last executing test programs: 2.992338469s ago: executing program 2 (id=5786): unlink(&(0x7f0000000180)='./file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x47) 2.785451096s ago: executing program 2 (id=5791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000012000100000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 2.698149764s ago: executing program 1 (id=5792): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 2.469003503s ago: executing program 4 (id=5796): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x1410, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x4040) 2.435503716s ago: executing program 2 (id=5798): r0 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000001b40)) 2.255143611s ago: executing program 4 (id=5800): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b3d, 0x0) 2.217792434s ago: executing program 2 (id=5802): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4) 2.03076946s ago: executing program 4 (id=5805): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x2, 0x0}, 0x10) 2.02556755s ago: executing program 2 (id=5806): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0x1c}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) 1.849977195s ago: executing program 1 (id=5808): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0006000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.822777767s ago: executing program 2 (id=5810): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0xa, 0x0, {0x4, @struct={0x0, 0x6}, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xe8, @usage=0xc, 0x0, 0x0, [0x3]}, {0x0, @struct={0x50b1, 0x3ff}, 0x0, 0xffffffffffff9cc8, 0x0, 0x4, 0x2, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x2, 0x4]}, {0x0, @struct={0x1, 0x3}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x70, @usage=0x1, 0x0, 0x0, [0x3, 0x0, 0x7, 0xfffffffffffffffd]}}) 1.770514202s ago: executing program 4 (id=5812): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000400)={0x1}) 1.634362563s ago: executing program 1 (id=5813): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x12}, 0x0) 1.55591193s ago: executing program 4 (id=5815): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 1.351536587s ago: executing program 4 (id=5818): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100001d9167204f17316a3f2601020301090212000100000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.110021227s ago: executing program 3 (id=5820): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a780000ff0f040b067c55a1bc000900b80006990300000004001500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 1.07663444s ago: executing program 0 (id=5821): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) 1.030436904s ago: executing program 1 (id=5822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000640)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 926.001143ms ago: executing program 3 (id=5823): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0001e, &(0x7f0000000080)=ANY=[], 0x8, 0x22b, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0xea840, 0xa) 855.429748ms ago: executing program 0 (id=5824): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100), &(0x7f00000002c0)=0x8) 806.132282ms ago: executing program 1 (id=5825): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r0) 685.977973ms ago: executing program 0 (id=5826): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105517, &(0x7f0000000000)) 627.199947ms ago: executing program 1 (id=5827): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x5df, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100111f625408d0405903d40010203010902cd0501a47a20090904"], 0x0) 582.254921ms ago: executing program 3 (id=5828): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) 438.033324ms ago: executing program 0 (id=5829): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e20, @empty}}) 353.9499ms ago: executing program 3 (id=5830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 304.193445ms ago: executing program 0 (id=5831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000020605000000000000050000000000000900020073797a32000000000500010006000000050005000200000005000400000000000c000780080011400000000013000300686173683a6e65742c6966616365"], 0x58}}, 0x0) 202.060143ms ago: executing program 3 (id=5832): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6861}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x40014) 120.20956ms ago: executing program 0 (id=5833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001a000100000000000000000002000000ff0000000000000008001900", @ANYRES64], 0x50}}, 0x0) 0s ago: executing program 3 (id=5834): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x21, 0x9e85, &(0x7f000000a040)="$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") creat(&(0x7f0000000240)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 3: detected capacity change from 0 to 40427 [ 373.518631][T13837] F2FS-fs (loop3): invalid crc value [ 373.533269][T13837] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 373.593197][T13837] F2FS-fs (loop3): Found nat_bits in checkpoint [ 373.738431][T13837] F2FS-fs (loop3): recover fsync data on readonly fs [ 373.758774][T13837] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 373.776987][T13837] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 373.788725][T13837] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.133943][T13861] loop2: detected capacity change from 0 to 40427 [ 374.203949][T13861] F2FS-fs (loop2): invalid crc value [ 374.236651][T13861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 374.363572][T13861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 374.520034][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'. [ 374.546005][T13892] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4448'. [ 374.583432][T13890] netlink: 'syz.1.4446': attribute type 2 has an invalid length. [ 374.591237][T13890] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 374.748769][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4450'. [ 374.785267][ T3650] syz-executor: attempt to access beyond end of device [ 374.785267][ T3650] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 375.190046][T13908] loop1: detected capacity change from 0 to 256 [ 375.241806][T13908] MINIX-fs: mounting file system with errors, running fsck is recommended [ 375.405287][T13914] loop4: detected capacity change from 0 to 64 [ 375.521888][T13912] loop0: detected capacity change from 0 to 4096 [ 375.538235][T13884] loop3: detected capacity change from 0 to 32768 [ 375.565284][T13884] XFS: ikeep mount option is deprecated. [ 375.761404][T13884] XFS (loop3): Mounting V5 Filesystem [ 375.792481][T13912] ntfs3: loop0: try to read out of volume at offset 0x3fffffc7000 [ 375.809976][T13933] loop1: detected capacity change from 0 to 64 [ 375.851360][T13936] netlink: 'syz.2.4467': attribute type 3 has an invalid length. [ 375.876795][ T3655] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 375.886390][ T3655] Bluetooth: hci4: Injecting HCI hardware error event [ 375.898144][ T48] Bluetooth: hci4: hardware error 0x00 [ 375.958416][T13933] syz.1.4465: attempt to access beyond end of device [ 375.958416][T13933] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 375.973402][T13933] Buffer I/O error on dev loop1, logical block 512, async page read [ 375.981862][T13884] XFS (loop3): Ending clean mount [ 375.997894][T13933] syz.1.4465: attempt to access beyond end of device [ 375.997894][T13933] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 376.014632][T13933] Buffer I/O error on dev loop1, logical block 56576, async page read [ 376.088530][ T7519] XFS (loop3): Unmounting Filesystem [ 376.790293][T13965] netlink: 'syz.2.4482': attribute type 13 has an invalid length. [ 376.823410][T13965] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4482'. [ 376.860687][T13965] syz_tun: refused to change device tx_queue_len [ 376.893405][T13965] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 377.276697][T13986] netlink: 'syz.4.4492': attribute type 8 has an invalid length. [ 377.312938][T13986] netlink: 'syz.4.4492': attribute type 7 has an invalid length. [ 377.364148][T13986] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.4492'. [ 377.610724][T14000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.624321][ T9031] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 377.644123][T14000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.654891][T14000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.675165][T14000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.690491][T14000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.708653][T14000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.719308][T14000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.739287][T14000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.752388][T14002] netlink: 'syz.1.4499': attribute type 3 has an invalid length. [ 377.809141][T14008] binder: 14007:14008 ioctl c0046209 100000000000000 returned -22 [ 377.873708][ T9031] usb 3-1: Using ep0 maxpacket: 8 [ 377.920788][T14013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4504'. [ 378.013492][ T9031] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 378.021722][ T9031] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.043311][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 378.062894][ T9031] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.071836][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4506'. [ 378.084787][ T9031] usb 3-1: config 1 has no interface number 0 [ 378.091461][ T9031] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.305609][ T9031] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.325133][ T9031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.353042][ T9031] usb 3-1: Product: syz [ 378.361465][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.366282][T14031] loop0: detected capacity change from 0 to 256 [ 378.368386][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.389671][ T9031] usb 3-1: Manufacturer: syz [ 378.406128][ T9031] usb 3-1: SerialNumber: syz [ 378.504772][ T9031] cdc_wdm 3-1:1.128: skipping garbage [ 378.510311][ T9031] cdc_wdm 3-1:1.128: invalid descriptor buffer length [ 378.543317][ T9031] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 378.571349][T14038] tmpfs: Bad value for 'size' [ 378.732596][ T9031] usb 3-1: USB disconnect, device number 11 [ 378.842099][T14045] loop1: detected capacity change from 0 to 2048 [ 378.867599][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4522'. [ 378.894951][T14045] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 378.931268][T14045] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 378.970695][T14045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.460212][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4535'. [ 379.526222][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4535'. [ 379.544211][T14066] loop4: detected capacity change from 0 to 4096 [ 379.562110][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4535'. [ 379.703340][T14066] ntfs3: loop4: try to read out of volume at offset 0x3fffffc7000 [ 379.811287][T14084] loop2: detected capacity change from 0 to 256 [ 380.230600][T14099] loop0: detected capacity change from 0 to 64 [ 380.453292][ T4039] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 380.699145][ T4039] usb 5-1: Using ep0 maxpacket: 32 [ 380.813298][ T3736] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 380.823452][ T4039] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 381.013564][ T4039] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 381.022710][ T4039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.043429][ T4039] usb 5-1: Product: syz [ 381.047654][ T4039] usb 5-1: Manufacturer: syz [ 381.093344][ T4039] usb 5-1: SerialNumber: syz [ 381.105860][ T4039] usb 5-1: config 0 descriptor?? [ 381.140125][T14096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 381.178663][ T4039] hub 5-1:0.0: bad descriptor, ignoring hub [ 381.198207][ T3736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.213235][ T4039] hub: probe of 5-1:0.0 failed with error -5 [ 381.233242][ T3736] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 381.245389][ T4039] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 381.265175][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.293833][T14137] program syz.3.4566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.301424][ T3736] usb 1-1: config 0 descriptor?? [ 381.332567][T14114] loop1: detected capacity change from 0 to 32768 [ 381.362077][ T3736] usb 1-1: bad CDC descriptors [ 381.371372][ T3736] usb 1-1: bad CDC descriptors [ 381.426300][ T3736] usb 5-1: USB disconnect, device number 25 [ 381.443243][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 381.452787][T14114] JBD2: Ignoring recovery information on journal [ 381.511335][T14142] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 381.531108][T14142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.581936][ T3686] usb 1-1: USB disconnect, device number 19 [ 381.662413][T14114] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 381.751078][T14114] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 17 has empty extent list at depth 312 [ 381.836412][T14114] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 381.847076][T14114] OCFS2: Returning error to the calling process. [ 381.853559][T14114] (syz.1.4556,14114,0):ocfs2_find_leaf:1933 ERROR: status = -30 [ 381.861942][T14114] (syz.1.4556,14114,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 381.887567][T14114] (syz.1.4556,14114,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 381.897326][T14114] (syz.1.4556,14114,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 381.910900][T14114] (syz.1.4556,14114,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 381.919770][T14114] (syz.1.4556,14114,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 381.942393][T14114] (syz.1.4556,14114,0):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 381.954000][T14114] (syz.1.4556,14114,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 381.971774][T14114] (syz.1.4556,14114,0):ocfs2_mknod:296 ERROR: status = -5 [ 381.979201][T14114] (syz.1.4556,14114,0):ocfs2_mknod:500 ERROR: status = -5 [ 381.987015][T14114] (syz.1.4556,14114,0):ocfs2_mkdir:657 ERROR: status = -5 [ 382.019990][ T3640] ocfs2: Unmounting device (7,1) on (node local) [ 382.555660][T14147] loop3: detected capacity change from 0 to 32768 [ 382.704540][T14147] XFS (loop3): Mounting V5 Filesystem [ 382.773325][ T22] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 382.874361][T14147] XFS (loop3): Ending clean mount [ 382.914228][T14147] XFS (loop3): Quotacheck needed: Please wait. [ 382.914855][T14187] loop2: detected capacity change from 0 to 256 [ 382.959460][T14187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 383.010080][T14147] XFS (loop3): Quotacheck: Done. [ 383.033312][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 383.151535][ T7519] XFS (loop3): Unmounting Filesystem [ 