): 1 orphan inode deleted [ 1230.612082][ T1844] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1230.630143][ T1870] EXT4-fs (loop0): 1 truncate cleaned up [ 1230.642621][ T1844] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1230.646764][ T1870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1230.660260][ T1844] BTRFS info (device loop3): using free space tree [ 1230.825150][ T1844] BTRFS info (device loop3): enabling ssd optimizations [ 1230.825434][T28249] EXT4-fs (loop0): unmounting filesystem. [ 1230.959620][T31866] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1231.037990][ T9070] gspca_spca501: reg write: error -71 [ 1231.043432][ T9070] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1231.070806][ T9070] spca501: probe of 3-1:0.0 failed with error -22 [ 1231.095800][ T9070] usb 3-1: USB disconnect, device number 41 [ 1231.169878][ T1905] loop4: detected capacity change from 0 to 1024 [ 1231.353789][ T1905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1231.394256][ T1910] qrtr: Invalid version 0 [ 1231.645300][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 1232.297948][ T1944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13278'. [ 1232.472526][ T1952] loop2: detected capacity change from 0 to 1024 [ 1232.523867][ T1952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1232.572894][ T1954] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13283'. [ 1232.603008][ T1952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1232.837988][T27844] EXT4-fs (loop2): unmounting filesystem. [ 1232.903462][ T1973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13290'. [ 1233.055788][ T1978] loop2: detected capacity change from 0 to 512 [ 1233.090684][ T1980] SET target dimension over the limit! [ 1233.158466][ T1978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1233.158642][ T1986] netlink: 'syz.3.13295': attribute type 2 has an invalid length. [ 1233.179183][ T1986] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13295'. [ 1233.229455][ T1978] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1233.258320][ T1988] libceph: resolve '0' (ret=-3): failed [ 1233.352018][ T1978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.13293: inode #1792: comm syz.2.13293: iget: illegal inode # [ 1233.422104][ T1978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.13293: error while reading EA inode 1792 err=-117 [ 1233.485702][ T1978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.13293: inode #1792: comm syz.2.13293: iget: illegal inode # [ 1233.518355][ T1978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.13293: error while reading EA inode 1792 err=-117 [ 1233.707492][T27844] EXT4-fs (loop2): unmounting filesystem. [ 1233.845605][ T2010] netlink: 'syz.1.13309': attribute type 27 has an invalid length. [ 1233.938112][ T2016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13307'. [ 1234.223598][ T2027] usb usb7: usbfs: process 2027 (syz.2.13316) did not claim interface 7 before use [ 1234.312092][ T2025] loop4: detected capacity change from 0 to 4096 [ 1234.341313][ T2025] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1234.459154][ T2025] ntfs3: loop4: failed to convert "c46c" to cp874 [ 1234.469172][ T2037] rdma_rxe: rxe_register_device failed with error -23 [ 1234.484458][ T2037] rdma_rxe: failed to add lo [ 1234.742504][ T2048] netlink: 'syz.3.13327': attribute type 3 has an invalid length. [ 1234.765381][ T2047] vcan0 speed is unknown, defaulting to 1000 [ 1234.773194][ T2048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13327'. [ 1234.775765][ T2051] loop2: detected capacity change from 0 to 8 [ 1235.236709][ T2047] wlan0 speed is unknown, defaulting to 1000 [ 1235.416657][ T27] audit: type=1326 audit(2000000040.942:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.3.13339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1235.493315][ T27] audit: type=1326 audit(2000000040.970:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.3.13339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1235.589661][ T2083] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 1235.589661][ T2083] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 1235.866020][ T27] audit: type=1326 audit(2000000041.363:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.3.13339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1235.964686][ T27] audit: type=1326 audit(2000000041.363:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.3.13339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1236.020280][ T2102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1236.029393][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1236.200515][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1236.208140][ T2110] loop4: detected capacity change from 0 to 256 [ 1236.346594][ T2117] device ipip0 entered promiscuous mode [ 1236.353760][ T2110] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1236.532270][ T2123] loop1: detected capacity change from 0 to 64 [ 1236.662550][ T2121] loop2: detected capacity change from 0 to 4096 [ 1236.750015][ T2121] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1236.800022][ T2121] NILFS (loop2): trying rollback from an earlier position [ 1236.884555][ T2121] NILFS (loop2): recovery complete [ 1236.936687][ T2137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1237.339575][ T2150] netlink: 260 bytes leftover after parsing attributes in process `syz.1.13368'. [ 1237.631094][ T27] audit: type=1326 audit(2000000043.009:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1237.684469][ T27] audit: type=1326 audit(2000000043.037:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1237.723281][ T9511] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1237.794730][ T27] audit: type=1326 audit(2000000043.037:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1237.818586][ T27] audit: type=1326 audit(2000000043.037:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1237.854981][ T2119] loop0: detected capacity change from 0 to 32768 [ 1237.862046][ T27] audit: type=1326 audit(2000000043.037:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1237.874443][ T2119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13356 (2119) [ 1237.929224][ T27] audit: type=1326 audit(2000000043.037:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1238.025314][ T2119] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1238.030358][ T9511] usb 5-1: Using ep0 maxpacket: 16 [ 1238.066031][ T2119] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1238.104401][ T2119] BTRFS info (device loop0): using free space tree [ 1238.179211][ T9511] usb 5-1: config 0 has no interfaces? [ 1238.251737][ T2119] BTRFS info (device loop0): enabling ssd optimizations [ 1238.350487][ T9511] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1238.375386][T28249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1238.390800][ T9511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.426062][ T9511] usb 5-1: Product: syz [ 1238.430291][ T9511] usb 5-1: Manufacturer: syz [ 1238.479257][ T9511] usb 5-1: SerialNumber: syz [ 1238.491679][ T9511] r8152-cfgselector 5-1: config 0 descriptor?? [ 1238.529083][ T2203] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1238.767352][ T9511] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1238.844472][ T2212] loop1: detected capacity change from 0 to 512 [ 1238.966476][ T2212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1238.975815][ T2212] ext4 filesystem being mounted at /2745/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.013454][T31752] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 1239.149640][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 1239.293564][ T2221] loop1: detected capacity change from 0 to 64 [ 1239.801374][ T2244] loop4: detected capacity change from 0 to 64 [ 1240.291087][ T2253] loop2: detected capacity change from 0 to 4096 [ 1240.393027][ T2253] ntfs: volume version 3.1. [ 1240.505400][ T2264] netlink: 'syz.4.13404': attribute type 7 has an invalid length. [ 1240.529645][ T2264] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13404'. [ 1240.767242][ T27] kauditd_printk_skb: 3032 callbacks suppressed [ 1240.767260][ T27] audit: type=1326 audit(2000000045.946:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1240.817854][ T2238] loop1: detected capacity change from 0 to 32768 [ 1240.865070][ T2238] JBD2: Ignoring recovery information on journal [ 1240.882938][ T27] audit: type=1326 audit(2000000045.974:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.012654][ T2238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1241.055750][ T27] audit: type=1326 audit(2000000045.974:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.162122][ T3644] ocfs2: Unmounting device (7,1) on (node local) [ 1241.183350][ T27] audit: type=1326 audit(2000000045.974:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.287699][ T27] audit: type=1326 audit(2000000045.974:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.360682][ T2287] loop2: detected capacity change from 0 to 128 [ 1241.386439][ T27] audit: type=1326 audit(2000000045.974:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.473282][ T3730] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1241.473322][ T27] audit: type=1326 audit(2000000045.974:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.621063][ T27] audit: type=1326 audit(2000000045.974:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.706153][ T27] audit: type=1326 audit(2000000045.974:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.770803][ T27] audit: type=1326 audit(2000000045.974:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2158 comm="syz.3.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x50000 [ 1241.856266][ T2270] loop0: detected capacity change from 0 to 32768 [ 1241.947940][ T2270] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1241.970809][ T2270] XFS (loop0): Mounting V5 Filesystem [ 1241.985222][ T3970] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1242.129909][ T2270] XFS (loop0): Ending clean mount [ 1242.148973][ T2282] loop3: detected capacity change from 0 to 32768 [ 1242.153704][ T2270] XFS (loop0): Quotacheck needed: Please wait. [ 1242.168737][ T2282] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 1242.213357][ T2282] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 1242.274907][ T2270] XFS (loop0): Quotacheck: Done. [ 1242.302292][ T2282] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 1242.316622][ T3970] usb 2-1: Using ep0 maxpacket: 8 [ 1242.339685][T28249] XFS (loop0): Unmounting Filesystem [ 1242.486893][ T3970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1242.498154][ T3970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 1242.510629][ T3970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.520676][ T3970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.531435][ T3970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1242.547058][ T3970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1242.567920][ T3970] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 1242.584032][ T3970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.603483][ T3970] usb 2-1: config 0 descriptor?? [ 1242.628557][ T2282] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 1242.648156][ T2294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1242.697168][ T3649] Bluetooth: hci5: urb ffff88807505e600 submission failed (90) [ 1242.940629][T31752] usb 2-1: USB disconnect, device number 41 [ 1243.210660][ T2335] loop3: detected capacity change from 0 to 64 [ 1243.267859][ T3708] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1243.626018][ T3708] usb 5-1: not running at top speed; connect to a high speed hub [ 1243.693997][ T2359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13438'. [ 1243.730079][ T3708] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1243.747005][ T3708] usb 5-1: config 95 has no interface number 0 [ 1243.803883][ T3708] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1243.838268][T31752] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1244.043493][ T3724] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1244.074434][ T3708] usb 5-1: string descriptor 0 read error: -22 [ 1244.091193][ T3708] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1244.111161][ T3708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.125967][T31752] usb 1-1: Using ep0 maxpacket: 32 [ 1244.273243][T31752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.291557][T31752] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1244.326370][T31752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.359901][T31752] usb 1-1: config 0 descriptor?? [ 1244.369967][ T3724] usb 3-1: Using ep0 maxpacket: 32 [ 1244.383425][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1244.403179][T31752] usb 1-1: bad CDC descriptors [ 1244.437037][ T2402] netlink: 'syz.1.13452': attribute type 1 has an invalid length. [ 1244.644390][T31752] usb 1-1: USB disconnect, device number 37 [ 1244.645738][ T3708] usb 5-1: USB disconnect, device number 34 [ 1244.715514][ T3724] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1244.750744][ T3724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.769988][ T3724] usb 3-1: Product: syz [ 1244.785136][ T3724] usb 3-1: Manufacturer: syz [ 1244.802398][ T3724] usb 3-1: SerialNumber: syz [ 1244.818057][ T3724] usb 3-1: config 0 descriptor?? [ 1245.060425][ T2424] netlink: 'syz.3.13463': attribute type 1 has an invalid length. [ 1245.128171][ T3724] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 1245.140218][ T2426] dlm: no locking on control device [ 1245.145622][ T3724] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 1245.160096][ T3724] f81534a_ctrl: probe of 3-1:0.0 failed with error -5 [ 1245.181006][ T3724] usb 3-1: USB disconnect, device number 42 [ 1245.587924][ T3708] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1245.827168][ T2458] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13479'. [ 1245.865699][ T3708] usb 4-1: Using ep0 maxpacket: 16 [ 1245.905135][ T2460] NILFS (nullb0): couldn't find nilfs on the device [ 1245.980709][ T2462] loop0: detected capacity change from 0 to 2048 [ 1246.045912][ T2462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.131229][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 1246.131246][ T27] audit: type=1800 audit(2000000050.960:3437): pid=2462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13481" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 1246.175889][ T3708] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1246.184987][ T3708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.226420][ T3708] usb 4-1: Product: syz [ 1246.237214][ T3708] usb 4-1: Manufacturer: syz [ 1246.268066][ T3708] usb 4-1: SerialNumber: syz [ 1246.298628][ T3708] r8152-cfgselector 4-1: config 0 descriptor?? [ 1246.556013][ T2484] loop1: detected capacity change from 0 to 256 [ 1246.601536][ T2478] loop0: detected capacity change from 0 to 4096 [ 1246.610930][ T2484] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1246.838808][ T3708] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1246.847994][ T3708] r8152-cfgselector 4-1: bad CDC descriptors [ 1246.870652][ T2492] netlink: 116 bytes leftover after parsing attributes in process `syz.4.13496'. [ 1246.892116][ T3708] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1246.947083][ T3708] r8152-cfgselector 4-1: USB disconnect, device number 34 [ 1247.263615][ T2507] loop1: detected capacity change from 0 to 256 [ 1247.293164][ T2507] exfat: Deprecated parameter 'namecase' [ 1247.349487][ T2507] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1247.574562][ T27] audit: type=1326 audit(2000000052.307:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2518 comm="syz.3.