last executing test programs: 10.054954609s ago: executing program 2 (id=1002): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.435076648s ago: executing program 1 (id=1013): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x3804008, &(0x7f0000000280)={[{@shortname_mixed}, {@uni_xlate}, {@fat=@errors_remount}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) 6.884659939s ago: executing program 2 (id=1014): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x94000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000002c0), {0xe}, &(0x7f0000000340)=""/104, 0x68, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r1}}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 6.81335137s ago: executing program 1 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x470, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_ACT={0x438, 0x2, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffff7f, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0x80d05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.093439414s ago: executing program 0 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[], 0x0) 6.072034504s ago: executing program 1 (id=1019): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00'}, 0x94) unshare(0x2c020400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b800800", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.73452166s ago: executing program 0 (id=1021): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xa) 5.533979444s ago: executing program 0 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e6400000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 5.489854886s ago: executing program 1 (id=1024): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264000000"], 0x40}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) 5.433242256s ago: executing program 2 (id=1025): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.307103228s ago: executing program 0 (id=1026): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="059900f3ffffff11"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 4.286280258s ago: executing program 3 (id=1028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 3.971206944s ago: executing program 1 (id=1039): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264000000"], 0x40}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x1, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x804, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x400a, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x0, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0x3, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x10, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0xffffffff, 0x7, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0xe13, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x19, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4000840}, 0x0) 3.864350077s ago: executing program 4 (id=1030): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201120153a42908f00a71729188010203010902"], 0x0) 2.271774177s ago: executing program 2 (id=1031): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x3804008, &(0x7f0000000280)={[{@shortname_mixed}, {@uni_xlate}, {@fat=@errors_remount}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) 2.270943636s ago: executing program 1 (id=1042): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="059900f3"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 2.154976549s ago: executing program 4 (id=1032): epoll_wait(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0xa) 1.952121172s ago: executing program 2 (id=1033): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x94000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000002c0), {0xe}, &(0x7f0000000340)=""/104, 0x68, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r1}}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.951991193s ago: executing program 4 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1], 0x6c}}, 0x0) 1.937331403s ago: executing program 3 (id=1035): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00'}, 0x94) unshare(0x2c020400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080001", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.816364045s ago: executing program 4 (id=1036): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x3c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x3c}}, 0x90) 1.60482024s ago: executing program 3 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x2c020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.546621731s ago: executing program 4 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e6400000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 1.282784395s ago: executing program 3 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a", @ANYRES32], 0x3c}}, 0x0) 1.207057017s ago: executing program 4 (id=1041): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 1.114903919s ago: executing program 2 (id=1043): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 997.422671ms ago: executing program 0 (id=1044): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4040, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2294], 0x3, 0x5e9d, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb182, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 938.923712ms ago: executing program 3 (id=1045): epoll_wait(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0xa) 323.96µs ago: executing program 0 (id=1046): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x94000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000002c0), {0xe}, &(0x7f0000000340)=""/104, 0x68, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r0}}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 0s ago: executing program 3 (id=1047): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201120153a42908f00a71729188010203010902"], 0x0) kernel console output (not intermixed with test programs): 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.489773][ T4343] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.499004][ T4343] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.528603][ T4343] usb 1-1: Manufacturer: syz [ 145.555372][ T4343] usb 1-1: config 0 descriptor?? [ 145.917862][ T5317] loop2: detected capacity change from 0 to 4096 [ 145.947777][ T5317] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 145.949727][ T4343] rc_core: IR keymap rc-hauppauge not found [ 145.989701][ T4343] Registered IR keymap rc-empty [ 145.996337][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.039919][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.072292][ T4343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.115480][ T4343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 146.159913][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.198189][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.253317][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.302922][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.307013][ T5312] loop3: detected capacity change from 0 to 32768 [ 146.381640][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.410259][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.427185][ T5312] XFS (loop3): Mounting V5 Filesystem [ 146.446167][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.499990][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.539958][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.546894][ T5312] XFS (loop3): Ending clean mount [ 146.570049][ T4343] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 146.600984][ T4343] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.612696][ T4343] mceusb 1-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 146.682946][ T4343] usb 1-1: USB disconnect, device number 8 [ 146.715643][ T5314] loop4: detected capacity change from 0 to 32768 [ 146.742953][ T127] usb 2-1: USB disconnect, device number 9 [ 146.846320][ T4269] XFS (loop3): Unmounting Filesystem [ 146.857521][ T5314] XFS (loop4): Mounting V5 Filesystem [ 147.090989][ T5314] XFS (loop4): Ending clean mount [ 147.226987][ T5346] loop0: detected capacity change from 0 to 512 [ 147.327248][ T4266] XFS (loop4): Unmounting Filesystem [ 147.361413][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.405941][ T5346] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.771833][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 147.805790][ T5354] vivid-006: disconnect [ 148.067413][ T5358] device veth3 entered promiscuous mode [ 148.500961][ T5362] loop4: detected capacity change from 0 to 32768 [ 148.535417][ T26] audit: type=1800 audit(1759579071.702:18): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.314" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 148.576922][ T5353] vivid-006: reconnect [ 148.596245][ T952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.943482][ T952] usb 3-1: Using ep0 maxpacket: 16 [ 148.957236][ T952] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 148.983312][ T952] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 148.999804][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.030753][ T952] usb 3-1: config 0 descriptor?? [ 149.044714][ T952] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 149.159874][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.205560][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.251782][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.514640][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 149.523606][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 149.561644][ T5371] device wireguard0 entered promiscuous mode [ 149.828960][ T5380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.881555][ T5380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.919118][ T5380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.089351][ T5380] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.377924][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.426602][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.438525][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.589861][ T4335] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 150.612810][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.632682][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.647714][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.738607][ T5390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.779701][ T4335] usb 2-1: Using ep0 maxpacket: 32 [ 150.787475][ T4335] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 150.829636][ T4335] usb 2-1: config 0 has no interface number 0 [ 150.879852][ T4335] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.959798][ T4335] usb 2-1: config 0 interface 85 has no altsetting 0 [ 150.983493][ T4335] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 150.993184][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.001633][ T4335] usb 2-1: Product: syz [ 151.006177][ T4335] usb 2-1: Manufacturer: syz [ 151.011149][ T4335] usb 2-1: SerialNumber: syz [ 151.027498][ T4335] usb 2-1: config 0 descriptor?? [ 151.397344][ T4321] usb 3-1: USB disconnect, device number 5 [ 151.591652][ T5394] loop3: detected capacity change from 0 to 32768 [ 151.631315][ T26] audit: type=1800 audit(1759579074.802:19): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.326" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 151.653461][ T4335] appletouch 2-1:0.85: Failed to request geyser raw mode [ 151.668960][ T4335] appletouch: probe of 2-1:0.85 failed with error -5 [ 151.718520][ T4335] usb 2-1: USB disconnect, device number 10 [ 151.791095][ T5396] loop0: detected capacity change from 0 to 32768 [ 151.875921][ T5396] XFS (loop0): Mounting V5 Filesystem [ 151.977337][ T5396] XFS (loop0): Ending clean mount [ 152.004360][ T5396] XFS (loop0): Quotacheck needed: Please wait. [ 152.126184][ T5396] XFS (loop0): Quotacheck: Done. [ 152.329696][ T4265] XFS (loop0): Unmounting Filesystem [ 152.600265][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 152.610216][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 152.685357][ T5417] device wireguard0 entered promiscuous mode [ 152.689081][ T5416] loop3: detected capacity change from 0 to 32768 [ 152.766573][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.769420][ T5416] XFS (loop3): Mounting V5 Filesystem [ 152.801273][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.836230][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.907304][ T5416] XFS (loop3): Ending clean mount [ 152.983142][ T5427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.073499][ T4269] XFS (loop3): Unmounting Filesystem [ 153.417906][ T5439] vivid-002: disconnect [ 153.657317][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.687470][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.716347][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.940649][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.951595][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.960713][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.150189][ T5436] vivid-002: reconnect [ 154.169909][ T4335] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.366941][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 154.374368][ T4335] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 154.384634][ T4335] usb 3-1: config 0 has no interface number 0 [ 154.391848][ T4335] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.412720][ T4335] usb 3-1: config 0 interface 85 has no altsetting 0 [ 154.441864][ T4335] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 154.471607][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.480742][ T4335] usb 3-1: Product: syz [ 154.485187][ T4335] usb 3-1: Manufacturer: syz [ 154.491040][ T4335] usb 3-1: SerialNumber: syz [ 154.508784][ T4335] usb 3-1: config 0 descriptor?? [ 154.797721][ T5470] loop1: detected capacity change from 0 to 32768 [ 154.929732][ T5470] XFS (loop1): Mounting V5 Filesystem [ 154.952614][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 154.962953][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 155.008434][ T5474] device wireguard1 entered promiscuous mode [ 155.022568][ T5470] XFS (loop1): Ending clean mount [ 155.238505][ T4268] XFS (loop1): Unmounting Filesystem [ 155.421183][ T4335] appletouch 3-1:0.85: Failed to request geyser raw mode [ 155.430891][ T4335] appletouch: probe of 3-1:0.85 failed with error -5 [ 155.468275][ T4335] usb 3-1: USB disconnect, device number 6 [ 155.595986][ T5489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.643621][ T5489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.660535][ T5489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.697722][ T5489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.166595][ T5502] vivid-004: disconnect [ 156.416609][ T5492] loop3: detected capacity change from 0 to 32768 [ 156.462340][ T5492] XFS (loop3): Mounting V5 Filesystem [ 156.587165][ T5492] XFS (loop3): Ending clean mount [ 156.727346][ T4269] XFS (loop3): Unmounting Filesystem [ 156.806828][ T5523] loop4: detected capacity change from 0 to 4096 [ 156.830742][ T5523] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 156.970879][ T5499] vivid-004: reconnect [ 157.256658][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 157.265874][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 157.748777][ T5528] device wireguard1 entered promiscuous mode [ 158.055626][ T5533] Bluetooth: MGMT ver 1.22 [ 158.155359][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.183770][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.210761][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.359653][ T4321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.549898][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 158.570397][ T4321] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.578592][ T4321] usb 1-1: config 0 has no interface number 0 [ 158.593016][ T5557] vivid-008: disconnect [ 158.604182][ T4321] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.617998][ T4321] usb 1-1: config 0 interface 85 has no altsetting 0 [ 158.645649][ T4321] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.663640][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.674598][ T4321] usb 1-1: Product: syz [ 158.678904][ T4321] usb 1-1: Manufacturer: syz [ 158.687337][ T4321] usb 1-1: SerialNumber: syz [ 158.708360][ T4321] usb 1-1: config 0 descriptor?? [ 158.898539][ T5562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 158.927189][ T5562] netlink: 14 bytes leftover after parsing attributes in process `syz.3.379'. [ 159.053407][ T5554] loop1: detected capacity change from 0 to 32768 [ 159.134135][ T5554] XFS (loop1): Mounting V5 Filesystem [ 159.225878][ T5554] XFS (loop1): Ending clean mount [ 159.327315][ T4321] appletouch 1-1:0.85: Failed to request geyser raw mode [ 159.338365][ T4321] appletouch: probe of 1-1:0.85 failed with error -5 [ 159.352469][ T5552] vivid-008: reconnect [ 159.376824][ T4268] XFS (loop1): Unmounting Filesystem [ 159.383893][ T4321] usb 1-1: USB disconnect, device number 9 [ 159.866850][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.938287][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.973998][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.065030][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.078749][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.089243][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.813795][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 160.823064][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 161.165187][ T5607] loop3: detected capacity change from 0 to 512 [ 161.183639][ T5607] EXT4-fs: Ignoring removed oldalloc option [ 161.203468][ T5607] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 161.234943][ T5607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c80ee01c, mo2=0002] [ 161.250705][ T5607] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.257695][ T5607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.392: bg 0: block 361: padding at end of block bitmap is not set [ 161.275365][ T5607] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 161.300104][ T5607] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.392: attempt to clear invalid blocks 33619980 len 1 [ 161.320948][ T5607] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.392: invalid indirect mapped block 1811939328 (level 0) [ 161.379255][ T5607] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.392: invalid indirect mapped block 2185560079 (level 1) [ 161.398553][ T5607] EXT4-fs (loop3): 1 truncate cleaned up [ 161.405575][ T5607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.517665][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 161.926920][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.937126][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.945543][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.111788][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.121605][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.129325][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.139873][ T952] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.140038][ T4328] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.339705][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 162.359016][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.475038][ T4328] usb 4-1: config 0 has no interfaces? [ 162.508980][ T4328] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 162.519858][ T952] usb 1-1: Using ep0 maxpacket: 32 [ 162.555812][ T952] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 162.600893][ T952] usb 1-1: config 0 has no interface number 0 [ 162.614269][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.657415][ T952] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.810498][ T4328] usb 4-1: config 0 descriptor?? [ 162.829770][ T952] usb 1-1: config 0 interface 85 has no altsetting 0 [ 162.878298][ T952] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 162.903467][ T952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.912719][ T952] usb 1-1: Product: syz [ 162.917341][ T952] usb 1-1: Manufacturer: syz [ 162.923010][ T952] usb 1-1: SerialNumber: syz [ 162.932485][ T5634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.960003][ T952] usb 1-1: config 0 descriptor?? [ 162.972775][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 162.981994][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 163.122227][ T4335] usb 4-1: USB disconnect, device number 7 [ 163.329760][ T4343] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 163.380645][ T952] appletouch 1-1:0.85: Geyser mode initialized. [ 163.403533][ T952] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input12 [ 163.531754][ T4343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.542356][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.554625][ T4343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 163.566710][ T4343] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.573201][ T4328] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.601952][ T127] usb 1-1: USB disconnect, device number 10 [ 163.608894][ T4343] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.631659][ T4343] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.643507][ T4343] usb 2-1: Manufacturer: syz [ 163.663941][ T4343] usb 2-1: config 0 descriptor?? [ 163.681294][ T127] appletouch 1-1:0.85: input: appletouch disconnected [ 163.785541][ T4328] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.806854][ T4328] usb 5-1: config 1 interface 0 has no altsetting 0 [ 163.832176][ T5648] loop2: detected capacity change from 0 to 32768 [ 163.842837][ T4328] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.40 [ 163.852285][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.860625][ T4328] usb 5-1: Product: syz [ 163.864859][ T4328] usb 5-1: Manufacturer: syz [ 163.869969][ T4328] usb 5-1: SerialNumber: syz [ 163.937322][ T5648] XFS (loop2): Mounting V5 Filesystem [ 164.002544][ T5648] XFS (loop2): Ending clean mount [ 164.029686][ T4343] rc_core: IR keymap rc-hauppauge not found [ 164.035714][ T4343] Registered IR keymap rc-empty [ 164.049717][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.085578][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.121456][ T4328] usbhid 5-1:1.0: can't add hid device: -71 [ 164.127572][ T4328] usbhid: probe of 5-1:1.0 failed with error -71 [ 164.140581][ T4343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 164.169828][ T4328] usb 5-1: USB disconnect, device number 5 [ 164.172653][ T4343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 164.193796][ T4275] XFS (loop2): Unmounting Filesystem [ 164.253848][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.308729][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.351160][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.400065][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.430904][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.440592][ T5667] vivid-000: disconnect [ 164.460001][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.493133][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.532198][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.572117][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.609734][ T4343] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.641043][ T4343] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 164.650877][ T4343] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.669850][ T4343] usb 2-1: USB disconnect, device number 11 [ 164.720046][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.732401][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.745552][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.781582][ T5674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.811571][ T4328] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.926350][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.937272][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.964616][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.052375][ T5680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.165427][ T4328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.177994][ T4328] usb 3-1: config 1 interface 0 has no altsetting 0 [ 165.188389][ T4328] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.40 [ 165.198261][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.207894][ T4328] usb 3-1: Product: syz [ 165.218366][ T4328] usb 3-1: Manufacturer: syz [ 165.223739][ T4328] usb 3-1: SerialNumber: syz [ 165.260263][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 165.269213][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 165.287095][ T5666] vivid-000: reconnect [ 165.719869][ T5682] device wireguard2 entered promiscuous mode [ 165.947048][ T4328] usbhid 3-1:1.0: can't add hid device: -71 [ 165.999675][ T4328] usbhid: probe of 3-1:1.0 failed with error -71 [ 166.045525][ T4328] usb 3-1: USB disconnect, device number 7 [ 166.094256][ T5691] netlink: 52 bytes leftover after parsing attributes in process `syz.0.422'. [ 166.519762][ T952] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 166.532063][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.542744][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.551269][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.669841][ T4328] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 166.712064][ T952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.722494][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.733985][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 166.746225][ T952] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.760940][ T952] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.770588][ T952] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.778645][ T952] usb 4-1: Manufacturer: syz [ 166.793613][ T952] usb 4-1: config 0 descriptor?? [ 166.871651][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.882436][ T4328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.914955][ T4328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 166.945523][ T4328] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.979855][ T4328] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.989675][ T4328] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.997833][ T4328] usb 1-1: Manufacturer: syz [ 167.005313][ T4328] usb 1-1: config 0 descriptor?? [ 167.131408][ T952] rc_core: IR keymap rc-hauppauge not found [ 167.137558][ T952] Registered IR keymap rc-empty [ 167.179470][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 167.235190][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 167.300871][ T952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 167.354043][ T952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 167.580101][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 167.599595][ T4328] rc_core: IR keymap rc-hauppauge not found [ 167.606077][ T4328] Registered IR keymap rc-empty [ 167.612360][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 167.622752][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 167.692670][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 167.701726][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 167.725515][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.107689][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.126514][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.287629][ T5723] device wireguard0 entered promiscuous mode [ 168.354030][ T5710] loop1: detected capacity change from 0 to 32768 [ 168.407136][ T4328] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 168.420040][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.428015][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input15 [ 168.450676][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.476262][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.490204][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.520143][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.527292][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.555483][ T5710] XFS (loop1): Mounting V5 Filesystem [ 168.570337][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.575437][ T5734] loop2: detected capacity change from 0 to 2048 [ 168.577512][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.620505][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.640278][ T5734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.685012][ T5710] XFS (loop1): Ending clean mount [ 168.700384][ T952] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 168.707182][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.752455][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.759425][ T952] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 168.770116][ T952] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 168.790060][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.809804][ T952] usb 4-1: USB disconnect, device number 8 [ 168.836019][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.880025][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.949370][ T4268] XFS (loop1): Unmounting Filesystem [ 168.955829][ T4328] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 168.992455][ T4328] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 169.004208][ T4328] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.035502][ T4328] usb 1-1: USB disconnect, device number 11 [ 169.255769][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.352223][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.376023][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.626950][ T5763] 9pnet_fd: Insufficient options for proto=fd [ 169.677470][ T5765] loop2: detected capacity change from 0 to 256 [ 170.212703][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 170.222987][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 170.818431][ T4343] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 171.044807][ T4343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.071471][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 171.107317][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 171.145308][ T4343] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.164826][ T5789] loop1: detected capacity change from 0 to 256 [ 171.174980][ T4343] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 171.196890][ T4343] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 171.223741][ T4343] usb 5-1: Manufacturer: syz [ 171.232218][ T5789] FAT-fs (loop1): Directory bread(block 64) failed [ 171.245990][ T4343] usb 5-1: config 0 descriptor?? [ 171.253499][ T5789] FAT-fs (loop1): Directory bread(block 65) failed [ 171.267619][ T5789] FAT-fs (loop1): Directory bread(block 66) failed [ 171.278012][ T5789] FAT-fs (loop1): Directory bread(block 67) failed [ 171.301196][ T5789] FAT-fs (loop1): Directory bread(block 68) failed [ 171.308117][ T5789] FAT-fs (loop1): Directory bread(block 69) failed [ 171.322443][ T5789] FAT-fs (loop1): Directory bread(block 70) failed [ 171.329291][ T5789] FAT-fs (loop1): Directory bread(block 71) failed [ 171.357785][ T5789] FAT-fs (loop1): Directory bread(block 72) failed [ 171.378597][ T5789] FAT-fs (loop1): Directory bread(block 73) failed [ 171.729816][ T4343] rc_core: IR keymap rc-hauppauge not found [ 171.735822][ T4343] Registered IR keymap rc-empty [ 171.771153][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 171.827504][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.838633][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 171.858046][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.882307][ T4343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 171.908867][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.917527][ T4343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 171.929313][ T5796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.978782][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.019980][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.049217][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.072531][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.075064][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.120159][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.122253][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.159855][ T4320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.173764][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.203319][ T5803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.210150][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.274666][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.326778][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.349889][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 172.356917][ T4320] usb 3-1: config 0 has no interfaces? [ 172.375846][ T4320] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 172.375884][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.416128][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.439987][ T4343] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 172.455383][ T4320] usb 3-1: config 0 descriptor?? [ 172.481841][ T4343] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 172.549707][ T4343] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 172.590865][ T4343] usb 5-1: USB disconnect, device number 6 [ 172.700218][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.708977][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.807429][ T952] usb 3-1: USB disconnect, device number 8 [ 173.439720][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.649628][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 173.656838][ T4320] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 173.689682][ T4320] usb 4-1: config 0 has no interface number 0 [ 173.695966][ T4320] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.741368][ T4320] usb 4-1: config 0 interface 85 has no altsetting 0 [ 173.772244][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 173.792504][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.834809][ T4320] usb 4-1: Product: syz [ 173.839088][ T4320] usb 4-1: Manufacturer: syz [ 173.846543][ T4320] usb 4-1: SerialNumber: syz [ 173.864593][ T4320] usb 4-1: config 0 descriptor?? [ 174.047520][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.063819][ T5834] loop1: detected capacity change from 0 to 32768 [ 174.083133][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.099682][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.147440][ T26] audit: type=1800 audit(1759579097.312:20): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.470" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 174.205148][ T5842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.309203][ T4320] appletouch 4-1:0.85: Failed to read mode from device. [ 174.338329][ T4320] appletouch: probe of 4-1:0.85 failed with error -5 [ 174.370132][ T4320] usb 4-1: USB disconnect, device number 9 [ 174.524151][ T5848] bond0 (unregistering): Released all slaves [ 174.916544][ T5852] bond0 (unregistering): Released all slaves [ 175.009615][ T5858] netlink: 14 bytes leftover after parsing attributes in process `syz.2.478'. [ 175.121740][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 175.130747][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 175.799801][ T5862] device wireguard3 entered promiscuous mode [ 176.004292][ T5870] bond0 (unregistering): Released all slaves [ 176.032311][ T5874] autofs4:pid:5874:autofs_fill_super: called with bogus options [ 176.036424][ T5872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.481'. [ 176.446391][ T5889] bond0 (unregistering): Released all slaves [ 176.552775][ T5891] netlink: 14 bytes leftover after parsing attributes in process `syz.4.488'. [ 176.776938][ T5902] loop0: detected capacity change from 0 to 2048 [ 176.823247][ T5905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.494'. [ 176.871950][ T5902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.909861][ T5909] autofs4:pid:5909:autofs_fill_super: called with bogus options [ 176.992627][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.002756][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.012259][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.065762][ T5911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.119326][ T5916] bond0 (unregistering): Released all slaves [ 177.148649][ T5918] netlink: 14 bytes leftover after parsing attributes in process `syz.2.496'. [ 177.533609][ T5925] bond0 (unregistering): Released all slaves [ 177.735373][ T5932] bond0 (unregistering): Released all slaves [ 177.813160][ T5933] netlink: 14 bytes leftover after parsing attributes in process `syz.4.501'. [ 177.853315][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 178.044553][ T5945] autofs4:pid:5945:autofs_fill_super: called with bogus options [ 178.049484][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.062105][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.079070][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.096289][ T5943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.305285][ T5953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.315621][ T5953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.325119][ T5953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.343019][ T5953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.409857][ T4328] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 178.624839][ T4328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.645564][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.706253][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 178.757847][ T4328] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 178.787854][ T4328] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.807575][ T4328] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.832170][ T4328] usb 3-1: Manufacturer: syz [ 178.855570][ T4328] usb 3-1: config 0 descriptor?? [ 179.147069][ T5973] loop4: detected capacity change from 0 to 4096 [ 179.316567][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.343938][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.349028][ T5973] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 179.351986][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.375747][ T5979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.011385][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.026168][ T5973] ntfs3: loop4: Failed to load $Extend. [ 180.035372][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.045580][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.077621][ T5982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.116093][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 180.125693][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 180.710222][ T6000] loop0: detected capacity change from 0 to 2048 [ 180.780738][ T6000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.991887][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 181.010145][ T6008] bond0 (unregistering): Released all slaves [ 181.129921][ T6012] netlink: 14 bytes leftover after parsing attributes in process `syz.4.533'. [ 181.398561][ T6019] loop2: detected capacity change from 0 to 64 [ 181.438664][ T6019] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 181.453796][ T6019] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 181.469669][ T4328] rc_core: IR keymap rc-hauppauge not found [ 181.475712][ T4328] Registered IR keymap rc-empty [ 181.493452][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.531513][ T6022] loop1: detected capacity change from 0 to 2048 [ 181.549994][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.580293][ T4328] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 181.605755][ T6022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.620911][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 181.658959][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.709957][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.750046][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.793460][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.843757][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.869275][ T6029] bond0 (unregistering): Released all slaves [ 181.888577][ T6032] netlink: 14 bytes leftover after parsing attributes in process `syz.0.541'. [ 181.899796][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.929886][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 181.980082][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 182.020342][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 182.050132][ T4328] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 182.081486][ T4328] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 182.100366][ T4328] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.125903][ T6038] bond0 (unregistering): Released all slaves [ 182.134994][ T4328] usb 3-1: USB disconnect, device number 9 [ 182.579757][ T4328] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.602490][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 182.610145][ T127] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 182.769609][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 182.801522][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.833920][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.835090][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 182.846393][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.874109][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 182.886556][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.889216][ T127] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.922754][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.929695][ T127] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.949765][ T127] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.950125][ T4328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.966438][ T127] usb 5-1: Manufacturer: syz [ 182.973510][ T127] usb 5-1: config 0 descriptor?? [ 182.990874][ T4328] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.998713][ T4328] usb 3-1: can't read configurations, error -71 [ 183.957698][ T6078] netlink: 14 bytes leftover after parsing attributes in process `syz.2.558'. [ 185.689968][ T127] rc_core: IR keymap rc-hauppauge not found [ 185.695979][ T127] Registered IR keymap rc-empty [ 185.716929][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 185.759915][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 185.800464][ T127] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 185.834299][ T127] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 185.915437][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 185.949980][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 185.965691][ T6132] bond0 (unregistering): Released all slaves [ 185.979926][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.014474][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.060926][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.061943][ T6135] netlink: 14 bytes leftover after parsing attributes in process `syz.0.582'. [ 186.132045][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.191257][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.238298][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.270043][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.306339][ T127] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 186.341044][ T127] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 186.360247][ T127] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.411958][ T127] usb 5-1: USB disconnect, device number 7 [ 186.596860][ T6143] loop2: detected capacity change from 0 to 512 [ 186.703146][ T6143] EXT4-fs: Ignoring removed oldalloc option [ 186.757425][ T6143] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.800790][ T6143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c80ee01c, mo2=0002] [ 