383.154806][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 8 [ 383.323553][ T22] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.337665][ T22] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.382784][ T22] usb 2-1: Product: syz [ 383.393444][ T22] usb 2-1: Manufacturer: syz [ 383.404013][ T22] usb 2-1: SerialNumber: syz [ 383.425456][ T22] usb 2-1: config 0 descriptor?? [ 383.443597][T14163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.631216][T14206] loop4: detected capacity change from 0 to 4096 [ 383.646956][T14206] EXT4-fs: Ignoring removed nobh option [ 383.704802][T14206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.726009][T14206] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 383.738600][ T4031] usb 2-1: USB disconnect, device number 22 [ 383.745171][T14206] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 383.760963][T14206] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.4597: Failed to acquire dquot type 1 [ 383.857962][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 383.961317][T14216] loop0: detected capacity change from 0 to 4096 [ 385.491378][T14229] loop1: detected capacity change from 0 to 32768 [ 385.500968][T14259] syz.0.4620 (14259): drop_caches: 0 [ 385.748710][T14267] loop3: detected capacity change from 0 to 256 [ 385.811634][T14267] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 385.815853][T14266] loop0: detected capacity change from 0 to 2048 [ 385.923058][T14267] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 386.955473][T14317] loop2: detected capacity change from 0 to 512 [ 387.078893][T14317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 387.117552][T14317] ext4 filesystem being mounted at /945/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.321303][T14335] loop3: detected capacity change from 0 to 256 [ 387.345551][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 387.400258][T14335] FAT-fs (loop3): Directory bread(block 64) failed [ 387.413600][T14335] FAT-fs (loop3): Directory bread(block 65) failed [ 387.434862][T14335] FAT-fs (loop3): Directory bread(block 66) failed [ 387.441463][T14335] FAT-fs (loop3): Directory bread(block 67) failed [ 387.476917][ T3686] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 387.498909][T14335] FAT-fs (loop3): Directory bread(block 68) failed [ 387.520347][T14335] FAT-fs (loop3): Directory bread(block 69) failed [ 387.532131][T14335] FAT-fs (loop3): Directory bread(block 70) failed [ 387.573719][T14335] FAT-fs (loop3): Directory bread(block 71) failed [ 387.603963][T14335] FAT-fs (loop3): Directory bread(block 72) failed [ 387.610554][T14335] FAT-fs (loop3): Directory bread(block 73) failed [ 387.754970][ T3686] usb 2-1: Using ep0 maxpacket: 16 [ 387.876493][ T3686] usb 2-1: config 0 has an invalid interface number: 77 but max is 0 [ 387.896613][ T3686] usb 2-1: config 0 has no interface number 0 [ 388.073676][ T3686] usb 2-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=9c.d5 [ 388.093114][ T3686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.119515][ T3686] usb 2-1: Product: syz [ 388.134102][ T3686] usb 2-1: Manufacturer: syz [ 388.138904][ T3686] usb 2-1: SerialNumber: syz [ 388.160346][ T3686] usb 2-1: config 0 descriptor?? [ 388.230953][ T26] audit: type=1326 audit(2000000033.590:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.2.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x7ffc0000 [ 388.283652][ T26] audit: type=1326 audit(2000000033.640:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.2.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff16277dff9 code=0x7ffc0000 [ 388.301154][T14371] netlink: 'syz.4.4675': attribute type 29 has an invalid length. [ 388.334482][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 388.334714][T14371] netlink: 'syz.4.4675': attribute type 29 has an invalid length. [ 388.380599][ T26] audit: type=1326 audit(2000000033.640:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14367 comm="syz.2.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x7ffc0000 [ 388.432069][ T4031] usb 2-1: USB disconnect, device number 23 [ 388.693542][ T22] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 388.701791][ T22] usb 4-1: config 0 has no interface number 0 [ 388.762125][T14387] netlink: 'syz.0.4684': attribute type 32 has an invalid length. [ 388.903537][ T22] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 388.921035][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.956623][ T22] usb 4-1: Product: syz [ 388.960862][ T22] usb 4-1: Manufacturer: syz [ 388.993618][ T22] usb 4-1: SerialNumber: syz [ 389.028615][ T22] usb 4-1: config 0 descriptor?? [ 389.234158][T14399] loop2: detected capacity change from 0 to 2048 [ 389.275453][T14399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.315512][ T9031] usb 4-1: USB disconnect, device number 21 [ 389.423097][T14407] loop0: detected capacity change from 0 to 4096 [ 389.439652][T14407] EXT4-fs: Ignoring removed nobh option [ 389.529344][T14407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 389.662674][T14407] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 389.698684][T14407] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 389.750403][T14407] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.4692: Failed to acquire dquot type 1 [ 389.859938][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 389.972415][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4707'. [ 389.996893][T14435] loop4: detected capacity change from 0 to 136 [ 390.022489][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4707'. [ 390.043557][ T3686] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 390.067117][T14434] IPv6: sit1: Disabled Multicast RS [ 390.453492][ T3686] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 390.462268][T14450] rdma_rxe: rxe_register_device failed with error -23 [ 390.469482][ T3686] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 390.491389][T14450] rdma_rxe: failed to add lo [ 390.501166][ T3686] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 390.526251][ T3686] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 390.561183][ T3686] usb 2-1: config 0 interface 0 has no altsetting 0 [ 390.763445][ T3686] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 390.803284][ T3686] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 390.811776][ T3686] usb 2-1: Product: syz [ 390.836900][ T3686] usb 2-1: Manufacturer: syz [ 390.841564][ T3686] usb 2-1: SerialNumber: syz [ 390.879950][ T3686] usb 2-1: config 0 descriptor?? [ 390.935741][ T3686] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 390.969475][ T3686] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 391.017760][T14465] xt_TCPMSS: Only works on TCP SYN packets [ 391.218414][ T3686] usb 2-1: USB disconnect, device number 24 [ 391.236197][ T3686] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 391.342175][T14447] loop3: detected capacity change from 0 to 32768 [ 391.408672][T14447] JBD2: Ignoring recovery information on journal [ 391.487566][T14447] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 391.506665][T14457] loop2: detected capacity change from 0 to 32768 [ 391.517826][T14457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4716 (14457) [ 391.550286][T14457] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.573348][T14457] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 391.582128][T14457] BTRFS info (device loop2): using free space tree [ 391.605348][T14447] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 17 has empty extent list at depth 312 [ 391.632472][T14473] loop4: detected capacity change from 0 to 4096 [ 391.645210][T14447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 391.702674][T14447] OCFS2: Returning error to the calling process. [ 391.751588][T14447] (syz.3.4712,14447,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 391.763985][T14447] (syz.3.4712,14447,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 391.820091][T14447] (syz.3.4712,14447,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 391.887937][T14447] (syz.3.4712,14447,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 391.956669][T14447] (syz.3.4712,14447,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 391.974567][T14457] BTRFS info (device loop2): enabling ssd optimizations [ 392.003270][T14447] (syz.3.4712,14447,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 392.033403][T14447] (syz.3.4712,14447,0):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 392.041731][T14447] (syz.3.4712,14447,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 392.139921][T14447] (syz.3.4712,14447,0):ocfs2_mknod:296 ERROR: status = -5 [ 392.179804][T14447] (syz.3.4712,14447,0):ocfs2_mknod:500 ERROR: status = -5 [ 392.194102][T14447] (syz.3.4712,14447,0):ocfs2_mkdir:657 ERROR: status = -5 [ 392.202740][ T3650] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.342631][T14477] loop0: detected capacity change from 0 to 32768 [ 392.349888][ T7519] ocfs2: Unmounting device (7,3) on (node local) [ 392.413550][ T3686] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 392.463908][T14477] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 392.493229][T14477] gfs2: fsid=.: Now mounting FS (format 0)... [ 392.533226][T14477] gfs2: not a GFS2 filesystem [ 392.537976][T14477] gfs2: fsid=.: can't read superblock [ 392.563455][T14477] gfs2: fsid=.: can't read superblock: -22 [ 392.690359][ T3686] usb 2-1: Using ep0 maxpacket: 32 [ 392.863647][ T3686] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.894936][ T3686] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.940832][ T3686] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.953748][T14513] netlink: 484 bytes leftover after parsing attributes in process `syz.2.4735'. [ 392.967910][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.030751][T14516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.054539][ T3686] hub 2-1:4.0: USB hub found [ 393.253696][ T3686] hub 2-1:4.0: 2 ports detected [ 393.255798][T14517] loop4: detected capacity change from 0 to 4096 [ 393.258629][ T3686] usb 2-1: selecting invalid altsetting 1 [ 393.282203][ T3686] hub 2-1:4.0: Using single TT (err -22) [ 393.395340][T14517] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 393.437315][T14527] x_tables: duplicate underflow at hook 3 [ 393.483441][ T3686] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 393.490083][ T3686] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 393.544442][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4743'. [ 393.550260][ T3686] usb 2-1: USB disconnect, device number 25 [ 393.592305][T14531] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4743'. [ 393.647630][T14531] netlink: 'syz.0.4743': attribute type 2 has an invalid length. [ 393.678867][T14531] netlink: 'syz.0.4743': attribute type 2 has an invalid length. [ 393.702564][T14531] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4743'. [ 393.882384][ T26] audit: type=1326 audit(2000000039.240:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 393.956036][ T26] audit: type=1326 audit(2000000039.240:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.038782][ T26] audit: type=1326 audit(2000000039.240:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.085654][ T26] audit: type=1326 audit(2000000039.240:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.108377][ T26] audit: type=1326 audit(2000000039.240:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.209427][ T26] audit: type=1326 audit(2000000039.240:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.261943][ T26] audit: type=1326 audit(2000000039.240:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.294302][ T26] audit: type=1326 audit(2000000039.240:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.363434][ T3718] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 394.523445][ T5007] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 394.588009][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4762'. [ 394.603363][ T3718] usb 1-1: Using ep0 maxpacket: 8 [ 394.621230][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4762'. [ 394.663586][ T26] kauditd_printk_skb: 543 callbacks suppressed [ 394.663603][ T26] audit: type=1326 audit(2000000040.020:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.701565][ T26] audit: type=1326 audit(2000000040.060:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.725166][ T26] audit: type=1326 audit(2000000040.060:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.763337][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 394.789821][ T26] audit: type=1326 audit(2000000040.060:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.802653][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 394.833426][ T5007] usb 2-1: Using ep0 maxpacket: 32 [ 394.849616][ T26] audit: type=1326 audit(2000000040.060:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.880910][ T26] audit: type=1326 audit(2000000040.060:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.883884][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.919846][ T26] audit: type=1326 audit(2000000040.060:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.944534][ T26] audit: type=1326 audit(2000000040.060:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.967724][ T26] audit: type=1326 audit(2000000040.060:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 394.973255][ T3718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.992321][ T26] audit: type=1326 audit(2000000040.060:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.2.