last executing test programs: 2.143525651s ago: executing program 1 (id=13342): syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.540841775s ago: executing program 0 (id=13352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001900000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.497223906s ago: executing program 3 (id=13353): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) 1.416808688s ago: executing program 0 (id=13354): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0xf423f, 0x0, 0x0, 0x11}) 1.379672159s ago: executing program 0 (id=13355): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x4, 0x7fff}) 1.35114524s ago: executing program 3 (id=13356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1.262407971s ago: executing program 0 (id=13357): r0 = socket(0x22, 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r0, 0x0, 0x0) 1.247602022s ago: executing program 0 (id=13358): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) 1.241167642s ago: executing program 3 (id=13359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000800000000000000007008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000190000008500000005000000bc0900000000000035090100000900009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff000000002f8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000003f9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.122987485s ago: executing program 1 (id=13361): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x1a3, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") truncate(&(0x7f00000000c0)='./file2\x00', 0x8) 1.122753095s ago: executing program 3 (id=13362): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c00000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1564010041800400240012800b0001006d616373656300001400028005000a000000000005000c"], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.016018308s ago: executing program 3 (id=13364): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 914.98258ms ago: executing program 4 (id=13366): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f000000a040)) 781.603122ms ago: executing program 4 (id=13368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x98, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0xfe}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 753.251273ms ago: executing program 3 (id=13369): futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000)=0x407, 0x4ffffff) 690.320665ms ago: executing program 2 (id=13370): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8, 0x401, 0x1, 0x1, 0x4, 0x3, 0x7, 0x2, 0x0, 0xfffffeff, 0x7, 0x9, 0x3, 0x7, 0x3, 0x20, {0x9, 0x8}, 0xc, 0x3}}) 645.439146ms ago: executing program 4 (id=13371): unshare(0x22020600) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) 632.599876ms ago: executing program 2 (id=13372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) 561.899078ms ago: executing program 1 (id=13373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 561.287278ms ago: executing program 2 (id=13374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 489.885279ms ago: executing program 4 (id=13375): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x32, 0xc, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) 464.90006ms ago: executing program 2 (id=13376): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f00000001c0)=ANY=[], 0x85, 0x5a4, &(0x7f0000000580)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0x440e0) 378.340392ms ago: executing program 4 (id=13377): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file7\x00', 0x3100888, 0x0, 0xfe, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000040)='./file2\x00', 0x8) 375.969922ms ago: executing program 1 (id=13378): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 329.675363ms ago: executing program 2 (id=13379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb04fffffff501000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 312.626343ms ago: executing program 0 (id=13380): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 248.470745ms ago: executing program 1 (id=13381): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 138.435137ms ago: executing program 2 (id=13382): r0 = gettid() r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 56.800349ms ago: executing program 1 (id=13383): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 0s ago: executing program 4 (id=13384): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7, 0x7, 0x10, @mcast2, @private2, 0x7800, 0x8000, 0x8, 0x143}}) kernel console output (not intermixed with test programs): cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 639.060836][ T7] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 error while loading driver (-19) [ 639.066660][ T7] dw2102: su3000_identify_state [ 639.066677][ T7] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 639.066704][ T7] dw2102: su3000_power_ctrl: 1, initialized 0 [ 639.066724][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 639.095495][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 639.102584][ T7] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 error while loading driver (-19) [ 639.103241][ T7] usbhid 2-1:64.144: couldn't find an input interrupt endpoint [ 639.292742][T26410] usb 2-1: USB disconnect, device number 58 [ 639.717269][ T6905] __nla_validate_parse: 7 callbacks suppressed [ 639.717288][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11296'. [ 639.901555][ T6917] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 640.528125][ T6972] netlink: 'syz.4.11320': attribute type 1 has an invalid length. [ 640.547005][ T6972] netlink: 'syz.4.11320': attribute type 2 has an invalid length. [ 640.590378][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11320'. [ 641.210375][ T7032] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 641.639450][ T7078] loop1: detected capacity change from 0 to 64 [ 641.706949][ T7083] netlink: 'syz.4.11359': attribute type 1 has an invalid length. [ 641.706972][ T7083] netlink: 'syz.4.11359': attribute type 3 has an invalid length. [ 641.706988][ T7083] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11359'. [ 641.868709][ T7093] netlink: 'syz.4.11363': attribute type 4 has an invalid length. [ 642.115961][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11367'. [ 642.237149][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11370'. [ 642.304625][ T7122] netlink: 292 bytes leftover after parsing attributes in process `syz.1.11373'. [ 642.562928][ T7148] bond0: option use_carrier: invalid value (9) [ 642.593062][ T7150] xt_l2tp: v2 sid > 0xffff: 262144 [ 643.194832][ T7215] loop0: detected capacity change from 0 to 764 [ 643.269752][ T7224] loop4: detected capacity change from 0 to 64 [ 643.382065][ T7224] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 643.415507][ T7235] xt_bpf: check failed: parse error [ 643.551173][ T7245] delete_channel: no stack [ 643.706667][ T25] audit: type=1107 audit(524928.980:110): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 643.878642][ T7287] loop0: detected capacity change from 0 to 16 [ 643.986835][ T7287] erofs: (device loop0): mounted with root inode @ nid 36. [ 644.034145][ T7287] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 644.508096][ T7342] Cannot find del_set index 4 as target [ 644.674125][ T7362] loop1: detected capacity change from 0 to 136 [ 644.723982][ T7368] netlink: 'syz.2.11457': attribute type 1 has an invalid length. [ 644.743530][ T7368] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.11457'. [ 644.763510][ T7368] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11457'. [ 645.171957][T26413] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 645.406858][ T7444] netlink: 'syz.3.11479': attribute type 1 has an invalid length. [ 645.406883][ T7444] netlink: 'syz.3.11479': attribute type 2 has an invalid length. [ 645.552221][T26410] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 645.580796][T26413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 645.652004][T26413] usb 5-1: config 35 has an invalid interface number: 223 but max is 0 [ 645.652035][T26413] usb 5-1: config 35 has no interface number 0 [ 645.652062][T26413] usb 5-1: config 35 interface 223 has no altsetting 0 [ 645.896182][T26413] usb 5-1: string descriptor 0 read error: -22 [ 645.913436][T26413] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 645.966465][T26413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.005158][ T7459] netlink: 'syz.3.11486': attribute type 12 has an invalid length. [ 646.072323][T26410] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 646.094395][T26413] usb_ehset_test: probe of 5-1:35.223 failed with error -32 [ 646.104476][T26410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.135334][T26410] usb 1-1: Product: syz [ 646.139607][T26410] usb 1-1: Manufacturer: syz [ 646.187177][T26410] usb 1-1: SerialNumber: syz [ 646.253530][T26410] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 646.315684][ T7470] sp0: Synchronizing with TNC [ 646.323305][T26413] usb 5-1: USB disconnect, device number 66 [ 646.539678][ T7495] netlink: 'syz.1.11492': attribute type 7 has an invalid length. [ 646.548537][ T7495] netlink: 'syz.1.11492': attribute type 8 has an invalid length. [ 646.597731][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11493'. [ 646.612816][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11494'. [ 646.802596][ T4424] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 646.852495][T26410] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 647.101729][ T4424] usb 3-1: Using ep0 maxpacket: 16 [ 647.222645][ T4424] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.264645][T26413] usb 1-1: USB disconnect, device number 58 [ 647.277099][ T4181] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 647.442952][ T4424] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 647.460173][ T4424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.497485][ T4424] usb 3-1: Product: syz [ 647.501856][ T4424] usb 3-1: Manufacturer: syz [ 647.513555][ T4424] usb 3-1: SerialNumber: syz [ 647.522690][ T4181] usb 4-1: Using ep0 maxpacket: 16 [ 647.541051][ T4424] usb 3-1: config 0 descriptor?? [ 647.605750][ T4424] qcserial 3-1:0.0: Qualcomm USB modem converter detected [ 647.644498][ T4424] usb 3-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 647.652774][ T4181] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 647.807849][ T4424] usb 3-1: USB disconnect, device number 56 [ 647.813941][ T4181] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 647.813974][ T4181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.813997][ T4181] usb 4-1: Product: syz [ 647.814014][ T4181] usb 4-1: Manufacturer: syz [ 647.814030][ T4181] usb 4-1: SerialNumber: syz [ 647.850045][ T4424] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 647.902040][ T4424] qcserial 3-1:0.0: device disconnected [ 647.924369][ T4181] r8152-cfgselector 4-1: config 0 descriptor?? [ 647.958226][ T7594] tc_dump_action: action bad kind [ 648.092994][T26410] usb 1-1: Service connection timeout for: 256 [ 648.099241][T26410] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 648.137331][T26410] ath9k_htc: Failed to initialize the device [ 648.155580][T26413] usb 1-1: ath9k_htc: USB layer deinitialized [ 648.423004][ T4181] r8152-cfgselector 4-1: Unknown version 0x0000 [ 648.454497][ T4181] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 648.565578][ T7652] netlink: 'syz.4.11535': attribute type 29 has an invalid length. [ 648.585476][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11535'. [ 648.621536][ T7652] netlink: 'syz.4.11535': attribute type 29 has an invalid length. [ 648.650432][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11535'. [ 648.672962][T26413] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 648.913045][T26413] usb 1-1: Using ep0 maxpacket: 8 [ 649.083228][T26413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 649.173928][T26413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 649.204264][T26413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 649.228374][ T7696] netlink: 'syz.3.11551': attribute type 29 has an invalid length. [ 649.239885][T26413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 649.258296][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11551'. [ 649.271510][T26413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 649.292123][ T7696] netlink: 'syz.3.11551': attribute type 29 has an invalid length. [ 649.301667][T26413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 649.325446][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11551'. [ 649.340441][T26413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 649.523607][T26413] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 649.539895][T26413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.570325][T26413] usb 1-1: Product: syz [ 649.586321][T26413] usb 1-1: Manufacturer: syz [ 649.601296][T26413] usb 1-1: SerialNumber: syz [ 649.635681][T26413] usb 1-1: config 0 descriptor?? [ 649.673736][ T7629] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.680926][ T7629] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.707908][ T7716] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11558'. [ 649.995691][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11566'. [ 650.112763][ T7758] dlm: no locking on control device [ 650.286371][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11575'. [ 650.330210][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.385374][ T4424] usb 1-1: USB disconnect, device number 59 [ 650.587571][ T7806] loop1: detected capacity change from 0 to 256 [ 650.610712][ T7809] tmpfs: Bad value for 'mpol' [ 651.034575][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11593'. [ 651.083966][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11593'. [ 651.262960][ T7864] loop3: detected capacity change from 0 to 8 [ 651.294560][ T7864] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 651.354199][ T7864] cramfs: unsupported filesystem features [ 651.476013][ T25] audit: type=1400 audit(524936.747:111): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7876 comm="syz.2.11605" [ 651.500725][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11606'. [ 651.568538][ T7888] netlink: 'syz.3.11607': attribute type 2 has an invalid length. [ 651.979365][ T7922] netlink: 'syz.0.11619': attribute type 71 has an invalid length. [ 652.218221][ T7946] loop1: detected capacity change from 0 to 256 [ 652.396783][ T7946] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 652.574950][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11637'. [ 652.904399][ T8000] netlink: 'syz.3.11646': attribute type 1 has an invalid length. [ 653.229139][ T8020] loop0: detected capacity change from 0 to 512 [ 653.360566][ T8020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 653.726697][ T8045] loop1: detected