186.811281][ T6143] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.856992][ T6143] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.586: bg 0: block 361: padding at end of block bitmap is not set [ 186.922940][ T6143] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 186.940133][ T6143] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.586: attempt to clear invalid blocks 33619980 len 1 [ 186.967893][ T6143] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.586: invalid indirect mapped block 1811939328 (level 0) [ 187.014607][ T6143] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.586: invalid indirect mapped block 2185560079 (level 1) [ 187.043117][ T6143] EXT4-fs (loop2): 1 truncate cleaned up [ 187.059302][ T6143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.087991][ T6156] bond0 (unregistering): Released all slaves [ 187.278430][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 187.330639][ T127] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 187.542026][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.565152][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 187.587135][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 187.608693][ T127] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 187.640402][ T127] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.652718][ T127] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.662594][ T127] usb 1-1: Manufacturer: syz [ 187.680208][ T127] usb 1-1: config 0 descriptor?? [ 188.079639][ T127] rc_core: IR keymap rc-hauppauge not found [ 188.085766][ T127] Registered IR keymap rc-empty [ 188.094388][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.130018][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.160960][ T127] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 188.184182][ T127] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 188.213891][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.245550][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.250170][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.256814][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.273142][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.304618][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.305775][ T6177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.349881][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.379862][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.410817][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.442884][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.479903][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.530041][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.559985][ T127] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 188.591234][ T127] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.623009][ T127] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 188.681658][ T127] usb 1-1: USB disconnect, device number 12 [ 188.703056][ T6185] autofs4:pid:6185:autofs_fill_super: called with bogus options [ 188.766971][ T6189] bond0 (unregistering): Released all slaves [ 189.155886][ T6199] bond0 (unregistering): Released all slaves [ 189.305426][ T6201] netlink: 14 bytes leftover after parsing attributes in process `syz.2.606'. [ 190.351761][ T6226] autofs4:pid:6226:autofs_fill_super: called with bogus options [ 190.450132][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 190.459125][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 190.737267][ T6227] device wireguard1 entered promiscuous mode [ 192.205985][ T6258] autofs4:pid:6258:autofs_fill_super: called with bogus options [ 192.571390][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 192.580386][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 192.707302][ T6266] device wireguard2 entered promiscuous mode [ 194.059728][ T4328] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 194.250380][ T4328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.286638][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 194.318164][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 194.369702][ T4328] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 194.404862][ T4328] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.419646][ T4328] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.433148][ T6293] autofs4:pid:6293:autofs_fill_super: called with bogus options [ 194.440929][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 194.450790][ T6294] netlink: 14 bytes leftover after parsing attributes in process `syz.0.641'. [ 194.459617][ T4328] usb 2-1: Manufacturer: syz [ 194.479993][ T4328] usb 2-1: config 0 descriptor?? [ 194.769147][ T6301] loop2: detected capacity change from 0 to 64 [ 194.880555][ T6301] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 194.888472][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.895090][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.963273][ T6301] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 195.019637][ T4328] rc_core: IR keymap rc-hauppauge not found [ 195.035942][ T4328] Registered IR keymap rc-empty [ 195.041406][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.080514][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.117506][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 195.126538][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 195.399873][ T4328] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 195.415143][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 195.752726][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 195.799659][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 195.828271][ T6307] device wireguard4 entered promiscuous mode [ 195.840929][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.865220][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.888814][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.954728][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.980300][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.011219][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.027841][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.046400][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 196.060043][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.070142][ T22] usb 3-1: can't read configurations, error -71 [ 196.090201][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.140062][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.190840][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.230411][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.260607][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.300087][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.330024][ T4328] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 196.381184][ T4328] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 196.390580][ T4328] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 196.425989][ T4328] usb 2-1: USB disconnect, device number 12 [ 196.432462][ T4320] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.589946][ T4320] usb 1-1: device descriptor read/64, error -71 [ 196.651667][ T6329] autofs4:pid:6329:autofs_fill_super: called with bogus options [ 196.880011][ T4320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.041251][ T4320] usb 1-1: device descriptor read/64, error -71 [ 197.169861][ T4320] usb usb1-port1: attempt power cycle [ 197.525749][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'. [ 197.546900][ T6347] netlink: 14 bytes leftover after parsing attributes in process `syz.4.659'. [ 197.599843][ T4320] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.650911][ T4320] usb 1-1: device descriptor read/8, error -71 [ 197.942257][ T4320] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 197.950706][ T6356] loop3: detected capacity change from 0 to 512 [ 197.990448][ T4320] usb 1-1: device descriptor read/8, error -71 [ 198.026282][ T6356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.029051][ T6361] autofs4:pid:6361:autofs_fill_super: called with bogus options [ 198.102556][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 198.129970][ T4320] usb usb1-port1: unable to enumerate USB device [ 198.296978][ T6367] autofs4:pid:6367:autofs_fill_super: called with bogus options [ 198.362304][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 198.380067][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 198.422389][ T6374] netlink: 14 bytes leftover after parsing attributes in process `syz.4.668'. [ 199.335545][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 199.379688][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 199.423256][ T6401] autofs4:pid:6401:autofs_fill_super: called with bogus options [ 199.569284][ T6404] netlink: 14 bytes leftover after parsing attributes in process `syz.2.677'. [ 199.657530][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 199.666526][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 200.014372][ T6409] device wireguard2 entered promiscuous mode [ 200.487840][ T6419] loop4: detected capacity change from 0 to 512 [ 200.558806][ T6419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.599178][ T6419] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.690794][ T6426] loop1: detected capacity change from 0 to 512 [ 200.733078][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 200.797413][ T6426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.035583][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 201.191424][ T4328] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.221422][ T6444] autofs4:pid:6444:autofs_fill_super: called with bogus options [ 201.535241][ T6453] loop1: detected capacity change from 0 to 512 [ 201.536154][ T4328] usb 3-1: device descriptor read/64, error -71 [ 201.806815][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 201.816024][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 201.892905][ T4328] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.071888][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 202.078331][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 202.087892][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 202.095384][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 202.106617][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 202.300644][ T6453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.345461][ T6453] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.479699][ T4328] usb 3-1: device descriptor read/64, error -71 [ 202.599780][ T4328] usb usb3-port1: attempt power cycle [ 202.606598][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 203.009765][ T4328] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.030278][ T6489] autofs4:pid:6489:autofs_fill_super: called with bogus options [ 203.050378][ T4328] usb 3-1: device descriptor read/8, error -71 [ 203.308439][ T6496] loop1: detected capacity change from 0 to 512 [ 203.391968][ T6496] EXT4-fs: Ignoring removed oldalloc option [ 203.440188][ T4328] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 203.504243][ T6498] __nla_validate_parse: 1 callbacks suppressed [ 203.504288][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 203.519954][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 203.537559][ T4328] usb 3-1: device descriptor read/8, error -71 [ 203.865391][ T4328] usb usb3-port1: unable to enumerate USB device [ 203.883162][ T6498] device wireguard5 entered promiscuous mode [ 203.987404][ T6496] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 204.237892][ T6496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c80ee01c, mo2=0002] [ 204.247713][ T6496] EXT4-fs (loop1): orphan cleanup on readonly fs [ 204.260592][ T6496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.711: bg 0: block 361: padding at end of block bitmap is not set [ 204.336487][ T6496] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 204.361133][ T6496] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.711: attempt to clear invalid blocks 33619980 len 1 [ 204.371081][ T6509] loop2: detected capacity change from 0 to 512 [ 204.393712][ T6496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.711: invalid indirect mapped block 1811939328 (level 0) [ 204.422820][ T6496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.711: invalid indirect mapped block 2185560079 (level 1) [ 204.437869][ T6496] EXT4-fs (loop1): 1 truncate cleaned up [ 204.444513][ T6496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.465531][ T6509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.480550][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 204.550664][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 204.568797][ T6509] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.796588][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 204.975625][ T6526] autofs4:pid:6526:autofs_fill_super: called with bogus options [ 205.498891][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 205.508004][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 205.909726][ T6544] device wireguard0 entered promiscuous mode [ 206.289854][ T4375] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.357491][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 206.429625][ T6556] loop1: detected capacity change from 0 to 512 [ 206.440903][ T6556] EXT4-fs: Ignoring removed oldalloc option [ 206.479680][ T4375] usb 5-1: device descriptor read/64, error -71 [ 206.495422][ T6556] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 206.558390][ T6556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c80ee01c, mo2=0002] [ 206.580985][ T6556] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.610226][ T6556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.732: bg 0: block 361: padding at end of block bitmap is not set [ 206.633531][ T6563] loop0: detected capacity change from 0 to 64 [ 206.666807][ T6563] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 206.716137][ T6556] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 206.736751][ T6556] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.732: attempt to clear invalid blocks 33619980 len 1 [ 206.749700][ T4375] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.785133][ T6563] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop0 [ 206.816487][ T6556] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.732: invalid indirect mapped block 1811939328 (level 0) [ 206.881439][ T6556] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.732: invalid indirect mapped block 2185560079 (level 1) [ 206.909650][ T4375] usb 5-1: device descriptor read/64, error -71 [ 206.918548][ T6556] EXT4-fs (loop1): 1 truncate cleaned up [ 