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x50000 [ 395.022928][ T5007] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 395.036881][ T5007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.054537][ T5007] usb 2-1: config 0 descriptor?? [ 395.074142][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 395.099756][ T3718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 395.103835][ T5007] gspca_main: sq930x-2.14.0 probing 041e:403c [ 395.123634][ T3718] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 395.153264][ T3718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.185252][ T3718] usb 1-1: config 0 descriptor?? [ 395.223545][T14550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.261359][ T48] Bluetooth: hci5: urb ffff88802930fa00 submission failed (90) [ 395.399051][T14583] loop3: detected capacity change from 0 to 64 [ 395.500708][ T3718] usb 1-1: USB disconnect, device number 20 [ 395.545186][ T5007] gspca_sq930x: ucbus_write failed -71 [ 395.565664][ T5007] sq930x: probe of 2-1:0.0 failed with error -71 [ 395.612451][ T5007] usb 2-1: USB disconnect, device number 26 [ 396.229601][T14605] qrtr: Invalid version 0 [ 396.232654][T14606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4780'. [ 397.192207][T14641] loop4: detected capacity change from 0 to 1024 [ 397.274067][T14641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 397.381639][T14653] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4804'. [ 397.394744][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 397.453305][ T4039] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 397.978234][T14677] SET target dimension over the limit! [ 397.979643][ T4039] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.993113][ T4039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.001921][ T4039] usb 2-1: Product: syz [ 398.032535][T14681] loop4: detected capacity change from 0 to 256 [ 398.048712][ T4039] usb 2-1: Manufacturer: syz [ 398.050704][T14682] libceph: resolve '0' (ret=-3): failed [ 398.066692][ T4039] usb 2-1: SerialNumber: syz [ 398.124175][ T4039] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 398.524820][T14697] loop4: detected capacity change from 0 to 512 [ 398.611008][T14697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.648712][T14697] ext4 filesystem being mounted at /988/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.713446][ T4039] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.845129][T14697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.4824: inode #1792: comm syz.4.4824: iget: illegal inode # [ 398.921638][T14697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4824: error while reading EA inode 1792 err=-117 [ 398.960237][T14697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.4824: inode #1792: comm syz.4.4824: iget: illegal inode # [ 399.013826][T14697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4824: error while reading EA inode 1792 err=-117 [ 399.138136][T14688] loop3: detected capacity change from 0 to 32768 [ 399.180529][T14688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4821 (14688) [ 399.194064][T14717] loop2: detected capacity change from 0 to 256 [ 399.197486][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 399.208558][ T3718] usb 2-1: USB disconnect, device number 27 [ 399.278227][T14688] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.299430][T14688] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 399.311992][T14721] netlink: 'syz.4.4835': attribute type 10 has an invalid length. [ 399.319603][T14688] BTRFS info (device loop3): using free space tree [ 399.330810][T14719] usb usb7: usbfs: process 14719 (syz.0.4836) did not claim interface 7 before use [ 399.331544][T14717] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 399.372750][T14721] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 399.472629][T14721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.577948][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4837'. [ 399.640067][T14688] BTRFS info (device loop3): enabling ssd optimizations [ 399.793283][ T4039] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 399.800425][ T4039] ath9k_htc: Failed to initialize the device [ 399.853934][ T3718] usb 2-1: ath9k_htc: USB layer deinitialized [ 399.865078][ T7519] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.906059][T14752] netlink: 'syz.0.4841': attribute type 27 has an invalid length. [ 400.189438][T14761] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4848'. [ 400.337879][T14763] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4849'. [ 400.391433][T14767] loop2: detected capacity change from 0 to 8 [ 400.920650][T14780] netlink: 'syz.3.4844': attribute type 2 has an invalid length. [ 400.939690][ T26] kauditd_printk_skb: 2010 callbacks suppressed [ 400.939707][ T26] audit: type=1326 audit(2000000046.300:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d7f7dff9 code=0x7ffc0000 [ 400.964132][T14780] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4844'. [ 400.980705][ T3686] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 401.021450][ T26] audit: type=1326 audit(2000000046.350:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d7f7dff9 code=0x7ffc0000 [ 401.095628][ T26] audit: type=1326 audit(2000000046.350:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f67d7f7dff9 code=0x7ffc0000 [ 401.184844][ T26] audit: type=1326 audit(2000000046.490:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d7f7dff9 code=0x7ffc0000 [ 401.260065][T14751] loop4: detected capacity change from 0 to 32768 [ 401.269748][ T26] audit: type=1326 audit(2000000046.490:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14781 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d7f7dff9 code=0x7ffc0000 [ 401.331326][T14751] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 401.353679][T14751] XFS (loop4): Mounting V5 Filesystem [ 401.393939][ T3686] usb 1-1: not running at top speed; connect to a high speed hub [ 401.438900][T14751] XFS (loop4): Ending clean mount [ 401.446619][T14751] XFS (loop4): Quotacheck needed: Please wait. [ 401.483848][ T3686] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 401.492105][ T3686] usb 1-1: config 95 has no interface number 0 [ 401.499112][ T3686] usb 1-1: config 95 interface 1 has no altsetting 0 [ 401.534478][T14806] loop1: detected capacity change from 0 to 512 [ 401.595329][T14751] XFS (loop4): Quotacheck: Done. [ 401.601041][T14808] netlink: 'syz.2.4866': attribute type 3 has an invalid length. [ 401.632763][T14808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4866'. [ 401.667915][T14806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 401.681890][ T3639] XFS (loop4): Unmounting Filesystem [ 401.698052][T14806] ext4 filesystem being mounted at /963/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.793752][ T3686] usb 1-1: string descriptor 0 read error: -22 [ 401.800155][ T3686] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 401.847768][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.857523][ T3640] EXT4-fs (loop1): unmounting filesystem. [ 401.860349][T14817] netlink: 'syz.3.4870': attribute type 7 has an invalid length. [ 401.877040][T14817] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4870'. [ 402.132598][T14820] loop1: detected capacity change from 0 to 4096 [ 402.176549][T14820] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 402.297260][T14820] ntfs3: loop1: failed to convert "c46c" to cp874 [ 402.349814][ T3686] usb 1-1: USB disconnect, device number 21 [ 402.585272][T14837] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4880'. [ 402.639555][T14839] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 402.639555][T14839] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 402.688806][T14841] loop2: detected capacity change from 0 to 64 [ 402.759993][ T4039] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 402.923512][T14851] raw_sendmsg: syz.3.4885 forgot to set AF_INET. Fix it! [ 403.023278][ T4039] usb 5-1: Using ep0 maxpacket: 32 [ 403.037516][T14855] loop0: detected capacity change from 0 to 64 [ 403.143405][ T4039] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.170454][ T4039] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 403.220742][ T4039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.251986][ T4039] usb 5-1: config 0 descriptor?? [ 403.314436][ T4039] usb 5-1: bad CDC descriptors [ 403.323821][T14865] openvswitch: netlink: Unknown key attributes 1 [ 403.462582][T14871] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 403.520016][ T4039] usb 5-1: USB disconnect, device number 26 [ 403.813544][T14888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4903'. [ 404.131212][T14901] loop3: detected capacity change from 0 to 64 [ 404.312555][T14909] loop1: detected capacity change from 0 to 128 [ 404.551547][T14911] loop0: detected capacity change from 0 to 4096 [ 404.590128][T14911] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 404.626350][T14919] loop1: detected capacity change from 0 to 2048 [ 404.649555][T14919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.754478][T14911] ntfs3: loop0: failed to convert "c46c" to cp874 [ 405.415929][T14940] loop3: detected capacity change from 0 to 4096 [ 405.472138][T14940] NILFS (loop3): invalid segment: Checksum error in segment payload [ 405.485535][ T26] audit: type=1326 audit(2000000050.850:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x7ffc0000 [ 405.533206][T14940] NILFS (loop3): trying rollback from an earlier position [ 405.585376][ T26] audit: type=1326 audit(2000000050.870:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff16277ff17 code=0x7ffc0000 [ 405.624480][T14940] NILFS (loop3): recovery complete [ 405.636406][ T26] audit: type=1326 audit(2000000050.870:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff16277fe8c code=0x7ffc0000 [ 405.678367][ T26] audit: type=1326 audit(2000000050.870:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff16277fdc4 code=0x7ffc0000 [ 405.709680][T14945] loop1: detected capacity change from 0 to 4096 [ 405.717738][T14953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.746432][T14945] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 405.861627][T14945] ntfs: volume version 3.1. [ 406.008736][T14945] __ntfs_error: 6 callbacks suppressed [ 406.008756][T14945] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 406.091659][T14945] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 406.314638][ T26] audit: type=1326 audit(2000000051.680:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 406.423401][ T26] audit: type=1326 audit(2000000051.700:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 406.573466][ T26] audit: type=1326 audit(2000000051.700:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 406.633300][ T26] audit: type=1326 audit(2000000051.700:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 407.152613][T15006] NILFS (nullb0): couldn't find nilfs on the device [ 407.287923][ T4039] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 407.463761][T15020] loop4: detected capacity change from 0 to 512 [ 407.543363][ T4039] usb 2-1: Using ep0 maxpacket: 16 [ 407.549819][T15020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 407.603396][T15020] ext4 filesystem being mounted at /1004/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.663411][ T4039] usb 2-1: config 0 has no interfaces? [ 407.721369][T15020] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.4970: corrupted xattr block 33 [ 407.727355][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'. [ 407.762835][T15031] netlink: 'syz.3.4974': attribute type 1 has an invalid length. [ 407.823742][ T4039] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 407.853247][ T4039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.871516][ T4039] usb 2-1: Product: syz [ 407.877814][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 407.883720][ T4039] usb 2-1: Manufacturer: syz [ 407.883744][ T4039] usb 2-1: SerialNumber: syz [ 407.890447][ T4039] r8152-cfgselector 2-1: config 0 descriptor?? [ 407.983476][T15035] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 407.989410][T15037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 408.048941][T15037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.203554][ T4039] r8152-cfgselector 2-1: Unknown version 0x0000 [ 408.405613][T15043] loop4: detected capacity change from 0 to 4096 [ 408.411850][ T5007] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 408.455962][T15018] loop0: detected capacity change from 0 to 32768 [ 408.475255][T15018] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 408.504865][T15018] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 408.534763][T15018] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 408.723346][T15018] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 409.231281][T15071] loop2: detected capacity change from 0 to 2048 [ 409.294802][T15071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.357540][ T26] audit: type=1800 audit(2000000054.720:2699): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4994" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 409.647955][T15090] loop4: detected capacity change from 0 to 256 [ 409.749793][T15090] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.776015][T15095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5006'. [ 409.819849][T15097] netlink: 'syz.3.5007': attribute type 1 has an invalid length. [ 409.835181][T15099] xt_TCPMSS: Only works on TCP SYN packets [ 410.080500][T15107] loop2: detected capacity change from 0 to 512 [ 410.089446][T15109] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5012'. [ 410.145208][T15107] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.203347][T15107] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 410.293789][T15107] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 410.369800][T15120] loop0: detected capacity change from 0 to 256 [ 410.380663][T15107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 410.410796][T15120] exfat: Deprecated parameter 'namecase' [ 410.419459][T15107] System zones: 0-2, 18-18, 34-34 [ 410.480044][T15120] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 410.506368][T15107] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 410.587566][T15107] EXT4-fs (loop2): 1 truncate cleaned up [ 410.593707][ T5007] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 410.620345][T15107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 410.712155][T15107] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 13: comm syz.2.5011: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 410.771592][ T26] audit: type=1326 audit(2000000056.130:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b77dff9 code=0x7ffc0000 [ 410.845116][ T26] audit: type=1326 audit(2000000056.130:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4a2b77dff9 code=0x7ffc0000 [ 410.875420][ T5007] usb 5-1: Using ep0 maxpacket: 32 [ 410.891773][T15107] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 410.945454][ T26] audit: type=1326 audit(2000000056.130:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b77dff9 code=0x7ffc0000 [ 411.025409][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 411.189360][T15144] loop2: detected capacity change from 0 to 256 [ 411.245447][ T5007] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0 [ 411.273797][ T5007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.290905][T15144] FAT-fs (loop2): Directory bread(block 64) failed [ 411.303257][T15144] FAT-fs (loop2): Directory bread(block 65) failed [ 411.320042][ T5007] usb 5-1: Product: syz [ 411.334007][T15144] FAT-fs (loop2): Directory bread(block 66) failed [ 411.347219][ T5007] usb 5-1: Manufacturer: syz [ 411.367776][ T5007] usb 5-1: SerialNumber: syz [ 411.377253][T15144] FAT-fs (loop2): Directory bread(block 67) failed [ 411.398369][T15144] FAT-fs (loop2): Directory bread(block 68) failed [ 411.414213][ T5007] usb 5-1: config 0 descriptor?? [ 411.455238][T15144] FAT-fs (loop2): Directory bread(block 69) failed [ 411.462968][T15144] FAT-fs (loop2): Directory bread(block 70) failed [ 411.465690][ T5007] pwc: Visionite VCS-UC300 USB webcam detected. [ 411.488364][T15144] FAT-fs (loop2): Directory bread(block 71) failed [ 411.501731][T15144] FAT-fs (loop2): Directory bread(block 72) failed [ 411.519007][T15144] FAT-fs (loop2): Directory bread(block 73) failed [ 411.678243][T15144] syz.2.5027: attempt to access beyond end of device [ 411.678243][T15144] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 411.707481][T15144] syz.2.5027: attempt to access beyond end of device [ 411.707481][T15144] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 411.723465][ T5007] pwc: Failed to set LED on/off time (-71) [ 411.731433][ T4039] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.746172][ T5007] pwc: send_video_command error -71 [ 411.754004][ T26] audit: type=1800 audit(2000000057.110:2703): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5027" name="file0" dev="loop2" ino=1048683 res=0 errno=0 [ 411.771873][ T5007] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 411.822608][ T5007] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 411.861780][ T5007] usb 5-1: USB disconnect, device number 27 [ 411.973493][ T4039] usb 4-1: Using ep0 maxpacket: 32 [ 412.045685][T15166] loop0: detected capacity change from 0 to 256 [ 412.093545][ T4039] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 412.120403][ T4039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.144617][T15166] FAT-fs (loop0): Directory bread(block 64) failed [ 412.151072][ T4039] usb 4-1: config 0 descriptor?? [ 412.172422][T15166] FAT-fs (loop0): Directory bread(block 65) failed [ 412.190359][T15166] FAT-fs (loop0): Directory bread(block 66) failed [ 412.205384][ T4039] gspca_main: sunplus-2.14.0 probing 041e:400b [ 412.229984][T15166] FAT-fs (loop0): Directory bread(block 67) failed [ 412.254895][T15166] FAT-fs (loop0): Directory bread(block 68) failed [ 412.280873][T15166] FAT-fs (loop0): Directory bread(block 69) failed [ 412.289107][T15166] FAT-fs (loop0): Directory bread(block 70) failed [ 412.298061][T15166] FAT-fs (loop0): Directory bread(block 71) failed [ 412.343512][T15166] FAT-fs (loop0): Directory bread(block 72) failed [ 412.369078][T15166] FAT-fs (loop0): Directory bread(block 73) failed [ 412.437833][T15159] loop1: detected capacity change from 0 to 32768 [ 412.534548][T15159] JBD2: Ignoring recovery information on journal [ 412.638485][T15159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 412.653523][ T4039] gspca_sunplus: reg_w_riv err -71 [ 412.658793][ T4039] sunplus: probe of 4-1:0.0 failed with error -71 [ 412.730754][ T4039] usb 4-1: USB disconnect, device number 22 [ 412.883327][ T3640] ocfs2: Unmounting device (7,1) on (node local) [ 413.103885][T15189] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5048'. [ 413.237770][T15191] Mount JFS Failure: -22 [ 413.242894][T15191] jfs_mount failed w/return code = -22 [ 413.602837][T15207] netlink: 'syz.4.5055': attribute type 12 has an invalid length. [ 413.635122][T15207] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 413.936508][T15220] netlink: 'syz.4.5062': attribute type 8 has an invalid length. [ 414.256875][T15224] loop2: detected capacity change from 0 to 4096 [ 414.343436][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5068'. [ 414.388237][T15232] netlink: 74 bytes leftover after parsing attributes in process `syz.4.5068'. [ 415.000929][T15210] loop3: detected capacity change from 0 to 32768 [ 415.077074][T15210] JBD2: Ignoring recovery information on journal [ 415.115427][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 415.137936][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 415.156818][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5081'. [ 415.227970][T15210] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 415.390636][T15272] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 415.410404][T15270] loop2: detected capacity change from 0 to 2048 [ 415.429856][T15270] EXT4-fs: Ignoring removed orlov option [ 415.438640][T15272] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.469309][ T7519] ocfs2: Unmounting device (7,3) on (node local) [ 415.582609][T15270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 415.708176][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5094'. [ 415.726866][T15285] tmpfs: Bad value for 'mpol' [ 415.731722][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5094'. [ 415.780725][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 415.797132][T15287] netlink: 'syz.0.5093': attribute type 32 has an invalid length. [ 416.052341][ T26] audit: type=1326 audit(2000000061.410:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 416.155155][ T26] audit: type=1326 audit(2000000061.440:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 416.238519][ T26] audit: type=1326 audit(2000000061.440:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 416.274560][ T26] audit: type=1326 audit(2000000061.440:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 416.333890][ T26] audit: type=1326 audit(2000000061.440:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15294 comm="syz.0.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 416.449256][T15312] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5105'. [ 416.499866][T15307] loop3: detected capacity change from 0 to 4096 [ 416.533255][ T4746] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 416.597086][T15318] loop4: detected capacity change from 0 to 16 [ 416.634481][T15318] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 416.714592][T15321] sctp: [Deprecated]: syz.0.5109 (pid 15321) Use of int in maxseg socket option. [ 416.714592][T15321] Use struct sctp_assoc_value instead [ 416.783396][ T4746] usb 3-1: Using ep0 maxpacket: 8 [ 416.913647][ T4746] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.925500][ T4746] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 0 [ 416.960284][ T4746] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 417.003225][ T4746] usb 3-1: config 1 interface 0 has no altsetting 0 [ 417.203548][ T4746] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.233337][ T4746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.252242][ T4746] usb 3-1: Product: syz [ 417.257023][ T4746] usb 3-1: Manufacturer: syz [ 417.266732][T15345] xt_nat: multiple ranges no longer supported [ 417.283257][ T4746] usb 3-1: SerialNumber: syz [ 417.314153][T15306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.414237][T15349] loop0: detected capacity change from 0 to 256 [ 417.471551][T15350] loop4: detected capacity change from 0 to 1764 [ 417.653978][ T4746] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 417.686062][ T4746] usb 3-1: USB disconnect, device number 12 [ 417.922310][T15370] loop4: detected capacity change from 0 to 256 [ 418.093651][T15376] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5136'. [ 418.252006][T15382] loop0: detected capacity change from 0 to 8 [ 418.285326][T15384] binder: 15383:15384 ioctl c00c6211 0 returned -14 [ 418.335462][T15387] netlink: 'syz.4.5143': attribute type 10 has an invalid length. [ 418.377505][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5143'. [ 418.407222][T15382] SQUASHFS error: Failed to read block 0x730: -5 [ 418.425565][T15387] batman_adv: batadv0: Adding interface: virt_wifi0 [ 418.444858][T15387] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.449239][T15382] SQUASHFS error: Unable to read metadata cache entry [72e] [ 418.526048][T15387] batman_adv: batadv0: Interface activated: virt_wifi0 [ 419.519217][T15439] loop0: detected capacity change from 0 to 24 [ 420.095393][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5181'. [ 420.160601][ T26] audit: type=1326 audit(2000000065.520:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 420.233321][ T26] audit: type=1326 audit(2000000065.520:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 420.335509][ T26] audit: type=1326 audit(2000000065.520:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 420.373977][T15476] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms [ 420.477606][ T26] audit: type=1326 audit(2000000065.520:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 420.500057][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.547011][T15476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.586119][ T26] audit: type=1326 audit(2000000065.520:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c57dff9 code=0x7ffc0000 [ 420.776642][T15488] device bond3 entered promiscuous mode [ 420.829375][T15488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.906276][ T26] audit: type=1326 audit(2000000066.270:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15500 comm="syz.2.5200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff16277dff9 code=0x0 [ 421.004356][T15504] binder: binder_mmap: 15502 20174000-20d74000 bad vm_flags failed -1 [ 421.038574][T15505] loop0: detected capacity change from 0 to 1024 [ 421.138308][T15505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 421.264982][T15505] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 623: comm syz.0.5199: Attempting to read directory block (623) that is past i_size (638464) [ 421.311422][T15522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5206'. [ 421.487860][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 421.488789][T15527] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 421.841412][T15539] loop2: detected capacity change from 0 to 2048 [ 421.868987][T15539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.298571][T15562] bond0: Error: Cannot enslave bond to itself. [ 422.531310][T15574] netlink: 'syz.1.5231': attribute type 7 has an invalid length. [ 422.561465][T15574] netlink: 'syz.1.5231': attribute type 5 has an invalid length. [ 422.572167][ T26] audit: type=1326 audit(2000000067.930:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15576 comm="syz.4.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 422.578091][T15574] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5231'. [ 422.631863][ T26] audit: type=1326 audit(2000000067.930:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15576 comm="syz.4.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 422.715836][ T26] audit: type=1326 audit(2000000067.930:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15576 comm="syz.4.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 422.812529][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 422.821901][ T26] audit: type=1326 audit(2000000067.930:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15576 comm="syz.4.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecbf7dff9 code=0x7ffc0000 [ 423.007473][T15592] netlink: 'syz.4.5241': attribute type 7 has an invalid length. [ 423.302560][ T1044] block nbd2: Attempted send on invalid socket [ 423.310191][ T1044] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.320881][ T1044] block nbd2: Attempted send on invalid socket [ 423.327182][ T1044] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.336814][ T1044] block nbd2: Attempted send on invalid socket [ 423.343054][ T1044] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.355219][ T1044] block nbd2: Attempted send on invalid socket [ 423.361473][ T1044] I/O error, dev nbd2, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.372110][ T52] block nbd2: Attempted send on invalid socket [ 423.378585][ T52] I/O error, dev nbd2, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.389038][ T52] block nbd2: Attempted send on invalid socket [ 423.395430][ T52] I/O error, dev nbd2, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 423.408851][T15604] VFS: unable to find oldfs superblock on device nbd2 [ 423.661303][ T52] block nbd0: Attempted send on invalid socket [ 423.667735][ T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 423.688058][T15621] hfsplus: unable to find HFS+ superblock [ 424.108383][T15642] loop3: detected capacity change from 0 to 1024 [ 424.210951][T15649] loop0: detected capacity change from 0 to 256 [ 424.315714][T15649] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 424.668482][T15660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5274'. [ 424.688615][T15663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5276'. [ 424.720147][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5276'. [ 424.983945][T15671] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 424.991490][T15671] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 425.073873][ T9031] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 425.197062][T15655] loop1: detected capacity change from 0 to 32768 [ 425.266259][T15655] JBD2: Ignoring recovery information on journal [ 425.324105][ T9031] usb 1-1: Using ep0 maxpacket: 32 [ 425.364958][T15655] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 425.400821][T15655] (syz.1.5272,15655,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=32, inode=17057, rec_len=5, name_len=0 [ 425.423508][T15655] (syz.1.5272,15655,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 425.443443][T15655] (syz.1.5272,15655,0):ocfs2_mknod:296 ERROR: status = -2 [ 425.454419][ T9031] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 425.462694][ T9031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 425.483460][T15655] (syz.1.5272,15655,0):ocfs2_mknod:500 ERROR: status = -2 [ 425.490917][ T9031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 425.565751][ T3640] ocfs2: Unmounting device (7,1) on (node local) [ 425.730412][T15693] loop4: detected capacity change from 0 to 4096 [ 425.743793][ T9031] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 425.765018][ T9031] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 425.793423][ T9031] usb 1-1: Product: syz [ 425.803568][ T9031] usb 1-1: Manufacturer: syz [ 425.816353][ T9031] usb 1-1: SerialNumber: syz [ 425.845095][ T9031] usb 1-1: config 0 descriptor?? [ 425.880502][T15693] ntfs: volume version 3.1. [ 425.895011][ T9031] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 425.940849][ T9031] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 425.969257][T15697] loop2: detected capacity change from 0 to 4096 [ 426.115652][T15697] ntfs: volume version 3.1. [ 426.116004][T15665] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 426.156141][ T9031] usb 1-1: USB disconnect, device number 22 [ 426.175494][ T9031] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 426.352915][T15709] netlink: 'syz.4.5297': attribute type 30 has an invalid length. [ 426.390329][T15712] futex_wake_op: syz.1.5300 tries to shift op by 32; fix this program [ 426.400125][T15713] program syz.3.5299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.401445][ T7232] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 426.433879][ T48] Bluetooth: hci2: command tx timeout [ 426.608929][T15722] usb usb9: usbfs: process 15722 (syz.3.5305) did not claim interface 8 before use [ 426.788544][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5306'. [ 426.832378][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5306'. [ 427.145432][T15743] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5315'. [ 427.163279][ T4746] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 427.222815][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5317'. [ 427.272945][T15748] netlink: 'syz.2.5317': attribute type 1 has an invalid length. [ 427.442451][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5322'. [ 427.443324][ T9031] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 427.519580][T15761] IPv6: sit1: Disabled Multicast RS [ 