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1247.597342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.672130][ T27] audit: type=1326 audit(2000000052.335:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2518 comm="syz.3.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1247.696083][ T27] audit: type=1326 audit(2000000052.335:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2518 comm="syz.3.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1247.864883][ T27] audit: type=1326 audit(2000000052.335:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2518 comm="syz.3.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x7ffc0000 [ 1249.010960][ T2578] netlink: 'syz.3.13536': attribute type 8 has an invalid length. [ 1249.063740][ T2581] loop4: detected capacity change from 0 to 256 [ 1249.104939][T31752] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1249.140509][ T2581] FAT-fs (loop4): Directory bread(block 64) failed [ 1249.168875][ T2581] FAT-fs (loop4): Directory bread(block 65) failed [ 1249.190770][ T2581] FAT-fs (loop4): Directory bread(block 66) failed [ 1249.197548][ T2581] FAT-fs (loop4): Directory bread(block 67) failed [ 1249.233534][ T2581] FAT-fs (loop4): Directory bread(block 68) failed [ 1249.262093][ T2581] FAT-fs (loop4): Directory bread(block 69) failed [ 1249.280154][ T2581] FAT-fs (loop4): Directory bread(block 70) failed [ 1249.297606][ T2581] FAT-fs (loop4): Directory bread(block 71) failed [ 1249.315279][ T2581] FAT-fs (loop4): Directory bread(block 72) failed [ 1249.339032][ T2581] FAT-fs (loop4): Directory bread(block 73) failed [ 1249.393589][T31752] usb 2-1: Using ep0 maxpacket: 32 [ 1249.688046][ T2606] loop3: detected capacity change from 0 to 256 [ 1249.703783][T31752] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0 [ 1249.707437][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.720677][T31752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.722825][ T2603] vcan0 speed is unknown, defaulting to 1000 [ 1249.736362][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.753967][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.755941][T31752] usb 2-1: Product: syz [ 1249.761381][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.772015][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.783685][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.795262][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.803952][T31752] usb 2-1: Manufacturer: syz [ 1249.808611][T31752] usb 2-1: SerialNumber: syz [ 1249.828270][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.846052][ T2606] FAT-fs (loop3): Directory bread(block 64) failed [ 1249.848733][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.859594][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 1249.868668][T31752] usb 2-1: config 0 descriptor?? [ 1249.889370][ T2606] FAT-fs (loop3): Directory bread(block 65) failed [ 1249.912405][ T2606] FAT-fs (loop3): Directory bread(block 66) failed [ 1249.927108][ T2606] FAT-fs (loop3): Directory bread(block 67) failed [ 1249.930734][T31752] pwc: Visionite VCS-UC300 USB webcam detected. [ 1249.944815][ T2606] FAT-fs (loop3): Directory bread(block 68) failed [ 1249.966348][ T2606] FAT-fs (loop3): Directory bread(block 69) failed [ 1249.981964][ T2606] FAT-fs (loop3): Directory bread(block 70) failed [ 1250.032051][ T2606] FAT-fs (loop3): Directory bread(block 71) failed [ 1250.053711][ T2606] FAT-fs (loop3): Directory bread(block 72) failed [ 1250.069179][ T2606] FAT-fs (loop3): Directory bread(block 73) failed [ 1250.169646][ T2606] syz.3.13550: attempt to access beyond end of device [ 1250.169646][ T2606] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1250.207092][T31752] pwc: Failed to set LED on/off time (-71) [ 1250.227553][T31752] pwc: send_video_command error -71 [ 1250.232021][ T2613] loop2: detected capacity change from 0 to 4096 [ 1250.233037][T31752] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1250.240470][ T2606] syz.3.13550: attempt to access beyond end of device [ 1250.240470][ T2606] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1250.274140][ T2603] wlan0 speed is unknown, defaulting to 1000 [ 1250.301550][T31752] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1250.326096][ T27] audit: type=1800 audit(2000000054.879:3442): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13550" name="file0" dev="loop3" ino=1048744 res=0 errno=0 [ 1250.337221][T31752] usb 2-1: USB disconnect, device number 42 [ 1250.438918][ T2617] netlink: 'syz.0.13556': attribute type 13 has an invalid length. [ 1250.449793][ T2617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13556'. [ 1250.484204][ T2617] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 1251.083077][ T2638] loop0: detected capacity change from 0 to 256 [ 1251.692244][ T2665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13580'. [ 1251.737469][ T2665] netlink: 74 bytes leftover after parsing attributes in process `syz.1.13580'. [ 1251.901031][ T2673] xt_nfacct: accounting object `syz1' does not exists [ 1252.339007][ T2692] loop3: detected capacity change from 0 to 2048 [ 1252.377240][ T2692] EXT4-fs: Ignoring removed orlov option [ 1252.394080][ T2697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13594'. [ 1252.419510][ T2697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13594'. [ 1252.508775][ T2703] xt_nat: multiple ranges no longer supported [ 1252.515475][ T9073] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1252.538868][ T2692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1252.568467][ T2707] loop1: detected capacity change from 0 to 256 [ 1252.610674][ T2707] FAT-fs (loop1): Directory bread(block 64) failed [ 1252.629441][ T2707] FAT-fs (loop1): Directory bread(block 65) failed [ 1252.636360][ T2707] FAT-fs (loop1): Directory bread(block 66) failed [ 1252.653879][ T2707] FAT-fs (loop1): Directory bread(block 67) failed [ 1252.664848][ T2707] FAT-fs (loop1): Directory bread(block 68) failed [ 1252.671460][ T2707] FAT-fs (loop1): Directory bread(block 69) failed [ 1252.697261][ T2707] FAT-fs (loop1): Directory bread(block 70) failed [ 1252.715066][ T2707] FAT-fs (loop1): Directory bread(block 71) failed [ 1252.726262][ T2707] FAT-fs (loop1): Directory bread(block 72) failed [ 1252.741750][T31866] EXT4-fs (loop3): unmounting filesystem. [ 1252.756383][ T2707] FAT-fs (loop1): Directory bread(block 73) failed [ 1252.771854][ T9073] usb 5-1: Using ep0 maxpacket: 32 [ 1252.876988][ T2707] syz.1.13597: attempt to access beyond end of device [ 1252.876988][ T2707] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1252.900172][ T9073] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1252.909313][ T9073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.921849][ T2707] syz.1.13597: attempt to access beyond end of device [ 1252.921849][ T2707] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1252.955059][ T9073] usb 5-1: config 0 descriptor?? [ 1253.010627][ T9073] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1253.017841][ T27] audit: type=1800 audit(2000000057.396:3443): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13597" name="file0" dev="loop1" ino=1048745 res=0 errno=0 [ 1253.048022][ T2719] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13603'. [ 1253.240061][ T2725] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13606'. [ 1253.274715][ T2727] overlayfs: option "workdir=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1253.274962][ T2727] overlayfs: missing 'lowerdir' [ 1253.324803][ T2731] netlink: 'syz.2.13609': attribute type 32 has an invalid length. [ 1253.362088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.460546][ T2733] netlink: 'syz.1.13610': attribute type 10 has an invalid length. [ 1253.478708][ T2733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13610'. [ 1253.488461][ T9073] gspca_sunplus: reg_w_riv err -71 [ 1253.493718][ T9073] sunplus: probe of 5-1:0.0 failed with error -71 [ 1253.503278][ T2733] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1253.518316][ T2733] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.554401][ T9073] usb 5-1: USB disconnect, device number 35 [ 1253.581270][ T2733] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1253.601221][ T2737] sctp: [Deprecated]: syz.2.13612 (pid 2737) Use of int in maxseg socket option. [ 1253.601221][ T2737] Use struct sctp_assoc_value instead [ 1254.206140][ T2763] loop1: detected capacity change from 0 to 16 [ 1254.230960][ T2763] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1254.238416][ T2762] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms [ 1254.365635][ T2770] tmpfs: Bad value for 'mpol' [ 1254.451944][ T2762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1254.476973][ T2776] loop0: detected capacity change from 0 to 256 [ 1255.371601][ T27] audit: type=1326 audit(2000000059.613:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2824 comm="syz.4.13650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f72f7dff9 code=0x7ffc0000 [ 1255.482685][ T27] audit: type=1326 audit(2000000059.631:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2824 comm="syz.4.13650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8f72f7dff9 code=0x7ffc0000 [ 1255.505401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.583709][ T27] audit: type=1326 audit(2000000059.631:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2824 comm="syz.4.13650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f72f7dff9 code=0x7ffc0000 [ 1255.610142][ T2836] binder: 2831:2836 ioctl c00c6211 0 returned -14 [ 1255.658282][ T27] audit: type=1326 audit(2000000059.631:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2824 comm="syz.4.13650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f72f7dff9 code=0x7ffc0000 [ 1255.736681][ T2841] device bond4 entered promiscuous mode [ 1255.779599][ T2842] loop1: detected capacity change from 0 to 2048 [ 1255.819950][ T2841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1255.864763][ T2842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.005159][ T2853] loop2: detected capacity change from 0 to 1764 [ 1256.498998][ T2879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13675'. [ 1256.831700][ T2893] loop0: detected capacity change from 0 to 8 [ 1256.942685][ T2893] SQUASHFS error: Failed to read block 0x730: -5 [ 1256.949185][ T2893] SQUASHFS error: Unable to read metadata cache entry [72e] [ 1257.113925][ T2903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13688'. [ 1257.637521][ T2921] vcan0 speed is unknown, defaulting to 1000 [ 1257.669885][ T27] audit: type=1326 audit(2000000061.755:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2928 comm="syz.3.13698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff75817dff9 code=0x0 [ 1257.765339][ T27] audit: type=1326 audit(2000000061.848:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2933 comm="syz.2.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1257.856337][ T27] audit: type=1326 audit(2000000061.876:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2933 comm="syz.2.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1257.940966][ T27] audit: type=1326 audit(2000000061.876:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2933 comm="syz.2.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1258.053256][ T27] audit: type=1326 audit(2000000061.876:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2933 comm="syz.2.