last executing test programs: 15m50.213630028s ago: executing program 32 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) 15m40.289286727s ago: executing program 4 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x200, 0x1df5d5dc07c9ba18, 0x8000800, 0x81}, 0x48}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) 15m39.978325391s ago: executing program 4 (id=274): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) 15m39.794969306s ago: executing program 4 (id=276): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xe, 0x1, 0x0, "dcb34c2ac262060075d2a3759a8166415d00"}) 15m39.659904607s ago: executing program 4 (id=278): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,errors=remount-ro,dmask=00000000000000000000014,iocharset=cp869,time_offset=0x0000000000000000,utf8,errors=remount-ro,dmask=00000000000000000006466,allow_utime=00000000000000000001000,fmask=00000000000000000000011,appraise_type=imasig,obj_role=\\,uid>', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0x1532, &(0x7f00000042c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiSVJMktIWmSIwmJISRpSEJyGZIYQnKZmDTu9/slIUmaJMktt2T9nwmP06nzr/Pr/I7z/Ob9PM9+rNfea+1373fPd6+9me93XYbUaly7ekMigr8EL/yRBACxADAAAPICQAAA5ePKx2Wtzykx6a/thP17PZR6pTNgVxLXP3vj+mdvXP/sjeufvXH9szeuf/bG9c/euP6MZWcbpxa6hpfsu/D7/+yM7///h2SWGfPV6jLXdQWI+bNduP7ZG9f//6zgz2zE9c/euP7ZVeyVToD9F+Cf/+wgxz9dw/XP3rj+jGVnV/r985VeIPJfdg4O57xQmP/U8TPGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY/8Bp/1lCgAuta90XowxxhhjjDHGGPv38TmudAaMMcYYY4wxxhj734cgQIKCAGIgB8RCTsgFAgCuhjyQFyJwDcTBtZAProP8UAAKQiGIh8JQBDQYsEAQQlEoBlG4HorDDVACSkIpKA0OykAC3Ahl4SYoBzdDebgFKsCtUBEqQWWoArdBVQCoBndAdbgTakBNqAW14S6oA3dDXbgH6sG9UB/ug/vhAWgAD0JDeAgawcPQGB6BJvAoNIVm0BxaQMv/Uf8XoAe8CD2hFyRBb+gDL0Ff6Af94WUYAK/AQHgVBsFrkAyDYQi8DkPhDRgGb8JwGAEj4S0YBW/DaBgDY2EcpMB4mADvwER4FybBezAZpkAqTIVp8D5MhxkwEz6AWfAhzIY5MBfmQRp8BPNhAaTDx7AQPoEMWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAdPoUd8BnshF2wGz6HPfDFv9j/1D/074qAgAIFKlQYgzEYi7GYC3NhbsyNeTAPRjCCcRiH+TAf5sf8WBALYjzGYxEsggYNEhIWxaIYxSgWx+JYAktgKSyFDh0mYAKWxZuwHJbD8lgeK2AFrIiVsBJWwSpYFatiNayG1bE61sAaWAtr4V14F/bGulgX62E9rI/1L72ewobYEBthI2yMjbEJNsGm2BSbY3NsiS2xFbbC1tga22JbbIftsD22x0RMxA7YATtiR+yEnbAzdsYu2AW7YjfslvlCDsAX8UXshTVEb+yDfbAvJufojy/jy/gKDsRX8VV8DZNxMA7B1/F1fAOH4UkcjiNwJI7EquJtHI1jkMQ4TMEUnIATcCJOxKxE38MpmIpTcRpOw+k4A2fgBzgLP8QPcQ7OwXmYhmk4HxdgOqbjQjyFGbgIF+MSXIrLcCmuwJW4AlfjGlyN63AdbsANuAk34RbcgttwG36KCgA/w124C5NxD+7BvbgX9+E+3I/7MRMz8QAewIN4EA/hITyMh/EIHsVjeBRP4Ak8iafwNJ7Gs3gWz+Fz8d80+rTkqmQQWZRQIkbEiFgRK3KJXCK3yC3yiDwiIiIiTsSJfCKfyC/yi4KioIgX8aKIKCKMMIJEGAMAIiqiorgoLkqIEqKUKCWccCJBJIiyoqwoJ8qJ8uIWUUHcKiqKSqKNqyKqiKqirasm7hDVRXVRQ9QUtURtUVvUEXVEXVFX1BP1RH1RX9wvHhANRG/sjw+JrMo0FoOxiRiCTUUzIS9+grUSw7C1aCPaiifECByO7UUrlyieFh3EaOwo/ibG4LOisxiHXcTzoqvoJrqLF0QP0dr1FL3EJOwt+ogp2Ff0E/3Fy2I61hQf4KyctcRrIlkMFkPE62IeviGGiTfFcDFCjBRviVHibTFajBFjxTiRIsaLCeIdMVG8KyaJ98RkMUWkiqlimnhfTBczxEzxgZglPhSzxRwxV8wTaeIjMV8sEOniY7FQfCIyxCKxWCwRS8UysVysECvFKrFarBFrxTqxXmwQG8UmsVnEwlaxTWwXn4od4jOxU+wSu8XnYo/4QuwVX4p94iuxX3wtMsU34oD4VhwU34lD4ntxWPwgjoij4pg4Lk6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXDy718g4ea3MJ6+T+WUBWVAWkvGysCwitTTSSpKhLCqLyai8XhaXN8gSsqQsJUtLJ8vIBHmjLCtvkuXkzbK8vEVWkLfKirKSrCyryNtkVXm7hMiFfdSQNWUtWVveJZPgbllX3iPryXtlfXmfvF8+IBvIB2VD+ZBsJB+WjeUjsol8VDaVzWRz2UK2lI/JVvJx2Vq2kW3lE7KdfFK2l0/JRPm07CD9xUvkWdlZPie7yOdlV9lNdpc/y/PSy56yl4TeIPvIl2Rf2U/2jwUA+YocKF+Vg+RrMlkOlkPk63KofEMOk2/K4XKEHCnfkqPk23K0HCPHynEyRY6XE+Q7cqJ8V06S78nJcopMlVNlfzngl5FmSvmH/d/5nf6Dftn7BrlRbpKb5Ra5VW6T2+WncofcIXfKnXK33C33yD1yr9wr98l9cr/cLzNlpjwgD8iD8qA8JA/Jw/KwPCKPyjPyuDwhf5Qn5Sl5Sp6RZ+VZee7iOQCFSiiplApUjMqhYlVOlUtdpXKrq1UelVdF1DUqTl2r8qnrVH5VQBVUhVS8KqyKKK2MsopUqIqqYiqqrseLF4wqpUorp8qoBHXjv9JfFVc3qBKq5K/6X8ov6Z/k11K1VK1UK9VatVZtVVvVTrVT7VV7lagSVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVXfVXfVQPVRP1VMlqSTVR72k+qp+qr96WQ1Qr6iBaqAapAapZJWshqghaqgaqoapYWq4Gq5GqpFqlBqlRqvRaqwaq1JUipqgJqiJaqKapCapyWqySlWpapqapqar6WqmmqlmqVlqtpqt5qq5Kk2lqflqvkpX6WqhWqgy1CK1SC1RS9QytUytUCvUKrVKrVFr1DoQKkNtVBvVZrVZbVVb1Xa1Xe1QO9ROsVPtVrvVHrVH7VV71T61T+1X+1WmylQH1AF1UB1Uh9QhdVgdVkfUEXVMHVMn1Al1Up1Up9VpdVadVefUOXVenc+a9gUiEIEKVBATxASxQWyQK8gV5A5yB3mCPEEkiARxQVyQL7guyB8UCAoGhYL4oHBQJNCBCWwgLhY9GlwfFA+y7tYlg1JB6cAFZYKE4MagbHBTUC64OSgf3BJUCG4NKgaVgspBleC2oGpwe1AtuCOoHtwZ1AhqBrWC2sFdQZ3g7qBucE9QL7g3qB/cF9wfPBA0CB4MGgYPBY2Ch4PGwSNBk+DRoGnQLGgetAha/lvH9/5kgcddT91LJ+neuo9+SffV/XR//bIeoF/RA/WrepB+TSfrwXqIfl0P1W/oYfpNPVyP0CP1W3qUfluP1mP0WD1Op+jxeoJ+R0/U7+pJ+j09WU/RqXqqnqbf19P1DD1Tf6Bn6Q/1bD1Hz9XzdJr+SM/XC3S6/lgv1J/oDL1IL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v15/qHfozvVPv0rv153qP/kLv1V/qfforvV9/rTP1N/qA/lYf1N/pQ/p7fVj/oI/oo/qYPq5P6B/1SX1Kn9Zn9Fn9kz6nf9bntc+a3Gfd3o0yysSYGBNrYk0uk8vkNrlNHpPHREzExJk4k8/kM/lNflPQFDTxJt4UMUVMFjJkipqiJmqiprgpbkqYEqaUKWWccSbBJJiypqwpZ8qZ8qa8qWAqmIqmoqlsKpvbzG3mdnO7ucPcYe40d5qapqapbWqbOqaOqWvqmnqmnqlv6pv7zf2mgWlgGpqGppFpZBqbxqaJaWKamqamuWluWpqWppVpZVqb1qataWvamXamvWlvEk2i6WA6mI6mo+lkOpnOprPpYrqYrqar6W66mx6mh+lpepokk2T6mD6mr+lr+pv+ZoAZYAaagWaQGWSSTbIZYoaYoWaoGWaGmeFmhBmZdembt81oM8aMNeNMikkxE8wEM9FMNJPMJDPZTDapJtVMM9PMdDPdzDQzzSwzy8w2s81cM9ekmTQz38w36SbdLDQLTYbJMIvNYrPULDXLzXKz0qw0q81qsxbWmvVmvdloNprNZrPZaraa7Wa72WF2mJ1mp9ltdps9Zo/Za/aafWaf2W/2m0yTaQ6YA+agOWgOmUPmsDlsjpgj5pg5Zk6YE+akOWlOm9PmrClw8X7pTazNaXPZq2xue7XNY/Paf4wL2kI23ha2Ray2+W2BX8XGWlvClrSlbGnrbBmbYG/8TVzRVrKVbRV7m61qb7fVfhPXsXfbuvYeW8/ea2vbu34V17f32azZSQNEANvMNrItbGP7iG1iH7VNbTPb3Law7eyTtr19yibap20H+8xv4vl2gV1pV9nVdo3daXfZ0/aMPWi/s2ftT7an7WUH2FfsQPuqHWRfs8l28G/ikfYtO8q+bUfbMXasHfebeLKdYlPtVDvNvm+n2xm/idPsR3aWTbez7Rw71877Jc7KKd1+bBfaT2yGDWCxXWKX2mV2uV1xKVef166z6+0Gu8N+ZjfbLXar3Wa3X5oI2112t/3c7rFf2AP2W7vPfmX320M2037zS5x1fIfs9/aw/cEesUftMXvcnrA/qku9s479uP3ZnrfeAiEBSVIUUAzloFjKSbnoKspNV1MeyksRuobi6FrKR9dRfipABakQxVNhKkKaDFkiCqkoFaMoXU+X0itFpclRGUqgG6ks3UTl6GYqT7dQBbqVKlIlqkxV6DaqSrdTNbqDqtOdVINqUi2qTXdRHbqb6tI9VI/upfp0H91PD1ADepAa0kPUiB6mxvQINaFHqSk1o+bUglrSY9SKHqfW1Iba0hPUjp6k9vQUJdLT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6URL1pj70EvWlftSfXqYB9AoNpFdpEL1GyTSYhtDrNJTeoGH0Jg2nETSS3qJR9DaNpjE0lsZRCo2nCfQOTaR3aRK9R5NpCqXSVJpG79N0mkEz6QOaRR/SbJpDc2kepdFHNJ8WUDp9TAvpE8qgRbSYltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRtvpU9pBn9FO2kW76XPaQ18Q0pe0j76i/fQ1ZdI3dIC+pYP0HR2i730v+oGO0FE6RsfpBP1IJ+kUnaYzdJZ+onP0M50nTxBiKEIZqjAIY8IcYWyYM8wVXhXmDq8O84R5w0h4TRgXXhvmC68L84cFwoJhoTA+LBwWCXVoQhtSGIZFw2JhNLw+LB7eEJYIS4alwtKhC8uECeGNYdnwprBceHNYPrwlrBDeGlYMK4WP3FslvC2sGt4eVgvvCKuHd4Y1wpphrbB2eFdYJ7w7rBveE9YL7w3LhfeF94cPhA3CB8OG4UNho/DhsHH4SNgkfDRsGjYLm4ctwpbhY2Gr8PGwddgmbBs+EbYLnwzbh0+FieHTYYfwmV/W37fgn69PCnuHfcKXwpdC7++Rc6PzomnRj6Lzowui6dGPowujn0Qzoouii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbot7XzgEOnXDSKRe4GJfDxbqcLpe7yuV2V7s8Lq+LuGtcnLvW5XPXufyugCvoCrl4V9gVcdoZZx250BV1xVzUXe+KuxtcCVfSlXKlnXNlXIJr4Vq6lq6Ve9y1dm1cW/eEe8I96Z50T7mn3NOug3vGdXR/c53cs66ze8495553XV0319294Hq48Xku/EwmuT6uj+vr+rr+rr8b4Aa4gW6gG+QGuWSX7Ia4IW6oG+qGuWFuuBvuRrqRbpQb5Ua70W6sG+tSXIqb4Ca4iW6im+Qmucluskt1qW6am+amu+mu6owLe5ntZru5bq5Lc2luvsuaM6a7hW6hy3AZbrFb7Ja6pW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1uu9vudrgdbqfPe2FQt8ftdXvdPrfP7Xdfu0z3jTvgvnUH3XfukPveHXY/uCPuqDvmjrsT7kd30p1yp90Zd9b95M65n915511KZHxkQuSdyMTIu5FJkfcikyNTIqmRqZFpkfcj0yMzIjMjH0RmRT6MzI7MicyNzIukRT6KzI8siKRHPo4sjHwSyYgsiiyOLIksjSyLeF94c+iL+mI+6q/3xf0NvoQv6Uv50t75Mj7B3+jL+pt8OX+zL+9v8RX8rb6ir+Qr+0d9U9/MN/ctfEv/mG/lH/etfRvf1j/h2/knfXv/lE/0T/sO/hnf0f/Nd/LP+s7+Od/FP++7+m6+u3/B9/Av+p6+l0/yvX0f/5Lv6/v5/v5lP8C/4gf6V/0g/5pP9oP9EP+6H+rf8MP8m364H+FHxrzlR116RIZxPsWP9xP8O36if9dP8u/5yX6KT/VT/TT/vp/uZ/iZ/gM/y3/oZ/s5fq6f59P8R36+X+DT/cd+of/EZ/hFl14q++V+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/nt/lO/w3/md/pdfrf/3O/xX/i9/ku/z3/l9/uvfab/xh/w3/qD/jt/yH/vD/sf/BF/1B/zx/0J/6M/6U/50/6MP+t/8uf8z/48/84aY4wxxtifMv5yU/x6zYXX+b1/p4/4u437AMDVWwpl/v36rBnl2vwX2v1EfLsIADzdq8tDl5YaNZKSki5umyEhKDYH4NK/BGWJgcvxImgLT0IitIGyv5t/P9HtLP3B+NFbAHL9XZ9YuBxfHv9LAEz6nfEfe2Lk/Arh6bj/z/hzAEoUu9wnJ1yOF0FbBQFAGyj3T/Iv0OoP8s/5VQpA67/rkxsux5fzT4DH4RlI/NWWjDHGGGOMMcbYBf1E5U6Xnj8v/Y/P33s+j1eX++SAy/EfPZ8zxhhjjDHGGGPsynu2W/enHktMbNPpX29U++Nt1P9s5F8aTeBPbnzpzcRf2Bc32nR61vvL5zDrnP7FAQGyGvI/eRSb/iP7Sr54vf3jqqVnfAD/HaX8dzSu4IcSY4wxxhhj7H/F5Un/r/9eXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOivfscb/Ilv6bvSx8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8vAAD//yUk9Rc=") mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 15m39.148658578s ago: executing program 4 (id=285): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0x40505331, &(0x7f0000000180)={0xf, 0x0, 0x0, 'queue1\x00'}) 15m38.329286244s ago: executing program 4 (id=293): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000300)="aa1d484e243103c0000c5b00f7c08bfcd111fbdf23ea32db0e0321d5bc27bd8063fc7a06", 0x24}], 0x2) 15m37.786775138s ago: executing program 33 (id=293): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000300)="aa1d484e243103c0000c5b00f7c08bfcd111fbdf23ea32db0e0321d5bc27bd8063fc7a06", 0x24}], 0x2) 14m23.910931489s ago: executing program 2 (id=1469): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3fe, 0x143a81) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 14m23.63769153s ago: executing program 2 (id=1476): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"e7ffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "050000ff20277ec3000900", '\x00', "8100", "e86eadca", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) 14m23.450839865s ago: executing program 2 (id=1479): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000200)=0xb) 14m23.309791147s ago: executing program 2 (id=1482): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f00000016c0)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5a7, &(0x7f0000000f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 14m23.048995228s ago: executing program 2 (id=1484): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb, 0x50000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0) 14m22.548941448s ago: executing program 2 (id=1490): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) 14m22.413753299s ago: executing program 34 (id=1490): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) 13m44.016701819s ago: executing program 0 (id=2092): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) 13m43.920469997s ago: executing program 0 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 13m43.777618699s ago: executing program 0 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="be9278", 0x0}, 0x20) 13m43.63322732s ago: executing program 0 (id=2098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 13m43.534350678s ago: executing program 0 (id=2100): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000040, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 13m43.120971842s ago: executing program 0 (id=2108): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000007, 0x0, &(0x7f0000000240)={0x20, 0x1, 0xfffc, 0x200}, 0x8, 0x4007, 0x80, 0x0, 0x1, 0x101, 0x0}) 13m39.106037425s ago: executing program 6 (id=2183): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4c5b, 0xfffffffe, 0x81, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 13m38.934823368s ago: executing program 6 (id=2188): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x53a, &(0x7f0000000c80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 13m38.654070081s ago: executing program 6 (id=2193): r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x80, 0xfff, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1}}}}) 13m38.472869756s ago: executing program 6 (id=2196): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x180401a, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550dbf02d47ded539aef16b5f1cf677018ad5588131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a4cba88690ccbce67e3919"], 0x1, 0x617f, &(0x7f0000012640)="$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") symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13m37.506201404s ago: executing program 6 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 13m36.982991446s ago: executing program 6 (id=2228): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0xfffffffffffffffd) 13m28.043007295s ago: executing program 35 (id=2108): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000007, 0x0, &(0x7f0000000240)={0x20, 0x1, 0xfffc, 0x200}, 0x8, 0x4007, 0x80, 0x0, 0x1, 0x101, 0x0}) 13m21.862727372s ago: executing program 36 (id=2228): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0xfffffffffffffffd) 6m50.872460379s ago: executing program 1 (id=8784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 6m50.698038073s ago: executing program 1 (id=8786): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 6m50.660334156s ago: executing program 1 (id=8788): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 6m50.477668691s ago: executing program 1 (id=8790): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 6m49.684712114s ago: executing program 1 (id=8798): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 6m47.467540171s ago: executing program 1 (id=8824): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0xa, 0x0, @dev}, @in={0x2, 0x0, @multicast1}}]}, 0xa8}}, 0x0) 6m47.256438148s ago: executing program 37 (id=8824): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0xa, 0x0, @dev}, @in={0x2, 0x0, @multicast1}}]}, 0xa8}}, 0x0) 2.87659437s ago: executing program 5 (id=14851): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x814, &(0x7f0000000000)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="10aabdaf2255"}, 0x14) 2.75679544s ago: executing program 5 (id=14855): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4048880, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x30}}], 0x2, 0x0) 2.681745566s ago: executing program 9 (id=14857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0xff, 0x9, 0x6, 0x83, 0x3}, 0xc) 2.588872773s ago: executing program 5 (id=14860): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x2000000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.540832757s ago: executing program 9 (id=14861): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x10) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 2.435391315s ago: executing program 5 (id=14865): r0 = eventfd(0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e630a5522bfa12e", 0x8}, {&(0x7f0000000280)="ffffffffffffffff", 0x8}], 0x2) 2.356990081s ago: executing program 9 (id=14867): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0x1d0, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 2.301237476s ago: executing program 9 (id=14869): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x5, 0x5, 0x0, 0x6, 'syz1\x00', 0x100}, 0xffffffff, 0x30, 0x3, 0x0, 0x0, 0xf6, 'syz0\x00', 0x0, 0x2b}) 2.24901784s ago: executing program 5 (id=14870): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dax_inode}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@quota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c6, &(0x7f0000000a40)="$eJzs3ctrXFUYAPBzZ5o0SaN9KNJWsIUK9UEzeSBNVBBX6qIgFtwo1JhMY+0kEzKT2oQuUt114UIUBXHh3r/AjV1ZBHGtuBUXUtEaQQVh5N6ZafOYSac1mWlyfz+Yzr3nTuc7Z4bv5My5rwCk1tH4nyiE/hDCdyGEvdXV1S84Wn1avnFpIn5EoVI5/VuUvC5er7+0/v/2hBCWQgg9IYRXXgjhzWh93NLC4vnxQiE/V1vPladnc6WFxRPnpsen8lP5maHRk2Njo4Mjw2Ob1tYr77995dSXL3V/8dd716998PVXcbX6a9tWtmMzVZveFfavKNsVQnh2K4J1QLbWnt5OV4S7En9/D4QQjiX5vzdkk28TSINKpVL5t7K72ealCrBjZZIxcJQZCCFUlzOZgYHqGP7B0JcpFEvlJ88W52cmq2PlfaErc/ZcIT9Y+62wL3RF8fpQsnxrfXjN+kgIyRj4w2xvsj4wUSxMtrerA9bYsyb//8xW8x9ICT/5Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pNdG+d/dxnoAbfXyqVPxo1I//33ywsL8+eKFE5P1vJ8ozs0OTBWLU8k5O9O3e79CsTg79FSYv5gr50vlXGlh8cx0cX6mfCY5r/9MvmvLWwS0av+Rqz9EIYSlp3uTR1jxJ1+uws5WqUThTs4XjmrXDAC2v2ynOyCgY0z9Q3rdwW/8phcJA7a3BpfoXaWncfFzYXYragO0Q6bTFQA65vgh+/8grcz/Q3qZ/4f0MsYH7nL+P5j/h+3L/D+kV3+T+3/dt+LeXYMhhPtDCN9nu3bX7/UF7ASZX6La+P/43kf7127tjv5OdhF0hxDe+fT0xxfHy+W5obj895vl5U9q5cOdqD/QqnqeVvP4cqerAwB00PKNSxP1Rzvj/vp89SCE9fF31eYme5J9lH3L0apjFaJNOnZhKR4CHWwUP6rd77y656NvObsu/oHac1R9i6S+u5L7prcn/qEV8R9ZEf/w//5UIB2uxv3PYKP8yyQ5HW7m3+r+p3+Tjp1o3v9lbvZ/2Sb935EWY7z12bs/N41/OYTDDePX4/UksdbGj+t2vMX4119/9aFm2yqfV9+nUfy6eClXnp7NlRYWTyTXkZvKzwyNnhwbGx0cGR7LJXPUufpM9XrPHPz22kbt72sSv9reHxu2Py57vMX2//PwN68d3SD+Y8caf/8HkufGn39vCOGJFuP/MfzTG822xfEnm7Q/s0H8uGykxfilj1507jAA3ENKC4vnxwuF/JwFC9t0IR4L3wPV2GELt+s5ltrTQQFb5lbSd7omAAAAAAAAAAAAQKvacThxp9sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAT/BcAAP//FXTP9Q==") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 2.224833382s ago: executing program 8 (id=14872): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) 2.141226129s ago: executing program 9 (id=14874): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x32, 0x53, 0x26, 0x20, 0x424, 0x9908, 0x2e38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x81, 0x3c, 0x20, 0x0, [{{0x9, 0x4, 0xf9, 0xf7, 0x3, 0x88, 0x3, 0xd9, 0x1, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x6, 0x8, 0x7}}, {{0x9, 0x5, 0x81, 0x2, 0x20, 0x9, 0x6, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0x0, 0x0, 0xa5, 0x5}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x608, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xff, 0x66, 0xd2, 0x8, 0x644, 0x8020, 0x9426, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f6, 0x2, 0x9, 0x8, 0x80, 0x6, [{{0x9, 0x4, 0xee, 0x7, 0xd, 0x2, 0xb1, 0xde, 0x7, [@hid_hid={0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0x532}}, @generic={0xc8, 0x21, "d69bef2c21a32ef6bbfff1bfd030d0a6f74f9c67add9cf20551f2a2d3d588158fc9e2c8bbba6cd57edb2ee8b37f6423dfbdf1dc2bf9a4800da7334dc766049eec8585c67e2c2d74f2c2fea5e7075533b5427d41b594d87b02713c6272dde218c31f66a8e97237a9baf72e7c30ba36fd4603fb4e0dd983f4989c52b52eabc654bf240cdae58421b34df25f3c198ed19c9d837e7f426f09c98a9350cd257649178d5a70faf6ba12945e0789c1cf3c0390824fa1ee87fe76c1267808e86512737d2488e628c1e55"}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x7, 