427.693509][ T4746] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.715753][ T4746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.748701][ T4746] usb 1-1: Product: syz [ 427.752939][ T4746] usb 1-1: Manufacturer: syz [ 427.769669][ T4746] usb 1-1: SerialNumber: syz [ 427.814144][ T4746] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.845100][ T9031] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.871675][ T9031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 427.881117][T15774] loop4: detected capacity change from 0 to 1024 [ 427.891439][ T9031] usb 2-1: config 1 has no interface number 0 [ 427.899730][ T9031] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.106713][ T9031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.140970][ T9031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.150756][ T9031] usb 2-1: Product: syz [ 428.161726][ T9031] usb 2-1: Manufacturer: syz [ 428.173381][ T9031] usb 2-1: SerialNumber: syz [ 428.226029][ T9031] usb 2-1: selecting invalid altsetting 1 [ 428.383487][ T4039] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.433487][ T9031] cdc_ncm 2-1:1.1: bind() failure [ 428.458162][ T9031] usb 2-1: USB disconnect, device number 29 [ 428.611518][T15800] loop4: detected capacity change from 0 to 1024 [ 428.660781][T15800] hfsplus: extend alloc file! (16384,256,524288) [ 428.832848][ T4037] usb 1-1: USB disconnect, device number 23 [ 428.972373][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5347'. [ 429.633392][ T4039] usb 1-1: Service connection timeout for: 256 [ 429.640966][ T4039] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 429.685187][ T4039] ath9k_htc: Failed to initialize the device [ 429.707045][ T4037] usb 1-1: ath9k_htc: USB layer deinitialized [ 429.908769][T15842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.943377][T15842] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 430.425981][T15856] loop0: detected capacity change from 0 to 512 [ 430.433015][T15856] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.472936][T15856] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 430.519348][T15856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 430.534978][T15856] System zones: 1-12 [ 430.554868][T15856] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.5369: corrupted in-inode xattr [ 430.581102][T15856] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.5369: couldn't read orphan inode 15 (err -117) [ 430.629083][T15856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 430.752973][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 430.977186][T15881] loop4: detected capacity change from 0 to 512 [ 431.028050][T15881] EXT4-fs (loop4): orphan cleanup on readonly fs [ 431.093342][T15881] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 431.193368][T15881] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 431.215149][T15881] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.5380: Failed to acquire dquot type 1 [ 431.252186][T15881] EXT4-fs (loop4): 1 truncate cleaned up [ 431.278591][T15881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 431.320649][T15880] loop2: detected capacity change from 0 to 8192 [ 431.344600][T15885] loop0: detected capacity change from 0 to 4096 [ 431.352366][T15880] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 431.372988][T15885] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 431.375574][T15880] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 431.386963][T15885] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 431.423455][T15885] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 431.435184][T15885] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 431.448357][T15885] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 431.460044][T15880] REISERFS (device loop2): using ordered data mode [ 431.466701][T15880] reiserfs: using flush barriers [ 431.476016][T15885] ntfs: volume version 3.1. [ 431.491718][T15880] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 431.491877][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 431.515185][T15885] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 431.542773][T15885] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 431.557105][T15880] REISERFS (device loop2): checking transaction log (loop2) [ 431.608661][T15885] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 431.652018][T15885] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 431.696324][T15885] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 431.764914][T15885] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 431.815216][T15885] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 431.884151][T15880] REISERFS (device loop2): Using tea hash to sort names [ 431.891486][T15880] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 432.432160][T15916] netlink: 'syz.3.5397': attribute type 13 has an invalid length. [ 432.463476][ T9031] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 432.549665][T15915] loop1: detected capacity change from 0 to 1764 [ 432.771401][T15926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5401'. [ 432.821415][T15926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5401'. [ 432.866907][T15930] loop2: detected capacity change from 0 to 1024 [ 432.885113][ T3688] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 432.904382][T15930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.964900][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 433.093617][ T9031] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 433.102738][ T9031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.153512][ T9031] usb 5-1: Product: syz [ 433.162090][ T9031] usb 5-1: Manufacturer: syz [ 433.193697][ T9031] usb 5-1: SerialNumber: syz [ 433.203547][ T3688] usb 4-1: Using ep0 maxpacket: 32 [ 433.229455][ T9031] usb 5-1: config 0 descriptor?? [ 433.328482][T15945] loop0: detected capacity change from 0 to 2048 [ 433.378313][T15945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 433.409907][T15945] ext4 filesystem being mounted at /727/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.513743][ T9031] mos7840 5-1:0.0: required endpoints missing [ 433.520130][ T3688] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 433.536760][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.547126][ T3688] usb 4-1: Product: syz [ 433.551343][ T3688] usb 4-1: Manufacturer: syz [ 433.556544][ T3688] usb 4-1: SerialNumber: syz [ 433.596564][ T3688] usb 4-1: config 0 descriptor?? [ 433.611302][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 433.733679][ T5007] usb 5-1: USB disconnect, device number 28 [ 433.948814][ T9031] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 434.070713][ T5007] usb 4-1: USB disconnect, device number 23 [ 434.078299][ T5007] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 434.098402][ T5007] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 434.374947][ T9031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 434.456772][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5427'. [ 434.470441][T15981] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 434.493364][T15981] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 434.609982][ T9031] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 434.623228][ T9031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.641496][ T9031] usb 3-1: Product: syz [ 434.666786][ T9031] usb 3-1: Manufacturer: syz [ 434.671455][ T9031] usb 3-1: SerialNumber: syz [ 434.722915][ T9031] usb 3-1: config 0 descriptor?? [ 434.775526][ T9031] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 434.801754][ T9031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.863919][ T9031] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 434.880351][ T9031] usb 3-1: media controller created [ 434.914147][T15995] loop4: detected capacity change from 0 to 256 [ 434.944345][ T9031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.053496][ T9031] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 435.253309][ T9031] rc_core: IR keymap rc-twinhan1027 not found [ 435.259487][ T9031] Registered IR keymap rc-empty [ 435.335221][ T9031] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 435.360387][ T9031] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input23 [ 435.400650][ T9031] dvb-usb: schedule remote query interval to 150 msecs. [ 435.420248][ T9031] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 435.479025][ T9031] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 435.547863][ T9031] usb 3-1: USB disconnect, device number 13 [ 435.621473][ T5007] m920x_read = error: -19 [ 435.645529][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 435.844686][ T9031] m920x_read = error: -19 [ 435.849242][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 435.876384][T16033] netlink: 'syz.1.5450': attribute type 11 has an invalid length. [ 435.903492][T16033] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5450'. [ 436.023352][ T9031] m920x_read = error: -19 [ 436.027927][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 436.229408][ T9031] m920x_read = error: -19 [ 436.237895][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 436.433412][ T9031] m920x_read = error: -19 [ 436.437994][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 436.623290][ T9031] m920x_read = error: -19 [ 436.627834][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 436.701379][T16023] loop0: detected capacity change from 0 to 32768 [ 436.784273][T16023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.5446 (16023) [ 436.823387][ T9031] m920x_read = error: -19 [ 436.827809][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 436.865022][T16023] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 436.886816][T16023] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 436.916576][T16023] BTRFS info (device loop0): setting nodatacow, compression disabled [ 436.941763][T16023] BTRFS info (device loop0): force clearing of disk cache [ 436.984463][T16023] BTRFS info (device loop0): setting datacow [ 437.011591][T16023] BTRFS info (device loop0): doing ref verification [ 437.033291][ T3686] m920x_read = error: -19 [ 437.037697][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 437.055976][T16023] BTRFS info (device loop0): turning off barriers [ 437.062526][T16023] BTRFS info (device loop0): enabling ssd optimizations [ 437.090168][T16023] BTRFS info (device loop0): using spread ssd allocation scheme [ 437.143258][T16023] BTRFS info (device loop0): not using ssd optimizations [ 437.153429][T16023] BTRFS info (device loop0): not using spread ssd allocation scheme [ 437.173213][T16023] BTRFS info (device loop0): using free space tree [ 437.243496][ T3686] m920x_read = error: -19 [ 437.247907][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 437.445092][ T3686] m920x_read = error: -19 [ 437.449498][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 437.611835][T16023] BTRFS info (device loop0): rebuilding free space tree [ 437.635359][ T3686] m920x_read = error: -19 [ 437.640563][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 437.833383][ T3686] m920x_read = error: -19 [ 437.837817][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 438.024690][ T3686] m920x_read = error: -19 [ 438.029100][ T3686] dvb-usb: error -19 while querying for an remote control event. [ 438.120664][ T7236] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 438.531367][T16143] loop2: detected capacity change from 0 to 8 [ 438.655688][ T5006] m920x_read = error: -19 [ 438.660155][ T5006] dvb-usb: error -19 while querying for an remote control event. [ 438.764869][T16143] SQUASHFS error: xz decompression failed, data probably corrupt [ 438.795283][T16143] SQUASHFS error: Failed to read block 0x60: -5 [ 438.843327][ T5007] m920x_read = error: -19 [ 438.847737][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 438.860460][T16143] SQUASHFS error: xz decompression failed, data probably corrupt [ 438.877536][T16150] loop1: detected capacity change from 0 to 2048 [ 438.888033][T16143] SQUASHFS error: Failed to read block 0x60: -5 [ 438.923064][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 438.923079][ T26] audit: type=1800 audit(2000000084.280:2723): pid=16143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5496" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 439.004427][T16155] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.033454][ T5007] m920x_read = error: -19 [ 439.034210][T16150] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 439.037834][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 439.118157][T16150] Remounting filesystem read-only [ 439.134115][T16150] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 439.207289][T16150] NILFS (loop1): error -5 truncating bmap (ino=16) [ 439.285254][ T5007] m920x_read = error: -19 [ 439.289667][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 439.350275][ T3640] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 439.363443][ T3640] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 439.399368][ T3640] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.420877][ T3640] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.440499][ T3640] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 439.459977][ T3640] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 439.483460][ T5007] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 439.493698][ T9031] m920x_read = error: -19 [ 439.498223][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 439.678935][ T9031] m920x_read = error: -19 [ 439.684264][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 439.805029][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.811570][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.873502][ T9031] m920x_read = error: -19 [ 439.877960][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 439.933616][ T5007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 439.950296][ T5007] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 439.980128][ T5007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 440.029677][ T5007] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 440.062763][ T5007] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 440.100842][ T5007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.142005][ T9031] m920x_read = error: -19 [ 440.147730][ T5007] usb 1-1: config 0 descriptor?? [ 440.152899][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 440.333270][ T9031] m920x_read = error: -19 [ 440.337675][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 440.350786][T16199] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 440.359048][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5521'. [ 440.368103][T16170] loop2: detected capacity change from 0 to 32768 [ 440.374999][ T4039] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 440.396053][T16199] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 440.423500][ T5007] hdpvr 1-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 440.423500][ T5007] 4(r¥ý [ 440.423500][ T5007] d×Å2}±dæ~ýýŠÙ­^r¤ [ 