capacity change from 0 to 736 [ 654.254340][ T4181] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 654.257460][ T8085] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 654.257460][ T8085] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 654.429596][ T8093] x_tables: duplicate entry at hook 1 [ 654.614707][ T4181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.640864][ T4181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.754734][ T4181] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 654.774077][ T4181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 654.818356][ T4181] usb 4-1: SerialNumber: syz [ 654.887547][ T4181] usb 4-1: 0:2 : does not exist [ 655.132985][ T4181] usb 4-1: USB disconnect, device number 55 [ 655.184466][T26410] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 655.285059][ T25] audit: type=1400 audit(524940.556:112): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8176 comm="syz.1.11699" [ 655.364747][ T7] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 655.449306][T26410] usb 5-1: Using ep0 maxpacket: 32 [ 655.478160][ T8188] netlink: 'syz.2.11704': attribute type 8 has an invalid length. [ 655.494521][ T8188] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.11704'. [ 655.574823][T26410] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 655.583208][T26410] usb 5-1: config 0 has no interface number 0 [ 655.586227][ T8196] program syz.2.11707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.606323][ T8198] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 655.610373][T26410] usb 5-1: config 0 interface 132 has no altsetting 0 [ 655.634539][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 655.765112][ T7] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 655.785649][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.794850][T26410] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 655.803947][T26410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.836085][ T7] usb 1-1: config 0 descriptor?? [ 655.852923][T26410] usb 5-1: Product: syz [ 655.879460][T26410] usb 5-1: Manufacturer: syz [ 655.884135][T26410] usb 5-1: SerialNumber: syz [ 655.896816][ T7] usb 1-1: Found UVC 0.00 device (2801:0201) [ 655.907219][ T7] usb 1-1: No valid video chain found. [ 655.931024][T26410] usb 5-1: config 0 descriptor?? [ 656.101327][ T7] usb 1-1: USB disconnect, device number 60 [ 656.234965][T26410] cdc_subset: probe of 5-1:0.132 failed with error -71 [ 656.292587][T26410] usb 5-1: USB disconnect, device number 67 [ 656.613666][ T8271] loop3: detected capacity change from 0 to 512 [ 656.682081][ T8274] netlink: 'syz.2.11728': attribute type 2 has an invalid length. [ 656.706456][ T8271] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 656.730715][ T8281] loop0: detected capacity change from 0 to 512 [ 656.869308][ T8281] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 656.945037][ T8281] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 657.017956][ T8281] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,nouid32,dioread_lock,jqfmt=vfsv0,journal_ioprio=0x0000000000000003,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 657.264310][ T8321] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 657.290876][ T8281] EXT4-fs error (device loop0): ext4_xattr_block_find:1857: inode #15: comm syz.0.11730: corrupted xattr block 32 [ 657.648720][ T8354] syz.1.11753 (8354): attempted to duplicate a private mapping with mremap. This is not supported. [ 657.669461][ T8348] loop0: detected capacity change from 0 to 2048 [ 657.787687][ T8348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 657.834197][ T8348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 658.118514][ T8391] netlink: 'syz.2.11765': attribute type 10 has an invalid length. [ 658.137106][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11765'. [ 658.157431][ T8391] netlink: 'syz.2.11765': attribute type 10 has an invalid length. [ 658.177772][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11765'. [ 658.227132][ T8396] netlink: 628 bytes leftover after parsing attributes in process `syz.1.11766'. [ 658.374068][ T8411] loop1: detected capacity change from 0 to 512 [ 658.394972][ T4424] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 658.447182][ T8411] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.11770: inode #1792: comm syz.1.11770: iget: illegal inode # [ 658.526654][ T8424] netlink: 'syz.2.11776': attribute type 3 has an invalid length. [ 658.538208][ T8411] EXT4-fs (loop1): Remounting filesystem read-only [ 658.544769][ T8411] EXT4-fs (loop1): no journal found [ 658.595110][ T8411] EXT4-fs (loop1): can't get journal size [ 658.637251][ T8411] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 658.648576][ T8430] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 658.665269][ T4424] usb 4-1: Using ep0 maxpacket: 8 [ 658.776085][ T8411] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 658.783895][ T8411] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,resuid=0x0000000000000000,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 658.805403][ T4424] usb 4-1: config 243 has an invalid interface number: 78 but max is 0 [ 658.834139][ T4424] usb 4-1: config 243 has no interface number 0 [ 658.854406][ T4424] usb 4-1: config 243 interface 78 has no altsetting 0 [ 658.884809][ T8437] loop0: detected capacity change from 0 to 4096 [ 658.915957][ T8411] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.11770: Logical block already allocated [ 658.948419][ T8437] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 658.968350][ T8411] EXT4-fs (loop1): Remounting filesystem read-only [ 658.994286][ T8437] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 659.049940][ T8437] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 659.080962][ T8449] loop4: detected capacity change from 0 to 4096 [ 659.087933][ T4424] usb 4-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 659.097609][ T8437] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 659.099799][ T4424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.139497][ T4424] usb 4-1: Product: syz [ 659.149639][ T4424] usb 4-1: Manufacturer: syz [ 659.169933][ T4424] usb 4-1: SerialNumber: syz [ 659.198472][ T8437] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 659.259152][ T8437] ntfs: volume version 3.1. [ 659.280654][ T8437] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 659.315783][ T8437] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 659.354272][ T8449] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default. [ 659.375277][ T8437] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 659.397272][ T8449] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 659.489420][ T8449] ntfs: volume version 3.1. [ 659.568738][ T4424] usb 4-1: USB disconnect, device number 56 [ 660.127393][ T8508] loop3: detected capacity change from 0 to 1024 [ 660.237571][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11801'. [ 660.286436][ T8508] hfsplus: extend alloc file! (16384,256,150995124) [ 660.303283][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11801'. [ 660.308768][ T4426] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 660.330824][ T8508] hfsplus: failed to extend attributes file [ 660.605443][ T4426] usb 5-1: Using ep0 maxpacket: 32 [ 660.725939][ T8547] loop1: detected capacity change from 0 to 128 [ 660.735958][ T4426] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 660.745439][ T4426] usb 5-1: config 0 has no interface number 0 [ 660.751587][ T4426] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 660.785313][ T4426] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 661.012717][ T4426] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 661.020781][ T8562] loop1: detected capacity change from 0 to 512 [ 661.033658][ T4426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.063460][ T4426] usb 5-1: Product: syz [ 661.093900][ T4426] usb 5-1: Manufacturer: syz [ 661.104024][ T4426] usb 5-1: SerialNumber: syz [ 661.126351][ T4426] usb 5-1: config 0 descriptor?? [ 661.166976][ T8562] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 661.207642][ T4426] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 661.248353][ T8518] loop0: detected capacity change from 0 to 32768 [ 661.374877][ T8518] JBD2: Ignoring recovery information on journal [ 661.435434][ T4426] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 661.442520][ T4426] quatech2: probe of 5-1:0.51 failed with error -90 [ 661.518673][ T8518] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 661.600896][ T8518] ocfs2: Unmounting device (7,0) on (node local) [ 661.662276][ T4426] usb 5-1: USB disconnect, device number 68 [ 661.849028][ T8625] SET target dimension over the limit! [ 662.007791][ T8631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.033908][ T8631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.076828][ T8631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.100443][ T8631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.119966][ T8631] device geneve4 entered promiscuous mode [ 662.502385][ T8676] ax25_connect(): syz.2.11850 uses autobind, please contact jreuter@yaina.de [ 662.634701][ T8688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11853'. [ 662.668876][ T8688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11853'. [ 662.690798][ T8697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11855'. [ 662.701016][ T8688] netlink: 81 bytes leftover after parsing attributes in process `syz.1.11853'. [ 662.861876][ T8709] loop4: detected capacity change from 0 to 256 [ 662.986805][ T8709] exfat: Deprecated parameter 'namecase' [ 662.992685][ T8709] exfat: Deprecated parameter 'namecase' [ 663.063102][ T8709] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 663.099896][ T8730] netlink: 'syz.0.11869': attribute type 21 has an invalid length. [ 663.141040][ T8730] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11869'. [ 663.166278][ T8730] netlink: 'syz.0.11869': attribute type 4 has an invalid length. [ 663.178454][ T8709] exFAT-fs (loop4): invalid start cluster (4278190088) [ 663.189515][ T8730] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11869'. [ 663.201551][ T8737] x_tables: duplicate underflow at hook 1 [ 663.403331][ T8750] netlink: 'syz.4.11875': attribute type 4 has an invalid length. [ 663.607644][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11881'. [ 663.844782][ T8793] x_tables: duplicate underflow at hook 3 [ 663.925815][ T8801] program syz.3.11893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.938861][ T8804] netlink: 'syz.4.11895': attribute type 5 has an invalid length. [ 664.063980][ T8814] loop3: detected capacity change from 0 to 1024 [ 664.116028][ T8814] EXT4-fs (loop3): unsupported inode size: 143 [ 664.126599][ T8814] EXT4-fs (loop3): blocksize: 1024 [ 664.155998][ T4426] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 664.233397][ T4181] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 664.546242][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 664.586472][ T4426] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 664.602585][ T8836] loop1: detected capacity change from 0 to 4096 [ 664.607157][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 664.616591][ T4181] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.631198][ T4426] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 664.641653][ T4181] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.657482][ T4426] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 664.666352][ T4181] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 664.677577][ T4426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.687213][ T4426] usb 3-1: config 0 descriptor?? [ 664.699002][ T4181] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 664.709484][ T4181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.736391][ T8805] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 664.757432][ T4181] hub 1-1:1.0: bad descriptor, ignoring hub [ 664.763420][ T4181] hub: probe of 1-1:1.0 failed with error -5 [ 664.780633][ T4181] cdc_wdm 1-1:1.0: skipping garbage [ 664.790913][ T4181] cdc_wdm 1-1:1.0: skipping garbage [ 664.836092][ T4181] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 664.866088][ T4181] cdc_wdm 1-1:1.0: Unknown control protocol [ 664.890539][ T8836] ntfs: volume version 3.1. [ 664.972826][ T4426] hdpvr 3-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 665.014802][ T8814] loop3: detected capacity change from 0 to 32768 [ 665.051811][ T8814] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop3 scanned by syz.3.11897 (8814) [ 665.076540][ T4181] usb 1-1: USB disconnect, device number 61 [ 665.121735][ T8860] loop4: detected capacity change from 0 to 764 [ 665.149077][ T8814] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 665.179117][ T8814] BTRFS info (device loop3): max_inline at 160 [ 665.196000][ T4426] hdpvr 3-1:0.0: device init failed [ 665.197500][ T8814] BTRFS info (device loop3): unrecognized rescue option 'isuperflags' [ 665.202053][ T4426] hdpvr: probe of 3-1:0.0 failed with error -12 [ 665.218566][ T8814] BTRFS error (device loop3): unrecognized rescue value isuperflags [ 665.227474][ T8860] rock: directory entry would overflow storage [ 665.233730][ T8860] rock: sig=0x5850, size=36, remaining=22 [ 665.287734][ T4426] usb 3-1: USB disconnect, device number 57 [ 665.305695][ T4636] __ntfs_error: 9 callbacks suppressed [ 665.305713][ T4636] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 665.392172][ T5917] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop3 scanned by udevd (5917) [ 665.404370][ T8814] BTRFS error (device loop3): open_ctree failed: -22 [ 665.906067][ T4426] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 665.979880][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 666.166566][ T4426] usb 2-1: Using ep0 maxpacket: 16 [ 666.476343][ T4426] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 666.485551][ T4426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.534629][ T4426] usb 2-1: Product: syz [ 666.565894][ T4426] usb 2-1: Manufacturer: syz [ 666.570593][ T4426] usb 2-1: SerialNumber: syz [ 666.617632][ T4426] usb 2-1: config 0 descriptor?? [ 666.658002][ T4426] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 666.720885][ T8902] loop4: detected capacity change from 0 to 32768 [ 666.866245][ T4426] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 666.885384][ T4426] visor: probe of 2-1:0.0 failed with error -5 [ 666.891824][ T7] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 666.901388][ T8902] JBD2: Ignoring recovery information on journal [ 666.989413][ T8973] loop3: detected capacity change from 0 to 4096 [ 667.011189][ T8902] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 667.078800][ T8902] ocfs2: Unmounting device (7,4) on (node local) [ 667.090167][ T1108] usb 2-1: USB disconnect, device number 59 [ 