0xde, 0x7, [@generic={0x50, 0x30, "f224e77a31c9e1a2fc203513f7e358e487945fc62d716c86b71e2c6bb4e264592959bef61abb3515e90d0ce1997138a9f8a1f3194245aba8958e6eb89f9b9bd247845d52f90b921591f16d96bf39"}, @generic={0x1a, 0x22, "b1febd5a2b80d4ec6c0408bea671cbf31d8613cba41874f3"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x1}, @generic={0xbb, 0x6, "3a48cfbd44cb2c67f7c237739442308146c708cfcef78046d306f289490243d60efe95051e683636bec83a9153d94173e5b67a0bdaa305e9188d98126667c2362f2653e10457e24c29e290e94db90333a89d24fbc1f3e0bc6da27db6338bd6092b93faeea3f8ec8c6fc0195295ca79aefa0af55a1248f52b4310e70a906a1361394f19371e5162460370a77a46f3b1a65d7460e5b8e14792fa97673311b4829ca6f509f4a6ffbd8fcb69e17f2d6b2f3db02882bb99b0181fb3"}]}}, {{0x9, 0x5, 0xa, 0x3e95fe3052b1860c, 0x3ff, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x3, 0x5, 0xa}}, {{0x9, 0x5, 0x4, 0x8921b6c9b1630e2f, 0x0, 0x4, 0x4, 0xfc}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xd, 0x0, 0x4, [@generic={0x92, 0x10, "e4d39771d0b447458cb6f7c8136daadc8ec94150d32d82f6ee10060002b674969bef6bd844a7fc130473251e5334f7c8f30a75eea78565fc4b08344b322c2c5ad658b761653b7d385684e11383cc5c289df17e4426abeb3104a8c8988252cca629aee84e7edad20ac274c08e703abe87a1bab0017dd962864fb6d210eeb02d0637d03ee0dbe1c1adbe597025f20233a1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x16, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x47, 0x89, 0x6}, @generic={0xec, 0x30, "09201d0c79d9eca720f8bbada7417517e5b3959679a8434a794d7fb241b8dbefa767f46fd3b6a18ba5f994040c0b75698309c4fa8143a7b0fa04da26c8f2bce9ea0bbef2b8c7ffc6865739d643868b79c3676fb27734d80fcfd1adf5dd6ef65e628da940e91272bb23729d2efeb1d3af7ffa5fa76f30bfaf570cd03244efe65073cba3406f86ab34f487233e75c7d40e2e7365ee65ad45ed944446ac6297506604b166a914ed07bb7c1433aa13107aca5312a4db3549c0c86a01f822317ae025ea6b4bd40ff8a9895d105395e8bae9c23a5dfcf5ee375f36aa42aa3359d5154717c6a07fed71332a3e89"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xed, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xcb, 0xcc, 0x2, [@generic={0xf0, 0xa, "73f7878972bde97ff02cd7c7d69b38e722c5a920a97e392bd19bdfb2d820cc87871e6a832b14c0fdf24519154d35295ad8fd1435ff328fadd9b506dc60b605bb1130f6664fbea29e63b207b618a73cb16a53ff6bad48a308dbe19bce70940d01c56a1c390b5bef73dc26b589ff2150b90fefe36995f2f5975ccf7be9db466167a4a259f00c2c55b939f18766fe106e258f009db6cfe28976e9d4e242239321ead163f3ae00a365fc103ea630876b301bd01106e684b433efded5ded9e477b01a9a1c12db13b5fcd299bd306052b26f1d6029fa170ed53c3a030620dc00f3af77eb77ca54af1b869dc6acf7aa475a"}]}}, {{0x9, 0x5, 0x67917ef915706de4, 0x4, 0x3ff, 0x5, 0x8, 0x6, [@generic={0x79, 0x30, "93b6a52c986e4cdebc4ece7d9c6ded6a22cbb9dd1353bba17f88c0f75ad40c0ed00d5402fe508f7ed13eee555a41bbe5fa3769d4a2a7c2c54ac2c3adc9f7f62dd516dc75a7389330dc0eab64e288d77a7d1950fdb850922dd222b641af7c8ef42fce8da1dbd889397f1caf607f20a219ecffc5caa0be62"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x15, 0xfd, 0x6, [@generic={0x4, 0x1, "e550"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x3, 0x7, 0x4}}]}}, {{0x9, 0x4, 0xb1, 0x9, 0x1, 0x47, 0x6c, 0x1, 0x34, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5a4db918e76e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9a27, 0x0, 0x4, 0x7}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0xe}, @country_functional={0x12, 0x24, 0x7, 0x2, 0xb26b, [0x7f, 0xe, 0x4, 0x7ff, 0x7fff, 0xfffa]}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x5, 0x2, 0x7f}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x5ce, [0x7, 0x8, 0xa]}]}], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0xdc, 0x3, 0xb9}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x9, 0x3, 0x0, 0x7f}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x6, 0x0, 0x7, [0x30, 0xff00f0, 0x3f00, 0xff1f40]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0xf3, 0x843}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0xe, 0xe9, 0x40, 0x21}]}, 0x5, [{0x100, &(0x7f00000000c0)=@string={0x100, 0x3, "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"}}, {0x8b, &(0x7f00000001c0)=@string={0x8b, 0x3, "c059a79105cd4b04ac5424a8a6237991f2d085d0464cdf99991ed1c5856356a9f099aed411b808607c18a274f334c7c4d3ac8e2d662ba3a8974aaebe1c6810bcee409647c0a3e0ac602d73c3fe7242ce50d3e13f8e82308447232a044107934018ec17dfc8b8e5b94d5fbea549a754a669c20554327893e52130d80872873b9c7c153f1085c1b25e22"}}, {0x85, &(0x7f0000000280)=@string={0x85, 0x3, "9e8bd9f277bff20064581269024afc531abf448e603d4957ee3cee850094ba285ecaefebe7d160c60e89912ded65bf88ae08819942fb24af8ae8f4e5593ca6648ff9ecbd94d33d2e0cc67bcec46970cfe5c2b1a347c468881be32f7a575af084051c0b008d92d9c7db22ea0e189663a764b9b12bee8fb3efebbc98e0ca364436e49084"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0xd9, &(0x7f0000000a40)=@string={0xd9, 0x3, "677566edb6f782462cbc0b4bbc5786bdbbf830c8633b6d20ec96e2fde7b646f1310630a281d6351ad1408777d0094b25732526324897c594b17d258024f97b3f4135b310ad4b413561fb082ec5df2fd33ffb5798ead02e908fd1e8a4dd98cfb5a39bd7a494995c206144e70f08b47242e3744028c811bd8de929d571c2b6ab7c5d6bc66f3ac4cc50048a6a1e5a63b1af3468bfd52e82a2eb6230e95ed4d46bcef4b31d6caf6d74c58bca17c24381606a7c266649d0cf58649757d23ae33f42fdeb0a2a221580672936e4825aedfe16ed783d6555c69794"}}]}) 2.088421503s ago: executing program 8 (id=14875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2.064400965s ago: executing program 8 (id=14877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.807515185s ago: executing program 8 (id=14879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x80000001, 0x4000000, 0x86ab, 0x9, 0x7, 0x3, 0x0, 0x0, 0x20, 0x6}}, 0x50) ftruncate(r0, 0x3f) 1.731240972s ago: executing program 3 (id=14880): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/164) 1.691060345s ago: executing program 5 (id=14881): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002208000000aa", @ANYRESDEC], 0x0}, 0x0) 1.576961273s ago: executing program 8 (id=14882): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x4, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) 1.461903083s ago: executing program 3 (id=14883): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 1.364324071s ago: executing program 3 (id=14884): openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.223056122s ago: executing program 8 (id=14885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x49, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xe2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x3b, 0x56, {0x56, 0x4, "a93e367f64379ac4792fd2847718bc2376c7ae1a87c93be2a1f5c8e0cc62957a83479e8fd8169db03a373082bd6812821a96764c23e0e8d0d9323b491e13c85b70e4bfd9c82eab492b89859371da7963084ce52c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.222844682s ago: executing program 7 (id=14886): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) 1.099016132s ago: executing program 7 (id=14887): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x10, 0x0, {0x2}}, 0x14}}, 0x0) 1.027141488s ago: executing program 7 (id=14888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 928.843756ms ago: executing program 7 (id=14889): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x2f, {0x8000, 0x4, 0x200080, 0xff, 0x5, 0x3}}) 928.685455ms ago: executing program 7 (id=14890): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004000), 0x202040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000004d00)={r0}, 0x8) 800.905336ms ago: executing program 7 (id=14891): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a04230000000000000109022400010000000f0904000004030000000921faff080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "6a4d98bb"}, @global=@item_012={0x1, 0x1, 0x6, "aa"}]}}, 0x0}, 0x0) 409.334427ms ago: executing program 3 (id=14892): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r0, &(0x7f0000005880)={0x2020}, 0x2020) pread64(r0, &(0x7f0000019080)=""/102338, 0x18fc2, 0xc2d) 328.708214ms ago: executing program 3 (id=14893): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x18) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 321.633274ms ago: executing program 3 (id=14894): syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600b0a85d0102030109022400020908b006090405090184435f07090581"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 9 (id=14895): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x2, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000006, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x6, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): aa:aa:aa:1b, vlan:0) [ 996.450798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.463330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.476937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f4:72:62:64:e6, vlan:0) [ 996.489817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f4:72:62:64:e6, vlan:0) [ 996.502360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.515371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.528299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.540844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.651739][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12999'. [ 996.833480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f4:72:62:64:e6, vlan:0) [ 996.912828][ T6280] loop9: detected capacity change from 0 to 4096 [ 997.057360][ T6313] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13008'. [ 997.063245][ T6312] program syz.8.13009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.085096][ T6280] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 997.214465][ T6280] ntfs3: loop9: failed to convert "c46c" to iso8859-7 [ 997.270601][ T6313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.338240][ T6313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.433155][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.551813][ T6313] bond0 (unregistering): Released all slaves [ 997.800116][ T6383] netlink: 'syz.9.13023': attribute type 4 has an invalid length. [ 998.255998][ T6396] loop7: detected capacity change from 0 to 1024 [ 998.713293][ T6417] netlink: 'syz.9.13035': attribute type 12 has an invalid length. [ 999.069362][ T6377] loop8: detected capacity change from 0 to 32768 [ 999.134928][ T6445] loop7: detected capacity change from 0 to 256 [ 999.220239][ T6377] JBD2: Ignoring recovery information on journal [ 999.328436][ T6455] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 999.335992][ T6445] FAT-fs (loop7): Directory bread(block 64) failed [ 999.336038][ T6445] FAT-fs (loop7): Directory bread(block 65) failed [ 999.336120][ T6445] FAT-fs (loop7): Directory bread(block 66) failed [ 999.475783][ T6445] FAT-fs (loop7): Directory bread(block 67) failed [ 999.501399][ T6377] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 999.524192][ T6445] FAT-fs (loop7): Directory bread(block 68) failed [ 999.530935][ T6445] FAT-fs (loop7): Directory bread(block 69) failed [ 999.631707][ T6445] FAT-fs (loop7): Directory bread(block 70) failed [ 999.636989][ T6468] xt_l2tp: v2 doesn't support IP mode [ 999.638410][ T6445] FAT-fs (loop7): Directory bread(block 71) failed [ 999.663094][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 999.672678][ T6377] (syz.8.13021,6377,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 999.718147][ T6461] infiniband syz1: set active [ 999.731060][ T6445] FAT-fs (loop7): Directory bread(block 72) failed [ 999.758097][ T6445] FAT-fs (loop7): Directory bread(block 73) failed [ 999.767799][ T6377] (syz.8.13021,6377,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 999.788107][ T6377] (syz.8.13021,6377,0):ocfs2_mknod:298 ERROR: status = -2 [ 999.812027][ T6377] (syz.8.13021,6377,0):ocfs2_mknod:502 ERROR: status = -2 [ 999.819330][ T6377] (syz.8.13021,6377,0):ocfs2_create:676 ERROR: status = -2 [ 1000.015381][T10632] ocfs2: Unmounting device (7,8) on (node local) [ 1000.352422][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13065'. [ 1000.558169][ T6517] netlink: 'syz.5.13069': attribute type 1 has an invalid length. [ 1000.883991][ T6555] Invalid ELF header magic: != ELF [ 1000.965479][ T6564] ceph: No source [ 1001.191866][ T6581] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1001.213595][ T6584] loop9: detected capacity change from 0 to 512 [ 1001.345987][ T6584] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.13093: error while reading EA inode 32 err=-116 [ 1001.385612][ T6584] EXT4-fs (loop9): 1 orphan inode deleted [ 1001.394359][ T6584] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1001.613951][ T6622] cgroup: Invalid name [ 1001.722832][ T6632] loop3: detected capacity change from 0 to 64 [ 1001.848375][ T6645] net_ratelimit: 37 callbacks suppressed [ 1001.848395][ T6645] openvswitch: netlink: Flow actions attr not present in new flow. [ 1001.993037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.147871][ T6676] loop9: detected capacity change from 0 to 16 [ 1002.239244][ T6676] erofs: (device loop9): mounted with root inode @ nid 36. [ 1002.466449][ T6711] loop7: detected capacity change from 0 to 22 [ 1002.513146][ T6716] loop5: detected capacity change from 0 to 256 [ 1002.532365][ T6711] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1002.547224][ T6722] netlink: 'syz.9.13138': attribute type 1 has an invalid length. [ 1002.571718][ T4592] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1002.580140][ T6724] loop8: detected capacity change from 0 to 64 [ 1002.594907][ T6711] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1002.599423][ T6716] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 1002.643567][ T6711] MTD: Couldn't look up './file0': -13 [ 1002.667073][ T6711] ./file0: Can't open blockdev [ 1002.678294][ T6724] hfs: invalid extent max_key_len 1792 [ 1002.698536][ T6724] hfs: unable to open extent tree [ 1002.714206][ T6724] hfs: can't find a HFS filesystem on dev loop8 [ 1002.957032][ T6736] loop9: detected capacity change from 0 to 4096 [ 1002.982033][ T4592] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1003.000026][ T4592] usb 4-1: config 0 has no interface number 0 [ 1003.016186][ T6736] __ntfs_warning: 4 callbacks suppressed [ 1003.016206][ T6736] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1003.046573][ T6761] loop8: detected capacity change from 0 to 8 [ 1003.082420][ T6761] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1003.120571][ T6736] ntfs: volume version 3.1. [ 1003.181921][ T4592] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=65.c7 [ 1003.197753][ T4592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.227636][ T4592] usb 4-1: Product: syz [ 1003.258241][ T4592] usb 4-1: Manufacturer: syz [ 1003.261048][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13151'. [ 1003.272355][ T4592] usb 4-1: SerialNumber: syz [ 1003.301043][ T4592] usb 4-1: config 0 descriptor?? [ 1003.357522][ T6782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.383180][ T4592] usb 4-1: bad CDC descriptors [ 1003.390664][ T4592] usb 4-1: unsupported MDLM descriptors [ 1003.646912][ T4592] usb 4-1: USB disconnect, device number 17 [ 1003.890659][ T6828] loop9: detected capacity change from 0 to 512 [ 1003.963244][ T6832] netlink: 'syz.7.13165': attribute type 1 has an invalid length. [ 1003.992699][ T6832] netlink: 112860 bytes leftover after parsing attributes in process `syz.7.13165'. [ 1004.030156][ T6832] netlink: 'syz.7.13165': attribute type 1 has an invalid length. [ 1004.039992][ T6828] EXT4-fs (loop9): Ignoring removed oldalloc option [ 1004.116308][ T6828] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,block_validity,grpid,oldalloc,,errors=continue. Quota mode: writeback. [ 1004.234946][ T6847] loop8: detected capacity change from 0 to 4096 [ 1004.339009][ T6847] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 1004.466363][ T6847] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1004.523626][ T6847] ntfs3: loop8: Failed to load $Extend. [ 1004.747458][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13179'. [ 1004.813044][ T6869] loop7: detected capacity change from 0 to 4096 [ 1004.935770][ T6869] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1004.972315][ T6885] loop9: detected capacity change from 0 to 1024 [ 1005.173203][ T6869] ntfs3: loop7: failed to convert "c46c" to cp850 [ 1005.319951][ T6898] loop5: detected capacity change from 0 to 1764 [ 1005.736993][ T6856] loop3: detected capacity change from 0 to 32768 [ 1005.859541][ T6856] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1005.869617][ T6923] loop9: detected capacity change from 0 to 256 [ 1006.165676][ T6856] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1006.248767][ T6923] FAT-fs (loop9): Directory bread(block 64) failed [ 1006.268579][ T6946] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13198'. [ 1006.278912][ T6923] FAT-fs (loop9): Directory bread(block 65) failed [ 1006.316612][ T6923] FAT-fs (loop9): Directory bread(block 66) failed [ 1006.377216][ T6923] FAT-fs (loop9): Directory bread(block 67) failed [ 1006.395738][T24967] ocfs2: Unmounting device (7,3) on (node local) [ 1006.432229][ T6923] FAT-fs (loop9): Directory bread(block 68) failed [ 1006.499321][ T6923] FAT-fs (loop9): Directory bread(block 69) failed [ 1006.537046][ T6923] FAT-fs (loop9): Directory bread(block 70) failed [ 1006.574356][ T6923] FAT-fs (loop9): Directory bread(block 71) failed [ 1006.581263][ T6923] FAT-fs (loop9): Directory bread(block 72) failed [ 1006.603027][ T6953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.638864][ T6923] FAT-fs (loop9): Directory bread(block 73) failed [ 1006.909341][ T6968] loop7: detected capacity change from 0 to 256 [ 1007.056492][ T6968] FAT-fs (loop7): Directory bread(block 64) failed [ 1007.072528][ T6977] libceph: resolve '. [ 1007.072528][ T6977] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1007.072528][ T6977] ' (ret=-3): failed [ 1007.091894][ T6968] FAT-fs (loop7): Directory bread(block 65) failed [ 1007.098691][ T6968] FAT-fs (loop7): Directory bread(block 66) failed [ 1007.212130][ T6968] FAT-fs (loop7): Directory bread(block 67) failed [ 1007.218847][ T6968] FAT-fs (loop7): Directory bread(block 68) failed [ 1007.300363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.332214][ T6968] FAT-fs (loop7): Directory bread(block 69) failed [ 1007.375862][ T6981] loop9: detected capacity change from 0 to 2048 [ 1007.410702][ T6968] FAT-fs (loop7): Directory bread(block 70) failed [ 1007.432239][ T6968] FAT-fs (loop7): Directory bread(block 71) failed [ 1007.442104][ T6968] FAT-fs (loop7): Directory bread(block 72) failed [ 1007.448703][ T6968] FAT-fs (loop7): Directory bread(block 73) failed [ 1007.534967][ T6981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.795001][ T7020] xt_policy: too many policy elements [ 1008.156175][ T7048] loop3: detected capacity change from 0 to 16 [ 1008.213388][ T7050] loop9: detected capacity change from 0 to 16 [ 1008.237122][ T7048] erofs: (device loop3): mounted with root inode @ nid 36. [ 1008.290953][ T7048] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1008.313920][ T7050] erofs: (device loop9): mounted with root inode @ nid 36. [ 1008.373239][ T7050] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1008.414594][ T7048] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 1008.501674][ T7050] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 1008.516539][ T7048] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1008.571888][ T7050] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 1009.030783][ T7097] overlayfs: missing 'lowerdir' [ 1009.316602][ T7042] loop7: detected capacity change from 0 to 32768 [ 1009.404315][ T7042] ialloc: diAlloc returned -5! [ 1009.431890][ T5077] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1009.614892][ T7144] loop3: detected capacity change from 0 to 64 [ 1009.691758][ T5077] usb 10-1: Using ep0 maxpacket: 32 [ 1009.822214][ T5077] usb 10-1: config 0 has an invalid interface number: 96 but max is 6 [ 1009.839907][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13267'. [ 1009.841044][ T5077] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 1009.882020][ T5077] usb 10-1: config 0 has no interface number 0 [ 1009.894061][ T5077] usb 10-1: config 0 interface 96 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1009.951356][ T5077] usb 10-1: config 0 interface 96 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.997995][ T5077] usb 10-1: config 0 interface 96 has no altsetting 0 [ 1010.101755][ T4598] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1010.182245][ T5077] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 6.44 [ 1010.199062][ T5077] usb 10-1: New USB device strings: Mfr=59, Product=70, SerialNumber=84 [ 1010.238851][ T5077] usb 10-1: Product: syz [ 1010.251634][ T5077] usb 10-1: Manufacturer: syz [ 1010.271864][ T5077] usb 10-1: SerialNumber: syz [ 1010.306434][ T5077] usb 10-1: config 0 descriptor?? [ 1010.341691][ T4598] usb 6-1: Using ep0 maxpacket: 8 [ 1010.377825][ T5077] legousbtower 10-1:0.96: interrupt endpoints not found [ 1010.461058][ T7195] loop3: detected capacity change from 0 to 2048 [ 1010.471882][ T4598] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1010.480017][ T4598] usb 6-1: config 0 has no interface number 0 [ 1010.564856][ T7195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1010.625893][ T5077] usb 10-1: USB disconnect, device number 32 [ 1010.662218][ T4598] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1010.682153][ T4598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.690348][ T4598] usb 6-1: Product: syz [ 1010.707057][ T4598] usb 6-1: Manufacturer: syz [ 1010.721673][ T4598] usb 6-1: SerialNumber: syz [ 1010.748122][ T4598] usb 6-1: config 0 descriptor?? [ 1010.959411][ T7188] loop8: detected capacity change from 0 to 32768 [ 1010.989771][ T7229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13285'. [ 1011.002187][ T7229] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13285'. [ 1011.017601][ T7229] batman_adv: Cannot find parent device [ 1011.025735][ T7229] device gretap2 entered promiscuous mode [ 1011.039409][ T7234] loop7: detected capacity change from 0 to 1024 [ 1011.053091][ T4598] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1011.059569][ T4598] usb 6-1: No valid video chain found. [ 1011.078827][ T4598] usb 6-1: USB disconnect, device number 49 [ 1011.149680][ T7188] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1011.204242][ T7188] BTRFS info (device loop8): using free space tree [ 1011.244579][ T7188] BTRFS info (device loop8): has skinny extents [ 1011.571477][ T7188] BTRFS info (device loop8): enabling ssd optimizations [ 1011.932341][ T7300] netlink: 'syz.9.13298': attribute type 27 has an invalid length. [ 1012.086563][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13301'. [ 1012.100094][ T7313] loop7: detected capacity change from 0 to 128 [ 1012.493614][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13307'. [ 1012.516241][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13307'. [ 1012.574080][ T7328] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 1012.609113][ T7328] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1012.903585][ T7345] loop9: detected capacity change from 0 to 1024 [ 1013.075321][ T7362] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.13316'. [ 1013.228507][ T7376] loop8: detected capacity change from 0 to 512 [ 1013.259791][ T7382] loop3: detected capacity change from 0 to 128 [ 1013.348560][ T7382] attempt to access beyond end of device [ 1013.348560][ T7382] loop3: rw=0, want=6491538, limit=128 [ 1013.389466][ T7382] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 1013.393700][ T7394] ipt_rpfilter: unknown options [ 1013.419088][ T7376] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1013.461921][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13328'. [ 1013.474752][ T7376] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1013.516952][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13329'. [ 1013.541471][ T7376] System zones: 0-1, 15-15, 18-18, 34-34 [ 1013.573720][ T7376] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1013.580230][ T7376] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 1013.605688][T24967] sysv_free_block: flc_count > flc_size [ 1013.611316][T24967] sysv_free_block: flc_count > flc_size [ 1013.638983][T24967] sysv_free_block: flc_count > flc_size [ 1013.645039][ T7376] EXT4-fs warning (device loop8): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1013.665831][T24967] sysv_free_block: flc_count > flc_size [ 1013.671464][T24967] sysv_free_block: flc_count > flc_size [ 1013.700111][ T7376] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1013.701749][T24967] sysv_free_block: flc_count > flc_size [ 1013.739385][ T7376] EXT4-fs (loop8): 1 truncate cleaned up [ 1013.749059][ T7376] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1013.751709][T24967] sysv_free_block: flc_count > flc_size [ 1013.795571][ T7376] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 1013.804565][T24967] sysv_free_block: flc_count > flc_size [ 1013.810169][T24967] sysv_free_block: flc_count > flc_size [ 1013.851896][T24967] sysv_free_block: flc_count > flc_size [ 1013.858135][T24967] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1013.992745][ T1107] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1014.199985][ T7436] loop9: detected capacity change from 0 to 4096 [ 1014.343354][ T7436] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1014.429958][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13344'. [ 1014.438988][ T7456] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1014.461688][ T1107] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1014.469850][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.499234][ T1107] usb 6-1: config 0 has no interface number 0 [ 1014.516626][ T1107] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1014.537029][ T1107] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1014.551860][ T5051] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1014.575491][ T1107] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.589802][ T7458] loop9: detected capacity change from 0 to 512 [ 1014.610469][ T1107] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1014.663189][ T7458] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 1014.670623][ T7458] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1014.740529][ T7458] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1014.758281][ T7458] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 1014.805081][ T7458] EXT4-fs (loop9): 1 truncate cleaned up [ 1014.821944][ T1107] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1014.830182][ T7458] EXT4-fs (loop9): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 1014.835777][ T1107] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1014.860565][ T1107] usb 6-1: Product: syz [ 1014.864889][ T1107] usb 6-1: Manufacturer: syz [ 1014.869545][ T1107] usb 6-1: SerialNumber: syz [ 1014.877970][ T1107] usb 6-1: config 0 descriptor?? [ 1014.897311][ T7458] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #2: block 4: comm syz.9.13345: lblock 0 mapped to illegal pblock 4 (length 1) [ 1014.921695][ T7458] EXT4-fs (loop9): Remounting filesystem read-only [ 1014.961979][ T5051] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 1014.980049][ T5051] usb 9-1: config 0 has no interface number 0 [ 1014.986799][ T5051] usb 9-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1014.997420][ T5051] usb 9-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1015.009556][ T5051] usb 9-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1015.163507][ T1107] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1015.181944][ T5051] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 1015.202185][ T1107] synaptics_usb: probe of 6-1:0.52 failed with error -5 [ 1015.209336][ T5051] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.229566][ T5051] usb 9-1: Product: syz [ 1015.239648][ T5051] usb 9-1: Manufacturer: syz [ 1015.250268][ T5051] usb 9-1: SerialNumber: syz [ 1015.284477][ T5051] usb 9-1: config 0 descriptor?? [ 1015.303043][ T7448] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1015.315979][ T7448] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1015.409663][ T1107] usb 6-1: USB disconnect, device number 50 [ 1015.470943][ T7513] loop9: detected capacity change from 0 to 64 [ 1015.526916][ T7472] 9pnet: p9_fd_create_tcp (7472): problem connecting socket to 127.0.0.1 [ 1015.574178][ T7448] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1015.606708][ T7448] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1015.663692][ T5051] usb 9-1: No status endpoint found [ 1015.701034][ T7520] __nla_validate_parse: 2 callbacks suppressed [ 1015.701056][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13359'. [ 1015.841421][ T7544] loop9: detected capacity change from 0 to 256 [ 1015.894639][ T5051] usb 9-1: USB disconnect, device number 45 [ 1016.028338][ T7544] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1016.410938][ T7585] loop3: detected capacity change from 0 to 1024 [ 1017.045123][ T7644] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13392'. [ 1017.143822][ T7652] loop9: detected capacity change from 0 to 164 [ 1017.281313][ T7664] ubi: mtd0 is already attached to ubi0 [ 1017.518940][ T7683] ipt_CLUSTERIP: Please specify destination IP [ 1017.775701][ T7701] loop3: detected capacity change from 0 to 512 [ 1017.887425][ T7701] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1017.951839][ T7701] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1017.996736][ T7701] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1018.024098][ T7721] afs: Unknown parameter 'fowner' [ 1018.051033][ T7701] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1018.115366][ T7701] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 1018.132042][ T7701] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1018.139390][ T7701] EXT4-fs (loop3): mount failed [ 1018.175478][ T7728] loop5: detected capacity change from 0 to 256 [ 1018.324841][ T7728] exfat: Deprecated parameter 'utf8' [ 1018.434691][ T7728] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1018.624443][ T7749] loop8: detected capacity change from 0 to 256 [ 1018.813297][ T7749] FAT-fs (loop8): Directory bread(block 64) failed [ 1018.857229][ T7749] FAT-fs (loop8): Directory bread(block 65) failed [ 1018.922897][ T7749] FAT-fs (loop8): Directory bread(block 66) failed [ 1018.929547][ T7749] FAT-fs (loop8): Directory bread(block 67) failed [ 1018.981751][ T7749] FAT-fs (loop8): Directory bread(block 68) failed [ 1019.012916][ T7749] FAT-fs (loop8): Directory bread(block 69) failed [ 1019.082452][ T7749] FAT-fs (loop8): Directory bread(block 70) failed [ 1019.089064][ T7749] FAT-fs (loop8): Directory bread(block 71) failed [ 1019.104495][ T7774] loop5: detected capacity change from 0 to 256 [ 1019.116878][ T7777] loop3: detected capacity change from 0 to 512 [ 1019.142259][ T7749] FAT-fs (loop8): Directory bread(block 72) failed [ 1019.148881][ T7749] FAT-fs (loop8): Directory bread(block 73) failed [ 1019.186114][ T7774] FAT-fs (loop5): Directory bread(block 64) failed [ 1019.224126][ T7774] FAT-fs (loop5): Directory bread(block 65) failed [ 1019.241095][ T7774] FAT-fs (loop5): Directory bread(block 66) failed [ 1019.271841][ T7774] FAT-fs (loop5): Directory bread(block 67) failed [ 1019.299200][ T7774] FAT-fs (loop5): Directory bread(block 68) failed [ 1019.328060][ T7779] XFS (nullb0): Invalid superblock magic number [ 1019.373797][ T7774] FAT-fs (loop5): Directory bread(block 69) failed [ 1019.388735][ T7774] FAT-fs (loop5): Directory bread(block 70) failed [ 1019.411890][ T7774] FAT-fs (loop5): Directory bread(block 71) failed [ 1019.419933][ T7774] FAT-fs (loop5): Directory bread(block 72) failed [ 1019.425618][ T7777] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,noinit_itable,,errors=continue. Quota mode: writeback. [ 1019.429292][ T7774] FAT-fs (loop5): Directory bread(block 73) failed [ 1019.493872][ T7799] loop9: detected capacity change from 0 to 64 [ 1019.707023][ T7799] hfs: request for non-existent node 16777216 in B*Tree [ 1019.770275][ T26] audit: type=1800 audit(1020.784:2289): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13432" name="file3" dev="loop5" ino=1048768 res=0 errno=0 [ 1019.832860][ T7799] hfs: request for non-existent node 16777216 in B*Tree [ 1020.358141][ T7840] loop3: detected capacity change from 0 to 1024 [ 1020.416792][ T7846] loop9: detected capacity change from 0 to 512 [ 1020.457513][ T7840] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 1020.457513][ T7840] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1020.457513][ T7840] [ 1020.548854][ T7840] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1020.563425][ T7854] netlink: 292 bytes leftover after parsing attributes in process `syz.8.13452'. [ 1020.617718][ T7855] loop5: detected capacity change from 0 to 65 [ 1020.636148][ T7846] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,noinit_itable,,errors=continue. Quota mode: writeback. [ 1020.679622][ T7840] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 1020.770682][ T7855] BFS-fs: bfs_iget(): Bad inode number loop5:00000002 [ 1021.131676][ T4332] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1021.291346][ T7876] loop7: detected capacity change from 0 to 4096 [ 1021.386590][ T7876] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1021.411950][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 1021.505495][ T7908] loop3: detected capacity change from 0 to 256 [ 1021.549646][ T4332] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1021.563791][ T4332] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 1021.601041][ T7876] ntfs3: loop7: ino=5, "/" directory corrupted [ 1021.607560][ T7910] loop8: detected capacity change from 0 to 2048 [ 1021.615694][ T4332] usb 6-1: config 0 has no interface number 0 [ 1021.642135][ T7914] netlink: 'syz.9.13468': attribute type 4 has an invalid length. [ 1021.650283][ T4332] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 1021.669864][ T7908] FAT-fs (loop3): Directory bread(block 64) failed [ 1021.679400][ T7914] netlink: 236 bytes leftover after parsing attributes in process `syz.9.13468'. [ 1021.689481][ T4332] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1021.695688][ T7876] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1021.725330][ T7917] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.734192][ T7908] FAT-fs (loop3): Directory bread(block 65) failed [ 1021.757821][ T4332] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0x1D, skipping [ 1021.778529][ T7910] attempt to access beyond end of device [ 1021.778529][ T7910] loop8: rw=0, want=5629499534213192, limit=2048 [ 1021.782068][ T7908] FAT-fs (loop3): Directory bread(block 66) failed [ 1021.832563][ T4332] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1021.851679][ T7910] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=0) [ 1021.871988][ T7908] FAT-fs (loop3): Directory bread(block 67) failed [ 1021.878729][ T7908] FAT-fs (loop3): Directory bread(block 68) failed [ 1021.902938][ T8379] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 1021.924071][ T4332] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1021.924859][ T8379] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 1021.955370][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.981644][ T7908] FAT-fs (loop3): Directory bread(block 69) failed [ 1021.997545][ T7908] FAT-fs (loop3): Directory bread(block 70) failed [ 1022.006176][ T4332] usb 6-1: config 0 descriptor?? [ 1022.011341][ T7908] FAT-fs (loop3): Directory bread(block 71) failed [ 1022.019307][ T7908] FAT-fs (loop3): Directory bread(block 72) failed [ 1022.092577][ T7908] FAT-fs (loop3): Directory bread(block 73) failed [ 1022.096127][ T7855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1022.112277][ T7926] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1022.308605][ T4332] snd-usb-audio: probe of 6-1:0.126 failed with error -2 [ 1022.372407][ T4332] usb 6-1: USB disconnect, device number 51 [ 1022.430701][ T7964] netlink: 'syz.7.13475': attribute type 1 has an invalid length. [ 1022.474151][ T7964] netlink: 'syz.7.13475': attribute type 3 has an invalid length. [ 1022.496353][ T7964] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13475'. [ 1022.660834][ T7970] loop8: detected capacity change from 0 to 4096 [ 1022.668752][T22625] udevd[22625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.760104][ T7970] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1022.864090][ T7991] netlink: 'syz.3.13482': attribute type 21 has an invalid length. [ 1022.884255][ T7970] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1022.906662][ T7991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1022.921848][ T4590] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1022.965532][ T7991] netlink: 'syz.3.13482': attribute type 4 has an invalid length. [ 1022.981676][ T5078] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1022.990489][ T7991] netlink: 'syz.3.13482': attribute type 3 has an invalid length. [ 1023.027384][ T7994] netlink: 'syz.5.13483': attribute type 29 has an invalid length. [ 1023.046285][ T7991] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13482'. [ 1023.080768][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13483'. [ 1023.109553][ T7994] netlink: 'syz.5.13483': attribute type 29 has an invalid length. [ 1023.131761][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13483'. [ 1023.261367][ T8000] tmpfs: Bad value for 'mpol' [ 1023.480832][ T4590] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1023.506359][ T4590] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.521242][ T4590] usb 10-1: Product: syz [ 1023.526085][ T4590] usb 10-1: Manufacturer: syz [ 1023.530817][ T4590] usb 10-1: SerialNumber: syz [ 1023.562226][ T5078] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1023.582466][ T5078] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.588623][ T4590] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1023.590606][ T5078] usb 8-1: Product: syz [ 1023.669286][ T5078] usb 8-1: Manufacturer: syz [ 1023.701860][ T5078] usb 8-1: SerialNumber: syz [ 1023.712227][ T8035] overlayfs: missing 'lowerdir' [ 1023.792762][ T5078] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1024.151417][ T8066] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1024.197481][ T4590] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1024.274029][ T8072] kcapi: manufacturer command 4294967295 unknown. [ 1024.430439][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13509'. [ 1024.456270][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13509'. [ 1024.465734][ C1] usb 10-1: ath: unknown panic pattern! [ 1024.481887][ T5078] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1024.491078][ T8081] netlink: 80 bytes leftover after parsing attributes in process `syz.5.13509'. [ 1024.658941][ T5051] usb 10-1: USB disconnect, device number 33 [ 1024.736248][ T8051] loop3: detected capacity change from 0 to 40427 [ 1024.886259][ T8051] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1024.933229][ T4332] usb 8-1: USB disconnect, device number 51 [ 1025.077692][ T8051] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 1025.119398][ T8051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1025.241921][ T4590] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1025.255139][ T4590] ath9k_htc: Failed to initialize the device [ 1025.292413][ T5051] usb 10-1: ath9k_htc: USB layer deinitialized [ 1025.346295][ T8137] cgroup: none used incorrectly [ 1025.540164][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13529'. [ 1025.561841][ T5078] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1025.601816][ T5078] ath9k_htc: Failed to initialize the device [ 1025.608578][ T4332] usb 8-1: ath9k_htc: USB layer deinitialized [ 1025.848488][ T8187] loop8: detected capacity change from 0 to 256 [ 1025.929621][ T8194] IPv6: sit1: Disabled Multicast RS [ 1026.099924][ T8211] loop9: detected capacity change from 0 to 256 [ 1026.197642][ T8220] ip6t_REJECT: ECHOREPLY is not supported [ 1026.271070][ T8223] loop7: detected capacity change from 0 to 128 [ 1026.271150][ T8211] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1026.348166][ T8223] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.363430][ T4590] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1026.490660][ T8211] exFAT-fs (loop9): error, invalid access to FAT free cluster (entry 0x00000008) [ 1026.527072][ T8211] exFAT-fs (loop9): Filesystem has been set read-only [ 1026.631770][ T4590] usb 4-1: Using ep0 maxpacket: 16 [ 1026.801980][ T4590] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1026.922639][ T4590] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1026.977099][ T4590] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.011689][ T4590] usb 4-1: config 13 has no interface number 0 [ 1027.017968][ T4590] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1027.077672][ T8263] netlink: 140 bytes leftover after parsing attributes in process `syz.9.13558'. [ 1027.102560][ T4590] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.145651][ T8209] loop5: detected capacity change from 0 to 32768 [ 1027.165130][ T4590] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1027.334578][ T8209] XFS (loop5): Mounting V5 Filesystem [ 1027.362118][ T4590] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1027.371228][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.381065][ T4590] usb 4-1: Product: syz [ 1027.385468][ T4590] usb 4-1: Manufacturer: syz [ 1027.390197][ T4590] usb 4-1: SerialNumber: syz [ 1027.399782][ T8288] loop8: detected capacity change from 0 to 256 [ 1027.428304][ T8205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1027.474388][ T8209] XFS (loop5): Ending clean mount [ 1027.495409][ T8209] XFS (loop5): Quotacheck needed: Please wait. [ 1027.587701][ T8288] FAT-fs (loop8): Directory bread(block 64) failed [ 1027.608603][ T8288] FAT-fs (loop8): Directory bread(block 65) failed [ 1027.635880][ T8288] FAT-fs (loop8): Directory bread(block 66) failed [ 1027.699666][ T8288] FAT-fs (loop8): Directory bread(block 67) failed [ 1027.701993][ T8209] XFS (loop5): Quotacheck: Done. [ 1027.707151][ T8288] FAT-fs (loop8): Directory bread(block 68) failed [ 1027.718833][ T8288] FAT-fs (loop8): Directory bread(block 69) failed [ 1027.727238][ T8288] FAT-fs (loop8): Directory bread(block 70) failed [ 1027.734498][ T8288] FAT-fs (loop8): Directory bread(block 71) failed [ 1027.741165][ T8288] FAT-fs (loop8): Directory bread(block 72) failed [ 1027.750751][ T8288] FAT-fs (loop8): Directory bread(block 73) failed [ 1027.803280][ T4591] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1027.809134][ T8303] loop9: detected capacity change from 0 to 4096 [ 1027.842452][ T4590] usb 4-1: MIDIStreaming interface descriptor not found [ 1027.898187][ T4590] usb 4-1: USB disconnect, device number 18 [ 1027.913508][ T8303] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1027.941812][ T8303] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1027.980633][ T4882] XFS (loop5): Unmounting Filesystem [ 1028.014986][ T8303] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1028.051703][ T4591] usb 8-1: Using ep0 maxpacket: 8 [ 1028.073908][ T8303] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1028.121146][ T8303] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1028.200438][ T8303] ntfs: volume version 3.1. [ 1028.222762][ T4614] udevd[4614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.251110][ T8303] ntfs: (device loop9): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1028.263565][ T4591] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1028.372277][ T4591] usb 8-1: config 59 has an invalid interface number: 141 but max is 0 [ 1028.383503][ T8303] ntfs: (device loop9): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1028.410260][ T4591] usb 8-1: config 59 has no interface number 0 [ 1028.419688][ T4591] usb 8-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 1028.438304][ T8303] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1028.454414][ T4591] usb 8-1: config 59 interface 141 has no altsetting 0 [ 1028.481729][ T8303] ntfs: (device loop9): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1028.509871][ T8303] ntfs: (device loop9): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1028.622058][ T4591] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 1028.631184][ T4591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.636283][ T8349] overlayfs: workdir and upperdir must be separate subtrees [ 1028.670225][ T4591] usb 8-1: Product: syz [ 1028.696084][ T4591] usb 8-1: Manufacturer: syz [ 1028.714878][ T4591] usb 8-1: SerialNumber: syz [ 1028.902033][ T8363] comedi comedi0: comedi_parport: I/O port conflict (0xffffffff80000000,3) [ 1029.114208][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13584'. [ 1029.121926][ T4591] usbtest 8-1:59.141: couldn't get endpoints, -71 [ 1029.129830][ T4591] usbtest: probe of 8-1:59.141 failed with error -71 [ 1029.177533][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13584'. [ 1029.185164][ T4591] usb 8-1: USB disconnect, device number 52 [ 1029.256518][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13585'. [ 1029.311924][ T5078] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1029.591679][ T5078] usb 9-1: Using ep0 maxpacket: 16 [ 1029.771919][ T5078] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1029.821981][ T4332] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1029.892091][ T5078] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 1029.900342][ T5078] usb 9-1: config 13 has no interface number 0 [ 1029.904402][ T8444] bridge0: port 4(netdevsim0) entered disabled state [ 1029.934396][ T5078] usb 9-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.978474][ T5078] usb 9-1: config 13 interface 50 has no altsetting 0 [ 1030.048149][ T8451] loop3: detected capacity change from 0 to 764 [ 1030.202189][ T5078] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1030.222242][ T5078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.251845][ T4332] usb 10-1: config 0 has an invalid interface number: 168 but max is 0 [ 1030.260960][ T4332] usb 10-1: config 0 has no interface number 0 [ 1030.270439][ T5078] usb 9-1: Product: syz [ 1030.300837][ T5078] usb 9-1: Manufacturer: syz [ 1030.310996][ T4332] usb 10-1: config 0 interface 168 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1030.331555][ T5078] usb 9-1: SerialNumber: syz [ 1030.362952][ T4332] usb 10-1: config 0 interface 168 has no altsetting 0 [ 1030.452495][ T8430] loop5: detected capacity change from 0 to 32768 [ 1030.562221][ T4332] usb 10-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 1030.598072][ T4332] usb 10-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1030.621790][ T4332] usb 10-1: Product: syz [ 1030.626114][ T4332] usb 10-1: Manufacturer: syz [ 1030.648708][ T4332] usb 10-1: SerialNumber: syz [ 1030.659279][ T8430] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1030.721325][ T4332] usb 10-1: config 0 descriptor?? [ 1030.751060][ T8430] (syz.5.13595,8430,1):ocfs2_mknod:502 ERROR: status = -2 [ 1030.767629][ T8430] (syz.5.13595,8430,0):ocfs2_create:676 ERROR: status = -2 [ 1030.820893][ T5078] usb 9-1: MIDIStreaming interface descriptor not found [ 1030.905738][ T5078] usb 9-1: USB disconnect, device number 46 [ 1030.960622][ T4882] (syz-executor,4882,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 1030.992983][ T4882] ocfs2: Unmounting device (7,5) on (node local) [ 1031.103072][ T4332] usb 10-1: USB disconnect, device number 34 [ 1031.384873][T26123] udevd[26123]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.676068][ T8583] x_tables: duplicate underflow at hook 3 [ 1031.765283][ T8590] loop3: detected capacity change from 0 to 512 [ 1031.872363][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13634'. [ 1032.060985][ T8590] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 1032.380769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.461655][ T5078] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1032.735810][ T8666] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.13654'. [ 1032.872097][ T5078] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1032.881265][ T5078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.901800][ T4332] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1032.928343][ T5078] usb 9-1: config 0 descriptor?? [ 1032.949451][ T8687] loop5: detected capacity change from 0 to 64 [ 1032.984299][ T5078] pwc: Philips SPC 900NC USB webcam detected. [ 1033.134313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.212150][ T5078] pwc: Failed to set LED on/off time (-71) [ 1033.232143][ T5078] pwc: send_video_command error -71 [ 1033.240743][ T5078] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1033.261053][ T5078] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 1033.288424][ T5078] usb 9-1: USB disconnect, device number 47 [ 1033.439431][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13669'. [ 1033.502111][ T4332] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1033.517137][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.533640][ T4332] usb 4-1: Product: syz [ 1033.550739][ T4332] usb 4-1: Manufacturer: syz [ 1033.561344][ T4332] usb 4-1: SerialNumber: syz [ 1033.587824][ T4332] usb 4-1: config 0 descriptor?? [ 1033.870593][ T4332] cx82310_eth: probe of 4-1:0.0 failed with error -22 [ 1033.966707][ T4332] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1033.980395][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1033.980416][ T26] audit: type=1400 audit(1034.994:2290): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8763 comm="syz.7.13680" [ 1034.031994][ T4332] usb 4-1: USB disconnect, device number 19 [ 1034.191208][ T8783] loop8: detected capacity change from 0 to 1024 [ 1034.307343][ T8794] loop7: detected capacity change from 0 to 256 [ 1034.468247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.541818][ T4332] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1034.653637][ T8813] netlink: 'syz.8.13693': attribute type 10 has an invalid length. [ 1034.667214][ T8813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1035.063896][ T8841] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 1035.144334][ T4332] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1035.149580][ T8845] loop7: detected capacity change from 0 to 1764 [ 1035.164937][ T4332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.194963][ T4332] usb 10-1: Product: syz [ 1035.199291][ T4332] usb 10-1: Manufacturer: syz [ 1035.251681][ T4332] usb 10-1: SerialNumber: syz [ 1035.271785][ T8845] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1035.317843][ T4332] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1035.420653][ T8845] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1035.719625][ T8895] fuse: blksize only supported for fuseblk [ 1035.832362][ T8893] loop5: detected capacity change from 0 to 4096 [ 1035.871152][ T8911] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.021800][ T4332] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1036.106090][ T8893] ntfs3: loop5: try to read out of volume at offset 0x3fffffc7000 [ 1036.502605][ T5078] usb 10-1: USB disconnect, device number 35 [ 1036.878061][ T8963] loop3: detected capacity change from 0 to 4096 [ 1036.961814][ T8963] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1037.083754][ T8963] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1037.091698][ T4332] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1037.122096][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13748'. [ 1037.135430][ T4332] ath9k_htc: Failed to initialize the device [ 1037.152202][ T5078] usb 10-1: ath9k_htc: USB layer deinitialized [ 1037.883594][ T9053] netlink: 'syz.7.13767': attribute type 29 has an invalid length. [ 1037.915834][ T9040] loop9: detected capacity change from 0 to 4096 [ 1037.939977][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13767'. [ 1037.973263][ T9053] netlink: 'syz.7.13767': attribute type 29 has an invalid length. [ 1037.981845][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13767'. [ 1038.041747][ T9040] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 1038.118854][ T9040] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1038.357754][ T9081] netlink: 6 bytes leftover after parsing attributes in process `syz.8.13775'. [ 1038.424622][ T9081] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1038.525593][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 