last executing test programs: 2.214976133s ago: executing program 1 (id=13768): r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$damon_contexts(r0, &(0x7f00000000c0)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x3) 1.939822075s ago: executing program 1 (id=13772): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 1.855786789s ago: executing program 2 (id=13773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x800}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 1.779097892s ago: executing program 3 (id=13774): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000700)={{0x2, 0x2, 0x9, 0x1, 'syz1\x00', 0x9}, 0x3, 0x30, 0x0, 0x0, 0x1, 0x6, 'syz0\x00', &(0x7f00000006c0)=[':\\$\'(p&!:.)\x00'], 0xc}) 1.755018523s ago: executing program 1 (id=13775): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x1, [{0x197c635ddab4da42, 0x2}, {0x0, 0x3, "da"}, {0x2, 0x11, "cafcc87693024c18551fa29c3f5bb5"}, {0x2, 0x7, "3f87598f58"}, {0x1, 0x2}, {0x1, 0x4, "be45"}]}]}}}], 0x40}}], 0x2, 0x4000800) 1.648935158s ago: executing program 2 (id=13776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newnexthop={0x28, 0x68, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 1.572551591s ago: executing program 3 (id=13777): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20402, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 1.521198173s ago: executing program 1 (id=13779): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.421769818s ago: executing program 2 (id=13780): ioperm(0x5453, 0x1, 0x400) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/66) 1.408872399s ago: executing program 3 (id=13781): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="b88cdf38504d55f97afc3d19e3536fa6cb2d06637006864b0a3160bf5bd017d807343fd80a030000e1d7e4a56a150a3db2e413d7244b3df901239eda1a4e90a2efcead70ccac6b8000000035607013e967642cd1bd135a54543dd2129afc7d5008f8be67407e648c73b703d35efdfedac6b7555758a14e209284e2", 0x7b}, 0x1, 0x0, 0x0, 0x8014}, 0x44090) 1.329917822s ago: executing program 1 (id=13783): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) 1.167634069s ago: executing program 2 (id=13784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f9ffff0900000000000000008500000036000000850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.159000749s ago: executing program 3 (id=13785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 986.188347ms ago: executing program 3 (id=13787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 922.573709ms ago: executing program 2 (id=13788): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@fat=@debug}, {@numtail}]}, 0x1, 0x36e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 913.14052ms ago: executing program 0 (id=13789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000001000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140", @ANYRESHEX], 0xb0}, 0x1, 0x0, 0x0, 0x4891}, 0x0) 837.210223ms ago: executing program 0 (id=13790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x2800}}, 0x3, 0x3, 0x20000, 0x0, 0x31, 0xf080, 0x4}, 0x9c) 632.791792ms ago: executing program 0 (id=13791): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @vbi={0x400, 0x4, 0x52424752, 0x30314247, [0x10001, 0x5], [0x1000, 0x8000], 0x1}}) 343.820755ms ago: executing program 0 (id=13792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x17, 0x8, 0x13a, &(0x7f0000000ac0)}) 203.10766ms ago: executing program 3 (id=13793): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000040)={0x1, &(0x7f00001219c0)=[{0xc000003, 0x0, 0x0, 0x0, 0x3}]}) 175.577762ms ago: executing program 0 (id=13794): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x146, [0x0, 0x200000000240, 0x200000000270, 0x200000000356], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x0, 0x10, 0x1b, 'ip6gretap0\x00', 'ipvlan0\x00', 'dummy0\x00', 'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"ef8ccdc270b6d0ceee0e23d8875532d7df855a9313be6d6fb2a06ecb8647"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1be) 21.066269ms ago: executing program 1 (id=13795): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x1523, &(0x7f00000029c0)="$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") creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 20.260899ms ago: executing program 2 (id=13796): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x96) 0s ago: executing program 0 (id=13797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x5, 0x8}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c001}, 0xc0) kernel console output (not intermixed with test programs): 1.11670,32377,1):ocfs2_create:676 ERROR: status = -2 [ 1463.945817][ T6074] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1463.983402][ T6077] ocfs2: Unmounting device (7,1) on (node local) [ 1464.142221][T32428] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1464.169988][T32428] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1464.416329][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1464.431679][T32430] loop2: detected capacity change from 0 to 256 [ 1464.525358][T32430] FAT-fs (loop2): Directory bread(block 64) failed [ 1464.548776][T32430] FAT-fs (loop2): Directory bread(block 65) failed [ 1464.572248][T32430] FAT-fs (loop2): Directory bread(block 66) failed [ 1464.585474][T32430] FAT-fs (loop2): Directory bread(block 67) failed [ 1464.594473][T32430] FAT-fs (loop2): Directory bread(block 68) failed [ 1464.614078][T32430] FAT-fs (loop2): Directory bread(block 69) failed [ 1464.624007][T32430] FAT-fs (loop2): Directory bread(block 70) failed [ 1464.637078][T32430] FAT-fs (loop2): Directory bread(block 71) failed [ 1464.653204][T32430] FAT-fs (loop2): Directory bread(block 72) failed [ 1464.669994][T32430] FAT-fs (loop2): Directory bread(block 73) failed [ 1464.929332][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1465.143859][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1465.150155][T32446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11696'. [ 