667.156029][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 667.187650][ T8973] ntfs: volume version 3.1. [ 667.222070][ T4426] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 667.330796][ T7] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 667.349188][ T7] usb 1-1: config 1 has no interface number 0 [ 667.355346][ T7] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.372941][ T3091] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 667.396026][ T7] usb 1-1: config 1 interface 19 has no altsetting 0 [ 667.496596][ T4426] usb 3-1: Using ep0 maxpacket: 8 [ 667.586545][ T7] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 667.595692][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.630267][ T7] usb 1-1: Product: syz [ 667.634989][ T7] usb 1-1: Manufacturer: syz [ 667.642227][ T9009] device netdevsim0 left promiscuous mode [ 667.656428][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 667.669075][ T7] usb 1-1: SerialNumber: syz [ 667.669080][ T9009] device geneve2 left promiscuous mode [ 667.686052][ T4426] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 667.738333][ T9009] device ip6gretap2 left promiscuous mode [ 667.753759][ T7] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 667.764601][ T9009] device vti1 left promiscuous mode [ 667.780624][ T9009] device bond4 left promiscuous mode [ 667.843837][ T9025] loop3: detected capacity change from 0 to 256 [ 667.866817][ T4426] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 667.887598][ T4426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.922449][ T9025] FAT-fs (loop3): Directory bread(block 64) failed [ 667.956205][ T9025] FAT-fs (loop3): Directory bread(block 65) failed [ 667.971902][ T4426] usb 3-1: Product: syz [ 667.986367][ T154] usb 1-1: Failed to submit usb control message: -71 [ 667.986528][ T4426] usb 3-1: Manufacturer: syz [ 667.994279][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 668.016304][ T9025] FAT-fs (loop3): Directory bread(block 66) failed [ 668.036926][ T4426] usb 3-1: SerialNumber: syz [ 668.056291][ T9025] FAT-fs (loop3): Directory bread(block 67) failed [ 668.058130][ T4426] usb 3-1: config 0 descriptor?? [ 668.063012][ T154] usb 1-1: unable to get target info from device [ 668.087753][ T7] usb 1-1: USB disconnect, device number 62 [ 668.094997][ T9025] FAT-fs (loop3): Directory bread(block 68) failed [ 668.105719][ T154] usb 1-1: could not get target info (-71) [ 668.125356][ T154] usb 1-1: could not probe fw (-71) [ 668.131335][ T9025] FAT-fs (loop3): Directory bread(block 69) failed [ 668.154488][ T9025] FAT-fs (loop3): Directory bread(block 70) failed [ 668.171617][ T9025] FAT-fs (loop3): Directory bread(block 71) failed [ 668.191284][ T9025] FAT-fs (loop3): Directory bread(block 72) failed [ 668.201109][ T9025] FAT-fs (loop3): Directory bread(block 73) failed [ 668.364478][ T4426] usb 3-1: USB disconnect, device number 58 [ 668.645903][ T9084] xt_bpf: check failed: parse error [ 668.653828][ T9086] xt_hashlimit: overflow, try lower: 18446744073709551615/0 [ 668.892647][ T9110] loop4: detected capacity change from 0 to 512 [ 668.984471][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11973'. [ 669.007113][ T9113] netlink: 540 bytes leftover after parsing attributes in process `syz.3.11973'. [ 669.067158][T26413] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 669.108603][ T9110] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 669.126645][ T9110] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 669.164267][ T9110] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.11971: Failed to acquire dquot type 1 [ 669.209262][ T9110] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 669.238457][ T9110] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 669.306956][ T9110] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.11971: Failed to acquire dquot type 1 [ 669.334344][ T9140] loop3: detected capacity change from 0 to 256 [ 669.346549][T26413] usb 2-1: Using ep0 maxpacket: 8 [ 669.355297][ T9110] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.11971: bg 0: block 248: padding at end of block bitmap is not set [ 669.406983][ T9110] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 669.466706][T26413] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 669.468813][ T9110] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 669.474951][T26413] usb 2-1: config 0 has no interface number 0 [ 669.537047][ T9110] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 669.572685][T26413] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 669.577224][ T9110] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.11971: Failed to acquire dquot type 1 [ 669.624562][T26413] usb 2-1: config 0 interface 200 has no altsetting 0 [ 669.635114][ T9110] EXT4-fs (loop4): 1 orphan inode deleted [ 669.666206][ T9110] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 669.758855][ T9160] netlink: 'syz.3.11985': attribute type 12 has an invalid length. [ 669.786953][ T9110] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.11971: deleted inode referenced: 12 [ 669.806619][T26413] usb 2-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 669.825024][T26413] usb 2-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 669.854315][T26413] usb 2-1: Product: syz [ 669.859189][T26413] usb 2-1: Manufacturer: syz [ 669.864206][T26413] usb 2-1: SerialNumber: syz [ 669.883564][T26413] usb 2-1: config 0 descriptor?? [ 669.953450][ T9169] loop0: detected capacity change from 0 to 2048 [ 670.110633][ T9169] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 670.171858][ T9096] udc-core: couldn't find an available UDC or it's busy [ 670.179754][ T9169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 670.196865][ T9096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.277421][T26413] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 670.326579][T26413] usb 2-1: USB disconnect, device number 60 [ 670.472631][ T9220] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.12004'. [ 670.622522][ T9235] device wlan0 entered promiscuous mode [ 670.786651][ T7] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 671.236681][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12022'. [ 671.320635][ T9201] loop4: detected capacity change from 0 to 32768 [ 671.336630][ T7] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 671.361253][ T7] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 671.386736][ T7] usb 4-1: Product: syz [ 671.399610][ T7] usb 4-1: SerialNumber: syz [ 671.417617][ T7] usb 4-1: config 0 descriptor?? [ 671.450626][ T4426] kernel write not supported for file /input/mice (pid: 4426 comm: kworker/0:9) [ 671.496509][ T9201] XFS (loop4): Mounting V5 Filesystem [ 671.733070][ T9201] XFS (loop4): Ending clean mount [ 671.916583][ T4205] XFS (loop4): Unmounting Filesystem [ 671.933114][ T4426] usb 4-1: USB disconnect, device number 57 [ 672.103787][ T9337] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12041'. [ 672.200481][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12043'. [ 672.711750][ T9325] loop1: detected capacity change from 0 to 32768 [ 672.856178][ T9325] JBD2: Ignoring recovery information on journal [ 672.867118][ T7] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 673.049483][ T9325] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 673.119752][ T9325] ocfs2: Unmounting device (7,1) on (node local) [ 673.326904][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.377065][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 40203, setting to 64 [ 673.418930][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 673.585859][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.612847][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 673.643767][ T7] usb 3-1: SerialNumber: syz [ 673.707158][ T9364] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 673.727545][ T7] hub 3-1:1.0: bad descriptor, ignoring hub [ 673.736838][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12073'. [ 673.744206][ T7] hub: probe of 3-1:1.0 failed with error -5 [ 673.770522][ T9459] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 673.781171][ T7] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 673.937697][ T7] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 673.975831][ T9478] netlink: 'syz.4.12081': attribute type 25 has an invalid length. [ 673.989080][ T7] usb 3-1: USB disconnect, device number 59 [ 674.006724][ T9478] netlink: 'syz.4.12081': attribute type 3 has an invalid length. [ 674.014604][ T9478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12081'. [ 674.046587][ T13] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 674.126376][ T9488] netlink: get zone limit has 4 unknown bytes [ 674.264835][ T9498] loop3: detected capacity change from 0 to 164 [ 674.276368][ T9500] loop4: detected capacity change from 0 to 256 [ 674.319739][ T9500] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 674.376742][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 674.476945][ T4426] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 674.686726][ T13] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 674.707402][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.715467][ T13] usb 1-1: Product: syz [ 674.736535][ T4426] usb 2-1: Using ep0 maxpacket: 8 [ 674.762541][ T13] usb 1-1: Manufacturer: syz [ 674.787448][ T13] usb 1-1: SerialNumber: syz [ 674.805428][ T9532] netlink: 'syz.4.12096': attribute type 3 has an invalid length. [ 674.810373][ T13] r8152-cfgselector 1-1: config 0 descriptor?? [ 674.836298][ T9532] netlink: 'syz.4.12096': attribute type 1 has an invalid length. [ 674.867943][ T13] hub 1-1:0.0: bad descriptor, ignoring hub [ 674.878118][ T13] hub: probe of 1-1:0.0 failed with error -5 [ 674.886962][ T4426] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 674.927029][ T4426] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 675.106999][ T13] r8152-cfgselector 1-1: Unknown version 0x0000 [ 675.127157][ T4426] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 675.136301][ T4426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.184314][ T4426] usb 2-1: Product: syz [ 675.192078][ T4426] usb 2-1: Manufacturer: syz [ 675.215856][ T4426] usb 2-1: SerialNumber: syz [ 675.239020][ T4426] usb 2-1: config 0 descriptor?? [ 675.269291][ T9564] netlink: 'syz.3.12106': attribute type 1 has an invalid length. [ 675.290326][ T9564] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12106'. [ 675.317091][ T13] r8152-cfgselector 1-1: Unknown version 0x0000 [ 675.325425][ T13] r8152-cfgselector 1-1: bad CDC descriptors [ 675.377294][ T13] r8152-cfgselector 1-1: Unknown version 0x0000 [ 675.428729][ T13] r8152-cfgselector 1-1: USB disconnect, device number 63 [ 675.613352][ T9591] loop3: detected capacity change from 0 to 256 [ 675.654197][ T9597] netlink: 'syz.2.12114': attribute type 8 has an invalid length. [ 675.666368][ T9597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12114'. [ 675.713046][ T9591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 675.765751][ T13] usb 2-1: USB disconnect, device number 61 [ 676.195185][ T9639] loop4: detected capacity change from 0 to 128 [ 676.289015][ T9639] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 676.345805][ T9652] loop0: detected capacity change from 0 to 2048 [ 676.367399][ T9639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.492484][ T9663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 676.758138][ T9686] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.12140'. [ 676.789131][ T9689] netlink: 288 bytes leftover after parsing attributes in process `syz.0.12139'. [ 676.977104][T26413] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 677.342338][ T9728] loop3: detected capacity change from 0 to 1024 [ 677.437162][ T9728] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 677.517015][T26413] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 677.536394][T26413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.586721][T26413] usb 2-1: Product: syz [ 677.596552][T26413] usb 2-1: Manufacturer: syz [ 677.609152][T26413] usb 2-1: SerialNumber: syz [ 677.657300][T26413] r8152-cfgselector 2-1: config 0 descriptor?? [ 677.782116][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12166'. [ 677.827459][ T9763] device vlan0 entered promiscuous mode [ 677.847886][ T4426] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 678.040733][ T9774] loop3: detected capacity change from 0 to 512 [ 678.140885][T26413] r8152-cfgselector 2-1: Unknown version 0x0000 [ 678.163262][T26413] r8152-cfgselector 2-1: bad CDC descriptors [ 678.179259][ T9774] EXT4-fs (loop3): 1 truncate cleaned up [ 678.187348][ T9774] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 678.227582][T26413] r8152-cfgselector 2-1: Unknown version 0x0000 [ 678.234889][ T9774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.12171: bg 0: block 465: padding at end of block bitmap is not set [ 678.252571][ T4426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 678.264224][T26413] r8152-cfgselector 2-1: USB disconnect, device number 62 [ 678.275101][ T4426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 678.286185][ T4426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8196, setting to 1024 [ 678.297331][ T9774] EXT4-fs (loop3): Remounting filesystem read-only [ 678.305001][ T9774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 678.324391][ T9774] EXT4-fs (loop3): Remounting filesystem read-only [ 678.343191][ T9774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.12171: invalid indirect mapped block 234881024 (level 0) [ 678.373548][ T25] audit: type=1400 audit(524963.634:113): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9796 comm="syz.4.12176" [ 678.407610][ T9774] EXT4-fs (loop3): Remounting filesystem read-only [ 678.457047][ T13] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 678.538116][ T4426] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 678.587993][ T4426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.596076][ T4426] usb 1-1: Product: syz [ 678.605982][ T4426] usb 1-1: Manufacturer: syz [ 678.611167][ T4426] usb 1-1: SerialNumber: syz [ 678.643166][ T4426] usb 1-1: config 0 descriptor?? [ 678.698556][ T4426] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 678.726596][ T4426] usb 1-1: Detected SIO [ 678.731417][ T4426] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 678.778285][ T4426] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 678.859724][ T13] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 678.870036][ T9836] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12186'. [ 678.887079][ T13] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 678.928019][ T13] usb 3-1: config 8 has no interface number 0 [ 678.934213][ T13] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 679.017583][ T13] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 679.066608][ T13] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 