1038.551711][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.611465][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 1038.661609][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.688460][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1038.743520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.951249][ T9066] loop3: detected capacity change from 0 to 32768 [ 1039.146433][ T9066] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 1039.146433][ T9066] [ 1039.425183][ T9129] loop7: detected capacity change from 0 to 128 [ 1039.489480][ T9129] FAT-fs (loop7): Directory bread(block 32) failed [ 1039.520284][ T9129] FAT-fs (loop7): Directory bread(block 33) failed [ 1039.575315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.606478][ T9129] FAT-fs (loop7): Directory bread(block 34) failed [ 1039.630238][ T9129] FAT-fs (loop7): Directory bread(block 35) failed [ 1039.641905][ T9129] FAT-fs (loop7): Directory bread(block 36) failed [ 1039.648794][ T9073] loop5: detected capacity change from 0 to 32768 [ 1039.665846][ T9129] FAT-fs (loop7): Directory bread(block 37) failed [ 1039.685309][ T9129] FAT-fs (loop7): Directory bread(block 38) failed [ 1039.702670][ T9129] FAT-fs (loop7): Directory bread(block 39) failed [ 1039.728587][ T9129] FAT-fs (loop7): Directory bread(block 40) failed [ 1039.762812][ T9073] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1039.802127][ T9129] FAT-fs (loop7): Directory bread(block 41) failed [ 1039.816900][ T9073] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1039.879189][ T9073] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1039.896722][ T9150] SET target dimension over the limit! [ 1039.937661][ T4591] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1039.954133][ T4591] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1040.126811][ T4591] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms [ 1040.190061][ T4591] gfs2: fsid=syz:syz.0: jid=0: Done [ 1040.204618][ T9073] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1040.289495][ T9170] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1040.364882][ T9170] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1040.568994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.839372][ T9301] netlink: 'syz.8.13845': attribute type 1 has an invalid length. [ 1041.987929][ T9317] ERROR: device name not specified. [ 1042.139739][ T9331] loop9: detected capacity change from 0 to 128 [ 1042.144439][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13856'. [ 1042.185224][ T9333] loop3: detected capacity change from 0 to 512 [ 1042.201318][ T9333] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1042.241355][ T9342] loop5: detected capacity change from 0 to 164 [ 1042.282943][ T9331] FAT-fs (loop9): count of clusters too big (2147483774) [ 1042.290103][ T9331] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1042.340555][ T9333] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 1042.358614][ T9353] loop7: detected capacity change from 0 to 256 [ 1042.506897][ T9333] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.13858: corrupted xattr block 33 [ 1042.736958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.808781][ T9423] Cannot find del_set index 3 as target [ 1042.831696][ T4332] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1043.091857][ T4332] usb 10-1: Using ep0 maxpacket: 16 [ 1043.213047][ T5051] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1043.231893][ T4332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1043.263451][ T4332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1043.319242][ T4332] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1043.383482][ T4332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.400755][ T9455] loop5: detected capacity change from 0 to 4096 [ 1043.406096][ T4332] usb 10-1: config 0 descriptor?? [ 1043.472391][ T9331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1043.473280][ T9455] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1043.514954][ T4332] usb 10-1: Found UVC 0.00 device (10c4:ea90) [ 1043.539586][ T4332] usb 10-1: No valid video chain found. [ 1043.591955][ T5051] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1043.620359][ T5051] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1043.751886][ T4332] usb 10-1: USB disconnect, device number 36 [ 1043.762053][ T5051] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1043.799189][ T5051] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1043.839383][ T5051] usb 9-1: Manufacturer: syz [ 1043.843444][ T9455] ntfs3: loop5: mft corrupted [ 1043.863099][ T5051] usb 9-1: config 0 descriptor?? [ 1043.904118][ T5051] igorplugusb 9-1:0.0: endpoint incorrect [ 1043.905449][ T26] audit: type=1800 audit(1044.924:2291): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13877" name="file0" dev="loop5" ino=33 res=0 errno=0 [ 1044.118730][ T4332] usb 9-1: USB disconnect, device number 48 [ 1044.616485][ T9524] comedi comedi4: bad chanlist[0]=0x80100000 chan=0 range length=2 [ 1044.887780][ T9542] loop8: detected capacity change from 0 to 64 [ 1045.091412][ T9480] loop7: detected capacity change from 0 to 32768 [ 1045.210198][ T9568] loop8: detected capacity change from 0 to 64 [ 1045.282789][ T9568] Trying to free block not in datazone [ 1045.332948][ T9568] minix_free_block (loop8:21): bit already cleared [ 1045.364029][ T9480] XFS (loop7): Mounting V5 Filesystem [ 1045.595991][ T9596] loop5: detected capacity change from 0 to 512 [ 1045.700131][ T9480] XFS (loop7): Ending clean mount [ 1045.765800][ T9480] XFS (loop7): Quotacheck needed: Please wait. [ 1045.780893][ T9596] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 1045.831726][ T9617] No such timeout policy "syz0" [ 1045.856728][ T9596] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 18: comm syz.5.13916: lblock 23 mapped to illegal pblock 18 (length 1) [ 1045.951904][ T9596] EXT4-fs (loop5): Remounting filesystem read-only [ 1046.069544][ T4332] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1046.127365][ T9480] XFS (loop7): Quotacheck: Done. [ 1046.227876][ T8379] XFS (loop7): Unmounting Filesystem [ 1046.414438][ T9650] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1046.454284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.512668][ T4332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.532098][ T9652] loop8: detected capacity change from 0 to 64 [ 1046.540864][ T4332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.574269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.606843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.680927][ T9652] hfs: filesystem is marked locked, mounting read-only. [ 1046.798636][ T4332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.815683][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.831567][ T4332] usb 4-1: Product: syz [ 1046.835811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.835809][ T4332] usb 4-1: Manufacturer: syz [ 1046.876158][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13942'. [ 1046.885390][ T4332] usb 4-1: SerialNumber: syz [ 1047.035180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1047.262167][ T4332] usb 4-1: 0:2 : does not exist [ 1047.525935][ T4332] usb 4-1: USB disconnect, device number 20 [ 1047.779708][ T9754] loop7: detected capacity change from 0 to 512 [ 1047.824645][ T4614] udevd[4614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.960767][ T9754] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1048.227926][ T9787] loop5: detected capacity change from 0 to 4096 [ 1048.240582][ T9798] netlink: 'syz.3.13973': attribute type 1 has an invalid length. [ 1048.270019][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13974'. [ 1048.279356][ T9798] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.13973'. [ 1048.362690][ T9807] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1048.423642][ T9813] loop7: detected capacity change from 0 to 8 [ 1048.555314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.639863][ T9838] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 1048.648128][ T26] audit: type=1800 audit(1049.654:2292): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.13976" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1048.806042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.115215][ T9879] loop9: detected capacity change from 0 to 764 [ 1049.172836][ T9879] rock: directory entry would overflow storage [ 1049.179050][ T9879] rock: sig=0x4654, size=5, remaining=4 [ 1049.218747][ T9879] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1049.262938][ T9879] overlayfs: missing 'lowerdir' [ 1049.776217][ T9941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.940968][ T9950] xt_l2tp: v2 doesn't support IP mode [ 1049.979600][ T9956] IPv6: NLM_F_CREATE should be specified when creating new route [ 1050.649026][ T9929] loop8: detected capacity change from 0 to 32768 [ 1050.796597][ T9929] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 1050.819052][ T9935] loop3: detected capacity change from 0 to 32768 [ 1050.875279][ T9929] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1050.997458][T10632] ocfs2: Unmounting device (7,8) on (node local) [ 1051.139799][T10008] overlayfs: missing 'lowerdir' [ 1051.540961][T10030] loop9: detected capacity change from 0 to 128 [ 1052.401669][ T4598] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1052.459389][T10104] loop3: detected capacity change from 0 to 1024 [ 1052.589265][T10117] netlink: 'syz.9.14074': attribute type 21 has an invalid length. [ 1052.762033][ T4598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.942178][ T4598] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1052.951343][ T4598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.999425][ T4598] usb 6-1: Product: syz [ 1053.008911][ T4598] usb 6-1: Manufacturer: syz [ 1053.024240][ T4598] usb 6-1: SerialNumber: syz [ 1053.050650][ T4598] usb 6-1: config 0 descriptor?? [ 1053.111308][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14084'. [ 1053.131156][ T4598] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1053.261901][ T4598] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 1053.357142][ T4332] usb 6-1: USB disconnect, device number 52 [ 1053.437977][T10184] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1053.472005][T10184] overlayfs: conflicting options: userxattr,metacopy=on [ 1053.583743][T10197] loop8: detected capacity change from 0 to 128 [ 1053.665210][T10205] loop7: detected capacity change from 0 to 256 [ 1053.855142][T10221] netlink: 'syz.8.14103': attribute type 3 has an invalid length. [ 1054.072035][T10239] netlink: 192 bytes leftover after parsing attributes in process `syz.5.14111'. [ 1054.111305][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14112'. [ 1054.234025][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14115'. [ 1054.262954][T10261] tmpfs: Bad value for 'mpol' [ 1054.278186][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14115'. [ 1054.339916][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14129'. [ 1054.374186][T10269] netlink: 'syz.9.14119': attribute type 1 has an invalid length. [ 1054.376713][ T4590] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1054.485285][T10275] loop8: detected capacity change from 0 to 2048 [ 1054.566477][T10287] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1054.699854][T10295] device ip6gre2 entered promiscuous mode [ 1054.767696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1054.793083][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.841945][ T4590] usb 8-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 1054.851454][ T4590] usb 8-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 1054.880835][ T4590] usb 8-1: Manufacturer: syz [ 1054.957164][ T4590] usb 8-1: config 0 descriptor?? [ 1055.125652][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14133'. [ 1055.142400][T10337] netlink: 'syz.9.14134': attribute type 1 has an invalid length. [ 1055.173652][T10337] netlink: 'syz.9.14134': attribute type 2 has an invalid length. [ 1055.198912][T10337] netlink: 'syz.9.14134': attribute type 1 has an invalid length. [ 1055.325323][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14139'. [ 1055.451682][ T4590] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 1055.462135][ T4590] gs_usb: probe of 8-1:0.0 failed with error -71 [ 1055.524306][ T4590] usb 8-1: USB disconnect, device number 53 [ 1055.683333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.884832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.936565][T10387] tmpfs: Bad value for 'mpol' [ 1056.122915][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14153'. [ 1056.143942][T10404] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14155'. [ 1056.281175][T10413] loop8: detected capacity change from 0 to 2048 [ 1056.436412][T10413] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 1056.472010][T10434] netlink: 'syz.9.14164': attribute type 3 has an invalid length. [ 1056.811280][T10457] loop7: detected capacity change from 0 to 2048 [ 1056.895044][T10457] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1057.002682][T10478] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.042598][T10457] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=104, inode=16, rec_len=24, name_len=128 [ 1057.121656][T10457] Remounting filesystem read-only [ 1057.133433][T10481] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 1057.335545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.624620][T10532] loop8: detected capacity change from 0 to 512 [ 1057.747561][T10542] loop3: detected capacity change from 0 to 1764 [ 1057.826162][T10532] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.14196: Invalid inode bitmap blk 4 in block_group 0 [ 1057.840639][T10542] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1057.854894][T10532] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 1057.893578][T10532] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.14196: Invalid inode bitmap blk 4 in block_group 0 [ 1057.908724][T10532] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 1057.977553][T10542] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1058.002121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1058.390043][T10592] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 1058.441463][T10599] loop5: detected capacity change from 0 to 256 [ 1058.461762][T10592] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1058.631417][T10599] FAT-fs (loop5): Directory bread(block 64) failed [ 1058.640912][T10599] FAT-fs (loop5): Directory bread(block 65) failed [ 1058.671780][T10599] FAT-fs (loop5): Directory bread(block 66) failed [ 1058.678395][T10599] FAT-fs (loop5): Directory bread(block 67) failed [ 1058.735428][T10599] FAT-fs (loop5): Directory bread(block 68) failed [ 1058.753932][T10625] device vlan0 entered promiscuous mode [ 1058.759798][T10599] FAT-fs (loop5): Directory bread(block 69) failed [ 1058.789448][T10599] FAT-fs (loop5): Directory bread(block 70) failed [ 1058.830470][T10599] FAT-fs (loop5): Directory bread(block 71) failed [ 1058.866985][T10599] FAT-fs (loop5): Directory bread(block 72) failed [ 1058.901698][T10599] FAT-fs (loop5): Directory bread(block 73) failed [ 1059.114967][T10645] loop9: detected capacity change from 0 to 1024 [ 1059.230783][T10662] loop8: detected capacity change from 0 to 256 [ 1059.399161][T10662] FAT-fs (loop8): Directory bread(block 64) failed [ 1059.421057][T10662] FAT-fs (loop8): Directory bread(block 65) failed [ 1059.467040][T10662] FAT-fs (loop8): Directory bread(block 66) failed [ 1059.491933][T10662] FAT-fs (loop8): Directory bread(block 67) failed [ 1059.498690][T10662] FAT-fs (loop8): Directory bread(block 68) failed [ 1059.532444][T10662] FAT-fs (loop8): Directory bread(block 69) failed [ 1059.539328][T10662] FAT-fs (loop8): Directory bread(block 70) failed [ 1059.620049][T10662] FAT-fs (loop8): Directory bread(block 71) failed [ 1059.641849][T10662] FAT-fs (loop8): Directory bread(block 72) failed [ 1059.648528][T10662] FAT-fs (loop8): Directory bread(block 73) failed [ 1059.696480][T10698] loop5: detected capacity change from 0 to 512 [ 1059.945421][T10698] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1059.982284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.157743][T10740] netlink: 'syz.7.14257': attribute type 79 has an invalid length. [ 1060.357602][T10758] trusted_key: encrypted_key: master key parameter '' is invalid [ 1060.395895][T10761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1060.571689][ T1107] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1060.699413][T10788] loop5: detected capacity change from 0 to 1024 [ 1060.746204][T10792] tmpfs: Bad value for 'mpol' [ 1060.895420][T10804] x_tables: duplicate underflow at hook 4 [ 1060.977181][T10788] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #3: block 1: comm syz.5.14269: lblock 1 mapped to illegal pblock 1 (length 1) [ 1060.994318][ T1107] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1061.016728][ T1107] usb 10-1: config 0 has no interface number 0 [ 1061.033926][ T1107] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1061.072587][T10788] Quota error (device loop5): write_blk: dquota write failed [ 1061.091903][T10788] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1061.132397][T10788] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.14269: Failed to acquire dquot type 0 [ 1061.173786][T10788] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.14269: Freeing blocks not in datazone - block = 0, count = 4096 [ 1061.234494][ T1107] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1061.259416][ T1107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.293977][T10788] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.14269: Invalid inode bitmap blk 0 in block_group 0 [ 1061.301640][ T1107] usb 10-1: Product: syz [ 1061.322198][T26122] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1061.343292][ T1107] usb 10-1: Manufacturer: syz [ 1061.348064][ T1107] usb 10-1: SerialNumber: syz [ 1061.366995][T26122] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1061.387643][ T1107] usb 10-1: config 0 descriptor?? [ 1061.398198][T10788] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1061.425634][T26122] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 1061.427011][T10842] __nla_validate_parse: 7 callbacks suppressed [ 1061.427032][T10842] netlink: 56 bytes leftover after parsing attributes in process `syz.8.14286'. [ 1061.470221][T10788] EXT4-fs (loop5): 1 orphan inode deleted [ 1061.483222][ T1107] CoreChips: probe of 10-1:0.41 failed with error -22 [ 1061.496712][T10788] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 1061.509939][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14287'. [ 1061.530087][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14286'. [ 1061.553388][T10842] netlink: 31 bytes leftover after parsing attributes in process `syz.8.14286'. [ 1061.562979][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14288'. [ 1061.582549][T10842] netlink: 'syz.8.14286': attribute type 2 has an invalid length. [ 1061.601876][T10842] netlink: 31 bytes leftover after parsing attributes in process `syz.8.14286'. [ 1061.650639][T10788] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 1061.813145][T10858] usb usb8: usbfs: process 10858 (syz.7.14292) did not claim interface 0 before use [ 1062.276794][T10887] netlink: 'syz.5.14302': attribute type 8 has an invalid length. [ 1062.401958][ T1107] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1062.792193][ T1107] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1062.803157][ T1107] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1062.866464][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.925423][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1062.976418][ T1107] usb 4-1: config 1 has no interface number 0 [ 1063.009590][ T1107] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1063.042548][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.134912][ T1107] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1063.244989][T10933] loop7: detected capacity change from 0 to 256 [ 1063.253766][ T5051] usb 10-1: USB disconnect, device number 37 [ 1063.351961][T10933] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1063.352129][ T1107] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1063.374249][ T5078] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1063.410630][ T1107] snd_usb_pod 4-1:1.1: invalid control EP [ 1063.417778][ T1107] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1063.425396][ T1107] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1063.462987][ T1107] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1063.652520][ T1107] usb 4-1: USB disconnect, device number 21 [ 1063.791857][ T5078] usb 9-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 1063.791910][ T5078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1063.851792][ T5078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1063.872064][ T5078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1063.900328][ T5078] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.940262][ T5078] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1063.973359][ T5078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.997475][ T5078] usb 9-1: config 0 descriptor?? [ 1064.201877][ T5078] rc_core: IR keymap rc-hauppauge not found [ 1064.208284][ T5078] Registered IR keymap rc-empty [ 1064.251559][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.301950][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.343000][T11018] loop7: detected capacity change from 0 to 2048 [ 1064.344083][ T5078] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1064.436755][ T5078] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input55 [ 1064.552990][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.622098][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.671933][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.741699][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.821627][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.821668][ T4590] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1064.884416][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.921087][T11057] loop9: detected capacity change from 0 to 8 [ 1064.932109][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1064.991976][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1065.051847][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1065.101724][ T5078] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1065.143446][ T5078] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1065.162063][ T5078] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1065.201700][T11081] SET target dimension over the limit! [ 1065.218125][ T5078] usb 9-1: USB disconnect, device number 49 [ 1065.231250][ T4590] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1065.271099][ T4590] usb 8-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 1065.301393][ T4590] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.321350][T11090] loop9: detected capacity change from 0 to 256 [ 1065.333119][T11092] overlayfs: missing 'lowerdir' [ 1065.337339][ T4590] usb 8-1: config 1 has no interface number 0 [ 1065.350607][ T4590] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1065.374703][T11097] netlink: 'syz.5.14359': attribute type 1 has an invalid length. [ 1065.383438][ T4590] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1065.398284][T11097] netlink: 'syz.5.14359': attribute type 9 has an invalid length. [ 1065.418532][T11090] FAT-fs (loop9): Directory bread(block 64) failed [ 1065.452005][T11090] FAT-fs (loop9): Directory bread(block 65) failed [ 1065.479370][T11090] FAT-fs (loop9): Directory bread(block 66) failed [ 1065.491841][T11090] FAT-fs (loop9): Directory bread(block 67) failed [ 1065.498542][T11090] FAT-fs (loop9): Directory bread(block 68) failed [ 1065.540715][T11090] FAT-fs (loop9): Directory bread(block 69) failed [ 1065.584906][T11090] FAT-fs (loop9): Directory bread(block 70) failed [ 1065.601170][T11090] FAT-fs (loop9): Directory bread(block 71) failed [ 1065.608564][ T4590] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.637759][ T4590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.681824][T11090] FAT-fs (loop9): Directory bread(block 72) failed [ 1065.688920][T11090] FAT-fs (loop9): Directory bread(block 73) failed [ 1065.713816][ T4590] usb 8-1: Product: syz [ 1065.718059][ T4590] usb 8-1: Manufacturer: syz [ 1065.742147][ T4590] usb 8-1: SerialNumber: syz [ 1065.812851][ T4590] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1065.819726][ T4590] cdc_ncm 8-1:1.1: bind() failure [ 1066.016894][ T4590] usb 8-1: USB disconnect, device number 54 [ 1066.435585][T11209] netlink: 14 bytes leftover after parsing attributes in process `syz.9.14380'. [ 1066.461559][ T5078] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1066.848893][T11224] loop8: detected capacity change from 0 to 4096 [ 1066.855793][ T5078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.870341][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1066.972018][T11224] NILFS (loop8): mounting unchecked fs [ 1066.977671][T11224] NILFS (loop8): recovery required for readonly filesystem [ 1067.010235][T11224] NILFS (loop8): write access will be enabled during recovery [ 1067.061938][T11224] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1067.081960][ T5078] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 1067.091071][ T5078] usb 4-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 1067.101830][T11224] NILFS (loop8): trying rollback from an earlier position [ 1067.121686][ T5078] usb 4-1: Product: syz [ 1067.125926][ T5078] usb 4-1: Manufacturer: syz [ 1067.130555][ T5078] usb 4-1: SerialNumber: syz [ 1067.144610][T11224] NILFS (loop8): norecovery option specified, skipping roll-forward recovery [ 1067.182073][ T5078] usb 4-1: config 0 descriptor?? [ 1067.222272][T11224] NILFS (loop8): unrecognized mount option "184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)" [ 1067.328671][T11249] loop9: detected capacity change from 0 to 4096 [ 1067.329448][ T1107] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 1067.352466][T11249] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 1067.411458][T11259] netlink: 'syz.8.14394': attribute type 1 has an invalid length. [ 1067.419945][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14394'. [ 1067.473555][ T5078] usb 4-1: USB disconnect, device number 22 [ 1067.560965][T11270] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.14395'. [ 1067.741928][ T1107] usb 8-1: config 0 has an invalid interface number: 176 but max is 2 [ 1067.761696][ T1107] usb 8-1: config 0 has no interface number 1 [ 1067.777467][ T1107] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1067.822735][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.837028][ T1107] usb 8-1: config 0 descriptor?? [ 1068.013955][T11302] loop9: detected capacity change from 0 to 1024 [ 1068.122197][ T1107] qcserial 8-1:0.2: Qualcomm USB modem converter detected [ 1068.203377][T11302] EXT4-fs error (device loop9): ext4_map_blocks:739: inode #3: block 1: comm syz.9.14405: lblock 1 mapped to illegal pblock 1 (length 1) [ 1068.268929][T11302] Quota error (device loop9): write_blk: dquota write failed [ 1068.321952][T11302] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.330292][T11325] overlayfs: missing 'lowerdir' [ 1068.371376][T11302] EXT4-fs error (device loop9): ext4_acquire_dquot:6209: comm syz.9.14405: Failed to acquire dquot type 0 [ 1068.413979][ T1107] usb 8-1: USB disconnect, device number 55 [ 1068.430676][ T1107] qcserial 8-1:0.2: device disconnected [ 1068.452044][T11302] EXT4-fs error (device loop9): ext4_free_blocks:6218: comm syz.9.14405: Freeing blocks not in datazone - block = 0, count = 4096 [ 1068.517414][T11302] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.14405: Invalid inode bitmap blk 0 in block_group 0 [ 1068.542289][ T1278] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1068.562160][T11302] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 1068.596238][ T1278] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1068.596597][T11302] EXT4-fs (loop9): 1 orphan inode deleted [ 1068.614485][T11310] loop8: detected capacity change from 0 to 32768 [ 1068.627457][ T1278] EXT4-fs error (device loop9): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 1068.629794][T11302] EXT4-fs (loop9): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 1068.722451][T11310] [ 1068.722451][T11310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1068.722451][T11310] [ 1068.731214][T11302] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 1068.794319][T11310] ERROR: (device loop8): ea_get: invalid ea.flag [ 1068.794319][T11310] [ 1068.914992][T11310] ERROR: (device loop8): remounting filesystem as read-only [ 1069.282141][T11371] device veth1_virt_wifi entered promiscuous mode [ 1069.304982][T11371] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14422'. [ 1069.362620][T11369] netlink: 'syz.7.14421': attribute type 8 has an invalid length. [ 1069.630199][T11337] loop3: detected capacity change from 0 to 32768 [ 1069.711095][T11401] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14429'. [ 1069.722220][T11337] XFS: attr2 mount option is deprecated. [ 1069.729666][T11401] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14429'. [ 1069.789912][T11337] XFS (loop3): Mounting V5 Filesystem [ 1069.837088][T11410] loop9: detected capacity change from 0 to 512 [ 1069.901040][T11410] EXT4-fs (loop9): Ignoring removed nobh option [ 1069.927485][T11410] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1069.972325][T11410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1069.977707][T11337] XFS (loop3): Ending clean mount [ 1069.998690][T11337] XFS (loop3): Quotacheck needed: Please wait. [ 1070.005022][T11410] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1070.037118][T11410] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.14430: attempt to clear invalid blocks 1024 len 1 [ 1070.124232][T11410] EXT4-fs (loop9): Remounting filesystem read-only [ 1070.204897][T11410] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.14430: bg 0: block 361: padding at end of block bitmap is not set [ 1070.271111][T11337] XFS (loop3): Quotacheck: Done. [ 1070.279553][T11410] EXT4-fs (loop9): Remounting filesystem read-only [ 1070.314044][T11410] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1070.390958][T11410] EXT4-fs (loop9): Remounting filesystem read-only [ 1070.409897][T11410] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.14430: invalid indirect mapped block 1811939328 (level 0) [ 1070.483380][T11410] EXT4-fs (loop9): Remounting filesystem read-only [ 1070.490254][T11410] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.14430: invalid indirect mapped block 2185560079 (level 1) [ 1070.505150][T24967] XFS (loop3): Unmounting Filesystem [ 1070.593433][T11410] EXT4-fs (loop9): Remounting filesystem read-only [ 1070.600971][T11410] EXT4-fs (loop9): 1 truncate cleaned up [ 1070.625725][T11410] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 1071.101077][T11460] loop7: detected capacity change from 0 to 4096 [ 1071.111782][ T4590] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1071.293129][T11460] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1071.362114][T11460] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1071.382093][ T4590] usb 6-1: Using ep0 maxpacket: 16 [ 1071.464394][T11460] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1071.507149][ T4590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.512821][T11451] loop8: detected capacity change from 0 to 40427 [ 1071.537931][ T4590] usb 6-1: config 0 has no interfaces? [ 1071.546508][T11460] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1071.597593][T11451] F2FS-fs (loop8): invalid crc value [ 1071.627777][T11460] ntfs: (device loop7): check_mft_mirror(): Failed to read $MFTMirr. [ 1071.679419][T11451] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1071.707405][T11460] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1071.721270][ T4590] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1071.751462][ T4590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.759866][ T4590] usb 6-1: Product: syz [ 1071.776921][T11460] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1071.797003][ T4590] usb 6-1: Manufacturer: syz [ 1071.802411][ T4590] usb 6-1: SerialNumber: syz [ 1071.828758][ T4590] r8152-cfgselector 6-1: config 0 descriptor?? [ 1071.838871][T11460] ntfs: volume version 3.1. [ 1071.910852][T11451] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1071.966701][T11503] netlink: 'syz.9.14453': attribute type 4 has an invalid length. [ 1072.095961][ T4590] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1072.116317][T11503] device veth1_macvtap left promiscuous mode [ 1072.316144][ T4590] usb 6-1: USB disconnect, device number 53 [ 1072.661710][ T4600] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1072.665752][T11549] netlink: 'syz.8.14467': attribute type 5 has an invalid length. [ 1072.911651][ T4600] usb 8-1: Using ep0 maxpacket: 16 [ 1072.928586][T11569] netlink: 5 bytes leftover after parsing attributes in process `syz.5.14474'. [ 1072.975585][T11569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.075506][ T4600] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1073.172189][ T4600] usb 8-1: config 1 has an invalid interface number: 160 but max is 0 [ 1073.188742][ T4600] usb 8-1: config 1 has no interface number 0 [ 1073.217770][ T4600] usb 8-1: config 1 interface 160 has no altsetting 0 [ 1073.411969][ T4600] usb 8-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 1073.451696][ T4600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.460663][ T4600] usb 8-1: Product: syz [ 1073.472636][ T4600] usb 8-1: Manufacturer: syz [ 1073.477328][ T4600] usb 8-1: SerialNumber: syz [ 1073.525992][T11616] netlink: 'syz.5.14491': attribute type 2 has an invalid length. [ 1073.558427][T11616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.851160][T11641] loop3: detected capacity change from 0 to 256 [ 1073.879457][ T4600] usb 8-1: palm_os_4_probe - error -71 getting connection info [ 1073.895325][ T4600] visor 8-1:1.160: Handspring Visor / Palm OS converter detected [ 1073.920770][ T4600] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1073.942401][T11641] exfat: Deprecated parameter 'namecase' [ 1073.956932][T11641] exfat: Deprecated parameter 'utf8' [ 1073.985797][ T4600] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1073.993376][T11641] exfat: Deprecated parameter 'namecase' [ 1074.027979][T11641] exfat: Deprecated parameter 'utf8' [ 1074.033576][ T4600] usb 8-1: USB disconnect, device number 56 [ 1074.062987][ T4600] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1074.103395][T11641] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1074.169096][ T4600] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1074.220521][ T4600] visor 8-1:1.160: device disconnected [ 1074.329373][ T5051] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1074.621702][ T5051] usb 6-1: Using ep0 maxpacket: 32 [ 1074.762313][ T5051] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 1074.782113][ T5051] usb 6-1: config 0 has no interface number 0 [ 1074.864754][T11729] damon: min_nr_regions (0) must be at least 3 [ 1075.002410][ T5051] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1075.036428][ T5051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.057828][ T5051] usb 6-1: Product: syz [ 1075.077153][ T5051] usb 6-1: Manufacturer: syz [ 1075.097281][ T5051] usb 6-1: SerialNumber: syz [ 1075.116145][ T5051] usb 6-1: config 0 descriptor?? [ 1075.174399][ T5051] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1075.591736][ T5078] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1075.611909][ T5051] gspca_topro: reg_w err -71 [ 1075.652236][ T5051] gspca_topro: Sensor soi763a [ 1075.691856][ T5051] usb 6-1: USB disconnect, device number 54 [ 1075.868385][T11818] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14544'. [ 1076.002005][ T5078] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.015398][T11828] netlink: 'syz.9.14547': attribute type 8 has an invalid length. [ 1076.021579][ T5078] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1076.143520][T11836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14550'. [ 1076.222001][ T5078] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1076.240045][ T5078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.268638][ T5078] usb 9-1: Product: syz [ 1076.299134][ T5078] usb 9-1: Manufacturer: syz [ 1076.304381][ T5078] usb 9-1: SerialNumber: syz [ 1076.322999][ T5078] usb 9-1: config 0 descriptor?? [ 1076.379690][T11852] loop9: detected capacity change from 0 to 24 [ 1076.389863][T11853] SET target dimension over the limit! [ 1076.447935][T11852] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1076.506747][T11857] proc: Bad value for 'gid' [ 1076.530999][T11860] loop3: detected capacity change from 0 to 64 [ 1076.547543][T11852] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1076.617738][ T5078] usb 9-1: USB disconnect, device number 50 [ 1077.462166][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.501074][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.549936][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.569173][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.601596][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.614455][T11941] netlink: 'syz.9.14580': attribute type 2 has an invalid length. [ 1077.628121][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.636286][T11941] netlink: 132 bytes leftover after parsing attributes in process `syz.9.14580'. [ 1077.646044][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.661660][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.683734][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.703739][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.731651][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.756204][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.770231][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.788349][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.806538][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.823165][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.839815][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.855443][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.864894][T11959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14589'. [ 1077.875537][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.891269][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.907123][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.925320][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.942499][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.968519][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1077.985685][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.008231][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.013951][T11967] loop8: detected capacity change from 0 to 8 [ 1078.024674][T11966] ieee802154 phy1 wpan1: encryption failed: -90 [ 1078.032664][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.040658][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.051905][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.069817][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.077764][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.095681][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.120641][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.133062][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.162442][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.170150][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.191989][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.199548][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.238615][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.256278][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.268954][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.280094][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.300165][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.308689][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.324260][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.348277][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.358155][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.371258][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.386323][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.394208][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.402667][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.410320][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.418405][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.432834][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.447487][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.461259][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.472708][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.490714][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.510097][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.526415][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.534605][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.543133][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.550877][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.571298][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.592408][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.600101][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.632705][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.652122][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.677996][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.694744][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.708597][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.726901][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.751858][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.759495][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.769470][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.778423][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.786755][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.813337][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.831215][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.845730][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.862126][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.880015][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.896990][ T4598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1078.961257][ T4598] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1079.158852][T12039] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.192462][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.9.14623'. [ 1079.201980][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.9.14623'. [ 1079.214700][T12043] IPv6: Can't replace route, no match found [ 1079.435836][T12066] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1079.823463][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14638'. [ 1079.833033][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14638'. [ 1080.044870][ T7350] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1080.058673][T12125] loop9: detected capacity change from 0 to 256 [ 1080.113171][T12125] exfat: Deprecated parameter 'namecase' [ 1080.129444][T12125] exfat: Deprecated parameter 'namecase' [ 1080.182752][T12125] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1080.200238][T12139] loop3: detected capacity change from 0 to 512 [ 1080.260837][T12139] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1080.279514][T12139] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1080.312067][T12139] EXT4-fs (loop3): Ignoring removed nobh option [ 1080.321903][ T7350] usb 9-1: Using ep0 maxpacket: 8 [ 1080.331801][T12139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1080.411846][T12139] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1080.436824][T12139] EXT4-fs (loop3): Remounting filesystem read-only [ 1080.452183][T12139] EXT4-fs (loop3): 1 truncate cleaned up [ 1080.458188][T12139] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback. [ 1080.477520][ T7350] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1080.491737][ T7350] usb 9-1: config 0 has no interface number 0 [ 1080.517372][T12139] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 13: comm syz.3.14648: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 1080.645787][T12139] EXT4-fs (loop3): Remounting filesystem read-only [ 1080.701991][ T7350] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1080.720394][ T7350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.760064][ T7350] usb 9-1: Product: syz [ 1080.778145][ T7350] usb 9-1: Manufacturer: syz [ 1080.798811][ T7350] usb 9-1: SerialNumber: syz [ 1080.835203][ T7350] usb 9-1: config 0 descriptor?? [ 1080.846193][T12163] fido_id[12163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1081.121873][ T7350] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 1081.129937][ T7350] usb 9-1: No valid video chain found. [ 1081.161266][ T7350] usb 9-1: USB disconnect, device number 51 [ 1081.243172][T12143] loop5: detected capacity change from 0 to 40427 [ 1081.334088][T12143] F2FS-fs (loop5): invalid crc value [ 1081.375025][T12143] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1081.432862][T12143] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1081.449166][T12143] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1081.921809][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14659'. [ 1081.941748][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14659'. [ 1081.972438][T12194] loop3: detected capacity change from 0 to 4096 [ 1082.012959][T12194] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1082.080378][T12212] loop8: detected capacity change from 0 to 64 [ 1082.115415][T12194] overlayfs: bad mount option "redirect_dir=follow:/" [ 1082.161977][ T5051] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1082.431831][ T5051] usb 8-1: Using ep0 maxpacket: 32 [ 1082.558674][T12191] loop9: detected capacity change from 0 to 32768 [ 1082.574580][ T5051] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1082.592220][ T5051] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1082.608861][ T5051] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1082.622800][T12238] netlink: 'syz.8.14668': attribute type 6 has an invalid length. [ 1082.632324][T12191] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1082.642086][ T5051] usb 8-1: config 1 has no interface number 0 [ 1082.653331][ T5051] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.679550][ T5051] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1082.707413][ T5051] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1082.716084][T12191] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1082.732252][ T5051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.784675][ T5051] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1082.886783][T10841] ocfs2: Unmounting device (7,9) on (node local) [ 1083.002762][ T5051] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 1083.234652][ T4592] usb 8-1: USB disconnect, device number 57 [ 1083.261692][ T4592] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1083.547807][T12313] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 1083.789126][T12330] loop5: detected capacity change from 0 to 764 [ 1083.818867][T12333] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14699'. [ 1084.033913][T12348] netlink: 'syz.7.14705': attribute type 21 has an invalid length. [ 1084.112670][T12348] netlink: 128 bytes leftover after parsing attributes in process `syz.7.14705'. [ 1084.151950][T12348] netlink: 'syz.7.14705': attribute type 4 has an invalid length. [ 1084.181717][T12348] netlink: 3 bytes leftover after parsing attributes in process `syz.7.14705'. [ 1084.384101][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14714'. [ 1084.534490][ T5078] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1084.921958][ T5078] usb 10-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.961624][ T5078] usb 10-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1085.004616][ T5078] usb 10-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1085.048309][ T5078] usb 10-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1085.074394][T12431] loop5: detected capacity change from 0 to 128 [ 1085.090639][ T5078] usb 10-1: config 48 interface 0 altsetting 98 bulk endpoint 0x8 has invalid maxpacket 0 [ 1085.108796][ T5078] usb 10-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.131184][ T5078] usb 10-1: config 48 interface 0 has no altsetting 0 [ 1085.183284][T12431] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1085.259627][T12431] binder: Bad value for 'stats' [ 1085.270007][T12383] loop3: detected capacity change from 0 to 32768 [ 1085.302169][ T5078] usb 10-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1085.313284][ T5078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.323091][T12383] XFS: ikeep mount option is deprecated. [ 1085.339380][ T5078] usb 10-1: Product: syz [ 1085.344507][ T5078] usb 10-1: Manufacturer: syz [ 1085.349315][ T5078] usb 10-1: SerialNumber: syz [ 1085.590288][T12383] XFS (loop3): Mounting V5 Filesystem [ 1085.722756][ T5078] usb 10-1: USB disconnect, device number 38 [ 1085.777634][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14738'. [ 1085.804813][T12383] XFS (loop3): Ending clean mount [ 1085.829602][T12383] XFS (loop3): Quotacheck needed: Please wait. [ 1085.951608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.998180][T12383] XFS (loop3): Quotacheck: Done. [ 1086.061217][T24967] XFS (loop3): Unmounting Filesystem [ 1086.194865][T12508] bridge_slave_0: default FDB implementation only supports local addresses [ 1086.401552][ T4332] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1086.523086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.532235][ T5078] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1086.580769][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14752'. [ 1086.653590][ T4332] usb 9-1: Using ep0 maxpacket: 8 [ 1086.791967][ T4332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 1086.820074][ T4332] usb 9-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1086.838059][ T4332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.884023][ T4332] usb 9-1: config 0 descriptor?? [ 1086.938990][ T5078] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1086.952930][ T5078] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.964371][ T5078] usb 8-1: config 0 descriptor?? [ 1087.017963][ T5078] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1087.232102][ T5078] gspca_spca508: reg_read err -32 [ 1087.379760][T12573] loop5: detected capacity change from 0 to 1024 [ 1087.407691][ T4332] uclogic 0003:28BD:0055.0002: No inputs registered, leaving [ 1087.424495][T12549] loop3: detected capacity change from 0 to 32768 [ 1087.434344][ T4332] uclogic 0003:28BD:0055.0002: hidraw0: USB HID vff.fa Device [HID 28bd:0055] on usb-dummy_hcd.8-1/input0 [ 1087.501695][ T5078] gspca_spca508: reg_read err -71 [ 1087.524802][ T5078] gspca_spca508: reg_read err -71 [ 1087.562183][ T5078] gspca_spca508: reg_read err -71 [ 1087.591802][ T5078] gspca_spca508: reg write: error -71 [ 1087.597345][ T5078] spca508: probe of 8-1:0.0 failed with error -71 [ 1087.601616][ T4592] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1087.624464][ T5078] usb 8-1: USB disconnect, device number 58 [ 1087.693721][ T5051] usb 9-1: USB disconnect, device number 52 [ 1087.770870][T12587] fido_id[12587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1087.871636][ T4592] usb 10-1: Using ep0 maxpacket: 8 [ 1088.021920][ T4592] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1088.181935][ T4592] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1088.191179][ T4592] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.242352][ T4592] usb 10-1: Product: syz [ 1088.246720][ T4592] usb 10-1: Manufacturer: syz [ 1088.254218][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1088.254236][ T26] audit: type=1326 audit(1089.274:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.8.14769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6dbe7bbe9 code=0x0 [ 1088.306332][ T4592] usb 10-1: SerialNumber: syz [ 1088.345682][ T26] audit: type=1326 audit(1089.344:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.5.14768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6dd980be9 