440.442674][T16170] jfs_rename: dtInsert returned -EIO [ 440.443169][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5521'. [ 440.513255][ T9031] m920x_read = error: -19 [ 440.517831][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 440.653756][ T5007] hdpvr 1-1:0.0: device init failed [ 440.659112][ T5007] hdpvr: probe of 1-1:0.0 failed with error -12 [ 440.706883][ T5007] usb 1-1: USB disconnect, device number 24 [ 440.731870][ T9031] m920x_read = error: -19 [ 440.743244][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 440.773635][ T4039] usb 5-1: unable to get BOS descriptor or descriptor too short [ 440.848762][ T4039] usb 5-1: not running at top speed; connect to a high speed hub [ 440.923342][ T9031] m920x_read = error: -19 [ 440.927772][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 440.943697][ T4039] usb 5-1: config 3 has an invalid interface number: 1 but max is 0 [ 440.951768][ T4039] usb 5-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 440.978432][ T4039] usb 5-1: config 3 has no interface number 0 [ 440.991309][ T4039] usb 5-1: config 3 interface 1 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.026844][ T4039] usb 5-1: config 3 interface 1 has no altsetting 0 [ 441.103532][ T5007] m920x_read = error: -19 [ 441.107922][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 441.203585][ T4039] usb 5-1: New USB device found, idVendor=d483, idProduct=d7be, bcdDevice=22.3d [ 441.212758][ T4039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.262658][ T4039] usb 5-1: Product: syz [ 441.293216][ T4039] usb 5-1: Manufacturer: syz [ 441.297880][ T4039] usb 5-1: SerialNumber: syz [ 441.317015][ T9031] m920x_read = error: -19 [ 441.321437][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 441.343485][T16227] x_tables: ip_tables: osf match: only valid for protocol 6 [ 441.408967][T16231] loop3: detected capacity change from 0 to 1764 [ 441.513656][ T5007] m920x_read = error: -19 [ 441.518073][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 441.520330][T16235] loop0: detected capacity change from 0 to 128 [ 441.633518][ T9031] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 441.644111][ T4039] rndis_host 5-1:3.1: skipping garbage [ 441.649640][ T4039] usb 5-1: bad CDC descriptors [ 441.677471][ T4039] usb 5-1: USB disconnect, device number 29 [ 441.706596][ T5007] m920x_read = error: -19 [ 441.711007][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 441.903441][ T9031] usb 2-1: Using ep0 maxpacket: 8 [ 441.913506][ T5007] m920x_read = error: -19 [ 441.917894][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 442.055086][ T9031] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 442.060589][T16251] loop0: detected capacity change from 0 to 2048 [ 442.093531][ T5007] m920x_read = error: -19 [ 442.098208][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 442.120548][T16251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.165177][ T9031] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 442.284912][ T5007] m920x_read = error: -19 [ 442.289311][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 442.303170][ T9031] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 442.483565][ T3688] m920x_read = error: -19 [ 442.488005][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 442.496075][ T9031] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.526061][ T9031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.564627][ T9031] usb 2-1: Product: syz [ 442.568859][ T9031] usb 2-1: Manufacturer: syz [ 442.608797][ T9031] usb 2-1: SerialNumber: syz [ 442.693439][ T3688] m920x_read = error: -19 [ 442.697866][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 442.883497][ T3688] m920x_read = error: -19 [ 442.888107][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 442.888501][T16283] netlink: 'syz.4.5562': attribute type 1 has an invalid length. [ 442.914789][ T9031] adutux 2-1:168.0: interrupt endpoints not found [ 442.940132][T16283] netlink: 'syz.4.5562': attribute type 2 has an invalid length. [ 442.944715][ T9031] usb 2-1: USB disconnect, device number 30 [ 443.005062][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5562'. [ 443.105301][ T5007] m920x_read = error: -19 [ 443.109883][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 443.165074][T16292] loop2: detected capacity change from 0 to 16 [ 443.168488][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 443.228252][T16292] erofs: (device loop2): mounted with root inode @ nid 36. [ 443.293313][ T9031] m920x_read = error: -19 [ 443.298234][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 443.302627][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 443.483356][ T3688] m920x_read = error: -19 [ 443.487770][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 443.659170][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5575'. [ 443.668630][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5575'. [ 443.683408][ T3688] m920x_read = error: -19 [ 443.687844][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 443.753288][ T4039] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 443.869867][ T3688] m920x_read = error: -19 [ 443.875304][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 444.063431][ T3688] m920x_read = error: -19 [ 444.068139][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 444.139344][ T4039] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 444.161615][ T4039] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.202678][ T4039] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.233426][ T4039] usb 1-1: config 1 has no interface number 1 [ 444.239606][ T4039] usb 1-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 444.243464][ T3688] m920x_read = error: -19 [ 444.278528][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 444.303272][ T4039] usb 1-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 444.343332][ T4039] usb 1-1: config 1 interface 2 has no altsetting 1 [ 444.381908][T16295] loop4: detected capacity change from 0 to 32768 [ 444.439470][T16335] netlink: 'syz.2.5585': attribute type 21 has an invalid length. [ 444.447926][T16335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5585'. [ 444.463608][ T5007] m920x_read = error: -19 [ 444.480936][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 444.536170][T16295] XFS (loop4): Mounting V5 Filesystem [ 444.583354][ T4039] usb 1-1: string descriptor 0 read error: -22 [ 444.614546][ T4039] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.630306][ T4039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.638494][T16313] loop1: detected capacity change from 0 to 32768 [ 444.661716][T16313] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.5576 (16313) [ 444.683492][ T3688] m920x_read = error: -19 [ 444.688173][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 444.689625][ T4039] usb 1-1: MIDIStreaming interface descriptor not found [ 444.755811][T16295] XFS (loop4): Ending clean mount [ 444.804013][T16313] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 444.815054][ T5007] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 444.824392][T16295] XFS (loop4): Quotacheck needed: Please wait. [ 444.828528][T16313] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 444.844294][T16313] BTRFS info (device loop1): force zlib compression, level 3 [ 444.863346][ T3688] m920x_read = error: -19 [ 444.868414][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 444.886558][T16313] BTRFS info (device loop1): force clearing of disk cache [ 444.922392][T16313] BTRFS info (device loop1): setting nodatasum [ 444.947956][T16295] XFS (loop4): Quotacheck: Done. [ 444.948215][ T4039] usb 1-1: USB disconnect, device number 25 [ 444.962534][T16313] BTRFS info (device loop1): use zlib compression, level 3 [ 445.000315][T16313] BTRFS info (device loop1): allowing degraded mounts [ 445.039203][T16313] BTRFS info (device loop1): enabling disk space caching [ 445.054195][ T3688] m920x_read = error: -19 [ 445.059279][T16313] BTRFS info (device loop1): disk space caching is enabled [ 445.073733][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 445.083370][ T5007] usb 4-1: Using ep0 maxpacket: 16 [ 445.090789][ T3639] XFS (loop4): Unmounting Filesystem [ 445.229276][ T5007] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.240068][T16313] BTRFS info (device loop1): enabling ssd optimizations [ 445.242201][ T5007] usb 4-1: config 0 has no interface number 0 [ 445.264274][ T3688] m920x_read = error: -19 [ 445.268953][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 445.277325][T16313] BTRFS info (device loop1): rebuilding free space tree [ 445.334039][T16313] BTRFS info (device loop1): disabling free space tree [ 445.347858][T16313] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 445.384135][T16313] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 445.461772][ T3688] m920x_read = error: -19 [ 445.466673][ T5007] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 445.475917][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 445.484091][ T5007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.500925][ T5007] usb 4-1: Product: syz [ 445.515947][ T5007] usb 4-1: Manufacturer: syz [ 445.520626][ T5007] usb 4-1: SerialNumber: syz [ 445.530441][ T5007] usb 4-1: config 0 descriptor?? [ 445.583285][T16313] BTRFS info (device loop1): balance: start -f -svrange=18446744073709551612..18446744073709551612,limit=1,limit=1..0 [ 445.619853][T16313] BTRFS info (device loop1): balance: ended with status: 0 [ 445.653485][ T3688] m920x_read = error: -19 [ 445.657907][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 445.770166][ T3640] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 445.853620][ T3688] m920x_read = error: -19 [ 445.858038][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 445.883400][ T5007] usb 4-1: selecting invalid altsetting 1 [ 445.889636][ T5007] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 445.923235][ T5007] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 445.941547][ T5007] speedtch: probe of 4-1:0.1 failed with error -22 [ 445.982771][ T5007] usb 4-1: USB disconnect, device number 24 [ 446.073534][ T3688] m920x_read = error: -19 [ 446.077932][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 446.269587][ T5007] m920x_read = error: -19 [ 446.275831][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 446.473473][ T5007] m920x_read = error: -19 [ 446.477971][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 446.698299][ T5007] m920x_read = error: -19 [ 446.702788][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 446.901668][ T5007] m920x_read = error: -19 [ 446.912104][T16366] loop2: detected capacity change from 0 to 32768 [ 446.923424][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 446.967429][T16399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5603'. [ 446.973629][T16366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5589 (16366) [ 446.983416][T16400] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5604'. [ 447.031785][T16366] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 447.062224][T16366] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 447.080867][T16366] BTRFS info (device loop2): setting nodatacow, compression disabled [ 447.092571][ T5007] m920x_read = error: -19 [ 447.097613][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 447.131067][T16366] BTRFS info (device loop2): force clearing of disk cache [ 447.189069][T16366] BTRFS info (device loop2): setting datacow [ 447.238394][T16366] BTRFS info (device loop2): doing ref verification [ 447.273250][ T5007] m920x_read = error: -19 [ 447.277707][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 447.293200][T16366] BTRFS info (device loop2): turning off barriers [ 447.310034][T16366] BTRFS info (device loop2): enabling ssd optimizations [ 447.344695][T16366] BTRFS info (device loop2): using spread ssd allocation scheme [ 447.403475][T16366] BTRFS info (device loop2): not using ssd optimizations [ 447.410670][T16366] BTRFS info (device loop2): not using spread ssd allocation scheme [ 447.454767][ T5007] m920x_read = error: -19 [ 447.459194][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 447.473211][T16366] BTRFS info (device loop2): using free space tree [ 447.519306][T16407] loop4: detected capacity change from 0 to 4096 [ 447.537593][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5612'. [ 447.650633][T16407] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 447.658096][ T5007] m920x_read = error: -19 [ 447.662467][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 447.779020][T16407] ntfs3: loop4: Failed to load $Extend. [ 447.865517][T16441] loop0: detected capacity change from 0 to 16 [ 447.868924][T16366] BTRFS info (device loop2): rebuilding free space tree [ 447.883494][ T5007] m920x_read = error: -19 [ 447.887945][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 447.904566][T16441] erofs: (device loop0): mounted with root inode @ nid 36. [ 447.944029][T16441] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 447.970143][T16441] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 448.001508][T16441] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 448.075344][ T5007] m920x_read = error: -19 [ 448.079753][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 448.095511][T16447] loop4: detected capacity change from 0 to 1024 [ 448.151284][T16448] loop1: detected capacity change from 0 to 2048 [ 448.196825][ T3650] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.273247][ T5007] m920x_read = error: -19 [ 448.277735][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 448.315618][T16448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 448.463452][ T5007] m920x_read = error: -19 [ 448.467857][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 448.653510][ T3688] m920x_read = error: -19 [ 448.658483][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 448.783315][ T5007] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 448.827899][ T3640] EXT4-fs (loop1): unmounting filesystem. [ 448.875662][ T3684] m920x_read = error: -19 [ 448.883361][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 448.975882][T16474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5631'. [ 449.053354][ T3684] m920x_read = error: -19 [ 449.057933][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 449.233934][ T3684] m920x_read = error: -19 [ 449.238334][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 449.253632][ T5007] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.313874][ T5007] usb 1-1: not running at top speed; connect to a high speed hub [ 449.423501][ T5007] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 449.445861][ T5007] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 449.490896][ T5007] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.493345][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5638'. [ 449.504272][ T3684] m920x_read = error: -19 [ 449.521811][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 449.700334][ T3684] m920x_read = error: -19 [ 449.705087][ T5007] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.724163][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 449.749247][ T5007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.771392][ T5007] usb 1-1: Product: syz [ 449.789018][ T5007] usb 1-1: Manufacturer: syz [ 449.799510][ T5007] usb 1-1: SerialNumber: syz [ 449.883495][ T3684] m920x_read = error: -19 [ 449.887992][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 449.938559][T16505] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 450.069765][ T3684] m920x_read = error: -19 [ 450.080797][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 450.283344][ T3684] m920x_read = error: -19 [ 450.296531][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 450.371985][ T5007] usb 1-1: 0:2 : does not exist [ 450.374195][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5649'. [ 450.417053][ T5007] usb 1-1: USB disconnect, device number 26 [ 450.489912][ T3684] m920x_read = error: -19 [ 450.495419][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 450.602442][T16520] loop3: detected capacity change from 0 to 256 [ 450.626601][T16521] loop4: detected capacity change from 0 to 512 [ 450.654014][T16521] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.671454][T16521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.673655][T16520] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 450.686118][T16499] loop1: detected capacity change from 0 to 32768 [ 450.696275][ T3684] m920x_read = error: -19 [ 450.696377][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 450.726267][T16521] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.5651: corrupted in-inode xattr [ 450.751603][T16521] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5651: couldn't read orphan inode 15 (err -117) [ 450.789684][T16521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 450.827259][T16499] XFS (loop1): Mounting V5 Filesystem [ 450.849891][ T7519] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 450.890667][T16532] overlayfs: missing 'lowerdir' [ 450.892575][ T3684] m920x_read = error: -19 [ 450.900107][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 451.030777][T16499] XFS (loop1): Ending clean mount [ 451.079837][T16499] XFS (loop1): Quotacheck needed: Please wait. [ 451.097785][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 451.173301][ T3688] m920x_read = error: -19 [ 451.177793][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 451.255710][T16499] XFS (loop1): Quotacheck: Done. [ 451.312878][T16548] No such timeout policy "syz0" [ 451.359065][ T3640] XFS (loop1): Unmounting Filesystem [ 451.384643][T16552] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 451.393258][ T3688] m920x_read = error: -19 [ 451.410084][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 451.613323][ T3688] m920x_read = error: -19 [ 451.617842][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 451.824849][ T3688] m920x_read = error: -19 [ 451.829245][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 452.023304][ T3688] m920x_read = error: -19 [ 452.027711][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 452.213419][ T3688] m920x_read = error: -19 [ 452.217923][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 452.405221][ T3684] m920x_read = error: -19 [ 452.413210][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 452.618674][ T3684] m920x_read = error: -19 [ 452.623093][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 452.809499][T16570] loop4: detected capacity change from 0 to 32768 [ 452.823580][ T3684] m920x_read = error: -19 [ 452.833217][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 452.861653][T16570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5670 (16570) [ 452.959766][T16593] loop2: detected capacity change from 0 to 4096 [ 452.968768][T16570] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 452.989982][T16570] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 453.030310][T16570] BTRFS info (device loop4): using free space tree [ 453.032044][ T3684] m920x_read = error: -19 [ 453.076935][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 453.125780][T16593] ntfs: volume version 3.1. [ 453.270016][T16580] loop3: detected capacity change from 0 to 32768 [ 453.284667][T16580] XFS: ikeep mount option is deprecated. [ 453.290380][T16580] XFS: ikeep mount option is deprecated. [ 453.313356][ T3684] m920x_read = error: -19 [ 453.317759][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 453.445602][T16580] XFS (loop3): Mounting V5 Filesystem [ 453.484527][T16570] BTRFS info (device loop4): enabling ssd optimizations [ 453.495148][ T3684] m920x_read = error: -19 [ 453.500005][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 453.515393][T16582] loop1: detected capacity change from 0 to 32768 [ 453.547379][T16582] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5664 (16582) [ 453.651881][T16580] XFS (loop3): Ending clean mount [ 453.663442][ T3684] m920x_read = error: -19 [ 453.669919][T16582] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 453.677555][ T3639] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.690599][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 453.712485][T16582] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 453.761896][T16582] BTRFS info (device loop1): turning off barriers [ 453.814547][T16582] BTRFS info (device loop1): enabling auto defrag [ 453.821049][T16582] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 453.894150][T16582] BTRFS info (device loop1): use lzo compression, level 0 [ 453.953029][T16582] BTRFS info (device loop1): using free space tree [ 453.960554][T16640] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 453.985650][T16640] netlink: 'syz.2.5693': attribute type 8 has an invalid length. [ 454.054992][T16640] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.090952][T16640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.155007][ T5006] m920x_read = error: -19 [ 454.159430][ T5006] dvb-usb: error -19 while querying for an remote control event. [ 454.210643][ T7519] XFS (loop3): Unmounting Filesystem [ 454.343256][ T5000] m920x_read = error: -19 [ 454.347830][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 454.463631][ T3640] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 454.553331][ T5007] m920x_read = error: -19 [ 454.557756][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 454.603789][T16669] ip6t_srh: unknown srh invflags 7D00 [ 454.754042][ T5007] m920x_read = error: -19 [ 454.760888][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 454.963388][ T5007] m920x_read = error: -19 [ 454.967801][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 455.173648][ T5000] m920x_read = error: -19 [ 455.178068][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 455.280009][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5699'. [ 455.383373][ T5000] m920x_read = error: -19 [ 455.387808][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 455.623288][ T5000] m920x_read = error: -19 [ 455.624682][T16696] loop1: detected capacity change from 0 to 2048 [ 455.627689][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 455.712244][T16696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.772647][ T26] audit: type=1800 audit(455.732:2724): pid=16696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5710" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 455.861609][ T5000] m920x_read = error: -19 [ 455.871550][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 456.074493][ T5000] m920x_read = error: -19 [ 456.078963][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 456.273291][ T5007] m920x_read = error: -19 [ 456.277703][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 456.413211][ T5000] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 456.463582][ T5007] m920x_read = error: -19 [ 456.467986][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 456.653289][ T5007] m920x_read = error: -19 [ 456.657816][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 456.673288][ T5000] usb 4-1: Using ep0 maxpacket: 32 [ 456.853383][ T5007] m920x_read = error: -19 [ 456.857885][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 456.882032][T16693] loop4: detected capacity change from 0 to 32768 [ 456.923949][T16693] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 456.950606][T16693] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 457.003899][ T5000] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 457.027039][ T5000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.028117][T16737] netlink: 'syz.0.5730': attribute type 1 has an invalid length. [ 457.043211][ T5000] usb 4-1: Product: syz [ 457.043236][ T5000] usb 4-1: Manufacturer: syz [ 457.043255][ T5000] usb 4-1: SerialNumber: syz [ 457.044269][ T5007] m920x_read = error: -19 [ 457.062187][T16693] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 457.079662][ T5000] usb 4-1: config 0 descriptor?? [ 457.091829][ T5007] dvb-usb: error -19 while querying for an remote control event. [ 457.115632][ T3688] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 457.126743][ T5000] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 457.144296][ T3688] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 457.209580][T16722] loop2: detected capacity change from 0 to 32768 [ 457.228036][T16722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.5723 (16722) [ 457.251181][ T3688] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 457.300615][ T3688] gfs2: fsid=syz:syz.0: jid=0: Done [ 457.306869][T16693] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 457.314564][ T3688] m920x_read = error: -19 [ 457.327254][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 457.360213][T16722] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 457.405098][T16722] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 457.428839][T16722] BTRFS info (device loop2): force zlib compression, level 3 [ 457.457279][T16722] BTRFS info (device loop2): force clearing of disk cache [ 457.503262][T16722] BTRFS info (device loop2): setting nodatasum [ 457.509505][T16722] BTRFS info (device loop2): use zlib compression, level 3 [ 457.517465][ T3688] m920x_read = error: -19 [ 457.521840][ T3688] dvb-usb: error -19 while querying for an remote control event. [ 457.555591][T16722] BTRFS info (device loop2): allowing degraded mounts [ 457.562971][T16722] BTRFS info (device loop2): enabling disk space caching [ 457.573437][ T5000] gspca_stk1135: reg_w 0x0 err -71 [ 457.579718][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.581842][T16722] BTRFS info (device loop2): disk space caching is enabled [ 457.633161][ T5000] gspca_stk1135: Sensor write failed [ 457.669851][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.676712][ T5000] gspca_stk1135: Sensor write failed [ 457.682131][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.693787][ T5000] gspca_stk1135: Sensor read failed [ 457.699070][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.708051][ T5000] gspca_stk1135: Sensor read failed [ 457.713789][ T5000] gspca_stk1135: Detected sensor type unknown (0x0) [ 457.720446][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.727322][ T5000] gspca_stk1135: Sensor read failed [ 457.732582][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.739405][ T5000] gspca_stk1135: Sensor read failed [ 457.745049][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.751435][ T5000] gspca_stk1135: Sensor write failed [ 457.757392][ T5000] gspca_stk1135: serial bus timeout: status=0x00 [ 457.764135][ T5000] gspca_stk1135: Sensor write failed [ 457.769536][ T5000] stk1135: probe of 4-1:0.0 failed with error -71 [ 457.778616][ T5000] usb 4-1: USB disconnect, device number 25 [ 457.787648][ T9031] m920x_read = error: -19 [ 457.792040][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 457.900568][T16722] BTRFS info (device loop2): enabling ssd optimizations [ 457.921869][T16722] BTRFS info (device loop2): rebuilding free space tree [ 457.947977][T16722] BTRFS info (device loop2): disabling free space tree [ 457.968538][T16722] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 458.003321][T16722] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 458.014496][ T9031] m920x_read = error: -19 [ 458.018874][ T9031] dvb-usb: error -19 while querying for an remote control event. [ 458.062723][T16722] BTRFS info (device loop2): balance: start -f -sdrange=4398046511104..0,limit=42949672976,stripes=0..255 [ 458.083426][T16722] BTRFS info (device loop2): balance: ended with status: 0 [ 458.183279][ T5000] m920x_read = error: -19 [ 458.187772][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 458.230638][ T3650] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 458.527509][T16787] loop0: detected capacity change from 0 to 512 [ 458.702910][T16787] EXT4-fs (loop0): 1 truncate cleaned up [ 458.723236][T16787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 458.754691][T16797] loop1: detected capacity change from 0 to 2048 [ 458.797457][T16797] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 458.818142][T16797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.900671][ T3684] m920x_read = error: -19 [ 458.905454][ T3684] dvb-usb: error -19 while querying for an remote control event. [ 458.989558][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 459.113667][ T5000] m920x_read = error: -19 [ 459.118083][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 459.190721][T16810] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 459.233324][T16810] overlayfs: overlapping lowerdir path [ 459.324347][ T14] m920x_read = error: -19 [ 459.329176][ T14] dvb-usb: error -19 while querying for an remote control event. [ 459.344137][T16817] loop2: detected capacity change from 0 to 512 [ 459.459765][T16817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 459.542400][ T14] m920x_read = error: -19 [ 459.573155][ T14] dvb-usb: error -19 while querying for an remote control event. [ 459.641885][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 459.767666][ T14] m920x_read = error: -19 [ 459.772084][ T14] dvb-usb: error -19 while querying for an remote control event. [ 460.036634][ T14] m920x_read = error: -19 [ 460.053276][ T14] dvb-usb: error -19 while querying for an remote control event. [ 460.161762][T16854] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 460.192024][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 460.243290][ T14] m920x_read = error: -19 [ 460.247690][ T14] dvb-usb: error -19 while querying for an remote control event. [ 460.443616][ T5000] m920x_read = error: -19 [ 460.448052][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 460.633318][ T5000] m920x_read = error: -19 [ 460.637821][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 460.666119][T16878] netlink: 'syz.0.5787': attribute type 8 has an invalid length. [ 460.746353][T16882] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5791'. [ 460.761191][T16882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5791'. [ 460.834452][T16882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5791'. [ 