679.087634][ T13] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 679.111260][ T13] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 679.146682][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.170858][ T4426] usb 1-1: USB disconnect, device number 64 [ 679.198455][ T4426] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 679.227812][ T13] usb 3-1: NFC: intf ffff88802c0ea000 id ffffffff8cb61620 [ 679.265954][ T4426] ftdi_sio 1-1:0.0: device disconnected [ 679.314377][ T9876] netlink: 'syz.3.12195': attribute type 1 has an invalid length. [ 679.476457][ T13] usb 3-1: USB disconnect, device number 60 [ 679.856298][ T9920] loop0: detected capacity change from 0 to 4096 [ 679.983543][ T9920] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 680.155031][ T155] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 680.196287][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 680.212966][ T1956] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 680.233227][ T4192] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 680.272406][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 680.298461][ T4636] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 680.314028][ T4192] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 680.506865][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 680.627070][ T1956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.649391][ T1956] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.807071][ T1956] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 680.845565][ T1956] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 680.860634][ T1956] usb 5-1: Product: syz [ 680.864994][ T1956] usb 5-1: Manufacturer: syz [ 680.873639][ T1956] usb 5-1: SerialNumber: syz [ 680.942215][ T1956] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input46 [ 681.050893][T26410] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 681.067148][ T4426] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 681.213785][ T1956] usb 5-1: USB disconnect, device number 69 [ 681.226830][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 681.272616][ T1956] appletouch 5-1:1.0: input: appletouch disconnected [ 681.357037][ T4426] usb 3-1: Using ep0 maxpacket: 16 [ 681.427059][T26410] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 681.435736][T26410] usb 2-1: config 0 has no interface number 0 [ 681.451568][T26410] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 681.465872][T26410] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.507117][ T4426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.546956][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 681.590258][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 681.602474][T10062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.632374][ T4426] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 681.647062][T26410] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 681.662822][T26410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.681626][T26410] usb 2-1: Product: syz [ 681.685857][T26410] usb 2-1: Manufacturer: syz [ 681.692489][T26410] usb 2-1: SerialNumber: syz [ 681.701710][T26410] usb 2-1: config 0 descriptor?? [ 681.727351][ T9995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 681.755497][T26410] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 681.767604][ T4426] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 681.785177][T26410] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 681.789723][ T4426] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 681.832257][ T4426] usb 3-1: Manufacturer: syz [ 681.859103][ T4426] usb 3-1: config 0 descriptor?? [ 681.997388][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 682.133903][ T4426] usb 3-1: USB disconnect, device number 61 [ 682.192741][ T13] usb 2-1: USB disconnect, device number 63 [ 682.231951][ T13] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 682.269400][ T13] cyberjack 2-1:0.69: device disconnected [ 682.495339][T10142] xt_addrtype: ipv6 does not support BROADCAST matching [ 682.728035][T10163] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 682.776299][T10163] overlayfs: missing 'lowerdir' [ 682.831771][T10171] loop4: detected capacity change from 0 to 256 [ 682.896625][T10182] x_tables: unsorted underflow at hook 4 [ 682.904113][T10171] exfat: Deprecated parameter 'namecase' [ 682.916938][T10171] exfat: Deprecated parameter 'namecase' [ 683.003701][T10171] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 683.096946][ T4426] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 683.268274][T10203] tc_dump_action: action bad kind [ 683.361316][T10217] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 683.390634][T10219] device ipvlan1 entered promiscuous mode [ 683.427649][T10219] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12294'. [ 683.643951][T10237] PKCS8: Unsupported PKCS#8 version [ 683.667481][ T4426] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 683.707728][ T4426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.715836][ T4426] usb 1-1: Product: syz [ 683.756988][ T4426] usb 1-1: Manufacturer: syz [ 683.778838][ T4426] usb 1-1: SerialNumber: syz [ 683.878071][ T4426] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 684.178428][T10282] loop4: detected capacity change from 0 to 16 [ 684.200389][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12315'. [ 684.210341][ T4424] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 684.234970][T10282] erofs: (device loop4): mounted with root inode @ nid 36. [ 684.333243][T10294] loop1: detected capacity change from 0 to 256 [ 684.497157][ T13] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 684.517312][ T4424] usb 3-1: Using ep0 maxpacket: 32 [ 684.536145][T10308] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12322'. [ 684.571296][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12322'. [ 684.607643][T10310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12320'. [ 684.678038][T10310] batman_adv: Cannot find parent device [ 684.718094][ T4424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.892939][T10342] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12331'. [ 684.959467][ T7] usb 1-1: USB disconnect, device number 65 [ 684.982108][ T4424] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 684.999074][ T4424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.016560][ T4424] usb 3-1: Product: syz [ 685.022261][ T4424] usb 3-1: Manufacturer: syz [ 685.035187][ T4424] usb 3-1: SerialNumber: syz [ 685.078886][T10356] netlink: 'syz.1.12334': attribute type 10 has an invalid length. [ 685.169523][T10356] device veth0_vlan left promiscuous mode [ 685.185594][T10356] device veth0_vlan entered promiscuous mode [ 685.197394][ T4426] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 685.210894][T10356] team0: Device veth0_vlan failed to register rx_handler [ 685.338600][ T4424] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 685.377154][ T4424] snd-usb-audio: probe of 3-1:1.1 failed with error -71 [ 685.425340][ T4424] snd-usb-audio: probe of 3-1:1.2 failed with error -71 [ 685.445681][ T4424] usb 3-1: USB disconnect, device number 62 [ 685.537812][ T13] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 685.565449][ T13] ath9k_htc: Failed to initialize the device [ 685.596192][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 685.637173][ T4426] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 685.645387][ T4426] usb 4-1: config 0 has no interface number 0 [ 685.672210][ T4426] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 685.721575][ T4426] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.753619][T10403] loop1: detected capacity change from 0 to 24 [ 685.837137][T10403] romfs: read error for inode 0x8000 [ 685.937586][ T4426] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 685.957142][ T4426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.981860][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12350'. [ 686.001554][ T4426] usb 4-1: Product: syz [ 686.005875][ T4426] usb 4-1: Manufacturer: syz [ 686.027162][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12350'. [ 686.037196][ T4426] usb 4-1: SerialNumber: syz [ 686.052978][ T4426] usb 4-1: config 0 descriptor?? [ 686.089118][T10346] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 686.108637][ T4426] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 686.129418][ T4426] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 686.157005][ T7] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 686.344053][T10449] loop1: detected capacity change from 0 to 256 [ 686.351520][T10450] gretap0: refused to change device tx_queue_len [ 686.425032][ T25] audit: type=1800 audit(524971.684:114): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12357" name="bus" dev="loop1" ino=1048640 res=0 errno=0 [ 686.452789][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 686.473181][T10457] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12361'. [ 686.579991][T10466] tmpfs: Bad value for 'mpol' [ 686.607352][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 686.636167][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 686.677905][ T4424] usb 4-1: USB disconnect, device number 58 [ 686.717718][ T4424] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 686.734655][T10475] SET target dimension over the limit! [ 686.743025][ T4424] cyberjack 4-1:0.69: device disconnected [ 686.794336][T10487] xt_hashlimit: max too large, truncated to 1048576 [ 686.830338][T10488] netlink: 92 bytes leftover after parsing attributes in process `syz.2.12368'. [ 686.840081][ T7] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 686.856166][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.885236][ T7] usb 1-1: Product: syz [ 686.890141][ T7] usb 1-1: Manufacturer: syz [ 686.894857][ T7] usb 1-1: SerialNumber: syz [ 686.921703][ T7] usb 1-1: config 0 descriptor?? [ 687.296298][T10524] ipt_REJECT: ECHOREPLY no longer supported. [ 687.419481][ T1956] usb 1-1: USB disconnect, device number 66 [ 687.487024][T10536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 687.494476][T10536] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.533738][T10544] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 687.540322][T10544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 687.603411][T10536] vhci_hcd vhci_hcd.0: Device attached [ 687.647098][T10544] vhci_hcd vhci_hcd.0: Device attached [ 687.711924][T10545] vhci_hcd: connection closed [ 687.740398][T25572] vhci_hcd: stop threads [ 687.765199][T25572] vhci_hcd: release socket [ 687.781130][T10537] vhci_hcd: connection closed [ 687.784675][T25572] vhci_hcd: disconnect device [ 687.819709][T25572] vhci_hcd: stop threads [ 687.825369][T25572] vhci_hcd: release socket [ 687.850583][T25572] vhci_hcd: disconnect device [ 688.490623][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12412'. [ 689.177908][T10679] ipt_rpfilter: unknown options [ 689.187130][ T7] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 689.467289][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 689.475764][T10698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12437'. [ 689.647339][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 689.757299][ T7] usb 1-1: config 4 has an invalid interface number: 206 but max is 1 [ 689.765549][ T7] usb 1-1: config 4 has an invalid interface number: 194 but max is 1 [ 689.813071][ T7] usb 1-1: config 4 has no interface number 0 [ 689.851934][ T7] usb 1-1: config 4 has no interface number 1 [ 689.877028][ T7] usb 1-1: config 4 interface 206 has no altsetting 0 [ 689.916986][ T7] usb 1-1: config 4 interface 194 has no altsetting 0 [ 689.960891][T10734] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 690.087391][T10747] netlink: 'syz.2.12454': attribute type 7 has an invalid length. [ 690.107803][ T7] usb 1-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=ca.17 [ 690.134743][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.152570][ T7] usb 1-1: Product: syz [ 690.193143][ T7] usb 1-1: Manufacturer: syz [ 690.202686][ T7] usb 1-1: SerialNumber: syz [ 690.473605][T10781] loop3: detected capacity change from 0 to 16 [ 690.493763][T10783] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12466'. [ 690.518410][T10781] erofs: (device loop3): mounted with root inode @ nid 36. [ 690.569970][ T4424] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 690.611679][ T7] usb 1-1: USB disconnect, device number 67 [ 690.847276][ T4424] usb 5-1: Using ep0 maxpacket: 8 [ 690.884824][T10815] x_tables: duplicate underflow at hook 4 [ 690.987394][ T4424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.007090][ T4424] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 691.023941][ T4424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.045017][ T4424] usb 5-1: config 0 descriptor?? [ 691.119484][ T4424] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 691.126425][ T4424] usb 5-1: No valid video chain found. [ 691.342885][ T4424] usb 5-1: USB disconnect, device number 70 [ 692.223179][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12514'. [ 692.676745][T10983] netlink: 'syz.4.12531': attribute type 30 has an invalid length. [ 692.719090][ T25] audit: type=1107 audit(524977.984:115): pid=10988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 692.821819][ T1423] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 693.360644][T11042] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12552'. [ 693.501271][T11064] device bridge8 entered promiscuous mode [ 693.507920][T11058] comedi comedi1: dt2817: I/O port conflict (0xfffffffffffffffd,5) [ 693.925565][T11118] netlink: 344 bytes leftover after parsing attributes in process `syz.1.12574'. [ 694.037170][ T4424] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 694.047266][ T4181] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 694.337425][ T4424] usb 3-1: Using ep0 maxpacket: 8 [ 694.377572][ T4424] usb 3-1: too many configurations: 249, using maximum allowed: 8 [ 694.407524][ T4181] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 694.415890][ T4181] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 694.474630][ T4181] usb 5-1: config 220 has no interface number 2 [ 694.503791][ T4181] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 694.576848][ T4181] usb 5-1: config 220 interface 0 has no altsetting 0 [ 694.625630][ T4181] usb 5-1: config 220 interface 76 has no altsetting 0 [ 694.656875][ T4181] usb 5-1: config 220 interface 1 has no altsetting 0 [ 694.761122][T11169] autofs4:pid:11169:autofs_fill_super: called with bogus options [ 694.797304][T11161] loop1: detected capacity change from 0 to 4096 [ 694.837503][ T4181] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 694.846667][ T4181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.906335][T11178] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 694.907543][ T4181] usb 5-1: Product: syz [ 694.943836][ T4181] usb 5-1: Manufacturer: syz [ 694.975819][ T4181] usb 5-1: SerialNumber: syz [ 694.995762][T11161] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 695.041254][T11161] ntfs3: loop1: Failed to load $Extend. [ 695.307835][ T4424] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 695.338607][ T4424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 695.357645][ T4181] usb 5-1: selecting invalid altsetting 0 [ 695.364071][ T4181] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 695.369302][ T4424] usb 3-1: Product: syz [ 695.374636][ T4424] usb 3-1: Manufacturer: syz [ 695.412709][ T4424] usb 3-1: SerialNumber: syz [ 695.418720][ T4181] usb 5-1: No valid video chain found. [ 695.438181][ T4424] usb 3-1: config 0 descriptor?? [ 695.480689][ T4181] usb 5-1: selecting invalid altsetting 0 [ 695.486577][ T4181] usbtest: probe of 5-1:220.1 failed with error -22 [ 695.510984][T11224] sock: sock_timestamping_bind_phc: sock not bind to device [ 695.528432][ T4181] usb 5-1: USB disconnect, device number 71 [ 695.715634][T11094] udc-core: couldn't find an available UDC or it's busy [ 695.755071][T11094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.785029][T11248] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12615'. [ 695.828472][ T4424] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration [ 695.856173][ T4424] usb 3-1: USB disconnect, device number 63 [ 695.933348][T11248] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12615'. [ 696.334588][ T7] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 696.623591][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 696.698461][ T4424] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 696.768181][ T7] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 696.897354][ T4181] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 696.967665][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 696.992983][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.017400][ T7] usb 1-1: Product: syz [ 697.021621][ T7] usb 1-1: Manufacturer: syz [ 697.036031][T11376] loop1: detected capacity change from 0 to 16 [ 697.047753][ T7] usb 1-1: SerialNumber: syz [ 697.058402][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 697.102786][T11376] erofs: (device loop1): mounted with root inode @ nid 36. [ 697.154625][ T4424] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.175253][ T4424] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 697.192990][ T4424] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 697.205913][ T4424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.241182][ T4424] usb 3-1: config 0 descriptor?? [ 697.344010][T11400] loop1: detected capacity change from 0 to 512 [ 697.428195][ T4181] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 697.456599][ T4181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.466071][T11400] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpjquota=,,errors=continue. Quota mode: writeback. [ 697.477288][ T4181] usb 5-1: Product: syz [ 697.482742][ T4181] usb 5-1: Manufacturer: syz [ 697.487491][ T4181] usb 5-1: SerialNumber: syz [ 697.494841][ T4181] usb 5-1: config 0 descriptor?? [ 697.548355][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 697.561572][ T7] r8152-cfgselector 1-1: bad CDC descriptors [ 697.592054][T11420] nfs: Deprecated parameter 'nointr' [ 697.622752][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 697.650730][ T7] r8152-cfgselector 1-1: USB disconnect, device number 68 [ 697.658748][T11425] tc_dump_action: action bad kind [ 697.727331][T11433] netlink: 'syz.3.12654': attribute type 2 has an invalid length. [ 697.737458][ T4424] Bluetooth: Can't get version to change to load ram patch err [ 697.755403][ T4424] Bluetooth: Loading patch file failed [ 697.761803][ T4424] ath3k: probe of 3-1:0.0 failed with error -71 [ 697.769918][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12654'. [ 697.785372][ T4424] usb 3-1: USB disconnect, device number 64 [ 697.790122][ T4181] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v23 fw v38.6.0 (1 channels) [ 697.926235][T11449] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 697.939280][T11449] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 698.017319][ T4181] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 698.037283][ T4181] peak_usb 5-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 698.157615][ T4181] peak_usb: probe of 5-1:0.0 failed with error -71 [ 698.180046][ T4181] usb 5-1: USB disconnect, device number 72 [ 699.104692][T11535] loop0: detected capacity change from 0 to 4096 [ 699.128740][T11552] loop3: detected capacity change from 0 to 128 [ 699.201858][T11535] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 699.508112][T11582] rdma_rxe: rxe_register_device failed with error -23 [ 699.545670][T11582] rdma_rxe: failed to add batadv_slave_0 [ 699.639470][T11592] netlink: 'syz.2.12698': attribute type 21 has an invalid length. [ 699.656860][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12698'. [ 699.666656][ T7] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 699.758113][T11597] libceph: resolve '0' (ret=-3): failed [ 700.107487][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.135148][T11629] loop4: detected capacity change from 0 to 128 [ 700.148438][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.260599][T11629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 700.277519][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 700.296601][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 700.315144][ T7] usb 2-1: SerialNumber: syz [ 700.612341][ T7] usb 2-1: 0:2 : does not exist [ 700.658272][ T7] usb 2-1: USB disconnect, device number 64 [ 700.667650][ T4426] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 700.739043][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.797348][T11680] loop3: detected capacity change from 0 to 2048 [ 700.873395][T11680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 700.895775][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12726'. [ 700.914260][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12726'. [ 701.076144][T11708] netlink: 'syz.3.12727': attribute type 1 has an invalid length. [ 701.098662][ T4426] usb 3-1: not running at top speed; connect to a high speed hub [ 701.214509][ T4426] usb 3-1: config 88 has an invalid interface number: 11 but max is 0 [ 701.227423][ T4426] usb 3-1: config 88 has no interface number 0 [ 701.251201][ T4426] usb 3-1: config 88 interface 11 has no altsetting 0 [ 701.447593][ T4426] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 701.464856][ T4426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.493622][ T4426] usb 3-1: Product: syz [ 701.503755][ T4426] usb 3-1: Manufacturer: syz [ 701.517224][ T4426] usb 3-1: SerialNumber: syz [ 701.544147][T11743] loop4: detected capacity change from 0 to 24 [ 701.619326][T11754] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12744'. [ 701.630826][T11752] netlink: 'syz.0.12743': attribute type 10 has an invalid length. [ 701.765846][T11752] team0: Device wg1 is of different type [ 701.827486][ T13] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 701.852451][ T4426] usb 3-1: USB disconnect, device number 65 [ 702.218706][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.247277][ T13] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 702.271178][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.296731][ T13] usb 4-1: config 0 descriptor?? [ 702.308916][T11803] loop0: detected capacity change from 0 to 1024 [ 702.345734][T11803] EXT4-fs (loop0): Ignoring removed bh option [ 702.352348][ T1956] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 702.379289][ T13] gspca_main: spca501-2.14.0 probing 0000:0000 [ 702.437399][T11803] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.12757: lblock 2 mapped to illegal pblock 2 (length 1) [ 702.549707][T11803] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 702.561120][T11823] team0: Port device macvlan0 removed [ 702.597221][T11803] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.12757: lblock 0 mapped to illegal pblock 48 (length 1) [ 702.611916][ T1956] usb 5-1: Using ep0 maxpacket: 16 [ 702.678674][T11803] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 702.708846][T11803] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.12757: Failed to acquire dquot type 0 [ 702.754835][T11803] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 702.777498][ T1956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 702.797547][ T13] gspca_spca501: reg write: error -71 [ 702.803125][ T13] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 702.807029][T11803] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.12757: mark_inode_dirty error [ 702.861228][ T13] spca501: probe of 4-1:0.0 failed with error -22 [ 702.867790][ T1956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.867919][ T1956] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.867950][ T1956] usb 5-1: config 1 interface 1 has no altsetting 0 [ 702.888564][T11803] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 702.926703][T11803] EXT4-fs (loop0): 1 orphan inode deleted [ 702.937627][T25572] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 702.947954][ T13] usb 4-1: USB disconnect, device number 59 [ 702.967392][T11803] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 703.037456][ T1956] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 703.046689][T25572] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 703.058794][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 703.079557][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.100029][ T1956] usb 5-1: Product: syz [ 703.104256][ T1956] usb 5-1: Manufacturer: syz [ 703.115154][T25572] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 703.137070][ T1956] usb 5-1: SerialNumber: syz [ 703.191671][T25572] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 703.214506][T25572] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 703.223483][T25572] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 703.238663][ T4192] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 703.267017][ T4192] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 703.287029][ T4192] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 703.449787][ T1956] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 703.477439][ T1956] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 703.671582][ T1956] usb 5-1: USB disconnect, device number 73 [ 703.807420][T26410] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 704.005454][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.077409][T26410] usb 2-1: Using ep0 maxpacket: 8 [ 704.199470][T26410] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 704.211090][ T25] audit: type=1326 audit(524989.473:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.2.12787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467b098e59 code=0x7ffc0000 [ 704.217603][T26410] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 704.267277][ T7] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 704.287945][T26410] usb 2-1: config 3 has no interface number 0 [ 704.294115][T26410] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.310144][ T25] audit: type=1326 audit(524989.513:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.2.12787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f467b098e59 code=0x7ffc0000 [ 704.364811][T26410] usb 2-1: config 3 interface 45 has no altsetting 0 [ 704.460258][ T25] audit: type=1326 audit(524989.513:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.2.12787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467b098e59 code=0x7ffc0000 [ 704.525710][T11983] vxcan1 speed is unknown, defaulting to 1000 [ 704.547721][T26410] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 704.565588][ T25] audit: type=1326 audit(524989.513:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.2.12787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467b098e59 code=0x7ffc0000 [ 704.583532][T11996] loop0: detected capacity change from 0 to 2048 [ 704.596388][T26410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.613623][T26410] usb 2-1: Product: syz [ 704.627794][T26410] usb 2-1: Manufacturer: syz [ 704.642877][T26410] usb 2-1: SerialNumber: syz [ 704.708518][ T7] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 704.747467][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.766458][ T7] usb 4-1: config 0 descriptor?? [ 704.773613][T11996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 704.808721][ T7] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 704.828362][ T7] usb 4-1: Detected FT-X [ 705.025914][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 705.058546][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 705.097368][ T7] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 705.115044][ T7] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 705.129842][T26410] usb 2-1: USB disconnect, device number 65 [ 705.167453][ T7] usb 4-1: USB disconnect, device number 60 [ 705.199012][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 705.250729][ T7] ftdi_sio 4-1:0.0: device disconnected [ 705.515063][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.685951][T12093] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 705.859173][T11983] lo speed is unknown, defaulting to 1000 [ 705.943156][T12111] loop1: detected capacity change from 0 to 128 [ 705.989316][T12111] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 706.017333][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12812'. [ 706.043402][T12111] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 706.071192][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12812'. [ 706.111950][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12812'. [ 706.334342][T12139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.341668][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 706.349035][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 706.623222][T12181] loop3: detected capacity change from 0 to 64 [ 707.390917][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12848'. [ 707.427367][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12848'. [ 707.440999][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12848'. [ 707.647748][T12276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.727040][ T25] audit: type=1400 audit(524992.983:120): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=12282 comm="syz.4.12857" [ 707.889546][T12298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12863'. [ 708.079924][T12316] loop0: detected capacity change from 0 to 512 [ 708.182574][T12316] EXT4-fs (loop0): Ignoring removed nobh option [ 708.289467][T12335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.316811][T12316] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 708.370226][T12316] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12868: invalid indirect mapped block 256 (level 1) [ 708.397309][T12316] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12868: invalid indirect mapped block 2683928664 (level 1) [ 708.498512][T12316] EXT4-fs (loop0): 1 truncate cleaned up [ 708.504235][T12316] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,nobh,nodioread_nolock,discard,usrjquota=.jqfmt=vfsv1,noauto_da_alloc,jqfmt=vfsv0,resuid=0x0000000000000000,,,errors=continue. Quota mode: writeback. [ 708.681071][T12364] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 708.701158][T12316] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.12868: Invalid block bitmap block 3 in block_group 0 [ 708.982547][T12385] ax25_connect(): syz.4.12888 uses autobind, please contact jreuter@yaina.de [ 708.997246][ T1956] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 709.146670][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12891'. [ 709.367477][ T1956] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 709.375713][ T1956] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 709.384548][T26410] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 709.449785][ T1956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.493301][ T1956] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 709.530844][ T1956] usb 4-1: config 0 has no interface number 0 [ 709.537030][ T1956] usb 4-1: config 0 interface 104 has no altsetting 1 [ 709.647295][T26410] usb 1-1: Using ep0 maxpacket: 32 [ 709.737504][ T1956] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 709.746615][ T1956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.767472][T26410] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.821665][T26410] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.841060][ T1956] usb 4-1: Product: syz [ 709.845294][ T1956] usb 4-1: Manufacturer: syz [ 709.887299][ T1956] usb 4-1: SerialNumber: syz [ 709.919241][ T1956] usb 4-1: config 0 descriptor?? [ 709.974596][ T1956] asix: probe of 4-1:0.104 failed with error -22 [ 709.997557][T26410] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 710.006675][T26410] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 710.081104][T26410] usb 1-1: Product: syz [ 710.085361][T26410] usb 1-1: Manufacturer: syz [ 710.181751][ T1956] usb 4-1: USB disconnect, device number 61 [ 710.208571][T26410] hub 1-1:4.0: USB hub found [ 710.467666][T26410] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 710.580902][T12481] loop1: detected capacity change from 0 to 4096 [ 710.683647][T12490] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.766865][T12481] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 710.796489][ T1956] usb 1-1: USB disconnect, device number 69 [ 710.994171][T12511] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12921'. [ 711.070162][T12519] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12921'. [ 711.261239][T12535] IPVS: Error connecting to the multicast addr [ 711.857374][ T7] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 711.940351][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12944'. [ 712.057435][ T4426] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 712.127936][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12947'. [ 712.297776][ T7] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 712.314800][ T7] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 712.341107][ T7] usb 1-1: config 0 has no interface number 0 [ 712.362010][ T7] usb 1-1: config 0 has no interface number 1 [ 712.382799][ T7] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 712.448007][ T7] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 712.461880][ T4426] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 712.492170][ T4426] usb 4-1: config 0 has no interface number 0 [ 712.508735][ T4426] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.530282][ T7] usb 1-1: config 0 interface 255 has no altsetting 0 [ 712.550642][ T4426] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 712.737830][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 712.757600][ T4426] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 712.766775][ T4426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.782640][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.816851][ T7] usb 1-1: Product: syz [ 712.831535][ T4426] usb 4-1: Product: syz [ 712.835909][ T4426] usb 4-1: Manufacturer: syz [ 712.844165][ T7] usb 1-1: Manufacturer: syz [ 712.860888][ T7] usb 1-1: SerialNumber: syz [ 712.865765][ T4426] usb 4-1: SerialNumber: syz [ 712.886925][ T7] usb 1-1: config 0 descriptor?? [ 712.902415][ T4426] usb 4-1: config 0 descriptor?? [ 712.963141][ T4426] yurex 4-1:0.50: Could not submitting URB [ 712.976319][ T7] usb 1-1: selecting invalid altsetting 0 [ 712.985277][ T4426] yurex: probe of 4-1:0.50 failed with error -5 [ 712.995287][ T7] usb 1-1: Could not set interface, error -22 [ 713.017377][ T1956] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 713.181760][ T4181] usb 4-1: USB disconnect, device number 62 [ 713.207534][T26410] usb 1-1: USB disconnect, device number 70 [ 713.557512][ T1956] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 713.573981][T12659] device wlan0 entered promiscuous mode [ 713.587342][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 713.613534][ T1956] usb 5-1: Product: syz [ 713.624883][ T1956] usb 5-1: Manufacturer: syz [ 713.629738][ T1956] usb 5-1: SerialNumber: syz [ 713.689786][ T1956] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 713.884878][T12676] netlink: set zone limit has 4 unknown bytes [ 714.087542][ T4426] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 714.127470][ T1956] vp7045: USB control message 'in' went wrong. [ 714.136163][ T1956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 714.197506][ T1956] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 714.238724][ T1956] usb 5-1: USB disconnect, device number 74 [ 714.271518][T12691] loop0: detected capacity change from 0 to 2048 [ 714.364724][T12691] NILFS (loop0): invalid segment: Magic number mismatch [ 714.394639][T12691] NILFS (loop0): trying rollback from an earlier position [ 714.442699][T12691] NILFS (loop0): recovery complete [ 714.472015][T12704] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 714.507636][ T4426] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.522695][ T4426] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.562521][T12691] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 714.668349][ T4426] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 714.690721][ T4426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 714.737306][ T4426] usb 4-1: SerialNumber: syz [ 714.897374][ T4181] Bluetooth: hci4: command 0x0405 tx timeout [ 715.050532][ T4426] usb 4-1: 0:2 : does not exist [ 715.094413][ T4426] usb 4-1: USB disconnect, device number 63 [ 715.394836][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.926171][ T25] audit: type=1400 audit(525001.183:121): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3ABEEED78F5128D1B7D39C3A7FCA9460DD404CB7C838FF47A79A4F235112B5A1EAC506BE6D5716D72BFF5FCFB587D1A13B737964DEEF75E0C05AE552E26144AC844B11EF03981DEFE0A26AFBBD5A41A2C7415B9803ABD062A2EEE8AB180B3193B972E3BD615F700B4FEA42EC6F36FC175A8DF54E7C42DE443082CEEECA04824BDA5C1A40417927A0F4F7FD75C7E94FA12AB3D0498A81DF9A5F1E2D285A39FB7A114F61A05254A5A4C99D1A75994F2EE7B7A9B8807DC7C6F11296CADAE6EDBF465690420C2789607118BA01F64638DE57391F7F1178928F2E86F38DFA402E90C2D2CF0A8845FA1599C60EE904F26504 pid=12840 comm="syz.1.13009" [ 716.087609][T12860] loop1: detected capacity change from 0 to 512 [ 716.167656][ T4424] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 716.192596][T12860] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 716.501091][T12908] loop0: detected capacity change from 0 to 2048 [ 716.631080][T12920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.677666][ T4181] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 716.687831][ T4424] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 716.701984][ T4424] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 716.730503][T12924] loop3: detected capacity change from 0 to 512 [ 716.747062][ T4424] usb 3-1: Product: syz [ 716.751848][ T4424] usb 3-1: SerialNumber: syz [ 716.764435][ T4424] usb 3-1: config 0 descriptor?? [ 716.807414][T12924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 716.917337][ T4181] usb 2-1: Using ep0 maxpacket: 16 [ 716.928829][T12924] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.13015: bad orphan inode 11 [ 717.038821][T12924] ext4_test_bit(bit=10, block=4) = 0 [ 717.050022][ T4424] hso 3-1:0.0: Failed to find BULK IN ep [ 717.059385][ T4181] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 717.084387][T12924] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 717.098206][ T4181] usb 2-1: config 1 has no interface number 0 [ 717.116107][ T4181] usb 2-1: config 1 interface 228 has no altsetting 0 [ 717.171544][T12924] EXT4-fs error (device loop3): __ext4_new_inode:1082: comm syz.3.13015: reserved inode found cleared - inode=2 [ 717.307560][ T4181] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 717.322993][ T4426] usb 3-1: USB disconnect, device number 66 [ 717.341258][ T4181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.404305][ T4181] usb 2-1: Product: syz [ 717.422190][ T4181] usb 2-1: Manufacturer: syz [ 717.426864][ T4181] usb 2-1: SerialNumber: syz [ 717.470934][T12974] loop3: detected capacity change from 0 to 512 [ 717.603303][T12974] EXT4-fs (loop3): Ignoring removed bh option [ 717.643245][T12986] loop0: detected capacity change from 0 to 512 [ 717.657819][T12974] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 717.696832][T12974] EXT4-fs (loop3): 1 truncate cleaned up [ 717.717745][T12974] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 717.789548][T12986] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 717.830840][ T4181] usb 2-1: USB disconnect, device number 66 [ 717.870158][ T25] audit: type=1800 audit(525003.133:122): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13026" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 718.035098][T13015] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 718.168295][T13021] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.13031'. [ 718.363828][T13041] loop4: detected capacity change from 0 to 512 [ 718.456856][T13041] EXT4-fs (loop4): Test dummy encryption mode enabled [ 718.520327][T13053] loop0: detected capacity change from 0 to 512 [ 718.539378][T13041] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.13035: inode has both inline data and extents flags [ 718.615296][T13041] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.13035: couldn't read orphan inode 15 (err -117) [ 718.672011][T13053] EXT4-fs (loop0): Test dummy encryption mode enabled [ 718.709598][T13041] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 718.728640][T13053] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.13040: invalid block [ 718.863493][T13053] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13040: invalid indirect mapped block 4294967295 (level 1) [ 718.898874][T13053] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13040: invalid indirect mapped block 4294967295 (level 1) [ 718.951741][ T13] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 719.005219][T13053] EXT4-fs (loop0): 2 truncates cleaned up [ 719.027392][T13053] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,discard,errors=continue,grpid,,errors=continue. Quota mode: writeback. [ 719.130174][T13053] EXT4-fs error (device loop0): ext4_get_parent:1906: inode #11: comm syz.0.13040: bad parent inode number: 3 [ 719.217545][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 719.328090][ T4426] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 719.369089][ T13] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.390363][ T13] usb 4-1: config 0 has no interface number 0 [ 719.607562][ T13] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.639336][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.668200][ T13] usb 4-1: Product: syz [ 719.672438][ T13] usb 4-1: Manufacturer: syz [ 719.686690][ T13] usb 4-1: SerialNumber: syz [ 719.715690][ T13] usb 4-1: config 0 descriptor?? [ 719.759057][ T13] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 719.788487][ T4426] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.807785][ T4426] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.857285][ T4426] usb 5-1: config 1 has no interface number 0 [ 719.968893][T13155] loop0: detected capacity change from 0 to 256 [ 719.991090][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 720.014602][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 720.057507][ T4426] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 720.090728][T13155] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 720.115521][T13167] program syz.2.13066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.127874][ T4426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.138445][T13165] loop1: detected capacity change from 0 to 512 [ 720.146211][ T4426] usb 5-1: Product: syz [ 720.165123][ T4426] usb 5-1: Manufacturer: syz [ 720.177261][ T4426] usb 5-1: SerialNumber: syz [ 720.325713][T13165] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.13067: inode has both inline data and extents flags [ 720.398318][T13165] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.13067: couldn't read orphan inode 15 (err -117) [ 720.421960][ T13] usb 4-1: USB disconnect, device number 64 [ 720.447282][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 720.463769][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 720.505463][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 720.510114][T13165] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 720.548042][ T13] quatech2 4-1:0.51: device disconnected [ 720.607549][ T4426] usb 5-1: 1:0 : does not exist [ 720.617704][ T4426] usb 5-1: 1:2 : does not exist [ 720.640960][ T4426] usb 5-1: 1:3 : does not exist [ 720.665249][ T4426] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 720.730560][ T4426] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 720.759421][ T4426] usb 5-1: USB disconnect, device number 75 [ 721.098203][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.277345][ T7] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 721.384524][ T13] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 721.469581][T13277] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 721.507975][ T4181] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 721.550912][T13275] loop1: detected capacity change from 0 to 4096 [ 721.567309][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 721.648932][T13286] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.687864][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.714252][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.767376][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.807410][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 