1465.166380][ T9] usb 2-1: config 0 has an invalid interface number: 66 but max is 1 [ 1465.174704][ T9] usb 2-1: config 0 has no interface number 1 [ 1465.217310][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1465.235995][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1465.268003][ T9] usb 2-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 1465.323488][ T9] usb 2-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 1465.356684][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.410646][ T9] usb 2-1: config 0 interface 66 has no altsetting 0 [ 1465.453130][ T9] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1465.474347][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1465.482419][ T9] usb 2-1: SerialNumber: syz [ 1465.505890][ T9] usb 2-1: config 0 descriptor?? [ 1465.522694][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1465.552690][T32456] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1465.575322][ T9] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1465.683185][T32464] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1465.818242][ T9] usb-storage 2-1:0.66: USB Mass Storage device detected [ 1465.860383][ T9] usb-storage 2-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 1465.981217][ T9] usb 2-1: USB disconnect, device number 40 [ 1466.251505][T32477] loop3: detected capacity change from 0 to 4096 [ 1466.321503][T32479] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1466.795387][T32478] loop2: detected capacity change from 0 to 32768 [ 1466.828467][T32478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.11709 (32478) [ 1466.874319][T32478] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1466.906562][T32478] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1466.928251][T32478] BTRFS info (device loop2): enabling auto defrag [ 1466.939098][T32478] BTRFS info (device loop2): turning on sync discard [ 1466.950435][T32478] BTRFS info (device loop2): force clearing of disk cache [ 1466.957625][T32478] BTRFS warning (device loop2): excessive commit interval 4194304 [ 1466.992201][T32478] BTRFS info (device loop2): max_inline at 2 [ 1467.012332][T32478] BTRFS info (device loop2): disabling free space tree [ 1467.185781][T32478] BTRFS info (device loop2): enabling ssd optimizations [ 1467.228403][T32478] BTRFS info (device loop2): rebuilding free space tree [ 1467.279210][T32478] BTRFS info (device loop2): disabling free space tree [ 1467.304485][T32478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1467.331973][T32478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1467.655742][ T6073] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1467.978560][T32528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1468.233020][T32536] netlink: 'syz.3.11731': attribute type 1 has an invalid length. [ 1468.241321][T32536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11731'. [ 1468.590297][T32543] loop2: detected capacity change from 0 to 1024 [ 1468.635809][T32543] hfsplus: failed to load extents file [ 1469.291673][T16846] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1469.494770][T16846] usb 4-1: Using ep0 maxpacket: 16 [ 1469.504140][T16846] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1469.512548][T16846] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1469.537360][T16846] usb 4-1: config 0 has no interface number 0 [ 1469.551766][T16846] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1469.569522][T16846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.594379][T16846] usb 4-1: Product: syz [ 1469.607486][T16846] usb 4-1: Manufacturer: syz [ 1469.618776][T16846] usb 4-1: SerialNumber: syz [ 1469.646817][T16846] usb 4-1: config 0 descriptor?? [ 1469.670714][T16846] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1469.679608][T16846] usb 4-1: No valid video chain found. [ 1469.941095][T14246] usb 4-1: USB disconnect, device number 52 [ 1470.067613][T32594] 9pnet_fd: Insufficient options for proto=fd [ 1470.493614][T32604] loop1: detected capacity change from 0 to 4096 [ 1470.546294][T32604] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1470.695149][T32612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1470.717390][T32610] loop2: detected capacity change from 0 to 4096 [ 1470.744537][T32610] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1471.090755][T32610] ntfs3: loop2: failed to convert "c46c" to default [ 1471.189498][T32618] loop3: detected capacity change from 0 to 4096 [ 1471.234393][T32618] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1471.372532][T32618] ntfs3: loop3: MFT: r=18, expect seq=1 instead of 0! [ 1471.407863][T32618] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1471.457136][T32618] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1471.482499][T32627] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1471.740924][T32632] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1472.367151][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11785'. [ 1472.403242][T32651] netlink: 'syz.1.11785': attribute type 5 has an invalid length. [ 1472.411155][T32651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11785'. [ 1472.470969][T32651] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1472.498918][T32651] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1472.515626][T32651] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1472.541681][T32651] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1472.558350][T32651] geneve2: entered promiscuous mode [ 1472.566653][T32651] geneve2: entered allmulticast mode [ 1472.765142][ T28] audit: type=1326 audit(2000524821.317:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32665 comm="syz.3.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1472.840700][ T28] audit: type=1326 audit(2000524821.317:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32665 comm="syz.3.