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c2b7dff9 code=0x7ffc0000 [ 1258.139346][ T2921] wlan0 speed is unknown, defaulting to 1000 [ 1258.185741][ T52] block nbd3: Attempted send on invalid socket [ 1258.192171][ T52] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.203069][ T1044] block nbd3: Attempted send on invalid socket [ 1258.209436][ T1044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.220407][ T1044] block nbd3: Attempted send on invalid socket [ 1258.226802][ T1044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.237534][ T1044] block nbd3: Attempted send on invalid socket [ 1258.243793][ T1044] I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.257677][ T1044] block nbd3: Attempted send on invalid socket [ 1258.263967][ T1044] I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.276517][ T1044] block nbd3: Attempted send on invalid socket [ 1258.282818][ T1044] I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1258.294379][ T2946] VFS: unable to find oldfs superblock on device nbd3 [ 1258.649278][ T2959] binder: binder_mmap: 2956 20174000-20d74000 bad vm_flags failed -1 [ 1259.020650][ T2941] loop0: detected capacity change from 0 to 32768 [ 1259.052323][ T2971] loop4: detected capacity change from 0 to 1024 [ 1259.110615][ T2941] JBD2: Ignoring recovery information on journal [ 1259.151013][ T2969] loop2: detected capacity change from 0 to 4096 [ 1259.306993][ T2982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13726'. [ 1259.367299][ T2941] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1259.386821][ T2969] ntfs: volume version 3.1. [ 1259.435735][ T2941] (syz.0.13706,2941,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=32, inode=17057, rec_len=5, name_len=0 [ 1259.462739][ T2941] (syz.0.13706,2941,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 1259.520414][ T2941] (syz.0.13706,2941,0):ocfs2_mknod:296 ERROR: status = -2 [ 1259.549419][ T2941] (syz.0.13706,2941,0):ocfs2_mknod:500 ERROR: status = -2 [ 1259.604017][ T46] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1259.624733][T31752] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1259.699959][T28249] ocfs2: Unmounting device (7,0) on (node local) [ 1260.075956][ T2998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13734'. [ 1260.095257][ T2998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13734'. [ 1260.223690][T31752] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1260.256175][T31752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.264237][T31752] usb 2-1: Product: syz [ 1260.283946][T31752] usb 2-1: Manufacturer: syz [ 1260.298155][T31752] usb 2-1: SerialNumber: syz [ 1260.375613][T31752] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1260.486732][ T3012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13740'. [ 1260.896945][ T3032] netlink: 'syz.2.13750': attribute type 7 has an invalid length. [ 1260.904873][ T3032] netlink: 'syz.2.13750': attribute type 5 has an invalid length. [ 1261.015814][ T3032] netlink: 17 bytes leftover after parsing attributes in process `syz.2.13750'. [ 1261.057221][T31752] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1261.339703][ T52] block nbd2: Attempted send on invalid socket [ 1261.346124][ T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1261.379302][ T3051] hfsplus: unable to find HFS+ superblock [ 1261.462796][ T3055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13761'. [ 1261.480032][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13761'. [ 1261.559205][ T3724] usb 2-1: USB disconnect, device number 43 [ 1262.033132][ T3088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13774'. [ 1262.148071][ T3093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13777'. [ 1262.161027][ T3095] netlink: 288 bytes leftover after parsing attributes in process `syz.2.13776'. [ 1262.403997][T31752] usb 2-1: Service connection timeout for: 256 [ 1262.410227][T31752] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1262.447764][T31752] ath9k_htc: Failed to initialize the device [ 1262.479231][ T3724] usb 2-1: ath9k_htc: USB layer deinitialized [ 1262.766161][ T3112] loop0: detected capacity change from 0 to 4096 [ 1262.877626][ T3112] ntfs: volume version 3.1. [ 1262.891505][ T3123] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1262.937233][ T3123] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1263.061105][ T3127] netlink: 'syz.4.13793': attribute type 30 has an invalid length. [ 1263.197675][ T3130] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1263.227524][ T3130] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1263.318526][ T3135] program syz.0.13796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1263.545358][ T3143] loop0: detected capacity change from 0 to 256 [ 1263.590411][ T3143] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1263.696952][ T3108] loop2: detected capacity change from 0 to 32768 [ 1263.791993][ T3108] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.13785 (3108) [ 1263.868683][ T3108] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1263.878949][ T3108] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1263.965917][ T3108] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1263.974139][ T3108] BTRFS info (device loop2): force clearing of disk cache [ 1264.039846][ T3108] BTRFS info (device loop2): setting datacow [ 1264.045957][ T3108] BTRFS info (device loop2): doing ref verification [ 1264.090928][ T3108] BTRFS info (device loop2): turning off barriers [ 1264.116906][ T3108] BTRFS info (device loop2): enabling ssd optimizations [ 1264.123957][ T3108] BTRFS info (device loop2): using spread ssd allocation scheme [ 1264.143456][ T3160] loop1: detected capacity change from 0 to 4096 [ 1264.175026][ T3108] BTRFS info (device loop2): not using ssd optimizations [ 1264.218400][ T3108] BTRFS info (device loop2): not using spread ssd allocation scheme [ 1264.261424][ T3108] BTRFS info (device loop2): using free space tree [ 1264.309540][ T3160] ntfs3: loop1: mft corrupted [ 1264.571864][ T3108] BTRFS info (device loop2): rebuilding free space tree [ 1264.766381][ T3154] loop0: detected capacity change from 0 to 32768 [ 1264.880521][ T3154] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 1264.880521][ T3154] [ 1264.913400][ T3154] ialloc: diAlloc returned -5! [ 1265.171983][T27844] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1265.440327][ T3724] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1265.487821][ T3206] loop4: detected capacity change from 0 to 8192 [ 1265.590357][ T3206] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1265.668200][ T3206] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1265.731350][ T3206] REISERFS (device loop4): using ordered data mode [ 1265.737916][ T3206] reiserfs: using flush barriers [ 1265.760980][ T3724] usb 4-1: Using ep0 maxpacket: 32 [ 1265.777603][ T3206] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1265.811665][ T3206] REISERFS (device loop4): checking transaction log (loop4) [ 1266.044497][ T3206] REISERFS (device loop4): Using tea hash to sort names [ 1266.052584][ T3206] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1266.114305][ T3724] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1266.123424][ T3724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.159540][ T3724] usb 4-1: Product: syz [ 1266.170888][ T3724] usb 4-1: Manufacturer: syz [ 1266.181606][ T3724] usb 4-1: SerialNumber: syz [ 1266.195931][ T3724] usb 4-1: config 0 descriptor?? [ 1266.306323][T10717] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1266.691229][T10717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.704741][ T3724] usb 4-1: USB disconnect, device number 35 [ 1266.713566][T10717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1266.715033][ T3724] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 1266.743449][T10717] usb 3-1: config 1 has no interface number 0 [ 1266.752379][T10717] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1266.773009][ T3724] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 1266.947790][T10717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1266.977797][T10717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.005666][T10717] usb 3-1: Product: syz [ 1267.022528][T10717] usb 3-1: Manufacturer: syz [ 1267.031769][T10717] usb 3-1: SerialNumber: syz [ 1267.123205][T10717] usb 3-1: selecting invalid altsetting 1 [ 1267.319049][ T3258] loop1: detected capacity change from 0 to 1764 [ 1267.354528][T10717] cdc_ncm 3-1:1.1: bind() failure [ 1267.370696][T10717] usb 3-1: USB disconnect, device number 43 [ 1267.831454][ T3276] __nla_validate_parse: 2 callbacks suppressed [ 1267.831477][ T3276] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13856'. [ 1267.848825][ T3276] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13856'. [ 1267.877804][ T3649] Bluetooth: hci3: command tx timeout [ 1267.941002][ T3279] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1268.232414][ T3291] loop3: detected capacity change from 0 to 512 [ 1268.282577][ T3291] EXT4-fs: Ignoring removed mblk_io_submit option [ 1268.326920][ T3291] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1268.336942][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13865'. [ 1268.366951][ T3296] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1268.385794][ T3296] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1268.415922][ T3291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1268.465446][ T3291] System zones: 1-12 [ 1268.512702][ T3291] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.13864: corrupted in-inode xattr [ 1268.595819][ T3291] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.13864: couldn't read orphan inode 15 (err -117) [ 1268.648849][ T3314] loop1: detected capacity change from 0 to 4096 [ 1268.694409][ T3314] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1268.700230][ T3291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1268.729544][ T3314] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1268.760012][ T3316] loop2: detected capacity change from 0 to 256 [ 1268.778310][ T3314] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1268.829415][T31752] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1268.848313][ T3314] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1268.881833][ T3314] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1268.902806][ T3314] ntfs: volume version 3.1. [ 1268.910369][T31866] EXT4-fs (loop3): unmounting filesystem. [ 1268.912016][ T3314] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1268.938767][ T3314] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1269.011203][ T3314] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1269.041152][ T3314] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1269.082725][ T3314] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1269.279020][T31752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1269.298340][T31752] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1269.336355][T31752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1269.375664][T31752] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1269.411437][T31752] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1269.442653][T31752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.472101][T31752] usb 1-1: config 0 descriptor?? [ 1269.553981][ T3339] loop4: detected capacity change from 0 to 1024 [ 1269.607129][ T3339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1269.748738][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 1269.759393][T31752] hdpvr 1-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 1269.759393][T31752] 4(r¥ý [ 1269.759393][T31752] d×Å2}±dæ~ýýŠÙ­^r¤ [ 1269.773687][ T3724] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1269.994456][T31752] hdpvr 1-1:0.0: device init failed [ 1270.001311][T31752] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1270.041339][T31752] usb 1-1: USB disconnect, device number 38 [ 1270.069341][ T3724] usb 4-1: Using ep0 maxpacket: 32 [ 1270.208661][ T3724] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1270.223143][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1270.243467][ T3366] loop2: detected capacity change from 0 to 2048 [ 1270.245294][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1270.293170][ T3366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1270.335732][ T3366] ext4 filesystem being mounted at /668/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.454277][ T3724] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1270.470776][ T3724] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1270.484906][ T1044] block nbd1: Attempted send on invalid socket [ 1270.491190][ T1044] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1270.500646][ T3375] hfs: can't find a HFS filesystem on dev nbd1 [ 1270.507102][ T3724] usb 4-1: Product: syz [ 1270.511752][ T3724] usb 4-1: Manufacturer: syz [ 1270.523520][ T3724] usb 4-1: SerialNumber: syz [ 1270.538028][ T3724] usb 4-1: config 0 descriptor?? [ 1270.554922][T27844] EXT4-fs (loop2): unmounting filesystem. [ 1270.595209][ T3724] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1270.621258][ T3724] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1270.888100][ T3332] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1270.931926][ T22] usb 4-1: USB disconnect, device number 36 [ 1270.978922][ T22] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1271.077354][ T3395] netlink: 4392 bytes leftover after parsing attributes in process `syz.0.13907'. [ 1271.565994][ T3417] loop4: detected capacity change from 0 to 256 [ 1271.646663][ T3419] netlink: 'syz.3.13918': attribute type 13 has an invalid length. [ 1271.965051][ T3432] loop2: detected capacity change from 0 to 256 [ 1271.994506][ T3432] exfat: Deprecated parameter 'namecase' [ 1272.054333][ T3432] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1272.493710][ T3411] loop1: detected capacity change from 0 to 32768 [ 1272.517370][ T3724] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1272.617762][ T3411] XFS (loop1): Mounting V5 Filesystem [ 1272.802512][ T3411] XFS (loop1): Ending clean mount [ 1272.837722][ T3411] XFS (loop1): Quotacheck