460.838636][ T14] m920x_read = error: -19 [ 460.847959][ T14] dvb-usb: error -19 while querying for an remote control event. [ 461.033211][ T14] m920x_read = error: -19 [ 461.037615][ T14] dvb-usb: error -19 while querying for an remote control event. [ 461.253297][ T14] m920x_read = error: -19 [ 461.258028][ T14] dvb-usb: error -19 while querying for an remote control event. [ 461.463579][ T5000] m920x_read = error: -19 [ 461.468005][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 461.653454][ T5000] m920x_read = error: -19 [ 461.657893][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 461.868197][ T5000] m920x_read = error: -19 [ 461.872597][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 461.890068][T16927] netlink: 'syz.1.5813': attribute type 10 has an invalid length. [ 461.946997][T16927] bridge0: port 4(team0) entered disabled state [ 461.953742][T16927] bridge0: port 3(hsr0) entered disabled state [ 461.960151][T16927] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.967499][T16927] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.019439][T16927] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.054627][ T14] m920x_read = error: -19 [ 462.080563][ T14] dvb-usb: error -19 while querying for an remote control event. [ 462.101439][T16927] bridge0: port 4(team0) entered blocking state [ 462.108010][T16927] bridge0: port 4(team0) entered forwarding state [ 462.114781][T16927] bridge0: port 3(hsr0) entered blocking state [ 462.121081][T16927] bridge0: port 3(hsr0) entered forwarding state [ 462.127719][T16927] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.134942][T16927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.142417][T16927] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.149663][T16927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.189222][T16927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.283496][ T5000] m920x_read = error: -19 [ 462.287906][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 462.387716][T16942] Error parsing options; rc = [-22] [ 462.483245][ T14] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 462.501535][ T5001] m920x_read = error: -19 [ 462.506477][ T5001] dvb-usb: error -19 while querying for an remote control event. [ 462.521719][T16946] loop3: detected capacity change from 0 to 64 [ 462.628032][T16946] syz.3.5823: attempt to access beyond end of device [ 462.628032][T16946] loop3: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 462.670203][T16946] Buffer I/O error on dev loop3, logical block 1295, async page read [ 462.689704][T16919] loop2: detected capacity change from 0 to 32768 [ 462.709458][ T5001] m920x_read = error: -19 [ 462.725561][T16919] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.5810 (16919) [ 462.731492][ T5001] dvb-usb: error -19 while querying for an remote control event. [ 462.738100][T16946] syz.3.5823: attempt to access beyond end of device [ 462.738100][T16946] loop3: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 462.761191][T16946] Buffer I/O error on dev loop3, logical block 1295, async page read [ 462.763278][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 462.774943][ T26] audit: type=1800 audit(462.742:2725): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5823" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 462.833559][T16919] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 462.853708][T16919] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 462.898767][T16919] BTRFS info (device loop2): force zlib compression, level 3 [ 462.933328][T16919] BTRFS info (device loop2): force clearing of disk cache [ 462.940563][T16919] BTRFS info (device loop2): setting nodatasum [ 462.973528][ T5001] m920x_read = error: -19 [ 462.977024][T16919] BTRFS info (device loop2): use zlib compression, level 3 [ 462.983221][ T5001] dvb-usb: error -19 while querying for an remote control event. [ 463.009772][T16919] BTRFS info (device loop2): allowing degraded mounts [ 463.017193][T16919] BTRFS info (device loop2): enabling disk space caching [ 463.042937][T16919] BTRFS info (device loop2): disk space caching is enabled [ 463.123637][ T14] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 463.138012][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.153242][ T5001] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 463.171296][ T14] usb 5-1: Product: syz [ 463.175906][ T14] usb 5-1: Manufacturer: syz [ 463.181473][ T14] usb 5-1: SerialNumber: syz [ 463.193959][ T5000] m920x_read = error: -19 [ 463.198354][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 463.212068][ T14] usb 5-1: config 0 descriptor?? [ 463.275441][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 463.323448][T16919] BTRFS info (device loop2): enabling ssd optimizations [ 463.344540][T16919] BTRFS info (device loop2): rebuilding free space tree [ 463.363332][ T5000] m920x_read = error: -19 [ 463.368975][T16919] BTRFS info (device loop2): disabling free space tree [ 463.378021][ T5000] dvb-usb: error -19 while querying for an remote control event. [ 463.388136][T16919] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 463.401508][T16919] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 463.421504][T16985] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5833'. [ 463.447691][T16987] loop3: detected capacity change from 0 to 128 [ 463.455459][T16987] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 463.470909][T16987] syz.3.5834: attempt to access beyond end of device [ 463.470909][T16987] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 463.487000][T16987] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 463.496685][T16987] ================================================================== [ 463.504797][T16987] BUG: KASAN: use-after-free in sysv_new_inode+0x107e/0x1210 [ 463.512217][T16987] Read of size 2 at addr ffff88805674f1ce by task syz.3.5834/16987 [ 463.520127][T16987] [ 463.522457][T16987] CPU: 1 PID: 16987 Comm: syz.3.5834 Not tainted 6.1.113-syzkaller #0 [ 463.530622][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.540695][T16987] Call Trace: [ 463.543981][T16987] [ 463.546916][T16987] dump_stack_lvl+0x1e3/0x2cb [ 463.551614][T16987] ? nf_tcp_handle_invalid+0x642/0x642 [ 463.557084][T16987] ? panic+0x764/0x764 [ 463.561175][T16987] ? _printk+0xd1/0x111 [ 463.565334][T16987] ? __virt_addr_valid+0x17f/0x530 [ 463.570459][T16987] ? __virt_addr_valid+0x17f/0x530 [ 463.575594][T16987] print_report+0x15f/0x4f0 [ 463.580106][T16987] ? __virt_addr_valid+0x17f/0x530 [ 463.585237][T16987] ? __virt_addr_valid+0x17f/0x530 [ 463.590356][T16987] ? __virt_addr_valid+0x45b/0x530 [ 463.595479][T16987] ? __phys_addr+0xb6/0x170 [ 463.599997][T16987] ? sysv_new_inode+0x107e/0x1210 [ 463.605031][T16987] kasan_report+0x136/0x160 [ 463.609539][T16987] ? sysv_new_inode+0x107e/0x1210 [ 463.614574][T16987] sysv_new_inode+0x107e/0x1210 [ 463.619445][T16987] ? sysv_free_inode+0x840/0x840 [ 463.624419][T16987] ? __d_add+0x503/0x800 [ 463.628672][T16987] ? generic_permission+0x27c/0x4f0 [ 463.633879][T16987] sysv_mknod+0x4a/0xe0 [ 463.638046][T16987] ? sysv_lookup+0xe0/0xe0 [ 463.642468][T16987] path_openat+0x12f1/0x2e60 [ 463.647082][T16987] ? do_filp_open+0x480/0x480 [ 463.651777][T16987] do_filp_open+0x230/0x480 [ 463.656293][T16987] ? vfs_tmpfile+0x4a0/0x4a0 [ 463.660897][T16987] ? _raw_spin_unlock+0x24/0x40 [ 463.665754][T16987] ? alloc_fd+0x5a0/0x640 [ 463.670105][T16987] do_sys_openat2+0x13b/0x4f0 [ 463.674795][T16987] ? do_sys_open+0x220/0x220 [ 463.679411][T16987] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 463.685406][T16987] __x64_sys_creat+0x11f/0x160 [ 463.690203][T16987] ? __x64_compat_sys_openat+0x290/0x290 [ 463.695853][T16987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 463.701843][T16987] ? lockdep_hardirqs_on+0x94/0x130 [ 463.707070][T16987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 463.713059][T16987] do_syscall_64+0x3b/0xb0 [ 463.717502][T16987] ? clear_bhb_loop+0x45/0xa0 [ 463.722197][T16987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.728102][T16987] RIP: 0033:0x7f4a2b77dff9 [ 463.732539][T16987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.752153][T16987] RSP: 002b:00007f4a2c57a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 463.760592][T16987] RAX: ffffffffffffffda RBX: 00007f4a2b935f80 RCX: 00007f4a2b77dff9 [ 463.768591][T16987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 463.776567][T16987] RBP: 00007f4a2b7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 463.784543][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.792519][T16987] R13: 0000000000000000 R14: 00007f4a2b935f80 R15: 00007fff40ed1368 [ 463.800591][T16987] [ 463.803611][T16987] [ 463.805955][T16987] The buggy address belongs to the physical page: [ 463.812387][T16987] page:ffffea000159d3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5674f [ 463.822551][T16987] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 463.829677][T16987] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 463.838270][T16987] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 463.846850][T16987] page dumped because: kasan: bad access detected [ 463.853267][T16987] page_owner tracks the page as freed [ 463.858630][T16987] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 16580, tgid 16579 (syz.3.5677), ts 453089551321, free_ts 455536248140 [ 463.876530][T16987] post_alloc_hook+0x18d/0x1b0 [ 463.881314][T16987] get_page_from_freelist+0x322e/0x33b0 [ 463.886881][T16987] __alloc_pages+0x28d/0x770 [ 463.891495][T16987] __folio_alloc+0xf/0x30 [ 463.895833][T16987] vma_alloc_folio+0x486/0x990 [ 463.900600][T16987] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 463.906322][T16987] shmem_get_folio_gfp+0x13f0/0x3470 [ 463.911623][T16987] shmem_write_begin+0x16e/0x4e0 [ 463.916647][T16987] generic_perform_write+0x2fc/0x5e0 [ 463.921947][T16987] __generic_file_write_iter+0x176/0x400 [ 463.927590][T16987] generic_file_write_iter+0xab/0x310 [ 463.932963][T16987] vfs_write+0x857/0xbc0 [ 463.937210][T16987] ksys_write+0x19c/0x2c0 [ 463.941549][T16987] do_syscall_64+0x3b/0xb0 [ 463.945978][T16987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.951887][T16987] page last free stack trace: [ 463.956560][T16987] free_unref_page_prepare+0xf63/0x1120 [ 463.962110][T16987] free_unref_page_list+0x663/0x900 [ 463.967308][T16987] release_pages+0x2836/0x2b40 [ 463.972073][T16987] __pagevec_release+0x80/0xf0 [ 463.976854][T16987] shmem_undo_range+0x865/0x2390 [ 463.981805][T16987] shmem_evict_inode+0x265/0xa60 [ 463.986749][T16987] evict+0x529/0x930 [ 463.990656][T16987] __dentry_kill+0x436/0x650 [ 463.995248][T16987] dentry_kill+0xbb/0x290 [ 463.999592][T16987] dput+0xfb/0x1d0 [ 464.003318][T16987] __fput+0x62e/0x8d0 [ 464.007304][T16987] task_work_run+0x246/0x300 [ 464.011912][T16987] exit_to_user_mode_loop+0xde/0x100 [ 464.017201][T16987] exit_to_user_mode_prepare+0xb1/0x140 [ 464.022748][T16987] syscall_exit_to_user_mode+0x60/0x270 [ 464.028305][T16987] do_syscall_64+0x47/0xb0 [ 464.032723][T16987] [ 464.035056][T16987] Memory state around the buggy address: [ 464.040684][T16987] ffff88805674f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 464.048746][T16987] ffff88805674f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 464.056808][T16987] >ffff88805674f180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 464.064867][T16987] ^ [ 464.071275][T16987] ffff88805674f200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 464.079334][T16987] ffff88805674f280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 464.087393][T16987] ================================================================== [ 464.095534][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.102167][ T9669] m920x_read = error: -19 [ 464.107308][ T9669] dvb-usb: error -19 while querying for an remote control event. [ 464.116742][ T14] gspca_stk1135: reg_w 0x0 err -110 [ 464.132947][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 464.139800][ T5001] usb 2-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 464.153653][T16987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 464.160907][T16987] CPU: 0 PID: 16987 Comm: syz.3.5834 Not tainted 6.1.113-syzkaller #0 [ 464.169091][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 464.179180][T16987] Call Trace: [ 464.182489][T16987] [ 464.185448][T16987] dump_stack_lvl+0x1e3/0x2cb [ 464.190161][T16987] ? nf_tcp_handle_invalid+0x642/0x642 [ 464.195657][T16987] ? panic+0x764/0x764 [ 464.199783][T16987] ? preempt_schedule_common+0xa6/0xd0 [ 464.205286][T16987] ? vscnprintf+0x59/0x80 [ 464.209680][T16987] panic+0x318/0x764 [ 464.213629][T16987] ? check_panic_on_warn+0x1d/0xa0 [ 464.218788][T16987] ? memcpy_page_flushcache+0xfc/0xfc [ 464.224204][T16987] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 464.230228][T16987] ? _raw_spin_unlock+0x40/0x40 [ 464.235124][T16987] ? print_report+0x4a3/0x4f0 [ 464.239835][T16987] check_panic_on_warn+0x7e/0xa0 [ 464.244811][T16987] ? sysv_new_inode+0x107e/0x1210 [ 464.249876][T16987] end_report+0x66/0x110 [ 464.254153][T16987] kasan_report+0x143/0x160 [ 464.258694][T16987] ? sysv_new_inode+0x107e/0x1210 [ 464.263776][T16987] sysv_new_inode+0x107e/0x1210 [ 464.268671][T16987] ? sysv_free_inode+0x840/0x840 [ 464.273657][T16987] ? __d_add+0x503/0x800 [ 464.278024][T16987] ? generic_permission+0x27c/0x4f0 [ 464.283255][T16987] sysv_mknod+0x4a/0xe0 [ 464.287447][T16987] ? sysv_lookup+0xe0/0xe0 [ 464.291896][T16987] path_openat+0x12f1/0x2e60 [ 464.296538][T16987] ? do_filp_open+0x480/0x480 [ 464.301261][T16987] do_filp_open+0x230/0x480 [ 464.305799][T16987] ? vfs_tmpfile+0x4a0/0x4a0 [ 464.310449][T16987] ? _raw_spin_unlock+0x24/0x40 [ 464.315352][T16987] ? alloc_fd+0x5a0/0x640 [ 464.319720][T16987] do_sys_openat2+0x13b/0x4f0 [ 464.324443][T16987] ? do_sys_open+0x220/0x220 [ 464.329079][T16987] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 464.335104][T16987] __x64_sys_creat+0x11f/0x160 [ 464.339907][T16987] ? __x64_compat_sys_openat+0x290/0x290 [ 464.345586][T16987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 464.351644][T16987] ? lockdep_hardirqs_on+0x94/0x130 [ 464.356888][T16987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 464.362910][T16987] do_syscall_64+0x3b/0xb0 [ 464.367357][T16987] ? clear_bhb_loop+0x45/0xa0 [ 464.372078][T16987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.378014][T16987] RIP: 0033:0x7f4a2b77dff9 [ 464.382456][T16987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.402101][T16987] RSP: 002b:00007f4a2c57a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 464.410555][T16987] RAX: ffffffffffffffda RBX: 00007f4a2b935f80 RCX: 00007f4a2b77dff9 [ 464.418567][T16987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 464.426574][T16987] RBP: 00007f4a2b7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 464.434576][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.442576][T16987] R13: 0000000000000000 R14: 00007f4a2b935f80 R15: 00007fff40ed1368 [ 464.450599][T16987] [ 464.453943][T16987] Kernel Offset: disabled [ 464.458286][T16987] Rebooting in 86400 seconds..