721.836701][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 721.846395][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 721.874802][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 721.879941][ T4181] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 721.917252][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.923502][ T4181] usb 5-1: config 0 has no interface number 0 [ 721.968428][ T7] usb 1-1: config 0 descriptor?? [ 721.973655][ T4181] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 722.110740][T13310] loop1: detected capacity change from 0 to 128 [ 722.145995][T13310] FAT-fs (loop1): Directory bread(block 162) failed [ 722.157588][ T13] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 722.177486][ T4181] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 722.187637][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.195683][ T13] usb 4-1: Product: syz [ 722.201567][ T4181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.210596][T13310] FAT-fs (loop1): Directory bread(block 163) failed [ 722.211045][ T13] usb 4-1: Manufacturer: syz [ 722.237589][T13310] FAT-fs (loop1): Directory bread(block 164) failed [ 722.245262][ T13] usb 4-1: SerialNumber: syz [ 722.253444][ T4181] usb 5-1: Product: syz [ 722.264719][T13310] FAT-fs (loop1): Directory bread(block 165) failed [ 722.271983][ T4181] usb 5-1: Manufacturer: syz [ 722.287988][ T4181] usb 5-1: SerialNumber: syz [ 722.289514][ T13] usb 4-1: config 0 descriptor?? [ 722.306579][ T4181] usb 5-1: config 0 descriptor?? [ 722.312332][T13310] FAT-fs (loop1): Directory bread(block 166) failed [ 722.348227][T13262] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 722.356880][T13310] FAT-fs (loop1): Directory bread(block 167) failed [ 722.366738][T13310] FAT-fs (loop1): Directory bread(block 168) failed [ 722.397536][T13310] FAT-fs (loop1): Directory bread(block 169) failed [ 722.404910][ T4181] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 16:fa:95:90:38:a8 [ 722.418518][T13310] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 722.446668][T13310] FAT-fs (loop1): Directory bread(block 162) failed [ 722.457910][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0x2 [ 722.488149][T13310] FAT-fs (loop1): Directory bread(block 163) failed [ 722.497283][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0x4 [ 722.516736][T13310] attempt to access beyond end of device [ 722.516736][T13310] loop1: rw=3, want=232, limit=128 [ 722.537785][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0xd [ 722.560631][T13310] attempt to access beyond end of device [ 722.560631][T13310] loop1: rw=2051, want=234, limit=128 [ 722.566813][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0x1 [ 722.590856][ T4181] usb 4-1: USB disconnect, device number 65 [ 722.626135][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0x3 [ 722.647679][ T7] logitech 0003:046D:C29C.0001: unknown main item tag 0x1 [ 722.697684][ T7] logitech 0003:046D:C29C.0001: hidraw0: USB HID v80.09 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 722.737404][ T13] usb 5-1: USB disconnect, device number 76 [ 722.744376][ T13] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 722.764238][ T7] logitech 0003:046D:C29C.0001: no inputs found [ 722.870287][ T7] usb 1-1: USB disconnect, device number 71 [ 723.095488][T13360] fido_id[13360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 723.143169][T13375] loop1: detected capacity change from 0 to 512 [ 723.294191][T13375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13099: invalid indirect mapped block 10 (level 1) [ 723.356543][T13375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13099: invalid indirect mapped block 8 (level 1) [ 723.389319][T13375] EXT4-fs (loop1): 1 truncate cleaned up [ 723.442495][T13375] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 723.628696][ T13] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 723.909610][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 724.107833][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 724.322478][T13472] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13123'. [ 724.357651][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 724.370784][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.422098][ T13] usb 3-1: Product: syz [ 724.426342][ T13] usb 3-1: Manufacturer: syz [ 724.438122][ T4181] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 724.492426][ T13] usb 3-1: SerialNumber: syz [ 724.574351][ T13] snd-ua101 3-1:1.1: sample format descriptor not found [ 724.635020][ T13] snd-ua101 3-1:1.0: invalid num_altsetting [ 724.686227][T13495] loop3: detected capacity change from 0 to 256 [ 724.693298][ T4181] usb 5-1: Using ep0 maxpacket: 16 [ 724.791595][ T13] usb 3-1: USB disconnect, device number 67 [ 724.818009][ T4181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 724.849159][ T4181] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 724.869279][ T4181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.932253][ T4181] usb 5-1: config 0 descriptor?? [ 725.095713][T13524] loop1: detected capacity change from 0 to 1024 [ 725.138605][ T4181] rc_core: IR keymap rc-xbox-dvd not found [ 725.144495][ T4181] Registered IR keymap rc-empty [ 725.155451][ T4181] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 725.185980][ T4181] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 725.239742][ T4181] usb 5-1: USB disconnect, device number 77 [ 726.065879][T13604] loop0: detected capacity change from 0 to 64 [ 726.240774][T13613] loop4: detected capacity change from 0 to 512 [ 726.322620][T13613] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 726.550245][T13623] loop0: detected capacity change from 0 to 8192 [ 726.669502][T13623] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 726.717363][T13623] REISERFS (device loop0): using ordered data mode [ 726.723933][T13623] reiserfs: using flush barriers [ 726.771434][T13649] netlink: 436 bytes leftover after parsing attributes in process `syz.2.13170'. [ 726.788814][T13623] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 726.828161][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13170'. [ 726.852954][T13648] loop4: detected capacity change from 0 to 4096 [ 726.871641][T13623] REISERFS (device loop0): checking transaction log (loop0) [ 726.882079][T13623] REISERFS (device loop0): Using r5 hash to sort names [ 726.972956][T13659] loop1: detected capacity change from 0 to 128 [ 727.140286][T13671] loop3: detected capacity change from 0 to 64 [ 727.486719][ T4198] hfs: node 4:3 still has 1 user(s)! [ 727.622694][T13712] netlink: 'syz.3.13183': attribute type 21 has an invalid length. [ 727.646968][T13712] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.675853][T13712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.683273][T13712] IPv6: NLM_F_CREATE should be set when creating new route [ 727.690603][T13712] IPv6: NLM_F_CREATE should be set when creating new route [ 727.697912][T13712] IPv6: NLM_F_CREATE should be set when creating new route [ 727.740174][T13724] loop1: detected capacity change from 0 to 128 [ 727.780928][T13720] netlink: 'syz.3.13183': attribute type 21 has an invalid length. [ 727.832744][T13720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.858578][T13724] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 727.936279][T13724] attempt to access beyond end of device [ 727.936279][T13724] loop1: rw=0, want=8767745, limit=128 [ 728.008152][T13724] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 728.048642][T13724] attempt to access beyond end of device [ 728.048642][T13724] loop1: rw=0, want=13269810, limit=128 [ 728.091687][T13724] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 728.158523][T13724] attempt to access beyond end of device [ 728.158523][T13724] loop1: rw=0, want=1158, limit=128 [ 728.187598][T13753] loop3: detected capacity change from 0 to 128 [ 728.189307][T13724] Buffer I/O error on dev loop1, logical block 1157, async page read [ 728.211804][T13755] loop4: detected capacity change from 0 to 128 [ 728.233758][T13724] attempt to access beyond end of device [ 728.233758][T13724] loop1: rw=0, want=3211265, limit=128 [ 728.260710][T13724] Buffer I/O error on dev loop1, logical block 3211264, async page read [ 728.269517][T13724] attempt to access beyond end of device [ 728.269517][T13724] loop1: rw=0, want=8768636, limit=128 [ 728.282649][T13724] Buffer I/O error on dev loop1, logical block 8768635, async page read [ 728.292954][T13724] attempt to access beyond end of device [ 728.292954][T13724] loop1: rw=0, want=13466418, limit=128 [ 728.305032][T13724] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 728.313842][T13753] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 728.326525][T13753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.346708][T13755] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 728.359605][T13724] attempt to access beyond end of device [ 728.359605][T13724] loop1: rw=0, want=209286, limit=128 [ 728.379542][T13755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.448070][T13724] Buffer I/O error on dev loop1, logical block 209285, async page read [ 728.452749][ T7] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 728.481465][T13724] attempt to access beyond end of device [ 728.481465][T13724] loop1: rw=0, want=8767745, limit=128 [ 728.528340][T13724] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 728.584936][T13724] attempt to access beyond end of device [ 728.584936][T13724] loop1: rw=0, want=13269810, limit=128 [ 728.631615][T13724] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 728.648126][T13724] attempt to access beyond end of device [ 728.648126][T13724] loop1: rw=0, want=1158, limit=128 [ 728.668886][T13724] Buffer I/O error on dev loop1, logical block 1157, async page read [ 728.728213][ T25] audit: type=1800 audit(525013.993:123): pid=13724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13190" name="/" dev="loop1" ino=2 res=0 errno=0 [ 728.837923][ T4202] sysv_free_block: trying to free block not in datazone [ 728.854909][ T4202] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 728.947628][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.038201][T13810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.049189][ T7] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 729.069871][ T7] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 729.096097][T13785] NILFS (loop0): error -22 preparing GC: cannot mark copying blocks dirty [ 729.147264][ T7] usb 3-1: config 63 has no interface number 0 [ 729.170740][ T7] usb 3-1: config 63 interface 66 has no altsetting 0 [ 729.268824][T13816] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 729.341903][T13822] netlink: 'syz.4.13216': attribute type 3 has an invalid length. [ 729.387834][ T7] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 729.397939][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.440679][ T7] usb 3-1: Product: syz [ 729.444951][ T7] usb 3-1: Manufacturer: syz [ 729.476951][ T7] usb 3-1: SerialNumber: syz [ 730.017534][ T7] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 730.024210][ T7] usb 3-1: No valid video chain found. [ 730.047507][ T4426] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 730.049687][T26413] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 730.075696][ T7] usb 3-1: USB disconnect, device number 68 [ 730.087947][T13847] FAT-fs (loop3): Directory bread(block 64) failed [ 730.094576][T13847] FAT-fs (loop3): Directory bread(block 65) failed [ 730.114467][T13847] FAT-fs (loop3): Directory bread(block 66) failed [ 730.137930][T13847] FAT-fs (loop3): Directory bread(block 67) failed [ 730.154866][T13847] FAT-fs (loop3): Directory bread(block 68) failed [ 730.165536][T13847] FAT-fs (loop3): Directory bread(block 69) failed [ 730.174447][T13847] FAT-fs (loop3): Directory bread(block 70) failed [ 730.181882][T13847] FAT-fs (loop3): Directory bread(block 71) failed [ 730.188893][T13847] FAT-fs (loop3): Directory bread(block 72) failed [ 730.206078][T13847] FAT-fs (loop3): Directory bread(block 73) failed [ 730.401464][T13860] set_capacity_and_notify: 3 callbacks suppressed [ 730.401485][T13860] loop0: detected capacity change from 0 to 64 [ 730.446191][ T25] audit: type=1800 audit(525015.703:124): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13224" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 730.497522][ T4426] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.548248][T26413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.557858][ T4426] usb 2-1: not running at top speed; connect to a high speed hub [ 730.627573][T26413] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 730.635828][T26413] usb 5-1: config 4 has no interface number 0 [ 730.652977][T26413] usb 5-1: config 4 interface 138 has no altsetting 0 [ 730.667978][ T4426] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.697388][ T4426] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.784020][T13877] loop3: detected capacity change from 0 to 1024 [ 730.868695][T26413] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 730.913190][T26413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.919011][ T4426] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 730.937148][ T4426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.958085][ T4426] usb 2-1: Product: syz [ 730.967568][ T4426] usb 2-1: Manufacturer: syz [ 730.970825][T26413] usb 5-1: Product: syz [ 730.972376][ T4426] usb 2-1: SerialNumber: syz [ 730.976404][T26413] usb 5-1: Manufacturer: syz [ 730.976425][T26413] usb 5-1: SerialNumber: syz [ 731.052423][ T9] hfsplus: b-tree write err: -5, ino 25 [ 731.061865][ T9] hfsplus: b-tree write err: -5, ino 4 [ 731.078046][ T9] hfsplus: b-tree write err: -5, ino 2 [ 731.098383][ T9] hfsplus: b-tree write err: -5, ino 17 [ 731.298729][T13838] loop4: detected capacity change from 0 to 512 [ 731.359337][T13838] EXT4-fs (loop4): Ignoring removed bh option [ 731.417922][T26410] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 731.427808][ T4426] usb 2-1: 0:1 : does not exist [ 731.448183][T13838] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.13221: inode #13: comm syz.4.13221: iget: illegal inode # [ 731.506340][T13838] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.13221: couldn't read orphan inode 13 (err -117) [ 731.540758][T13838] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,,errors=continue. Quota mode: none. [ 731.561260][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.590944][ T4426] usb 2-1: USB disconnect, device number 67 [ 731.657964][T26413] catc 5-1:4.138: Can't set altsetting 1. [ 731.663790][T26413] catc: probe of 5-1:4.138 failed with error -5 [ 731.677358][T26410] usb 1-1: Using ep0 maxpacket: 16 [ 731.708302][T26413] usb 5-1: USB disconnect, device number 78 [ 731.718379][T13941] netlink: 