206.926764][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.996414][ T6567] autofs4:pid:6567:autofs_fill_super: called with bogus options [ 207.040043][ T4375] usb usb5-port1: attempt power cycle [ 207.129777][ T22] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.194898][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 207.325260][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 207.346981][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.367465][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.382627][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.395944][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.411187][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.442027][ T22] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 207.455669][ T4375] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.468168][ T22] usb 1-1: can't read configurations, error -71 [ 207.494984][ T4375] usb 5-1: device descriptor read/8, error -71 [ 207.533047][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 207.545507][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 207.639383][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 207.661699][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.671976][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.680612][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.779700][ T4375] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.840369][ T4375] usb 5-1: device descriptor read/8, error -71 [ 207.907439][ T6591] autofs4:pid:6591:autofs_fill_super: called with bogus options [ 207.964768][ T4375] usb usb5-port1: unable to enumerate USB device [ 208.286350][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 208.543556][ T6613] __nla_validate_parse: 2 callbacks suppressed [ 208.543575][ T6613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.759'. [ 208.663434][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 208.691739][ T6619] netlink: 14 bytes leftover after parsing attributes in process `syz.4.762'. [ 208.703449][ T6621] autofs4:pid:6621:autofs_fill_super: called with bogus options [ 209.019177][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 209.189709][ T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 209.255977][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 209.282365][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 209.359660][ T22] usb 3-1: device descriptor read/64, error -71 [ 209.496564][ T6645] autofs4:pid:6645:autofs_fill_super: called with bogus options [ 209.639869][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.908253][ T22] usb 3-1: device descriptor read/64, error -71 [ 210.039595][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 210.048684][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 210.068408][ T22] usb usb3-port1: attempt power cycle [ 210.074475][ T4321] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 210.183576][ T6662] device wireguard1 entered promiscuous mode [ 210.380312][ T4321] usb 1-1: device descriptor read/64, error -71 [ 210.709606][ T22] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.717547][ T4321] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 210.771842][ T22] usb 3-1: device descriptor read/8, error -71 [ 210.819736][ T4343] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 210.875113][ T4321] usb 1-1: device descriptor read/64, error -71 [ 211.001196][ T4321] usb usb1-port1: attempt power cycle [ 211.021371][ T4343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.039801][ T4343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 211.049720][ T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 211.050939][ T4343] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 211.069423][ T4343] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 211.090710][ T4343] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 211.103735][ T4343] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 211.116221][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.120732][ T4343] usb 4-1: Manufacturer: syz [ 211.131998][ T4343] usb 4-1: config 0 descriptor?? [ 211.138058][ T22] usb 3-1: device descriptor read/8, error -71 [ 211.154496][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.165391][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.284214][ T22] usb usb3-port1: unable to enumerate USB device [ 211.439770][ T4321] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 211.496786][ T4321] usb 1-1: device descriptor read/8, error -71 [ 211.770224][ T4321] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 211.823010][ T4321] usb 1-1: device descriptor read/8, error -71 [ 211.938618][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 211.950102][ T4321] usb usb1-port1: unable to enumerate USB device [ 212.036391][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 212.047520][ T6679] fuse: Unknown parameter '0000000000000000000' [ 212.603822][ T6697] fuse: Bad value for 'fd' [ 212.765379][ T6702] loop2: detected capacity change from 0 to 512 [ 212.793853][ T6703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.865120][ T6703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.885250][ T4321] usb 4-1: USB disconnect, device number 10 [ 212.896272][ T6703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.910793][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.076051][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 213.189612][ T4375] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 213.369842][ T4375] usb 1-1: device descriptor read/64, error -71 [ 213.639689][ T4375] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 213.658927][ T6717] __nla_validate_parse: 2 callbacks suppressed [ 213.658948][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'. [ 213.774221][ T6719] fuse: Unknown parameter '0000000000000000000' [ 213.830994][ T4375] usb 1-1: device descriptor read/64, error -71 [ 213.974047][ T4375] usb usb1-port1: attempt power cycle [ 213.998612][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 214.305752][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.326668][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.345372][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.420448][ T4375] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 214.439755][ T4343] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 214.471485][ T4375] usb 1-1: device descriptor read/8, error -71 [ 214.599602][ T4343] usb 5-1: device descriptor read/64, error -71 [ 214.749650][ T4375] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 214.801968][ T4375] usb 1-1: device descriptor read/8, error -71 [ 214.899792][ T4343] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 214.930688][ T4375] usb usb1-port1: unable to enumerate USB device [ 215.059651][ T4343] usb 5-1: device descriptor read/64, error -71 [ 215.179769][ T4343] usb usb5-port1: attempt power cycle [ 215.487511][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 215.593268][ T4343] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 215.622755][ T6746] bond2 (unregistering): Released all slaves [ 215.630303][ T4343] usb 5-1: device descriptor read/8, error -71 [ 215.655675][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 215.666929][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 215.749952][ T6752] fuse: Bad value for 'fd' [ 215.899870][ T4343] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 215.940473][ T4343] usb 5-1: device descriptor read/8, error -71 [ 216.070947][ T4343] usb usb5-port1: unable to enumerate USB device [ 216.267307][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.311944][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.344523][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.554949][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.594451][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.604568][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.589002][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.644468][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.654780][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.741401][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 218.750360][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 219.292957][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 219.325524][ T6802] loop3: detected capacity change from 0 to 256 [ 219.346370][ T6802] exfat: Deprecated parameter 'utf8' [ 219.350270][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 219.381264][ T6802] exfat: Deprecated parameter 'utf8' [ 219.386757][ T6802] exfat: Deprecated parameter 'utf8' [ 219.415721][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 219.423512][ T6802] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 219.769769][ T4343] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 219.786861][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.847371][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.909343][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.971397][ T4343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.017609][ T4343] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.067002][ T4343] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.090631][ T4343] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.109427][ T4343] usb 2-1: Manufacturer: syz [ 220.130426][ T4343] usb 2-1: config 0 descriptor?? [ 220.194398][ T6819] loop2: detected capacity change from 0 to 64 [ 220.291218][ T6819] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 220.344010][ T4342] usb 2-1: USB disconnect, device number 13 [ 220.396918][ T6819] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 220.839604][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 220.872164][ T6825] bond3 (unregistering): Released all slaves [ 221.021089][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 221.032242][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.847'. [ 221.054534][ T6832] netlink: 14 bytes leftover after parsing attributes in process `syz.0.847'. [ 221.137991][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.165899][ T6833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.185709][ T6833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.202118][ T6833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.237448][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.363957][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.429391][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.476284][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.499318][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 221.529767][ T22] usb 3-1: can't read configurations, error -71 [ 221.563580][ T6838] loop3: detected capacity change from 0 to 4096 [ 221.646399][ T6841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.679008][ T26] audit: type=1800 audit(1759579144.842:21): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.848" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 221.709264][ T26] audit: type=1800 audit(1759579144.872:22): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.848" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 221.986159][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.850'. [ 222.204940][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 222.243367][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 222.515583][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.570480][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.587485][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.676714][ T6859] loop3: detected capacity change from 0 to 128 [ 222.713580][ T6859] EXT4-fs: Ignoring removed nobh option [ 222.787016][ T6859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.799162][ T6859] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.613391][ T26] audit: type=1804 audit(1759579146.782:23): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.856" name="/newroot/178/mnt/bus" dev="loop3" ino=12 res=1 errno=0 [ 223.861177][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 224.101662][ T6872] fuse: Bad value for 'fd' [ 224.325296][ T6881] loop1: detected capacity change from 0 to 4096 [ 224.369720][ T22] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 224.413736][ T6882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.448556][ T26] audit: type=1800 audit(1759579147.612:24): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.861" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 224.454373][ T6884] __nla_validate_parse: 2 callbacks suppressed [ 224.454397][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 224.529727][ T26] audit: type=1800 audit(1759579147.652:25): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.861" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 224.568139][ T6884] netlink: 14 bytes leftover after parsing attributes in process `syz.4.862'. [ 224.581438][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.598722][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.655539][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.689759][ T22] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.698968][ T22] usb 4-1: Manufacturer: syz [ 224.752292][ T22] usb 4-1: config 0 descriptor?? [ 224.920903][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.935662][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.965003][ T4321] usb 4-1: USB disconnect, device number 11 [ 224.977479][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.019627][ T4335] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.209960][ T4335] usb 2-1: Using ep0 maxpacket: 8 [ 225.257894][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.484418][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.554564][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 225.563686][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 225.809459][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.276899][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.410380][ T4335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.442171][ T4335] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 226.488695][ T4335] usb 2-1: can't read configurations, error -71 [ 226.743370][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.766541][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.788221][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.899358][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 226.912908][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 227.200928][ T6917] autofs4:pid:6917:autofs_fill_super: called with bogus options [ 227.300446][ T6920] bond0 (unregistering): Released all slaves [ 227.516761][ T6925] loop0: detected capacity change from 0 to 128 [ 227.570935][ T6925] EXT4-fs: Ignoring removed nobh option [ 227.613902][ T6925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.644468][ T6925] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.722856][ T26] audit: type=1804 audit(1759579150.892:26): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.875" name="/newroot/180/mnt/bus" dev="loop0" ino=12 res=1 errno=0 [ 228.041241][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.064908][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.089362][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.199875][ T127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.384920][ T6936] fuse: Bad value for 'fd' [ 228.401286][ T127] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.435012][ T127] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.478530][ T127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.662152][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.711637][ T6932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.749109][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 228.758074][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 229.664254][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 229.908919][ T4375] usb 4-1: USB disconnect, device number 12 [ 230.067292][ T6948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.085107][ T6960] autofs4:pid:6960:autofs_fill_super: called with bogus options [ 230.126542][ T6948] bond0: (slave bond4): Enslaving as an active interface with an up link [ 230.234766][ T6955] bond0 (unregistering): Released all slaves [ 230.762893][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 231.166326][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.895'. [ 231.179770][ T4321] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 231.207611][ T6987] loop0: detected capacity change from 0 to 4096 [ 231.281071][ T6990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.323178][ T26] audit: type=1800 audit(1759579154.492:27): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.894" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 231.381484][ T4321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.395603][ T6992] autofs4:pid:6992:autofs_fill_super: called with bogus options [ 231.399814][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 231.439591][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 231.471232][ T4321] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 231.522889][ T4321] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.559570][ T4321] usb 3-1: Manufacturer: syz [ 231.620563][ T4321] usb 3-1: config 0 descriptor?? [ 231.835637][ T4321] usb 3-1: USB disconnect, device number 24 [ 231.842216][ T7001] loop4: detected capacity change from 0 to 128 [ 231.870793][ T7001] EXT4-fs: Ignoring removed nobh option [ 231.922346][ T7001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.934001][ T7001] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.963498][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.984461][ T26] audit: type=1804 audit(1759579155.152:28): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.902" name="/newroot/165/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 232.018783][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.026764][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.188528][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 232.604898][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.612659][ T7011] loop3: detected capacity change from 0 to 128 [ 232.632649][ T7011] EXT4-fs: Ignoring removed nobh option [ 232.666543][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.699925][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.713723][ T7011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.729177][ T7011] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.773909][ T26] audit: type=1804 audit(1759579155.942:29): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.905" name="/newroot/185/mnt/bus" dev="loop3" ino=12 res=1 errno=0 [ 232.829694][ T127] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 233.033758][ T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.076428][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 233.085502][ T127] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 233.097436][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 233.154948][ T127] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.196617][ T127] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.205514][ T127] usb 3-1: Manufacturer: syz [ 233.213296][ T127] usb 3-1: config 0 descriptor?? [ 233.373405][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 233.408949][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.419166][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.428980][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.447486][ T127] usb 3-1: USB disconnect, device number 25 [ 233.523934][ T7016] loop4: detected capacity change from 0 to 4096 [ 233.619291][ T7019] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.657067][ T26] audit: type=1800 audit(1759579156.822:30): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.906" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 233.757754][ T26] audit: type=1800 audit(1759579156.862:31): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.906" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 233.927652][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 234.092365][ T7026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.158108][ T7026] bond0: (slave bond1): Enslaving as an active interface with an up link [ 234.228235][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 234.269129][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 234.406925][ T7038] loop3: detected capacity change from 0 to 64 [ 234.421012][ T7038] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 234.496023][ T7038] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3 [ 234.595468][ T7042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.616969][ T7042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.641443][ T7042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.715024][ T7047] loop2: detected capacity change from 0 to 128 [ 234.723717][ T7047] EXT4-fs: Ignoring removed nobh option [ 234.743316][ T7047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.757030][ T7047] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.800015][ T4328] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 234.826409][ T26] audit: type=1804 audit(1759579157.992:32): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.921" name="/newroot/174/mnt/bus" dev="loop2" ino=12 res=1 errno=0 [ 235.039603][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 235.072604][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.090237][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.099048][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 235.138173][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.178125][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.191722][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.218610][ T4328] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.231316][ T4328] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 235.239694][ T4328] usb 4-1: can't read configurations, error -71 [ 235.248709][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.258632][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.552167][ T7056] loop1: detected capacity change from 0 to 4096 [ 235.615488][ T7059] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.647488][ T26] audit: type=1800 audit(1759579158.812:33): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 235.688649][ T26] audit: type=1800 audit(1759579158.852:34): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 235.718937][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 235.795114][ T4342] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 235.935101][ T7064] loop3: detected capacity change from 0 to 128 [ 235.967175][ T7064] EXT4-fs: Ignoring removed nobh option [ 235.984845][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 235.996259][ T4342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.011482][ T4342] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 236.036388][ T7064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.055624][ T4342] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.078078][ T7064] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.103102][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'. [ 236.121660][ T4342] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.131409][ T26] audit: type=1804 audit(1759579159.292:35): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.928" name="/newroot/188/mnt/bus" dev="loop3" ino=12 res=1 errno=0 [ 236.152571][ T4342] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.160714][ T4342] usb 1-1: Manufacturer: syz [ 236.169359][ T4342] usb 1-1: config 0 descriptor?? [ 236.250502][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 236.404153][ T4328] usb 1-1: USB disconnect, device number 27 [ 236.533997][ T7077] loop1: detected capacity change from 0 to 128 [ 236.568512][ T7077] EXT4-fs: Ignoring removed nobh option [ 236.602526][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.618507][ T7077] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.653528][ T26] audit: type=1804 audit(1759579159.822:36): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.933" name="/newroot/201/mnt/bus" dev="loop1" ino=12 res=1 errno=0 [ 237.005049][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 237.097093][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 237.253411][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.297662][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.323158][ T7087] loop0: detected capacity change from 0 to 64 [ 237.340056][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.390809][ T7087] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 237.421470][ T7087] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop0 [ 237.569242][ T7088] loop3: detected capacity change from 0 to 4096 [ 237.676675][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 237.727947][ T7089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.749982][ T26] audit: type=1800 audit(1759579160.912:37): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.938" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 237.799736][ T4328] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 237.855796][ T26] audit: type=1800 audit(1759579160.952:38): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.938" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 238.007264][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 238.019195][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 238.062040][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.091097][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 238.111858][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.145870][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.180012][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.236131][ T4328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.276971][ T4328] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 238.299638][ T4328] usb 1-1: can't read configurations, error -71 [ 238.580454][ T7111] loop4: detected capacity change from 0 to 128 [ 238.594181][ T7111] EXT4-fs: Ignoring removed nobh option [ 238.654242][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 238.663299][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 238.787133][ T7112] device wireguard3 entered promiscuous mode [ 238.854789][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.029065][ T7111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.264762][ T7111] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.276302][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 239.285161][ T22] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 239.324568][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.404530][ T22] usb 2-1: config 0 has no interface number 0 [ 239.436946][ T22] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.457637][ T22] usb 2-1: config 0 interface 85 has no altsetting 0 [ 239.468623][ T26] audit: type=1804 audit(1759579162.632:39): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.949" name="/newroot/173/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 239.499888][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 239.516069][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.524952][ T22] usb 2-1: Product: syz [ 239.529304][ T22] usb 2-1: Manufacturer: syz [ 239.534425][ T22] usb 2-1: SerialNumber: syz [ 239.543085][ T22] usb 2-1: config 0 descriptor?? [ 239.727978][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 239.857705][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.877980][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.886500][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.944666][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 240.929721][ T22] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 241.150709][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 241.159129][ T22] usb 1-1: config 0 has no interfaces? [ 241.159761][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.956'. [ 241.194983][ T22] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 241.224711][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.262282][ T22] usb 1-1: Product: syz [ 241.276325][ T22] usb 1-1: Manufacturer: syz [ 241.306183][ T22] usb 1-1: SerialNumber: syz [ 241.337191][ T22] usb 1-1: config 0 descriptor?? [ 241.608350][ T4321] usb 2-1: USB disconnect, device number 16 [ 241.652460][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.703866][ T7147] loop2: detected capacity change from 0 to 64 [ 241.858073][ T7145] loop4: detected capacity change from 0 to 32768 [ 241.889128][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.897955][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.915706][ T7145] XFS (loop4): Mounting V5 Filesystem [ 241.930457][ T7147] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 242.005898][ T7145] XFS (loop4): Ending clean mount [ 242.018665][ T7145] XFS (loop4): Quotacheck needed: Please wait. [ 242.083946][ T7147] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 242.163014][ T7145] XFS (loop4): Quotacheck: Done. [ 242.344367][ T4266] XFS (loop4): Unmounting Filesystem [ 242.526568][ T4321] usb 1-1: USB disconnect, device number 30 [ 242.532937][ T22] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 