needed: Please wait. [ 1272.928877][T14790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.970100][ T3411] XFS (loop1): Quotacheck: Done. [ 1272.988051][ T3724] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1273.008235][ T3724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.023688][ T3724] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1273.034435][ T3724] usb 5-1: config 1 has no interface number 1 [ 1273.040601][ T3724] usb 5-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 1273.052249][ T3724] usb 5-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 1273.066444][ T3724] usb 5-1: config 1 interface 2 has no altsetting 1 [ 1273.075696][ T3644] XFS (loop1): Unmounting Filesystem [ 1273.176370][T14790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.366869][T14790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.378272][ T3724] usb 5-1: string descriptor 0 read error: -22 [ 1273.392938][ T3724] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.414861][ T3724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.472062][ T3724] usb 5-1: MIDIStreaming interface descriptor not found [ 1273.614271][T14790] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.723871][ T5051] usb 5-1: USB disconnect, device number 36 [ 1273.808906][ T3493] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1273.817744][ T3649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1273.824411][ T3493] overlayfs: missing 'lowerdir' [ 1273.837039][ T3649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1273.858459][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1273.880050][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1273.890640][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1273.900919][ T3649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1273.973016][ T3496] netlink: 'syz.0.13950': attribute type 29 has an invalid length. [ 1273.981200][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13950'. [ 1273.992324][ T3496] netlink: 'syz.0.13950': attribute type 29 has an invalid length. [ 1274.003703][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13950'. [ 1274.065001][ T3490] vcan0 speed is unknown, defaulting to 1000 [ 1274.834374][ T3490] wlan0 speed is unknown, defaulting to 1000 [ 1274.975758][ T3524] netlink: 'syz.0.13960': attribute type 11 has an invalid length. [ 1275.006128][ T3524] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.13960'. [ 1275.008547][T10717] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1275.304655][T10717] usb 5-1: Using ep0 maxpacket: 16 [ 1275.468330][T10717] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1275.477395][T10717] usb 5-1: config 0 has no interface number 0 [ 1275.692642][T10717] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1275.713098][T10717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.734312][T10717] usb 5-1: Product: syz [ 1275.739173][T10717] usb 5-1: Manufacturer: syz [ 1275.743827][T10717] usb 5-1: SerialNumber: syz [ 1275.768160][T10717] usb 5-1: config 0 descriptor?? [ 1275.853014][ T3724] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1275.966472][ T3490] chnl_net:caif_netlink_parms(): no params data found [ 1275.999693][ T3560] loop1: detected capacity change from 0 to 2048 [ 1276.066920][T10717] usb 5-1: selecting invalid altsetting 1 [ 1276.072762][T10717] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1276.082462][ T3561] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1276.105784][T27845] Bluetooth: hci4: command tx timeout [ 1276.128822][ T3560] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1276.143044][T10717] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1276.178266][ T3560] Remounting filesystem read-only [ 1276.183930][ T3560] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1276.193351][ T3560] NILFS (loop1): error -5 truncating bmap (ino=16) [ 1276.200253][T10717] speedtch: probe of 5-1:0.1 failed with error -22 [ 1276.210967][T10717] usb 5-1: USB disconnect, device number 37 [ 1276.262716][ T3644] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1276.292275][ T3564] loop3: detected capacity change from 0 to 1764 [ 1276.298264][ T3644] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1276.306819][ T3724] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1276.323513][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1276.342675][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1276.371079][ T3644] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1276.402307][ T3644] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1276.547716][ T3724] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1276.562822][ T3724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.577349][ T3724] usb 1-1: Product: syz [ 1276.589554][ T3724] usb 1-1: Manufacturer: syz [ 1276.600959][ T3724] usb 1-1: SerialNumber: syz [ 1276.617419][ T3724] usb 1-1: config 0 descriptor?? [ 1276.678356][ T3724] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 1276.699020][ T3724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1276.751595][ T3724] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 1276.762499][ T3724] usb 1-1: media controller created [ 1276.829117][ T3724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.900716][ T3724] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 1277.167862][ T3724] rc_core: IR keymap rc-twinhan1027 not found [ 1277.174125][ T3724] Registered IR keymap rc-empty [ 1277.200823][ T3724] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1277.227090][ T3724] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input90 [ 1277.259982][ T3724] dvb-usb: schedule remote query interval to 150 msecs. [ 1277.278276][ T3724] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 1277.321783][ T3724] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 1277.370091][ T3724] usb 1-1: USB disconnect, device number 39 [ 1277.439354][ T3602] loop3: detected capacity change from 0 to 8 [ 1277.448055][ T5051] m920x_read = error: -19 [ 1277.454635][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1277.596651][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.612467][ T3602] SQUASHFS error: xz decompression failed, data probably corrupt [ 1277.625500][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.629236][ T3602] SQUASHFS error: Failed to read block 0x60: -5 [ 1277.650464][ T3724] m920x_read = error: -19 [ 1277.654863][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1277.671366][ T3490] device bridge_slave_0 entered promiscuous mode [ 1277.739068][ T3602] SQUASHFS error: xz decompression failed, data probably corrupt [ 1277.749346][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.764765][ T3602] SQUASHFS error: Failed to read block 0x60: -5 [ 1277.772642][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.789715][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1277.789732][ T27] audit: type=1800 audit(2000000080.575:3453): pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13984" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 1277.799174][ T3490] device bridge_slave_1 entered promiscuous mode [ 1277.854734][ T3724] m920x_read = error: -19 [ 1277.859154][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1278.044771][ T5051] m920x_read = error: -19 [ 1278.049709][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1278.242104][ T3490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.259232][ T3724] m920x_read = error: -19 [ 1278.263676][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1278.322486][T27845] Bluetooth: hci4: command tx timeout [ 1278.333188][ T3490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.389176][ T3629] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1278.472225][ T3724] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1278.490856][ T5051] m920x_read = error: -19 [ 1278.495803][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1278.591972][ T3643] loop3: detected capacity change from 0 to 128 [ 1278.595108][ T3490] team0: Port device team_slave_0 added [ 1278.669081][T14790] device hsr_slave_0 left promiscuous mode [ 1278.688175][ T5051] m920x_read = error: -19 [ 1278.696513][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1278.737636][T14790] device hsr_slave_1 left promiscuous mode [ 1278.750227][ T3724] usb 2-1: Using ep0 maxpacket: 8 [ 1278.758795][T14790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.784738][T14790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.802437][T14790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.824083][T14790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.896931][T14790] bridge0: port 3(hsr0) entered disabled state [ 1278.912129][ T5051] m920x_read = error: -19 [ 1278.916541][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1278.930137][ T3724] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 12 [ 1278.963971][ T3724] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1278.975909][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.986537][T14790] device bridge_slave_1 left promiscuous mode [ 1278.987446][ T3724] usb 2-1: config 0 descriptor?? [ 1278.993066][T14790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.009968][T14790] device bridge_slave_0 left promiscuous mode [ 1279.016232][T14790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.028482][ T3621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1279.072576][ T3724] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1279.157715][ T3724] m920x_read = error: -19 [ 1279.162121][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1279.197936][T14790] device veth1_macvtap left promiscuous mode [ 1279.231633][T14790] device veth0_macvtap left promiscuous mode [ 1279.237828][T14790] device veth1_vlan left promiscuous mode [ 1279.280886][T14790] device veth0_vlan left promiscuous mode [ 1279.310225][ T3724] usb 2-1: USB disconnect, device number 44 [ 1279.380837][ T5051] m920x_read = error: -19 [ 1279.385740][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1279.573224][ T3724] m920x_read = error: -19 [ 1279.577722][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1279.776618][ T5051] m920x_read = error: -19 [ 1279.781196][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1279.958261][ T5051] m920x_read = error: -19 [ 1279.963229][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1279.972576][ T3690] loop3: detected capacity change from 0 to 32768 [ 1280.052527][ T3690] jfs_rename: dtInsert returned -EIO [ 1280.150596][ T5051] m920x_read = error: -19 [ 1280.155029][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1280.210588][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14013'. [ 1280.355773][ T5051] m920x_read = error: -19 [ 1280.375366][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1280.545129][T27845] Bluetooth: hci4: command tx timeout [ 1280.549973][ T3709] netlink: 'syz.3.14012': attribute type 1 has an invalid length. [ 1280.567201][ T3709] netlink: 'syz.3.14012': attribute type 2 has an invalid length. [ 1280.576223][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14012'. [ 1280.588742][ T5051] m920x_read = error: -19 [ 1280.593266][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1280.753044][ T3713] loop3: detected capacity change from 0 to 2048 [ 1280.776384][ T5051] m920x_read = error: -19 [ 1280.793408][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1280.810180][ T3713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1280.975576][ T5051] m920x_read = error: -19 [ 1280.979985][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1281.169571][ T5051] m920x_read = error: -19 [ 1281.174048][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1281.206755][T14790] team0 (unregistering): Port device team_slave_1 removed [ 1281.280095][T14790] team0 (unregistering): Port device team_slave_0 removed [ 1281.347981][T14790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.348474][ T3724] m920x_read = error: -19 [ 1281.370897][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1281.540413][ T3724] m920x_read = error: -19 [ 1281.545069][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1281.733547][ T3724] m920x_read = error: -19 [ 1281.737944][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1281.935819][ T3724] m920x_read = error: -19 [ 1281.940414][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1282.120714][ T3724] m920x_read = error: -19 [ 1282.125112][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1282.208660][T14790] bond0 (unregistering): Released all slaves [ 1282.299667][ T3724] m920x_read = error: -19 [ 1282.304293][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1282.332507][ T3490] team0: Port device team_slave_1 added [ 1282.409052][ T3719] netlink: 'syz.3.14021': attribute type 10 has an invalid length. [ 1282.449168][ T3719] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1282.481652][ T5051] m920x_read = error: -19 [ 1282.494856][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1282.515433][ T3490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.551518][ T3726] loop1: detected capacity change from 0 to 16 [ 1282.555843][ T3490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.605158][ T3726] erofs: (device loop1): mounted with root inode @ nid 36. [ 1282.656395][ T3490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.706549][ T5051] m920x_read = error: -19 [ 1282.710965][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1282.715227][ T3490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.719584][ T3724] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1282.759195][ T3649] Bluetooth: hci4: command tx timeout [ 1282.807126][ T3490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.835490][ T3731] loop3: detected capacity change from 0 to 2048 [ 1282.868374][ T3490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.943004][ T3731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1282.946312][ T5051] m920x_read = error: -19 [ 1282.957052][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1283.026601][ T3724] usb 1-1: Using ep0 maxpacket: 32 [ 1283.077710][ T3490] device hsr_slave_0 entered promiscuous mode [ 1283.085727][T31866] EXT4-fs (loop3): unmounting filesystem. [ 1283.113013][ T3490] device hsr_slave_1 entered promiscuous mode [ 1283.156702][ T3490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.164318][ T3490] Cannot create hsr debugfs directory [ 1283.165426][ T3976] m920x_read = error: -19 [ 1283.196124][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1283.304601][ T5051] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1283.400508][ T3976] m920x_read = error: -19 [ 1283.405172][ T3724] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1283.414538][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1283.446878][ T3724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.468445][ T3724] usb 1-1: Product: syz [ 1283.472691][ T3724] usb 1-1: Manufacturer: syz [ 1283.496194][ T3724] usb 1-1: SerialNumber: syz [ 1283.525604][ T3724] usb 1-1: config 0 descriptor?? [ 1283.585490][ T3724] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1283.615003][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14033'. [ 1283.625169][ T3976] m920x_read = error: -19 [ 1283.629538][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1283.800253][ T5051] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1283.838801][ T3976] m920x_read = error: -19 [ 1283.843461][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1283.871213][ T5051] usb 2-1: not running at top speed; connect to a high speed hub [ 1283.967706][ T5051] usb 2-1: config 3 has an invalid interface number: 1 but max is 0 [ 1283.986292][ T5051] usb 2-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 1284.015884][ T5051] usb 2-1: config 3 has no interface number 0 [ 1284.045714][ T5051] usb 2-1: config 3 interface 1 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1284.063215][ T3724] gspca_stk1135: reg_w 0x0 err -71 [ 1284.069474][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.091830][ T3724] gspca_stk1135: Sensor write failed [ 1284.098086][ T5051] usb 2-1: config 3 interface 1 has no altsetting 0 [ 1284.104872][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.111590][ T3724] gspca_stk1135: Sensor write failed [ 1284.127714][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.138061][ T3724] gspca_stk1135: Sensor read failed [ 1284.143879][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.156265][ T3778] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.14039'. [ 1284.168258][ T3724] gspca_stk1135: Sensor read failed [ 1284.174150][ T3724] gspca_stk1135: Detected sensor type unknown (0x0) [ 1284.192022][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.198400][ T3724] gspca_stk1135: Sensor read failed [ 1284.213173][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.230506][ T3724] gspca_stk1135: Sensor read failed [ 1284.246675][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.265788][ T3724] gspca_stk1135: Sensor write failed [ 1284.271646][ T3724] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.278539][ T5051] usb 2-1: New USB device found, idVendor=d483, idProduct=d7be, bcdDevice=22.3d [ 1284.298663][ T5051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.306892][ T3724] gspca_stk1135: Sensor write failed [ 1284.317772][ T3724] stk1135: probe of 1-1:0.0 failed with error -71 [ 1284.324595][ T5051] usb 2-1: Product: syz [ 1284.339930][ T5051] usb 2-1: Manufacturer: syz [ 1284.346740][ T3724] usb 1-1: USB disconnect, device number 40 [ 1284.353042][ T5051] usb 2-1: SerialNumber: syz [ 1284.363898][ T3976] m920x_read = error: -19 [ 1284.368295][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1284.565359][ T3976] m920x_read = error: -19 [ 1284.570129][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1284.748230][ T5051] rndis_host 2-1:3.1: skipping garbage [ 1284.763487][ T5051] usb 2-1: bad CDC descriptors [ 1284.795071][ T5051] usb 2-1: USB disconnect, device number 45 [ 1284.816025][ T3724] m920x_read = error: -19 [ 1284.820403][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1285.025411][ T3724] m920x_read = error: -19 [ 1285.029806][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1285.041807][ T3795] loop3: detected capacity change from 0 to 4096 [ 1285.132059][ T3795] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1285.158604][ T3795] ntfs3: loop3: Failed to load $Extend. [ 1285.238519][ T3724] m920x_read = error: -19 [ 1285.260824][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1285.392198][ T3490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1285.463807][T31752] m920x_read = error: -19 [ 1285.468302][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1285.487314][ T3810] netlink: 'syz.1.14051': attribute type 21 has an invalid length. [ 1285.507544][ T3810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14051'. [ 1285.547356][ T3490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1285.573064][ T3490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1285.616535][ T3490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1285.642534][ T3812] loop4: detected capacity change from 0 to 4096 [ 1285.688362][T31752] m920x_read = error: -19 [ 1285.693232][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1285.774783][ T3812] ntfs: volume version 3.1. [ 1285.880744][T31752] m920x_read = error: -19 [ 1285.885166][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1285.981723][ T3490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.011198][ T3831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14059'. [ 1286.050681][ T3490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.103577][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1286.112438][T31752] m920x_read = error: -19 [ 1286.116893][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1286.140114][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1286.186811][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1286.204642][ T3838] Timeout policy `syz0' can only be used by L3 protocol number 17 [ 1286.221325][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1286.241896][T14793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.249137][T14793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.287102][ T5051] m920x_read = error: -19 [ 1286.291511][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1286.326936][ T3843] loop3: detected capacity change from 0 to 16 [ 1286.334215][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1286.351777][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1286.366049][ T3843] erofs: (device loop3): mounted with root inode @ nid 36. [ 1286.387217][T14793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.394499][T14793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.436895][ T3843] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1286.483135][ T3843] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1286.483398][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1286.511344][ T3843] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1286.511526][ T5051] m920x_read = error: -19 [ 1286.547882][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1286.588039][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1286.604725][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1286.668286][ T3490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1286.744156][ T3490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1286.757235][ T3976] m920x_read = error: -19 [ 1286.761608][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1286.808875][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1286.827050][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1286.877989][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1286.897425][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1286.917109][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1286.932912][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1286.967036][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1286.975550][ T3976] m920x_read = error: -19 [ 1286.980446][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1287.013954][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1287.066631][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1287.133838][T14793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1287.168056][ T3871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14076'. [ 1287.185741][ T3976] m920x_read = error: -19 [ 1287.190138][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1287.273610][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14079'. [ 1287.292925][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14077'. [ 1287.409621][ T3976] m920x_read = error: -19 [ 1287.414028][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1287.502971][ T3883] loop4: detected capacity change from 0 to 256 [ 1287.563832][ T3883] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 1287.621318][ T3888] loop1: detected capacity change from 0 to 1024 [ 1287.628189][ T3724] m920x_read = error: -19 [ 1287.632579][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1287.688556][ T3640] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 1287.827083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1287.835093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.847732][ T3724] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1287.862805][T31752] m920x_read = error: -19 [ 1287.864055][ T3895] loop4: detected capacity change from 0 to 512 [ 1287.867292][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1287.914150][ T3490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.945024][ T3895] EXT4-fs: Ignoring removed mblk_io_submit option [ 1287.972246][ T3895] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1287.998379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1288.018241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1288.028440][ T3895] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.14085: corrupted in-inode xattr [ 1288.059618][ T3895] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.14085: couldn't read orphan inode 15 (err -117) [ 1288.084756][ T3895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1288.111945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1288.120249][T31752] m920x_read = error: -19 [ 1288.124711][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1288.141150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1288.152315][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 1288.196925][ T3490] device veth0_vlan entered promiscuous mode [ 1288.207643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1288.236405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1288.267490][ T3490] device veth1_vlan entered promiscuous mode [ 1288.318641][ T3724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1288.340753][T31752] m920x_read = error: -19 [ 1288.345149][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1288.359755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1288.372022][ T3724] usb 4-1: not running at top speed; connect to a high speed hub [ 1288.378999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1288.422473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1288.455196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1288.468531][ T3490] device veth0_macvtap entered promiscuous mode [ 1288.470143][ T3724] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1288.491052][ T3490] device veth1_macvtap entered promiscuous mode [ 1288.507376][ T3724] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1288.542259][ T3724] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.548292][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.570890][ T5051] m920x_read = error: -19 [ 1288.575839][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1288.601518][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.648222][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.673363][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.692389][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.714218][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.724117][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.757585][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.770712][ T3724] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.788458][ T3724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.811757][ T3490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.819235][ T3724] usb 4-1: Product: syz [ 1288.828234][ T3724] usb 4-1: Manufacturer: syz [ 1288.839165][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1288.841285][ T3724] usb 4-1: SerialNumber: syz [ 1288.871369][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1288.880466][T31752] m920x_read = error: -19 [ 1288.885342][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1288.909138][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1288.956223][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1288.996610][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.022898][ T3922] net_ratelimit: 250 callbacks suppressed [ 1289.022921][ T3922] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1289.044635][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.055771][T31752] m920x_read = error: -19 [ 1289.060160][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1289.077233][ T3901] loop0: detected capacity change from 0 to 32768 [ 1289.081940][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.108869][ T3901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.14087 (3901) [ 1289.116088][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.158327][ T3901] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1289.187334][ T3901] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1289.198073][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.218897][ T3901] BTRFS info (device loop0): force zlib compression, level 3 [ 1289.226538][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.242743][ T3901] BTRFS info (device loop0): force clearing of disk cache [ 1289.248919][ T3490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.253524][T31752] m920x_read = error: -19 [ 1289.265799][ T3901] BTRFS info (device loop0): setting nodatasum [ 1289.280274][ T3490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.280610][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1289.299946][ T3901] BTRFS info (device loop0): use zlib compression, level 3 [ 1289.308518][ T3901] BTRFS info (device loop0): allowing degraded mounts [ 1289.315862][ T3490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.316878][ T3901] BTRFS info (device loop0): enabling disk space caching [ 1289.331909][ T3901] BTRFS info (device loop0): disk space caching is enabled [ 1289.354430][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1289.370011][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1289.384181][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14094'. [ 1289.407590][ T3490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.472882][ T3490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.494234][T31752] m920x_read = error: -19 [ 1289.498626][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1289.507091][ T3724] usb 4-1: 0:2 : does not exist [ 1289.542113][ T3941] overlayfs: missing 'lowerdir' [ 1289.552330][ T3490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.582478][ T3724] usb 4-1: USB disconnect, device number 37 [ 1289.587215][ T3490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.740256][ T5051] m920x_read = error: -19 [ 1289.744662][ T5051] dvb-usb: error -19 while querying for an remote control event. [ 1289.780057][ T3901] BTRFS info (device loop0): enabling ssd optimizations [ 1289.878413][ T3901] BTRFS info (device loop0): rebuilding free space tree [ 1289.926394][ T3901] BTRFS info (device loop0): disabling free space tree [ 1289.954539][ T3724] m920x_read = error: -19 [ 1289.958928][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1289.975931][ T3901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1289.992888][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.039274][ T3901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1290.049584][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.128068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1290.157185][ T3976] m920x_read = error: -19 [ 1290.162043][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1290.204859][T14796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.232155][T14796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.255283][ T3981] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 1290.318422][ T3901] BTRFS info (device loop0): balance: start -f -svrange=18446744073709551612..18446744073709551612,limit=1,limit=1..0 [ 1290.322658][T14790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1290.388825][ T3901] BTRFS info (device loop0): balance: ended with status: 0 [ 1290.399733][ T3976] m920x_read = error: -19 [ 1290.404459][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1290.574814][ T3976] m920x_read = error: -19 [ 1290.579223][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1290.600176][T28249] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1290.620372][ T3991] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1290.720014][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1290.726483][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1291.225092][ T4011] netlink: 'syz.3.14115': attribute type 8 has an invalid length. [ 1291.236977][ T22] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1291.277773][ T4011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1291.337845][ T14] m920x_read = error: -19 [ 1291.342287][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1291.514693][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1291.578996][ T14] m920x_read = error: -19 [ 1291.584006][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1291.643064][ T22] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.781884][ T14] m920x_read = error: -19 [ 1291.782071][ T22] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.786253][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1291.942382][ T22] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.963833][ T14] m920x_read = error: -19 [ 1291.968266][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1291.986724][ T4031] loop0: detected capacity change from 0 to 4096 [ 1292.097532][ T4031] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1292.129678][ T4031] ntfs3: loop0: Failed to load $Extend. [ 1292.145575][ T22] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1292.156146][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.188111][ T14] m920x_read = error: -19 [ 1292.192650][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1292.262648][ T22] usb 3-1: Product: syz [ 1292.284534][ T22] usb 3-1: Manufacturer: syz [ 1292.289237][ T22] usb 3-1: SerialNumber: syz [ 1292.381533][ T3724] m920x_read = error: -19 [ 1292.386237][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1292.583897][ T3724] m920x_read = error: -19 [ 1292.588296][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1292.628749][ T22] adutux 3-1:168.0: interrupt endpoints not found [ 1292.659535][ T22] usb 3-1: USB disconnect, device number 44 [ 1292.786783][ T3724] m920x_read = error: -19 [ 1292.791593][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1292.947205][T27845] Bluetooth: hci3: command 0x0406 tx timeout [ 1293.022398][ T3724] m920x_read = error: -19 [ 1293.026858][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1293.225938][ T3724] m920x_read = error: -19 [ 1293.231312][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1293.449760][ T3724] m920x_read = error: -19 [ 1293.454209][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1293.663761][ T3724] m920x_read = error: -19 [ 1293.668575][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1293.850062][ T4121] netlink: 'syz.1.14155': attribute type 1 has an invalid length. [ 1293.877420][ T3724] m920x_read = error: -19 [ 1293.882113][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1294.091068][ T3724] m920x_read = error: -19 [ 1294.095473][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1294.180656][ T4131] ip6t_srh: unknown srh invflags 7D00 [ 1294.305153][ T14] m920x_read = error: -19 [ 1294.309566][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1294.399637][ T4077] loop3: detected capacity change from 0 to 32768 [ 1294.469139][ T4077] XFS: ikeep mount option is deprecated. [ 1294.474842][ T4077] XFS: ikeep mount option is deprecated. [ 1294.519003][ T14] m920x_read = error: -19 [ 1294.523406][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1294.633203][ T4077] XFS (loop3): Mounting V5 Filesystem [ 1294.642923][ T4098] loop2: detected capacity change from 0 to 32768 [ 1294.675139][ T4098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.14146 (4098) [ 1294.723756][ T4098] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1294.743192][ T3724] m920x_read = error: -19 [ 1294.748037][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1294.829524][ T4098] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1294.854141][ T4077] XFS (loop3): Ending clean mount [ 1294.890286][ T4098] BTRFS info (device loop2): using free space tree [ 1294.983613][ T3724] m920x_read = error: -19 [ 1294.988111][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1295.181553][ T3724] m920x_read = error: -19 [ 1295.185966][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1295.216201][ T4098] BTRFS info (device loop2): enabling ssd optimizations [ 1295.250680][T31866] XFS (loop3): Unmounting Filesystem [ 1295.395641][ T3490] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1295.417977][ T3724] m920x_read = error: -19 [ 1295.422419][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1295.619966][ T3724] m920x_read = error: -19 [ 1295.624367][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1295.844499][ T3724] m920x_read = error: -19 [ 1295.848936][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1296.079450][ T3724] m920x_read = error: -19 [ 1296.084176][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1296.299976][ T3724] m920x_read = error: -19 [ 1296.309533][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1296.374629][ T4197] loop1: detected capacity change from 0 to 32768 [ 1296.477068][ T4197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14172 (4197) [ 1296.507224][ T3724] m920x_read = error: -19 [ 1296.511662][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1296.558389][ T4197] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1296.596426][ T4197] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1296.639676][ T4197] BTRFS info (device loop1): turning off barriers [ 1296.667497][ T4197] BTRFS info (device loop1): enabling auto defrag [ 1296.674061][ T4197] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1296.710288][ T3724] m920x_read = error: -19 [ 1296.714683][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1296.751127][ T4197] BTRFS info (device loop1): use lzo compression, level 0 [ 1296.792003][ T4197] BTRFS info (device loop1): using free space tree [ 1296.934754][ T3977] m920x_read = error: -19 [ 1296.939159][ T3977] dvb-usb: error -19 while querying for an remote control event. [ 1297.149715][ T3724] m920x_read = error: -19 [ 1297.154121][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1297.287498][ T3977] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1297.305760][ T3644] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1297.330482][ T3724] m920x_read = error: -19 [ 1297.334870][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1297.453890][ T4275] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1297.591800][ T3977] usb 1-1: Using ep0 maxpacket: 8 [ 1297.736881][ T3977] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.793446][ T4280] loop2: detected capacity change from 0 to 2048 [ 1297.867942][ T3977] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.894541][ T4280] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1297.971919][ T4280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1297.993239][ T3977] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.046078][ T1888] m920x_read = error: -19 [ 1298.061476][ T1888] dvb-usb: error -19 while querying for an remote control event. [ 1298.196543][ T3977] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1298.217861][ T3977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.241802][ T3977] usb 1-1: Product: syz [ 1298.246026][ T3977] usb 1-1: Manufacturer: syz [ 1298.285939][ T3977] usb 1-1: SerialNumber: syz [ 1298.295904][ T4291] netlink: 'syz.2.14200': attribute type 8 has an invalid length. [ 1298.314760][ T14] m920x_read = error: -19 [ 1298.319251][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1298.481846][ T4232] loop4: detected capacity change from 0 to 32768 [ 1298.500491][ T4301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14202'. [ 1298.509926][ T14] m920x_read = error: -19 [ 1298.520726][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1298.531571][ T4301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14202'. [ 1298.554471][ T4232] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1298.573323][ T4301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14202'. [ 1298.581356][ T4232] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1298.626654][ T4303] loop3: detected capacity change from 0 to 512 [ 1298.643871][ T3977] adutux 1-1:168.0: interrupt endpoints not found [ 1298.652362][ T4232] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1298.669787][ T3977] usb 1-1: USB disconnect, device number 41 [ 1298.711587][T20582] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1298.720390][ T14] m920x_read = error: -19 [ 1298.720406][T20582] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1298.758069][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1298.804673][ T4303] EXT4-fs (loop3): 1 truncate cleaned up [ 1298.828197][ T4303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1298.944965][ T3977] m920x_read = error: -19 [ 1298.949405][ T3977] dvb-usb: error -19 while querying for an remote control event. [ 1299.011028][T20582] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 271ms [ 1299.018731][T20582] gfs2: fsid=syz:syz.0: jid=0: Done [ 1299.054571][T31866] EXT4-fs (loop3): unmounting filesystem. [ 1299.069039][ T4232] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1299.158349][T31752] m920x_read = error: -19 [ 1299.163025][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1299.372229][T31752] m920x_read = error: -19 [ 1299.376656][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1299.607769][T31752] m920x_read = error: -19 [ 1299.612163][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1299.821298][T31752] m920x_read = error: -19 [ 1299.825762][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1300.057442][T31752] m920x_read = error: -19 [ 1300.061849][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1300.146048][ T4362] Error parsing options; rc = [-22] [ 1300.246892][ T4368] usb usb8: usbfs: process 4368 (syz.0.14231) did not claim interface 0 before use [ 1300.259507][T31752] m920x_read = error: -19 [ 1300.264364][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1300.410127][ T4374] netlink: 'syz.3.14235': attribute type 10 has an invalid length. [ 