code=0x0 [ 1088.363065][ T4592] usb 10-1: config 0 descriptor?? [ 1088.405808][T12625] loop7: detected capacity change from 0 to 16 [ 1088.455075][ T4592] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1088.475329][ T4592] usb 10-1: setting power ON [ 1088.480570][ T4592] dvb-usb: bulk message failed: -22 (2/0) [ 1088.497870][ T4592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1088.511331][T12625] erofs: (device loop7): mounted with root inode @ nid 36. [ 1088.554658][T12625] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown compression format 15 for nid 36, please upgrade kernel [ 1088.580757][T12601] loop3: detected capacity change from 0 to 32768 [ 1088.582400][ T4592] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1088.609959][ T4592] usb 10-1: media controller created [ 1088.640866][ T4592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.668704][T12569] dvb-usb: bulk message failed: -22 (3/0) [ 1088.719123][T12569] cxusb: i2c wr: len=112 is too big! [ 1088.719123][T12569] [ 1088.729261][T12601] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1088.773033][ T4592] usb 10-1: selecting invalid altsetting 6 [ 1088.838668][ T4592] usb 10-1: digital interface selection failed (-22) [ 1088.859822][ T4592] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1088.962898][ T4592] usb 10-1: setting power OFF [ 1088.968702][ T4592] dvb-usb: bulk message failed: -22 (2/0) [ 1089.011590][ T4592] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1089.041233][ T4592] (NULL device *): no alternate interface [ 1089.103081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.104049][T12670] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1089.194037][ T4592] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1089.241873][ T4592] usb 10-1: USB disconnect, device number 39 [ 1089.334743][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14782'. [ 1089.514599][T12697] loop5: detected capacity change from 0 to 1764 [ 1089.644843][T12715] loop7: detected capacity change from 0 to 64 [ 1089.827066][T12715] hfs: request for non-existent node 327680 in B*Tree [ 1089.872023][T12715] hfs: request for non-existent node 327680 in B*Tree [ 1089.894680][T12715] hfs: request for non-existent node 327680 in B*Tree [ 1089.939060][T12715] hfs: request for non-existent node 327680 in B*Tree [ 1090.083799][T12753] loop8: detected capacity change from 0 to 2048 [ 1090.133165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.231761][ T4590] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1090.290273][T12778] xt_hashlimit: max too large, truncated to 1048576 [ 1090.299420][T12753] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 1090.485595][ T5078] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 1090.604759][ T4590] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1090.618904][ T4590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.690750][ T4590] usb 6-1: config 0 descriptor?? [ 1090.922364][ T5078] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.930631][ T5078] usb 10-1: config 0 has no interface number 0 [ 1090.967722][ T5078] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1090.990602][ T5078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.041390][ T5078] usb 10-1: config 0 descriptor?? [ 1091.105989][ T5078] usb 10-1: selecting invalid altsetting 1 [ 1091.206419][ T4590] saitek 0003:06A3:0CFA.0003: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.5-1/input0 [ 1091.210974][ T5078] dvb_ttusb_budget: ttusb_init_controller: error [ 1091.280008][ T5078] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1091.351674][T12840] netlink: 'syz.8.14822': attribute type 16 has an invalid length. [ 1091.409405][ T5051] usb 6-1: USB disconnect, device number 55 [ 1091.498018][T12858] netlink: 'syz.8.14825': attribute type 3 has an invalid length. [ 1091.531725][ T4590] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1091.540106][ T5078] DVB: Unable to find symbol cx22700_attach() [ 1091.594859][T12863] ucma_write: process 4707 (syz.8.14827) changed security contexts after opening file descriptor, this is not allowed. [ 1091.644664][ T5078] DVB: Unable to find symbol tda10046_attach() [ 1091.650907][ T5078] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1091.680795][ T5078] usb 10-1: USB disconnect, device number 40 [ 1091.713985][T12871] netlink: 76 bytes leftover after parsing attributes in process `syz.8.14828'. [ 1091.891996][ T4590] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1091.911454][ T4590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.948075][ T4590] usb 4-1: config 0 descriptor?? [ 1091.959655][T12892] loop8: detected capacity change from 0 to 256 [ 1091.960643][T12893] loop9: detected capacity change from 0 to 128 [ 1092.072828][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14834'. [ 1092.111788][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14834'. [ 1092.121158][T12893] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 1092.176688][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14835'. [ 1092.194124][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14835'. [ 1092.251918][T10841] sysv_free_block: trying to free block not in datazone [ 1092.321918][T10841] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1092.454984][ T4590] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x0 [ 1092.466703][T12927] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1092.489095][ T4590] hid-multitouch 0003:0EEF:72C4.0004: item fetching failed at offset 3/5 [ 1092.506911][T12927] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1092.524503][ T4590] hid-multitouch: probe of 0003:0EEF:72C4.0004 failed with error -22 [ 1092.534417][T12927] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1092.559029][T12927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.592171][T12927] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1092.601022][T12927] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1092.618688][T12927] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1092.626657][T12927] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1092.645571][T12927] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1092.655968][ T5078] usb 4-1: USB disconnect, device number 23 [ 1092.663856][T12927] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1092.693257][T12927] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1092.701106][T12927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.731795][T12927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.741933][T12927] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1092.748538][T12927] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1092.801639][T12927] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 1092.828436][T12927] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1092.842619][T12950] devtmpfs: Too few inodes for current use [ 1092.855577][T12927] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1092.875631][T12927] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1093.322422][T12983] ptrace attach of "./syz-executor exec"[24967] was attempted by ""[12983] [ 1093.402447][T12991] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1093.594636][T13003] loop7: detected capacity change from 0 to 1024 [ 1093.750044][ T1226] hfsplus: b-tree write err: -5, ino 4 [ 1093.767898][T13025] loop5: detected capacity change from 0 to 512 [ 1093.973740][T13025] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=inode,noinit_itable,barrier=0x0000000000000040,quota,errors=remount-ro,init_itable,. Quota mode: writeback. [ 1094.042867][T22625] udevd[22625]: symlink '../../loop7' '/dev/disk/by-diskseq/2462.tmp-b7:7' failed: Read-only file system [ 1094.083263][T13037] loop7: detected capacity change from 0 to 4096 [ 1094.121770][ T4332] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1094.136085][ T4614] udevd[4614]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1094.158196][T13037] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1094.245118][T13037] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1094.329530][ T4614] udevd[4614]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1094.336034][T13037] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1094.380654][T13037] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1094.399695][T13037] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1094.414075][T13037] ntfs: volume version 3.1. [ 1094.421314][T13037] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1094.433460][T13037] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1094.434627][T22625] udevd[22625]: symlink '../../loop7' '/dev/disk/by-diskseq/2462.tmp-b7:7' failed: Read-only file system [ 1094.447748][T13037] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1094.457257][ T4332] usb 10-1: Using ep0 maxpacket: 32 [ 1094.462606][T13070] genirq: Flags mismatch irq 5. 00000000 (pcl818) vs. 00000000 (das16m1) [ 1094.490884][T13037] ntfs: (device loop7): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1094.513670][T13037] ntfs: (device loop7): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1094.534259][T22625] udevd[22625]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1094.592384][T22625] udevd[22625]: symlink '../../loop7' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:7' failed: Read-only file system [ 1094.597387][ T4614] udevd[4614]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1094.658221][ T4614] udevd[4614]: symlink '../../loop5' '/dev/disk/by-diskseq/2463.tmp-b7:5' failed: Read-only file system [ 1094.671724][ T4592] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1094.701764][ T4332] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1094.736185][ T4614] udevd[4614]: symlink '../../loop5' '/dev/disk/by-diskseq/2463.tmp-b7:5' failed: Read-only file system [ 1094.770203][ T5269] udevd[5269]: symlink '../../loop7' '/dev/disk/by-diskseq/2462.tmp-b7:7' failed: Read-only file system [ 1094.797291][T13085] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1094.807835][ T4332] usb 10-1: config 129 has an invalid interface number: 249 but max is 0 [ 1094.817785][ T4332] usb 10-1: config 129 has no interface number 0 [ 1094.828028][ T4332] usb 10-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 1094.851623][ T4332] usb 10-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 1094.865010][ T4332] usb 10-1: config 129 interface 249 has no altsetting 0 [ 1095.033170][ T1107] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1095.071941][ T4332] usb 10-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 1095.081855][ T4592] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1095.088112][ T4332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.102857][ T4332] usb 10-1: Product: syz [ 1095.107249][ T4332] usb 10-1: Manufacturer: syz [ 1095.112753][ T4332] usb 10-1: SerialNumber: syz [ 1095.120373][ T4592] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1095.132158][T13036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1095.167963][ T4592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1095.186128][ T4592] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1095.196404][ T4592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.215979][ T4592] usb 6-1: config 0 descriptor?? [ 1095.232119][T13068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1095.357124][T13036] udc-core: couldn't find an available UDC or it's busy [ 1095.364558][T13036] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1095.422085][ T1107] usb 9-1: config 0 interface 0 altsetting 73 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.434917][ T1107] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1095.441952][ T1107] usb 9-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.00 [ 1095.451226][ T1107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.460198][ T4332] smsc95xx v2.0.0 [ 1095.466327][ T1107] usb 9-1: config 0 descriptor?? [ 1095.472127][ T4332] smsc95xx 10-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1095.481924][ T4590] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1095.484705][ T4332] smsc95xx: probe of 10-1:129.249 failed with error -71 [ 1095.503345][ T4332] usb 10-1: USB disconnect, device number 41 [ 1095.693876][ T4592] holtek_mouse 0003:04D9:A067.0005: unbalanced delimiter at end of report description [ 1095.704336][ T4592] holtek_mouse 0003:04D9:A067.0005: hid parse failed: -22 [ 1095.711688][ T4592] holtek_mouse: probe of 0003:04D9:A067.0005 failed with error -22 [ 1095.851835][ T4590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1095.863124][ T4590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.873129][ T4590] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1095.886420][ T4590] usb 8-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1095.899477][ T4590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.921832][ T5051] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1095.928050][ T4590] usb 8-1: config 0 descriptor?? [ 1095.941161][ T4598] usb 6-1: USB disconnect, device number 56 [ 1095.959073][ T1107] hid-generic 0003:05AC:027E.0006: hidraw0: USB HID v0.00 Device [HID 05ac:027e] on usb-dummy_hcd.8-1/input0 [ 1096.001344][T13139] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 1096.013227][T13139] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1096.021668][T13139] CPU: 1 PID: 13139 Comm: syz.9.14895 Not tainted syzkaller #0 [ 1096.029314][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1096.039423][T13139] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 1096.045130][T13139] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7d ec 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 5c ec 49 fa 4d 8b 24 24 48 83 c3 [ 1096.064918][T13139] RSP: 0018:ffffc90003c6fa80 EFLAGS: 00010206 [ 1096.071036][T13139] RAX: 0000000000000005 RBX: ffff888025242180 RCX: 0000000000080000 [ 1096.079056][T13139] RDX: ffffc900122b1000 RSI: 0000000000000427 RDI: 0000000000000428 [ 1096.087061][T13139] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005534226 [ 1096.095147][T13139] R10: ffffed1005534226 R11: 1ffff11005534225 R12: 0000000000000028 [ 1096.103133][T13139] R13: dffffc0000000000 R14: ffff88802a9a1000 R15: dffffc0000000000 [ 1096.111391][T13139] FS: 00007f29d6db66c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1096.120345][T13139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1096.127219][T13139] CR2: 0000001b31023ffc CR3: 0000000024e09000 CR4: 00000000003506e0 [ 1096.135294][T13139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1096.143296][T13139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1096.151298][T13139] Call Trace: [ 1096.154594][T13139] [ 1096.157527][T13139] pcl818_detach+0x62/0xd0 [ 1096.161990][T13139] comedi_device_detach_locked+0x16e/0x710 [ 1096.162170][ T1107] usb 9-1: USB disconnect, device number 53 [ 1096.167843][T13139] comedi_unlocked_ioctl+0xd0b/0x1050 [ 1096.167879][T13139] ? comedi_poll+0x8b0/0x8b0 [ 1096.167939][T13139] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1096.188745][T13139] ? security_file_ioctl+0x7c/0xa0 [ 1096.193905][T13139] ? comedi_poll+0x8b0/0x8b0 [ 1096.198536][T13139] __se_sys_ioctl+0xfa/0x170 [ 1096.203177][T13139] do_syscall_64+0x4c/0xa0 [ 1096.207637][T13139] ? clear_bhb_loop+0x30/0x80 [ 1096.211819][ T5051] usb 4-1: Using ep0 maxpacket: 8 [ 1096.212451][T13139] ? clear_bhb_loop+0x30/0x80 [ 1096.222231][T13139] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1096.228258][T13139] RIP: 0033:0x7f29d8b4ebe9 [ 1096.232719][T13139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.252338][T13139] RSP: 002b:00007f29d6db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.260759][T13139] RAX: ffffffffffffffda RBX: 00007f29d8d75fa0 RCX: 00007f29d8b4ebe9 [ 1096.268921][T13139] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1096.276927][T13139] RBP: 00007f29d8bd1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1096.285034][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.293025][T13139] R13: 00007f29d8d76038 R14: 00007f29d8d75fa0 R15: 00007fff6ccf4da8 [ 1096.301013][T13139] [ 1096.304077][T13139] Modules linked in: [ 1096.313803][T13139] ---[ end trace 08be8ca361cd53f5 ]--- [ 1096.319341][T13139] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 1096.326146][T13139] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7d ec 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 5c ec 49 fa 4d 8b 24 24 48 83 c3 [ 1096.351280][T13139] RSP: 0018:ffffc90003c6fa80 EFLAGS: 00010206 [ 1096.357752][T13139] RAX: 0000000000000005 RBX: ffff888025242180 RCX: 0000000000080000 [ 1096.366252][T13139] RDX: ffffc900122b1000 RSI: 0000000000000427 RDI: 0000000000000428 [ 1096.374532][T13139] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005534226 [ 1096.383053][ T5051] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1096.390993][T13139] R10: ffffed1005534226 R11: 1ffff11005534225 R12: 0000000000000028 [ 1096.399855][T13139] R13: dffffc0000000000 R14: ffff88802a9a1000 R15: dffffc0000000000 [ 1096.408034][T13139] FS: 00007f29d6db66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1096.417210][T13139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1096.424220][T13139] CR2: 000000110c428d37 CR3: 0000000024e09000 CR4: 00000000003506f0 [ 1096.432751][T13139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1096.440853][T13139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1096.449003][T13139] Kernel panic - not syncing: Fatal exception [ 1096.455492][T13139] Kernel Offset: disabled [ 1096.459828][T13139] Rebooting in 86400 seconds..