242.749756][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 242.780136][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.826790][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.861533][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.914137][ T7159] fuse: Bad value for 'fd' [ 242.919997][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.964896][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.997238][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 243.019059][ T22] usb 3-1: can't read configurations, error -71 [ 243.058446][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 243.341850][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.353108][ T7157] loop1: detected capacity change from 0 to 32768 [ 243.367948][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.398890][ T26] audit: type=1800 audit(1759579166.562:40): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.963" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 243.444255][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.659705][ T4328] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 243.719581][ T4321] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 243.879799][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 243.888568][ T4328] usb 1-1: config 0 has no interfaces? [ 243.916102][ T4328] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 243.927407][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.948388][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 243.948517][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.989803][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 244.001768][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.971'. [ 244.024886][ T4321] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.042927][ T4328] usb 1-1: Product: syz [ 244.050975][ T4321] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.059345][ T4328] usb 1-1: Manufacturer: syz [ 244.079167][ T4328] usb 1-1: SerialNumber: syz [ 244.084380][ T4321] usb 5-1: Manufacturer: syz [ 244.104381][ T4328] usb 1-1: config 0 descriptor?? [ 244.130527][ T4321] usb 5-1: config 0 descriptor?? [ 244.312576][ T7183] loop1: detected capacity change from 0 to 256 [ 244.347896][ T4328] usb 5-1: USB disconnect, device number 16 [ 244.377936][ T7183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 244.414357][ T4321] usb 1-1: USB disconnect, device number 31 [ 244.736632][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 245.524644][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.567263][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.581075][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.787383][ T7200] bond0: (slave bond4): Releasing backup interface [ 246.019690][ T4328] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 246.063321][ T7202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.116477][ T7202] bond0: (slave bond5): Enslaving as an active interface with an up link [ 246.165394][ T7199] loop0: detected capacity change from 0 to 32768 [ 246.211605][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.241120][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 246.254864][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 246.255650][ T26] audit: type=1800 audit(1759579169.372:41): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.982" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 246.268263][ T4328] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 246.330900][ T4328] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.376706][ T4328] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.424620][ T4328] usb 4-1: Manufacturer: syz [ 246.473765][ T4328] usb 4-1: config 0 descriptor?? [ 246.484208][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.986'. [ 246.925194][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 246.993954][ T7216] loop1: detected capacity change from 0 to 4096 [ 247.049610][ T4328] rc_core: IR keymap rc-hauppauge not found [ 247.055604][ T4328] Registered IR keymap rc-empty [ 247.075044][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.105005][ T7226] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.130009][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.154938][ T26] audit: type=1800 audit(1759579170.322:42): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.988" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 247.180484][ T4328] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 247.220779][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 247.286832][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.340155][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.359630][ T127] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 247.379818][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.409871][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.446368][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.490020][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.539960][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.569907][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.581632][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.607698][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.620081][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.650589][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.660445][ T4328] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 247.674480][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.690873][ T4328] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 247.710962][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.730742][ T4328] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 247.746556][ T127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.768567][ T4328] usb 4-1: USB disconnect, device number 15 [ 247.813935][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.826688][ T127] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.872879][ T127] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.884035][ T127] usb 5-1: Manufacturer: syz [ 247.905757][ T127] usb 5-1: config 0 descriptor?? [ 247.956162][ T7235] bond0: (slave bond1): Releasing backup interface [ 248.004496][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 248.016303][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 248.125132][ T127] usb 5-1: USB disconnect, device number 17 [ 248.469281][ T7243] loop0: detected capacity change from 0 to 64 [ 248.507296][ T7243] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 248.524426][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 248.551960][ T7243] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop0 [ 248.648935][ T7249] bond0 (unregistering): Released all slaves [ 248.874173][ T127] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 249.004768][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.028614][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.037162][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.072310][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 249.164140][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.232719][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.249859][ T4335] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 249.304971][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.326181][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.370041][ T127] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.392769][ T127] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 249.439785][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 249.445758][ T127] usb 1-1: can't read configurations, error -71 [ 249.454462][ T4335] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 249.486452][ T4335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.554152][ T4335] usb 3-1: config 0 has no interface number 0 [ 249.577733][ T4335] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.621042][ T4335] usb 3-1: config 0 interface 85 has no altsetting 0 [ 249.685806][ T4335] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 249.739683][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.771005][ T4335] usb 3-1: Product: syz [ 249.775235][ T4335] usb 3-1: Manufacturer: syz [ 249.805018][ T7268] loop1: detected capacity change from 0 to 256 [ 249.832884][ T4335] usb 3-1: SerialNumber: syz [ 249.867880][ T7268] exfat: Deprecated parameter 'utf8' [ 249.894496][ T4335] usb 3-1: config 0 descriptor?? [ 249.947736][ T7268] exfat: Deprecated parameter 'utf8' [ 249.984628][ T7268] exfat: Deprecated parameter 'utf8' [ 250.035902][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 250.045097][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 250.079043][ T7268] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 250.169701][ T4342] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 250.371495][ T4342] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.393124][ T4342] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.405588][ T4342] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.415690][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.437314][ T7270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.590364][ T4328] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 250.619648][ T127] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 250.727021][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 250.736079][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 250.858952][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.091630][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.355724][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 251.367883][ T4328] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 251.383888][ T7283] device wireguard2 entered promiscuous mode [ 251.451499][ T127] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.463269][ T127] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.474051][ T127] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.487778][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.519148][ T4328] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 251.529617][ T4328] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 251.537721][ T4328] usb 5-1: Manufacturer: syz [ 251.545325][ T7278] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 251.545481][ T4328] usb 5-1: config 0 descriptor?? [ 251.646320][ T7288] loop1: detected capacity change from 0 to 256 [ 251.696715][ T4342] usb 4-1: USB disconnect, device number 16 [ 251.742830][ T7288] FAT-fs (loop1): Directory bread(block 64) failed [ 251.750940][ T7288] FAT-fs (loop1): Directory bread(block 65) failed [ 251.761537][ T7288] FAT-fs (loop1): Directory bread(block 66) failed [ 251.768161][ T7288] FAT-fs (loop1): Directory bread(block 67) failed [ 251.846378][ T7288] FAT-fs (loop1): Directory bread(block 68) failed [ 251.891343][ T7288] FAT-fs (loop1): Directory bread(block 69) failed [ 251.899382][ T7288] FAT-fs (loop1): Directory bread(block 70) failed [ 251.906510][ T4321] usb 1-1: USB disconnect, device number 33 [ 251.961954][ T7288] FAT-fs (loop1): Directory bread(block 71) failed [ 251.970338][ T7288] FAT-fs (loop1): Directory bread(block 72) failed [ 251.987121][ T7288] FAT-fs (loop1): Directory bread(block 73) failed [ 252.029805][ T4328] rc_core: IR keymap rc-hauppauge not found [ 252.038924][ T4328] Registered IR keymap rc-empty [ 252.050156][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.058604][ T4335] usb 3-1: USB disconnect, device number 28 [ 252.087757][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.130272][ T4328] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 252.163000][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 252.293290][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.338628][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.349810][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.379946][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.386626][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.416201][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.440121][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.480034][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.519875][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.551169][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.579896][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.609452][ T7295] bond0: (slave bond5): Releasing backup interface [ 252.613911][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.683583][ T4328] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 252.800566][ T4328] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 252.821796][ T7298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.851336][ T7298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.867191][ T4328] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.920722][ T4328] usb 5-1: USB disconnect, device number 18 [ 252.996492][ T7298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.294475][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 253.581902][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 253.635530][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 253.821473][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 253.915190][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 253.924254][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 254.109571][ T4342] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 254.349727][ T4342] usb 3-1: Using ep0 maxpacket: 32 [ 254.668145][ T4342] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 254.700101][ T4342] usb 3-1: config 0 has no interface number 0 [ 254.706311][ T4342] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.737701][ T4342] usb 3-1: config 0 interface 85 has no altsetting 0 [ 254.877900][ T4342] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 254.887727][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.896991][ T4342] usb 3-1: Product: syz [ 254.901307][ T4342] usb 3-1: Manufacturer: syz [ 254.907243][ T4342] usb 3-1: SerialNumber: syz [ 254.914353][ T4342] usb 3-1: config 0 descriptor?? [ 254.922408][ T4342] appletouch 3-1:0.85: Could not find int-in endpoint [ 254.931111][ T4342] appletouch: probe of 3-1:0.85 failed with error -5 [ 254.943821][ T4342] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 255.123121][ T4335] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.151871][ T127] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 255.350653][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 255.359836][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 255.568429][ T4342] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 255.610857][ T7338] device wireguard3 entered promiscuous mode [ 255.839945][ T4342] usb 5-1: Using ep0 maxpacket: 8 [ 255.859337][ T4342] usb 5-1: config 0 has no interfaces? [ 255.969158][ T4342] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 255.981178][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.993292][ T4342] usb 5-1: Product: syz [ 255.997694][ T4342] usb 5-1: Manufacturer: syz [ 256.005614][ T4342] usb 5-1: SerialNumber: syz [ 256.037863][ T4342] usb 5-1: config 0 descriptor?? [ 256.113001][ T4335] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.124564][ T4335] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.134843][ T4335] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.144198][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.152801][ T127] usb 1-1: device descriptor read/64, error -71 [ 256.162752][ T7325] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 256.260013][ T4342] usb 5-1: USB disconnect, device number 19 [ 256.313146][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.319693][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.419749][ T127] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 256.440269][ T4389] usb 4-1: USB disconnect, device number 17 [ 256.579686][ T127] usb 1-1: device descriptor read/64, error -71 [ 256.677107][ T4389] usb 3-1: USB disconnect, device number 29 [ 256.700094][ T127] usb usb1-port1: attempt power cycle [ 256.742907][ T7345] loop2: detected capacity change from 0 to 256 [ 256.784726][ T7345] FAT-fs (loop2): Directory bread(block 64) failed [ 256.797271][ T7345] FAT-fs (loop2): Directory bread(block 65) failed [ 256.808678][ T7345] FAT-fs (loop2): Directory bread(block 66) failed [ 256.823003][ T7345] FAT-fs (loop2): Directory bread(block 67) failed [ 256.833223][ T7345] FAT-fs (loop2): Directory bread(block 68) failed [ 256.842292][ T7345] FAT-fs (loop2): Directory bread(block 69) failed [ 256.849112][ T7345] FAT-fs (loop2): Directory bread(block 70) failed [ 256.873031][ T7345] FAT-fs (loop2): Directory bread(block 71) failed [ 256.882144][ T7345] FAT-fs (loop2): Directory bread(block 72) failed [ 256.894661][ T7345] FAT-fs (loop2): Directory bread(block 73) failed [ 257.032273][ T4335] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 257.119635][ T127] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 257.160648][ T127] usb 1-1: device descriptor read/8, error -71 [ 257.191130][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 257.231545][ T4335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.246169][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 257.252684][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.257640][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 257.276159][ T4335] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 257.293712][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.302742][ T4335] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.309799][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.312323][ T4335] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.327564][ T4335] usb 2-1: Manufacturer: syz [ 257.344884][ T4335] usb 2-1: config 0 descriptor?? [ 257.439743][ T127] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 257.481086][ T127] usb 1-1: device descriptor read/8, error -71 [ 257.508698][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 257.599852][ T127] usb usb1-port1: unable to enumerate USB device [ 257.869743][ T4335] rc_core: IR keymap rc-hauppauge not found [ 257.876145][ T4335] Registered IR keymap rc-empty [ 257.899609][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 257.940329][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 257.996384][ T4335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 258.044197][ T4335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 258.129692][ T4375] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.138569][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.149754][ T4342] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 258.179758][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.210060][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.249395][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.280101][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.319979][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.326238][ T7372] loop0: detected capacity change from 0 to 32768 [ 258.339638][ T4375] usb 5-1: Using ep0 maxpacket: 16 [ 258.349651][ T4342] usb 3-1: Using ep0 maxpacket: 32 [ 258.350395][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.362316][ T4375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.364274][ T4342] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 258.403523][ T4375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.403988][ T26] audit: type=1800 audit(1759579181.572:43): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1044" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 258.433417][ T4375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.446061][ T4342] usb 3-1: config 0 has no interface number 0 [ 258.447367][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.454412][ T4342] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.462411][ T4375] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 258.489840][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.500302][ T4342] usb 3-1: config 0 interface 85 has no altsetting 0 [ 258.510638][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.525700][ T4342] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 258.530063][ T4335] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 258.538432][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.552937][ T4375] usb 5-1: config 0 descriptor?? [ 258.588778][ T4342] usb 3-1: Product: syz [ 258.594782][ T4335] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 258.601346][ T4342] usb 3-1: Manufacturer: syz [ 258.614674][ T4335] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 258.625281][ T4342] usb 3-1: SerialNumber: syz [ 258.645358][ T4342] usb 3-1: config 0 descriptor?? [ 258.662479][ T4335] usb 2-1: USB disconnect, device number 17 [ 258.691234][ T4342] appletouch 3-1:0.85: Could not find int-in endpoint [ 258.717299][ T4342] appletouch: probe of 3-1:0.85 failed with error -5 [ 258.739871][ T4342] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 258.970890][ T4375] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 258.988115][ T4375] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 258.996923][ T4375] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 259.004640][ T4375] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 259.032019][ T4375] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 259.039410][ T107] ================================================================== [ 259.047556][ T107] BUG: KASAN: use-after-free in jfs_lazycommit+0x74f/0xa50 [ 259.054834][ T107] Read of size 4 at addr ffff88807b514094 by task jfsCommit/107 [ 259.062516][ T107] [ 259.064891][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 259.072127][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.083030][ T107] Call Trace: [ 259.086354][ T107] [ 259.089315][ T107] dump_stack_lvl+0x168/0x22e [ 259.094052][ T107] ? __lock_acquire+0x7c50/0x7c50 [ 259.099221][ T107] ? show_regs_print_info+0x12/0x12 [ 259.104482][ T107] ? load_image+0x3b0/0x3b0 [ 259.109045][ T107] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 259.114484][ T107] ? __virt_addr_valid+0x188/0x540 [ 259.119638][ T107] ? __virt_addr_valid+0x465/0x540 [ 259.124790][ T107] ? jfs_lazycommit+0x74f/0xa50 [ 259.129680][ T107] print_report+0xa8/0x210 [ 259.134142][ T107] kasan_report+0x10b/0x140 [ 259.138750][ T107] ? jfs_lazycommit+0x74f/0xa50 [ 259.143658][ T107] jfs_lazycommit+0x74f/0xa50 [ 259.148386][ T107] ? txFreelock+0x5a0/0x5a0 [ 259.152941][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 259.158911][ T107] ? do_task_dead+0xd0/0xd0 [ 259.163562][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 259.169509][ T107] ? __kthread_parkme+0x162/0x1c0 [ 259.174603][ T107] kthread+0x29d/0x330 [ 259.178734][ T107] ? txFreelock+0x5a0/0x5a0 [ 259.183285][ T107] ? kthread_blkcg+0xd0/0xd0 [ 259.187942][ T107] ret_from_fork+0x1f/0x30 [ 259.192435][ T107] [ 259.195674][ T107] [ 259.198053][ T107] Allocated by task 7372: [ 259.202415][ T107] kasan_set_track+0x4b/0x70 [ 259.207062][ T107] __kasan_kmalloc+0x8e/0xa0 [ 259.211705][ T107] jfs_fill_super+0xd2/0xac0 [ 259.216352][ T107] mount_bdev+0x287/0x3c0 [ 259.220722][ T107] legacy_get_tree+0xe6/0x180 [ 259.225433][ T107] vfs_get_tree+0x88/0x270 [ 259.229895][ T107] do_new_mount+0x24a/0xa40 [ 259.234526][ T107] __se_sys_mount+0x2d6/0x3c0 [ 259.239247][ T107] do_syscall_64+0x4c/0xa0 [ 259.243718][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.249667][ T107] [ 259.252044][ T107] Freed by task 4265: [ 259.256050][ T107] kasan_set_track+0x4b/0x70 [ 259.260697][ T107] kasan_save_free_info+0x2d/0x50 [ 259.265787][ T107] ____kasan_slab_free+0x126/0x1e0 [ 259.270956][ T107] slab_free_freelist_hook+0x131/0x1a0 [ 259.276561][ T107] __kmem_cache_free+0xb6/0x1f0 [ 259.281548][ T107] generic_shutdown_super+0x130/0x340 [ 259.286978][ T107] kill_block_super+0x7c/0xe0 [ 259.291806][ T107] deactivate_locked_super+0x93/0xf0 [ 259.297152][ T107] cleanup_mnt+0x463/0x4f0 [ 259.301648][ T107] task_work_run+0x1ca/0x250 [ 259.306303][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 259.311659][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 259.317263][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 259.322792][ T107] do_syscall_64+0x58/0xa0 [ 259.327249][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.333174][ T107] [ 259.335528][ T107] The buggy address belongs to the object at ffff88807b514000 [ 259.335528][ T107] which belongs to the cache kmalloc-256 of size 256 [ 259.349626][ T107] The buggy address is located 148 bytes inside of [ 259.349626][ T107] 256-byte region [ffff88807b514000, ffff88807b514100) [ 259.362952][ T107] [ 259.365326][ T107] The buggy address belongs to the physical page: [ 259.371785][ T107] page:ffffea0001ed4500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b514 [ 259.381989][ T107] head:ffffea0001ed4500 order:1 compound_mapcount:0 compound_pincount:0 [ 259.390365][ T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 259.398410][ T107] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441b40 [ 259.407046][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 259.415669][ T107] page dumped because: kasan: bad access detected [ 259.422124][ T107] page_owner tracks the page as allocated [ 259.427957][ T107] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4405, tgid 4404 (syz.3.4), ts 88918463932, free_ts 88904375620 [ 259.450424][ T107] post_alloc_hook+0x173/0x1a0 [ 259.455250][ T107] get_page_from_freelist+0x1a26/0x1ac0 [ 259.460831][ T107] __alloc_pages+0x1df/0x4e0 [ 259.465449][ T107] alloc_slab_page+0x5d/0x160 [ 259.470151][ T107] new_slab+0x87/0x2c0 [ 259.474250][ T107] ___slab_alloc+0xbc6/0x1230 [ 259.478951][ T107] __kmem_cache_alloc_node+0x1a0/0x260 [ 259.484430][ T107] __kmalloc+0xa0/0x240 [ 259.488613][ T107] iter_file_splice_write+0x185/0xc50 [ 259.494010][ T107] direct_splice_actor+0xe1/0x130 [ 259.499063][ T107] splice_direct_to_actor+0x480/0xb60 [ 259.504458][ T107] do_splice_direct+0x1b0/0x2b0 [ 259.509509][ T107] do_sendfile+0x5cc/0xeb0 [ 259.513947][ T107] __se_sys_sendfile64+0x13b/0x190 [ 259.519108][ T107] do_syscall_64+0x4c/0xa0 [ 259.523595][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.529544][ T107] page last free stack trace: [ 259.534275][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 259.539785][ T107] free_unref_page+0x2e/0x3f0 [ 259.544535][ T107] __unfreeze_partials+0x1a5/0x200 [ 259.549675][ T107] put_cpu_partial+0x17c/0x250 [ 259.554458][ T107] qlist_free_all+0x76/0xe0 [ 259.559036][ T107] kasan_quarantine_reduce+0x144/0x160 [ 259.564524][ T107] __kasan_slab_alloc+0x1e/0x80 [ 259.569402][ T107] slab_post_alloc_hook+0x4b/0x480 [ 259.574531][ T107] __kmem_cache_alloc_node+0x140/0x260 [ 259.580023][ T107] __kmalloc+0xa0/0x240 [ 259.584198][ T107] tomoyo_realpath_from_path+0xdf/0x5d0 [ 259.589777][ T107] tomoyo_path_perm+0x1fd/0x550 [ 259.594637][ T107] security_inode_getattr+0xcf/0x120 [ 259.599946][ T107] vfs_getattr+0x26/0x3a0 [ 259.604291][ T107] __x64_sys_newfstat+0x102/0x1c0 [ 259.609336][ T107] do_syscall_64+0x4c/0xa0 [ 259.613778][ T107] [ 259.616109][ T107] Memory state around the buggy address: [ 259.621928][ T107] ffff88807b513f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 259.630017][ T107] ffff88807b514000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.638096][ T107] >ffff88807b514080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.646167][ T107] ^ [ 259.650765][ T107] ffff88807b514100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.658834][ T107] ffff88807b514180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.666903][ T107] ================================================================== [ 259.674987][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.682213][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 259.689443][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.699529][ T107] Call Trace: [ 259.702824][ T107] [ 259.705771][ T107] dump_stack_lvl+0x168/0x22e [ 259.710468][ T107] ? memcpy+0x3c/0x60 [ 259.714660][ T107] ? show_regs_print_info+0x12/0x12 [ 259.719967][ T107] ? load_image+0x3b0/0x3b0 [ 259.724496][ T107] panic+0x2c9/0x710 [ 259.728410][ T107] ? __lock_acquire+0x7c50/0x7c50 [ 259.733454][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 259.737981][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 259.743899][ T107] ? _raw_spin_unlock+0x40/0x40 [ 259.748774][ T107] check_panic_on_warn+0x80/0xa0 [ 259.753724][ T107] ? jfs_lazycommit+0x74f/0xa50 [ 259.758599][ T107] end_report+0x66/0x110 [ 259.762952][ T107] kasan_report+0x118/0x140 [ 259.767490][ T107] ? jfs_lazycommit+0x74f/0xa50 [ 259.772389][ T107] jfs_lazycommit+0x74f/0xa50 [ 259.777106][ T107] ? txFreelock+0x5a0/0x5a0 [ 259.781643][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 259.787563][ T107] ? do_task_dead+0xd0/0xd0 [ 259.792175][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 259.798094][ T107] ? __kthread_parkme+0x162/0x1c0 [ 259.803144][ T107] kthread+0x29d/0x330 [ 259.807244][ T107] ? txFreelock+0x5a0/0x5a0 [ 259.811775][ T107] ? kthread_blkcg+0xd0/0xd0 [ 259.816398][ T107] ret_from_fork+0x1f/0x30 [ 259.820851][ T107] [ 259.824196][ T107] Kernel Offset: disabled [ 259.828542][ T107] Rebooting in 86400 seconds..