1300.445524][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.455322][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.464159][ T14] m920x_read = error: -19 [ 1300.468531][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1300.537293][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.544539][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.552026][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.559208][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.677125][ T14] m920x_read = error: -19 [ 1300.681522][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1300.691560][ T4374] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1300.879548][T31752] m920x_read = error: -19 [ 1300.883958][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1300.922457][ T4394] loop2: detected capacity change from 0 to 64 [ 1301.010781][ T4394] syz.2.14245: attempt to access beyond end of device [ 1301.010781][ T4394] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1301.064735][ T4394] buffer_io_error: 10 callbacks suppressed [ 1301.064754][ T4394] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1301.084510][T31752] m920x_read = error: -19 [ 1301.088928][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1301.218363][ T4394] syz.2.14245: attempt to access beyond end of device [ 1301.218363][ T4394] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1301.268255][ T4394] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1301.287970][ T27] audit: type=1800 audit(2000000102.561:3454): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14245" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 1301.318026][T31752] m920x_read = error: -19 [ 1301.326330][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1301.542433][T31752] m920x_read = error: -19 [ 1301.547302][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1301.635944][ T4418] loop0: detected capacity change from 0 to 256 [ 1301.747054][ T14] m920x_read = error: -19 [ 1301.751441][ T14] dvb-usb: error -19 while querying for an remote control event. [ 1301.820369][ T4423] x_tables: unsorted entry at hook 3 [ 1301.970153][ T3970] m920x_read = error: -19 [ 1301.991381][ T3970] dvb-usb: error -19 while querying for an remote control event. [ 1302.224273][ T4397] loop1: detected capacity change from 0 to 32768 [ 1302.248894][T31752] m920x_read = error: -19 [ 1302.258971][ T4397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.14247 (4397) [ 1302.271558][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1302.323601][ T4397] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1302.361160][ T4397] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1302.425302][ T4397] BTRFS info (device loop1): force zlib compression, level 3 [ 1302.458715][T31752] m920x_read = error: -19 [ 1302.483456][ T4397] BTRFS info (device loop1): force clearing of disk cache [ 1302.490644][ T4397] BTRFS info (device loop1): setting nodatasum [ 1302.497594][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1302.523056][ T4397] BTRFS info (device loop1): use zlib compression, level 3 [ 1302.566524][ T4397] BTRFS info (device loop1): allowing degraded mounts [ 1302.598929][ T4397] BTRFS info (device loop1): enabling disk space caching [ 1302.641309][ T4397] BTRFS info (device loop1): disk space caching is enabled [ 1302.697708][ T4448] loop0: detected capacity change from 0 to 1024 [ 1302.721873][ T4452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14273'. [ 1302.731426][T31752] m920x_read = error: -19 [ 1302.735880][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1302.980246][ T4397] BTRFS info (device loop1): enabling ssd optimizations [ 1302.991137][ T3970] m920x_read = error: -19 [ 1302.995530][ T3970] dvb-usb: error -19 while querying for an remote control event. [ 1303.007979][ T4397] BTRFS info (device loop1): rebuilding free space tree [ 1303.050558][ T4397] BTRFS info (device loop1): disabling free space tree [ 1303.071594][ T4474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14276'. [ 1303.082150][ T4397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1303.097660][ T4397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1303.128884][ T4474] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14276'. [ 1303.190538][T31752] m920x_read = error: -19 [ 1303.205797][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1303.246385][ T4397] BTRFS info (device loop1): balance: start -f -sdrange=4398046511104..0,limit=42949672976,stripes=0..255 [ 1303.286499][ T4397] BTRFS info (device loop1): balance: ended with status: 0 [ 1303.406442][T31752] m920x_read = error: -19 [ 1303.411095][T31752] dvb-usb: error -19 while querying for an remote control event. [ 1303.432213][ T4481] loop0: detected capacity change from 0 to 2048 [ 1303.482108][ T3644] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1303.537640][ T4485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1303.761701][ T4481] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1303.788211][ T4481] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1303.828232][ T4481] Remounting filesystem read-only [ 1303.833454][ T4481] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1303.957112][ T4481] syz.0.14279 (4481) used greatest stack depth: 19008 bytes left [ 1304.045535][T29572] m920x_read = error: -19 [ 1304.049940][T29572] dvb-usb: error -19 while querying for an remote control event. [ 1304.126182][ T4449] loop4: detected capacity change from 0 to 32768 [ 1304.197429][ T4449] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 1304.237256][T28249] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1304.246651][T28249] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1304.254540][ T3724] m920x_read = error: -19 [ 1304.276842][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1304.299697][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.347054][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.371975][ T4499] loop3: detected capacity change from 0 to 4096 [ 1304.407768][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.441993][T28249] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1304.460899][ T3687] m920x_read = error: -19 [ 1304.462883][ T4499] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1304.465274][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1304.484001][T28249] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1304.503778][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.512720][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.567791][T28249] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1304.575148][T28249] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.631878][ T4499] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 1304.717464][ T3687] m920x_read = error: -19 [ 1304.722278][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1304.925626][ T4514] usb usb8: usbfs: process 4514 (syz.1.14296) did not claim interface 0 before use [ 1304.935209][ T3687] m920x_read = error: -19 [ 1304.939985][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1305.017157][ T22] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1305.150517][ T3687] m920x_read = error: -19 [ 1305.154921][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1305.381019][ T3976] m920x_read = error: -19 [ 1305.385419][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1305.429361][ T22] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1305.476524][ T22] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1305.520565][ T4539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14307'. [ 1305.529661][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1305.551290][ T4539] netlink: 'syz.4.14307': attribute type 1 has an invalid length. [ 1305.583645][ T3976] m920x_read = error: -19 [ 1305.588055][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1305.600797][ T4539] netlink: 'syz.4.14307': attribute type 2 has an invalid length. [ 1305.626875][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14307'. [ 1305.722773][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 1305.767964][ T22] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1305.786545][ T22] usb 3-1: Product: syz [ 1305.790838][ T22] usb 3-1: Manufacturer: syz [ 1305.795455][ T22] usb 3-1: SerialNumber: syz [ 1305.815264][ T3976] m920x_read = error: -19 [ 1305.818953][ T22] usb 3-1: config 0 descriptor?? [ 1305.820319][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1306.043289][ T3976] m920x_read = error: -19 [ 1306.047706][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1306.097260][ T22] usbtest 3-1:0.0: Linux user mode ISO test driver [ 1306.103950][ T22] usbtest 3-1:0.0: high-speed {control iso-in} tests (+alt) [ 1306.195889][ T4529] loop3: detected capacity change from 0 to 32768 [ 1306.232324][ T4529] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.14303 (4529) [ 1306.247018][ T3976] m920x_read = error: -19 [ 1306.251404][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1306.314666][ T22] usb 3-1: USB disconnect, device number 45 [ 1306.325031][ T4529] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1306.358361][ T4529] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1306.395029][ T4529] BTRFS info (device loop3): enabling auto defrag [ 1306.434302][ T4529] BTRFS info (device loop3): doing ref verification [ 1306.452527][ T4529] BTRFS info (device loop3): use no compression [ 1306.460167][ T3687] m920x_read = error: -19 [ 1306.464549][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1306.493094][ T4529] BTRFS info (device loop3): force clearing of disk cache [ 1306.514004][ T4529] BTRFS info (device loop3): disabling free space tree [ 1306.590860][ T4538] loop1: detected capacity change from 0 to 32768 [ 1306.696738][ T3687] m920x_read = error: -19 [ 1306.701129][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1306.744336][ T4538] XFS (loop1): Mounting V5 Filesystem [ 1306.834541][ T4529] BTRFS info (device loop3): enabling ssd optimizations [ 1306.875719][ T4529] BTRFS info (device loop3): rebuilding free space tree [ 1306.920162][ T3687] m920x_read = error: -19 [ 1306.923465][ T4529] BTRFS info (device loop3): disabling free space tree [ 1306.924565][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1306.952088][ T4529] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1306.960420][ T4538] XFS (loop1): Ending clean mount [ 1306.982268][ T4529] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1307.122865][ T3687] m920x_read = error: -19 [ 1307.127305][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1307.264779][ T4595] loop4: detected capacity change from 0 to 2048 [ 1307.299676][T31866] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1307.319757][ T3976] m920x_read = error: -19 [ 1307.324171][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1307.341422][ T3644] XFS (loop1): Unmounting Filesystem [ 1307.375178][ T4598] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1307.539775][ T3976] m920x_read = error: -19 [ 1307.544375][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1307.569788][ T4595] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1307.689977][ T4595] Remounting filesystem read-only [ 1307.769550][ T4595] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1307.800800][ T3687] m920x_read = error: -19 [ 1307.805481][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1308.011990][ T3724] m920x_read = error: -19 [ 1308.016542][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1308.060101][ T4590] loop0: detected capacity change from 0 to 32768 [ 1308.168008][ T4590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.14319 (4590) [ 1308.256247][ T3724] m920x_read = error: -19 [ 1308.262163][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1308.288120][ T4590] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1308.331314][ T4590] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1308.400594][ T4590] BTRFS info (device loop0): using free space tree [ 1308.448572][ T3687] m920x_read = error: -19 [ 1308.453005][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1308.585988][ T4620] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1308.608977][ T4620] overlayfs: overlapping lowerdir path [ 1308.673995][ T3687] m920x_read = error: -19 [ 1308.678387][ T3687] dvb-usb: error -19 while querying for an remote control event. [ 1308.865592][ T3724] m920x_read = error: -19 [ 1308.870159][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1308.877158][ T4650] ntfs3: nbd4: try to read out of volume at offset 0x0 [ 1308.897153][ T4590] BTRFS info (device loop0): enabling ssd optimizations [ 1308.983130][ T3687] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1309.088970][ T3724] m920x_read = error: -19 [ 1309.099434][ T3724] dvb-usb: error -19 while querying for an remote control event. [ 1309.132855][T28249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1309.176089][ T4660] netlink: 'syz.2.14344': attribute type 8 has an invalid length. [ 1309.207714][ T4660] netlink: 'syz.2.14344': attribute type 4 has an invalid length. [ 1309.262573][ T4660] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.14344'. [ 1309.378798][ T3687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.421562][ T3687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1309.448676][ T3687] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1309.472709][ T3687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1309.475817][ T4668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14350'. [ 1309.669115][ T3687] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1309.678813][ T3687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.701454][ T3687] usb 2-1: Product: syz [ 1309.705685][ T3687] usb 2-1: Manufacturer: syz [ 1309.730435][ T3687] usb 2-1: SerialNumber: syz [ 1309.773957][ T3687] usb 2-1: config 0 descriptor?? [ 1309.821569][ T3687] redrat3 2-1:0.0: Couldn't find all endpoints [ 1309.944433][ T3969] m920x_read = error: -19 [ 1309.949534][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1310.057463][ T3969] usb 2-1: USB disconnect, device number 46 [ 1310.148516][T29572] m920x_read = error: -19 [ 1310.152976][T29572] dvb-usb: error -19 while querying for an remote control event. [ 1310.156664][ T4685] loop3: detected capacity change from 0 to 4096 [ 1310.192943][ T4685] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1310.312873][ T4685] ntfs3: loop3: failed to convert "c46c" to maciceland [ 1310.351430][ T3969] m920x_read = error: -19 [ 1310.355913][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1310.565260][ T3969] m920x_read = error: -19 [ 1310.570010][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1310.606122][ T4699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14364'. [ 1310.649136][ T4704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1310.810677][ T3969] m920x_read = error: -19 [ 1310.822009][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1310.918286][ T22] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1310.992864][ T3969] m920x_read = error: -19 [ 1310.997264][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1311.148818][ T4724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14376'. [ 1311.196336][ T3969] m920x_read = error: -19 [ 1311.200746][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1311.303084][ T22] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.347947][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14379'. [ 1311.389180][ T3976] m920x_read = error: -19 [ 1311.393578][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1311.428780][ T4738] loop0: detected capacity change from 0 to 256 [ 1311.497777][ T4738] FAT-fs (loop0): Directory bread(block 64) failed [ 1311.504378][ T4738] FAT-fs (loop0): Directory bread(block 65) failed [ 1311.508785][ T22] usb 3-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 1311.538524][ T4738] FAT-fs (loop0): Directory bread(block 66) failed [ 1311.545146][ T4738] FAT-fs (loop0): Directory bread(block 67) failed [ 1311.564088][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.581269][ T4738] FAT-fs (loop0): Directory bread(block 68) failed [ 1311.594234][ T4738] FAT-fs (loop0): Directory bread(block 69) failed [ 1311.602574][ T22] usb 3-1: Product: syz [ 1311.606782][ T22] usb 3-1: Manufacturer: syz [ 1311.616972][ T4738] FAT-fs (loop0): Directory bread(block 70) failed [ 1311.643975][ T22] usb 3-1: SerialNumber: syz [ 1311.645019][ T3969] m920x_read = error: -19 [ 1311.652974][ T3969] dvb-usb: error -19 while querying for an remote control event. [ 1311.666525][ T4738] FAT-fs (loop0): Directory bread(block 71) failed [ 1311.673315][ T4738] FAT-fs (loop0): Directory bread(block 72) failed [ 1311.687771][ T4738] FAT-fs (loop0): Directory bread(block 73) failed [ 1311.901659][ T3976] m920x_read = error: -19 [ 1311.906064][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1312.009010][ T22] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1312.015593][ T22] dvb_usb_af9035: probe of 3-1:164.0 failed with error -22 [ 1312.030028][ T3969] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1312.071016][ T22] usb 3-1: USB disconnect, device number 46 [ 1312.104785][ T3976] m920x_read = error: -19 [ 1312.109198][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1312.247173][ T3689] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1312.318877][ T3976] m920x_read = error: -19 [ 1312.323323][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1312.338945][ T4765] loop0: detected capacity change from 0 to 128 [ 1312.376985][ T4765] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1312.397629][ T4765] syz.0.14395: attempt to access beyond end of device [ 1312.397629][ T4765] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1312.412377][ T4765] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1312.429882][ T4765] ================================================================== [ 1312.438245][ T4765] BUG: KASAN: use-after-free in sysv_new_inode+0x107e/0x1210 [ 1312.445657][ T4765] Read of size 2 at addr ffff88804bf6f1ce by task syz.0.14395/4765 [ 1312.453587][ T4765] [ 1312.455933][ T4765] CPU: 0 PID: 4765 Comm: syz.0.14395 Not tainted 6.1.113-syzkaller #0 [ 1312.464110][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1312.474226][ T4765] Call Trace: [ 1312.475263][ T4754] loop4: detected capacity change from 0 to 32768 [ 1312.477509][ T4765] [ 1312.486890][ T4765] dump_stack_lvl+0x1e3/0x2cb [ 1312.491609][ T4765] ? nf_tcp_handle_invalid+0x642/0x642 [ 1312.497122][ T4765] ? panic+0x764/0x764 [ 1312.501744][ T4765] ? _printk+0xd1/0x111 [ 1312.505945][ T4765] ? __virt_addr_valid+0x17f/0x530 [ 1312.506174][ T4754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.14390 (4754) [ 1312.511075][ T4765] ? __virt_addr_valid+0x17f/0x530 [ 1312.511110][ T4765] print_report+0x15f/0x4f0 [ 1312.511133][ T4765] ? __virt_addr_valid+0x17f/0x530 [ 1312.511160][ T4765] ? __virt_addr_valid+0x17f/0x530 [ 1312.511186][ T4765] ? __virt_addr_valid+0x45b/0x530 [ 1312.548338][ T4765] ? __phys_addr+0xb6/0x170 [ 1312.552860][ T4765] ? sysv_new_inode+0x107e/0x1210 [ 1312.557905][ T4765] kasan_report+0x136/0x160 [ 1312.562443][ T4765] ? sysv_new_inode+0x107e/0x1210 [ 1312.567493][ T4765] sysv_new_inode+0x107e/0x1210 [ 1312.572374][ T4765] ? sysv_free_inode+0x840/0x840 [ 1312.577331][ T4765] ? __d_add+0x503/0x800 [ 1312.581598][ T4765] ? generic_permission+0x27c/0x4f0 [ 1312.586818][ T4765] sysv_mknod+0x4a/0xe0 [ 1312.590997][ T4765] ? sysv_lookup+0xe0/0xe0 [ 1312.595422][ T4765] path_openat+0x12f1/0x2e60 [ 1312.600038][ T4765] ? do_filp_open+0x480/0x480 [ 1312.604736][ T4765] do_filp_open+0x230/0x480 [ 1312.609268][ T4765] ? vfs_tmpfile+0x4a0/0x4a0 [ 1312.613876][ T4765] ? _raw_spin_unlock+0x24/0x40 [ 1312.618737][ T4765] ? alloc_fd+0x5a0/0x640 [ 1312.623106][ T4765] do_sys_openat2+0x13b/0x4f0 [ 1312.627798][ T4765] ? do_sys_open+0x220/0x220 [ 1312.632405][ T4765] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1312.638403][ T4765] __x64_sys_creat+0x11f/0x160 [ 1312.643183][ T4765] ? __x64_compat_sys_openat+0x290/0x290 [ 1312.648831][ T4765] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1312.654822][ T4765] ? lockdep_hardirqs_on+0x94/0x130 [ 1312.660030][ T4765] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1312.666019][ T4765] do_syscall_64+0x3b/0xb0 [ 1312.670446][ T4765] ? clear_bhb_loop+0x45/0xa0 [ 1312.675138][ T4765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1312.681042][ T4765] RIP: 0033:0x7eff6837dff9 [ 1312.685463][ T4765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.705077][ T4765] RSP: 002b:00007eff6924b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1312.713497][ T4765] RAX: ffffffffffffffda RBX: 00007eff68535f80 RCX: 00007eff6837dff9 [ 1312.721478][ T4765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 1312.729451][ T4765] RBP: 00007eff683f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1312.737446][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.745441][ T4765] R13: 0000000000000000 R14: 00007eff68535f80 R15: 00007ffce5a82648 [ 1312.753423][ T4765] [ 1312.756450][ T4765] [ 1312.758772][ T4765] The buggy address belongs to the physical page: [ 1312.765190][ T4765] page:ffffea00012fdbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4bf6f [ 1312.775346][ T4765] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1312.782469][ T4765] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 1312.791057][ T4765] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 1312.799635][ T4765] page dumped because: kasan: bad access detected [ 1312.806048][ T4765] page_owner tracks the page as freed [ 1312.811410][ T4765] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 20168, tgid 20168 (syz.2.7087), ts 745762562950, free_ts 754487670518 [ 1312.829555][ T4765] post_alloc_hook+0x18d/0x1b0 [ 1312.834328][ T4765] get_page_from_freelist+0x322e/0x33b0 [ 1312.839874][ T4765] __alloc_pages+0x28d/0x770 [ 1312.844464][ T4765] __folio_alloc+0xf/0x30 [ 1312.848795][ T4765] vma_alloc_folio+0x486/0x990 [ 1312.853567][ T4765] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 1312.859292][ T4765] shmem_get_folio_gfp+0x13f0/0x3470 [ 1312.864604][ T4765] shmem_write_begin+0x16e/0x4e0 [ 1312.869540][ T4765] generic_perform_write+0x2fc/0x5e0 [ 1312.874843][ T4765] __generic_file_write_iter+0x176/0x400 [ 1312.880479][ T4765] generic_file_write_iter+0xab/0x310 [ 1312.885856][ T4765] __kernel_write_iter+0x2ff/0x710 [ 1312.890977][ T4765] dump_user_range+0x43d/0x8e0 [ 1312.895744][ T4765] elf_core_dump+0x3d2b/0x4590 [ 1312.900517][ T4765] do_coredump+0x18b7/0x2700 [ 1312.905108][ T4765] get_signal+0x1454/0x17d0 [ 1312.909621][ T4765] page last free stack trace: [ 1312.914290][ T4765] free_unref_page_prepare+0xf63/0x1120 [ 1312.919841][ T4765] free_unref_page_list+0x663/0x900 [ 1312.925042][ T4765] release_pages+0x2836/0x2b40 [ 1312.929895][ T4765] __pagevec_release+0x80/0xf0 [ 1312.934661][ T4765] shmem_undo_range+0x865/0x2390 [ 1312.939610][ T4765] shmem_evict_inode+0x265/0xa60 [ 1312.944582][ T4765] evict+0x529/0x930 [ 1312.948490][ T4765] __dentry_kill+0x436/0x650 [ 1312.953084][ T4765] dentry_kill+0xbb/0x290 [ 1312.957415][ T4765] dput+0xfb/0x1d0 [ 1312.961141][ T4765] __fput+0x62e/0x8d0 [ 1312.965128][ T4765] task_work_run+0x246/0x300 [ 1312.969725][ T4765] do_exit+0xa73/0x26a0 [ 1312.973892][ T4765] do_group_exit+0x202/0x2b0 [ 1312.978500][ T4765] get_signal+0x16f7/0x17d0 [ 1312.983017][ T4765] arch_do_signal_or_restart+0xb0/0x1a10 [ 1312.989523][ T4765] [ 1312.991849][ T4765] Memory state around the buggy address: [ 1312.997482][ T4765] ffff88804bf6f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1313.005544][ T4765] ffff88804bf6f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1313.013608][ T4765] >ffff88804bf6f180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1313.021672][ T4765] ^ [ 1313.028081][ T4765] ffff88804bf6f200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1313.036140][ T4765] ffff88804bf6f280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1313.044214][ T4765] ================================================================== [ 1313.057597][ T3976] m920x_read = error: -19 [ 1313.062039][ T3976] dvb-usb: error -19 while querying for an remote control event. [ 1313.087987][ T4765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1313.095295][ T4765] CPU: 0 PID: 4765 Comm: syz.0.14395 Not tainted 6.1.113-syzkaller #0 [ 1313.103478][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1313.113575][ T4765] Call Trace: [ 1313.116875][ T4765] [ 1313.119823][ T4765] dump_stack_lvl+0x1e3/0x2cb [ 1313.124541][ T4765] ? nf_tcp_handle_invalid+0x642/0x642 [ 1313.130034][ T4765] ? panic+0x764/0x764 [ 1313.134135][ T4765] ? preempt_schedule_common+0xa6/0xd0 [ 1313.139622][ T4765] ? vscnprintf+0x59/0x80 [ 1313.143984][ T4765] panic+0x318/0x764 [ 1313.147911][ T4765] ? check_panic_on_warn+0x1d/0xa0 [ 1313.153056][ T4765] ? memcpy_page_flushcache+0xfc/0xfc [ 1313.158461][ T4765] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1313.164482][ T4765] ? _raw_spin_unlock+0x40/0x40 [ 1313.169370][ T4765] ? print_report+0x4a3/0x4f0 [ 1313.174075][ T4765] check_panic_on_warn+0x7e/0xa0 [ 1313.179041][ T4765] ? sysv_new_inode+0x107e/0x1210 [ 1313.184099][ T4765] end_report+0x66/0x110 [ 1313.188369][ T4765] kasan_report+0x143/0x160 [ 1313.192891][ T4765] ? sysv_new_inode+0x107e/0x1210 [ 1313.197949][ T4765] sysv_new_inode+0x107e/0x1210 [ 1313.202844][ T4765] ? sysv_free_inode+0x840/0x840 [ 1313.207816][ T4765] ? __d_add+0x503/0x800 [ 1313.212086][ T4765] ? generic_permission+0x27c/0x4f0 [ 1313.217312][ T4765] sysv_mknod+0x4a/0xe0 [ 1313.221502][ T4765] ? sysv_lookup+0xe0/0xe0 [ 1313.225955][ T4765] path_openat+0x12f1/0x2e60 [ 1313.230596][ T4765] ? do_filp_open+0x480/0x480 [ 1313.235320][ T4765] do_filp_open+0x230/0x480 [ 1313.239858][ T4765] ? vfs_tmpfile+0x4a0/0x4a0 [ 1313.244486][ T4765] ? _raw_spin_unlock+0x24/0x40 [ 1313.249365][ T4765] ? alloc_fd+0x5a0/0x640 [ 1313.253730][ T4765] do_sys_openat2+0x13b/0x4f0 [ 1313.258437][ T4765] ? do_sys_open+0x220/0x220 [ 1313.263067][ T4765] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1313.269104][ T4765] __x64_sys_creat+0x11f/0x160 [ 1313.273905][ T4765] ? __x64_compat_sys_openat+0x290/0x290 [ 1313.279582][ T4765] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1313.285592][ T4765] ? lockdep_hardirqs_on+0x94/0x130 [ 1313.290822][ T4765] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1313.293027][ T3689] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 1313.293057][ T3689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.293078][ T3689] usb 4-1: config 0 has no interface number 0 [ 1313.293120][ T3689] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1313.293152][ T3689] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1313.345020][ T4765] do_syscall_64+0x3b/0xb0 [ 1313.349460][ T4765] ? clear_bhb_loop+0x45/0xa0 [ 1313.354173][ T4765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1313.360101][ T4765] RIP: 0033:0x7eff6837dff9 [ 1313.364541][ T4765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.384185][ T4765] RSP: 002b:00007eff6924b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1313.392632][ T4765] RAX: ffffffffffffffda RBX: 00007eff68535f80 RCX: 00007eff6837dff9 [ 1313.400635][ T4765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 1313.408634][ T4765] RBP: 00007eff683f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1313.416652][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.424649][ T4765] R13: 0000000000000000 R14: 00007eff68535f80 R15: 00007ffce5a82648 [ 1313.432663][ T4765] [ 1313.436043][ T4765] Kernel Offset: disabled [ 1313.440366][ T4765] Rebooting in 86400 seconds..