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1472.909891][ T28] audit: type=1326 audit(2000524821.317:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32665 comm="syz.3.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1472.959783][ T28] audit: type=1326 audit(2000524821.317:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32665 comm="syz.3.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1473.025368][ T28] audit: type=1326 audit(2000524821.317:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32665 comm="syz.3.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1473.525466][T14246] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1473.746416][T14246] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1473.746468][T14246] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1473.746512][T14246] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1473.746539][T14246] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1473.746566][T14246] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1473.746594][T14246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1473.749085][T14246] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1473.749117][T14246] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1473.749139][T14246] usb 1-1: Product: syz [ 1473.749155][T14246] usb 1-1: Manufacturer: syz [ 1473.749172][T14246] usb 1-1: SerialNumber: syz [ 1473.751979][T14246] usb 1-1: config 0 descriptor?? [ 1473.752904][T32681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1473.755091][T14246] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1473.757622][T32703] netlink: 'syz.2.11809': attribute type 28 has an invalid length. [ 1473.757644][T32703] netlink: 'syz.2.11809': attribute type 29 has an invalid length. [ 1473.757659][T32703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11809'. [ 1473.759662][T14246] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1473.896366][T32707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.108804][T14246] usb 1-1: USB disconnect, device number 52 [ 1474.120574][T14246] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1474.205639][T32711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11813'. [ 1474.518828][T32721] loop2: detected capacity change from 0 to 4096 [ 1474.539793][T32721] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1474.562474][ T6017] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1474.582250][T32721] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1474.600409][T32721] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1474.618225][T32721] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1474.732803][T32721] ntfs: volume version 3.1. [ 1474.787273][ T6017] usb 2-1: Using ep0 maxpacket: 16 [ 1474.829362][T32721] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1474.833542][ T6017] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 1474.864800][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.894566][ T6017] usb 2-1: Product: syz [ 1474.902260][ T6017] usb 2-1: Manufacturer: syz [ 1474.926051][ T6017] usb 2-1: SerialNumber: syz [ 1474.943204][ T6017] usb 2-1: config 0 descriptor?? [ 1474.984885][ T6017] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1475.002284][ T6017] usb 2-1: Detected FT2232H [ 1475.219229][ T6017] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1475.252851][ T6017] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1475.269748][ T6017] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1475.305192][ T6017] usb 2-1: USB disconnect, device number 41 [ 1475.336448][ T6017] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1475.381003][T32739] loop3: detected capacity change from 0 to 2048 [ 1475.392036][ T6017] ftdi_sio 2-1:0.0: device disconnected [ 1475.452248][T32742] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1475.618855][T32739] syz.3.11827: attempt to access beyond end of device [ 1475.618855][T32739] loop3: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 1475.653532][T32739] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 1475.816146][T32742] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1475.850388][T32742] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1475.875788][T32742] Remounting filesystem read-only [ 1475.885261][T11779] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1475.892548][T11779] NILFS (loop3): discard dirty block: blocknr=1099511627811, size=1024 [ 1475.905017][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.925072][T11779] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1475.947839][T11779] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1475.971849][T11779] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1475.992546][T11779] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1476.017502][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.026463][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.070156][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.079161][T11779] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1476.101610][T11779] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1476.111798][T11779] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1476.114965][T32756] loop1: detected capacity change from 0 to 1024 [ 1476.130334][T11779] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1476.175640][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.192138][T11779] NILFS (loop3): discard dirty page: offset=131072, ino=3 [ 1476.212523][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.231799][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.283914][T11779] NILFS (loop3): discard dirty block: blocknr=46, size=1024 [ 1476.291376][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.307703][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 