'syz.2.13242': attribute type 29 has an invalid length. [ 731.735053][T13941] netlink: 'syz.2.13242': attribute type 29 has an invalid length. [ 731.766752][T13941] netlink: 'syz.2.13242': attribute type 29 has an invalid length. [ 731.798412][T26410] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 731.816814][T26410] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.865045][T13949] netlink: 'syz.2.13244': attribute type 3 has an invalid length. [ 731.884342][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13244'. [ 731.897836][T26410] usb 1-1: config 0 has no interface number 0 [ 731.907144][T26410] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 731.926477][ T5381] udevd[5381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.946421][T13953] netlink: 'syz.3.13243': attribute type 4 has an invalid length. [ 731.962214][T26410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.981367][T13953] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13243'. [ 731.999698][T26410] usb 1-1: config 0 descriptor?? [ 732.254739][ T4426] usb 1-1: USB disconnect, device number 72 [ 732.530570][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13256'. [ 732.704131][T14016] loop4: detected capacity change from 0 to 64 [ 733.856706][T14020] loop3: detected capacity change from 0 to 32768 [ 733.934613][T14029] loop4: detected capacity change from 0 to 32768 [ 734.014607][T14020] XFS (loop3): Mounting V5 Filesystem [ 734.083223][T14029] jfs_lookup: iget failed on inum 4 [ 734.151798][T14029] jfs_lookup: iget failed on inum 4 [ 734.171139][T14020] XFS (loop3): Ending clean mount [ 734.200683][T14029] jfs_lookup: iget failed on inum 4 [ 734.206275][T14029] jfs_lookup: iget failed on inum 4 [ 734.225423][T14106] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 734.269094][T14110] loop0: detected capacity change from 0 to 512 [ 734.305953][T14110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 734.369627][ T4198] XFS (loop3): Unmounting Filesystem [ 734.385021][T14110] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.13287: bad orphan inode 131083 [ 734.411933][T14110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 735.248001][T14158] loop4: detected capacity change from 0 to 2048 [ 735.320121][T14158] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 735.367485][ T4426] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 735.448022][T26413] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 735.588374][T14180] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13307'. [ 735.619116][ T4426] usb 3-1: Using ep0 maxpacket: 8 [ 735.652659][T14185] loop1: detected capacity change from 0 to 1024 [ 735.698677][T26413] usb 1-1: Using ep0 maxpacket: 16 [ 735.720723][T14185] hfsplus: extend alloc file! (16384,256,150995124) [ 735.797846][ T4426] usb 3-1: unable to get BOS descriptor or descriptor too short [ 735.818483][T26413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.841478][T26413] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 735.863771][T26413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.889077][T26413] usb 1-1: config 0 descriptor?? [ 735.906583][ T4426] usb 3-1: config 4 interface 0 has no altsetting 0 [ 736.076905][T14203] loop1: detected capacity change from 0 to 512 [ 736.167863][ T4426] usb 3-1: string descriptor 0 read error: -22 [ 736.174193][ T4426] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 736.202971][T14203] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 736.231484][ T4426] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 736.273125][T14203] FAT-fs (loop1): Filesystem has been set read-only [ 736.300903][T14215] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 736.313921][ T4426] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 736.331723][ T4426] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 736.346371][ T4426] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 736.357847][ T4426] usb 3-1: media controller created [ 736.370900][T26413] kye 0003:0458:5019.0002: unknown main item tag 0xd [ 736.403979][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.416407][ T4426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.421286][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.473953][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.482099][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.509183][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.525690][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.562661][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13317'. [ 736.574821][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.593335][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.611110][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.647647][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 736.654426][T26413] kye 0003:0458:5019.0002: unknown main item tag 0x7 [ 736.714433][T26413] kye 0003:0458:5019.0002: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 736.735014][T26413] kye 0003:0458:5019.0002: tablet-enabling feature report not found [ 736.754061][T26413] kye 0003:0458:5019.0002: tablet enabling failed [ 736.808959][T26413] usb 1-1: USB disconnect, device number 73 [ 736.835809][T14255] program syz.1.13320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.937182][T14261] fido_id[14261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 736.978688][T14264] netlink: 'syz.1.13322': attribute type 21 has an invalid length. [ 736.990324][T14264] netlink: 'syz.1.13322': attribute type 1 has an invalid length. [ 737.188385][T14229] loop4: detected capacity change from 0 to 40427 [ 737.231487][T14229] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 737.278239][T14229] F2FS-fs (loop4): invalid crc value [ 737.297479][T14229] F2FS-fs (loop4): Found nat_bits in checkpoint [ 737.381719][T14229] F2FS-fs (loop4): recover fsync data on readonly fs [ 737.400749][T14229] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 737.422396][T14229] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 737.436488][T14229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 737.488507][ T4426] zl10353_read_register: readreg error (reg=127, ret==0) [ 737.496415][T14144] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 737.589967][T14289] loop0: detected capacity change from 0 to 256 [ 737.624467][ T4426] usb 3-1: USB disconnect, device number 69 [ 737.643608][T14289] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 737.874492][T14309] loop3: detected capacity change from 0 to 136 [ 738.104044][T14318] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13334'. [ 738.231544][T14317] loop3: detected capacity change from 0 to 4096 [ 738.393714][T14336] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.750973][ T25] audit: type=1800 audit(525024.013:125): pid=14289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13329" name="file1" dev="loop0" ino=1048654 res=0 errno=0 [ 738.983909][T14375] loop3: detected capacity change from 0 to 1024 [ 739.544892][T14407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13360'. [ 739.567560][T14407] netlink: 7 bytes leftover after parsing attributes in process `syz.2.13360'. [ 739.593496][T14413] loop1: detected capacity change from 0 to 8 [ 739.602705][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13362'. [ 740.408540][T14463] loop4: detected capacity change from 0 to 2048 [ 740.546267][T14477] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 740.622473][T14463] NILFS (loop4): error -2 truncating bmap (ino=16) [ 740.706242][T14477] ------------[ cut here ]------------ [ 740.713368][T14477] WARNING: CPU: 1 PID: 14477 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 740.723691][T14477] Modules linked in: [ 740.728241][T14477] CPU: 1 PID: 14477 Comm: segctord Not tainted syzkaller #0 [ 740.735569][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 740.746369][T14477] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 740.753002][T14477] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 83 82 65 fe e8 ee 0c ed fd e9 b8 fc ff ff e8 74 82 65 fe <0f> 0b e9 16 fc ff ff e8 68 82 65 fe e8 d3 0c ed fd e9 74 fe ff ff [ 740.773469][T14477] RSP: 0018:ffffc9000415f3c0 EFLAGS: 00010293 [ 740.780183][T14477] RAX: ffffffff8313702c RBX: ffff888024cc81a0 RCX: ffff88802c1e0000 [ 740.788997][T14477] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 740.797018][T14477] RBP: 0000000000000003 R08: ffff88805fc76577 R09: 1ffff1100bf8ecae [ 740.805094][T14477] R10: dffffc0000000000 R11: ffffed100bf8ecaf R12: ffff88802c1e1788 [ 740.813150][T14477] R13: ffff888077b379e0 R14: 00000000003f0002 R15: ffff888022701730 [ 740.821198][T14477] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 740.830233][T14477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.836857][T14477] CR2: 00007fff5b83bbd0 CR3: 0000000074f17000 CR4: 00000000003506e0 [ 740.844919][T14477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 740.852968][T14477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 740.861014][T14477] Call Trace: [ 740.864333][T14477] [ 740.867323][T14477] nilfs_dat_commit_update+0x24/0x40 [ 740.872658][T14477] nilfs_btree_commit_update_v+0x93/0x410 [ 740.878461][T14477] nilfs_btree_propagate+0x8fe/0xcb0 [ 740.883800][T14477] nilfs_bmap_propagate+0x70/0x120 [ 740.888983][T14477] nilfs_segctor_apply_buffers+0x15d/0x320 [ 740.894895][T14477] ? nilfs_collect_file_data+0xc0/0xc0 [ 740.900570][T14477] nilfs_segctor_scan_file+0x7af/0x9d0 [ 740.906078][T14477] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 740.913299][T14477] ? rcu_is_watching+0x11/0xa0 [ 740.918226][T14477] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 740.924217][T14477] ? verify_lock_unused+0x140/0x140 [ 740.929609][T14477] ? nilfs_transaction_unlock+0x210/0x210 [ 740.935370][T14477] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 740.941610][T14477] ? clear_nonspinnable+0x60/0x60 [ 740.946677][T14477] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 740.952217][T14477] ? __lock_acquire+0x7b50/0x7b50 [ 740.957327][T14477] ? __rwlock_init+0x140/0x140 [ 740.962131][T14477] ? do_raw_spin_unlock+0x11d/0x230 [ 740.967408][T14477] ? _raw_spin_unlock+0x24/0x40 [ 740.972377][T14477] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 740.977912][T14477] nilfs_segctor_construct+0x170/0x690 [ 740.983523][T14477] nilfs_segctor_thread+0x533/0x1100 [ 740.988907][T14477] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 740.994847][T14477] ? nilfs_iput_work_func+0x70/0x70 [ 741.000126][T14477] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 741.006066][T14477] ? _raw_spin_unlock+0x40/0x40 [ 741.010998][T14477] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 741.016931][T14477] ? init_wait_entry+0xd0/0xd0 [ 741.021859][T14477] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 741.027827][T14477] ? __kthread_parkme+0x14e/0x1b0 [ 741.032981][T14477] kthread+0x42e/0x520 [ 741.037084][T14477] ? nilfs_iput_work_func+0x70/0x70 [ 741.042382][T14477] ? kthread_blkcg+0xd0/0xd0 [ 741.047013][T14477] ret_from_fork+0x1f/0x30 [ 741.051569][T14477] [ 741.054632][T14477] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 741.061932][T14477] CPU: 1 PID: 14477 Comm: segctord Not tainted syzkaller #0 [ 741.069247][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.079336][T14477] Call Trace: [ 741.082647][T14477] [ 741.085613][T14477] dump_stack_lvl+0x188/0x250 [ 741.090378][T14477] ? show_regs_print_info+0x20/0x20 [ 741.095617][T14477] ? load_image+0x410/0x410 [ 741.100199][T14477] panic+0x2f8/0x850 [ 741.104141][T14477] ? bpf_jit_dump+0xd0/0xd0 [ 741.108689][T14477] ? ret_from_fork+0x1f/0x30 [ 741.113327][T14477] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 741.118752][T14477] __warn+0x248/0x2b0 [ 741.122764][T14477] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 741.128173][T14477] report_bug+0x1b9/0x2e0 [ 741.132642][T14477] handle_bug+0x3a/0x70 [ 741.136828][T14477] exc_invalid_op+0x16/0x40 [ 741.141361][T14477] asm_exc_invalid_op+0x16/0x20 [ 741.146258][T14477] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 741.152281][T14477] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 83 82 65 fe e8 ee 0c ed fd e9 b8 fc ff ff e8 74 82 65 fe <0f> 0b e9 16 fc ff ff e8 68 82 65 fe e8 d3 0c ed fd e9 74 fe ff ff [ 741.171932][T14477] RSP: 0018:ffffc9000415f3c0 EFLAGS: 00010293 [ 741.178044][T14477] RAX: ffffffff8313702c RBX: ffff888024cc81a0 RCX: ffff88802c1e0000 [ 741.186053][T14477] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 741.194058][T14477] RBP: 0000000000000003 R08: ffff88805fc76577 R09: 1ffff1100bf8ecae [ 741.202292][T14477] R10: dffffc0000000000 R11: ffffed100bf8ecaf R12: ffff88802c1e1788 [ 741.210299][T14477] R13: ffff888077b379e0 R14: 00000000003f0002 R15: ffff888022701730 [ 741.218326][T14477] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 741.223763][T14477] nilfs_dat_commit_update+0x24/0x40 [ 741.229094][T14477] nilfs_btree_commit_update_v+0x93/0x410 [ 741.234863][T14477] nilfs_btree_propagate+0x8fe/0xcb0 [ 741.240223][T14477] nilfs_bmap_propagate+0x70/0x120 [ 741.245463][T14477] nilfs_segctor_apply_buffers+0x15d/0x320 [ 741.251317][T14477] ? nilfs_collect_file_data+0xc0/0xc0 [ 741.256824][T14477] nilfs_segctor_scan_file+0x7af/0x9d0 [ 741.262330][T14477] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 741.269509][T14477] ? rcu_is_watching+0x11/0xa0 [ 741.274326][T14477] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 741.280307][T14477] ? verify_lock_unused+0x140/0x140 [ 741.285574][T14477] ? nilfs_transaction_unlock+0x210/0x210 [ 741.291335][T14477] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 741.297543][T14477] ? clear_nonspinnable+0x60/0x60 [ 741.302616][T14477] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 741.308110][T14477] ? __lock_acquire+0x7b50/0x7b50 [ 741.313172][T14477] ? __rwlock_init+0x140/0x140 [ 741.317970][T14477] ? do_raw_spin_unlock+0x11d/0x230 [ 741.323200][T14477] ? _raw_spin_unlock+0x24/0x40 [ 741.328081][T14477] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 741.333578][T14477] nilfs_segctor_construct+0x170/0x690 [ 741.339071][T14477] nilfs_segctor_thread+0x533/0x1100 [ 741.344401][T14477] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 741.350317][T14477] ? nilfs_iput_work_func+0x70/0x70 [ 741.355544][T14477] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 741.361453][T14477] ? _raw_spin_unlock+0x40/0x40 [ 741.366341][T14477] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 741.372267][T14477] ? init_wait_entry+0xd0/0xd0 [ 741.377068][T14477] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 741.382998][T14477] ? __kthread_parkme+0x14e/0x1b0 [ 741.388058][T14477] kthread+0x42e/0x520 [ 741.392158][T14477] ? nilfs_iput_work_func+0x70/0x70 [ 741.397412][T14477] ? kthread_blkcg+0xd0/0xd0 [ 741.402016][T14477] ret_from_fork+0x1f/0x30 [ 741.406461][T14477] [ 741.409766][T14477] Kernel Offset: disabled [ 741.414558][T14477] Rebooting in 86400 seconds..