1476.329281][T11779] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1476.336478][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.397360][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.444191][T11779] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1476.478720][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.514841][T11779] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1476.523933][T11779] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1476.531643][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.551094][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.560205][T11779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.581661][ T6074] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1476.619095][ T6074] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 1476.647504][ T6074] NILFS (loop3): discard dirty block: blocknr=17, size=1024 [ 1476.655001][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.658693][ T304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11845'. [ 1476.705593][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.715739][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.728604][ T6074] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 1476.736172][ T6074] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 1476.754314][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.765777][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.775180][ T6074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.895458][ T310] SET target dimension over the limit! [ 1477.288197][ T325] netlink: 'syz.2.11853': attribute type 1 has an invalid length. [ 1477.321086][ T325] netlink: 'syz.2.11853': attribute type 1 has an invalid length. [ 1477.334102][ T328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11855'. [ 1477.467605][ T333] netlink: 'syz.1.11857': attribute type 21 has an invalid length. [ 1477.476326][ T333] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11857'. [ 1477.961509][ T350] 9pnet_fd: p9_fd_create_unix (350): problem connecting socket: ./file0: -111 [ 1477.986400][ T352] futex_wake_op: syz.3.11866 tries to shift op by 32; fix this program [ 1478.529499][T16846] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1478.679753][ T377] loop1: detected capacity change from 0 to 256 [ 1478.721652][T16846] usb 1-1: Using ep0 maxpacket: 8 [ 1478.726976][ T377] FAT-fs (loop1): Directory bread(block 64) failed [ 1478.740551][T16846] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1478.740715][ T377] FAT-fs (loop1): Directory bread(block 65) failed [ 1478.758149][T16846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.770302][ T377] FAT-fs (loop1): Directory bread(block 66) failed [ 1478.784460][ T377] FAT-fs (loop1): Directory bread(block 67) failed [ 1478.796467][T16846] usb 1-1: Product: syz [ 1478.802460][T16846] usb 1-1: Manufacturer: syz [ 1478.802579][ T377] FAT-fs (loop1): Directory bread(block 68) failed [ 1478.833406][ T377] FAT-fs (loop1): Directory bread(block 69) failed [ 1478.841009][T16846] usb 1-1: SerialNumber: syz [ 1478.855499][T16846] usb 1-1: config 0 descriptor?? [ 1478.861050][ T377] FAT-fs (loop1): Directory bread(block 70) failed [ 1478.881164][T16846] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1478.890533][ T377] FAT-fs (loop1): Directory bread(block 71) failed [ 1478.913535][ T377] FAT-fs (loop1): Directory bread(block 72) failed [ 1478.932118][ T377] FAT-fs (loop1): Directory bread(block 73) failed [ 1479.334830][T16846] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 1479.347538][T16846] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1479.381659][T16846] usb 1-1: USB disconnect, device number 53 [ 1480.498288][ T430] loop2: detected capacity change from 0 to 8 [ 1480.814514][ T446] netlink: 'syz.0.11914': attribute type 32 has an invalid length. [ 1481.004629][ T451] loop1: detected capacity change from 0 to 64 [ 1481.437715][ T460] loop2: detected capacity change from 0 to 4096 [ 1481.455556][ T460] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1481.615795][ T460] ntfs3: loop2: failed to convert "c46c" to cp775 [ 1481.675194][ T471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11926'. [ 1482.003614][ T483] xt_TCPMSS: Only works on TCP SYN packets [ 1482.847397][ T500] loop3: detected capacity change from 0 to 4096 [ 1482.876872][ T500] __ntfs_warning: 1 callbacks suppressed [ 1482.876890][ T500] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1482.900977][ T503] xt_cgroup: path and classid specified [ 1482.950419][ T500] ntfs: volume version 3.1. [ 1483.124243][ T505] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 1483.158880][ T505] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1483.544007][ T511] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 1483.566715][ T513] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 1483.574904][ T511] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1483.719944][ T517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11949'. [ 1483.933175][ T523] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.11952'. [ 1484.348438][ T537] loop3: detected capacity change from 0 to 256 [ 1484.373045][ T537] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 1484.450219][ T485] loop2: detected capacity change from 0 to 40435 [ 1484.475903][ T485] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (16843008) [ 1484.516733][ T485] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1484.563181][ T485] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 1484.800091][ T544] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 1485.354641][ T563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11972'. [ 1485.386060][ T563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1486.612266][ T23] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1486.826018][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1486.839244][ T23] usb 1-1: config 0 has no interfaces? [ 1486.867348][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1486.879515][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.887574][ T23] usb 1-1: Product: syz [ 1486.903153][ T23] usb 1-1: Manufacturer: syz [ 1486.908177][ T23] usb 1-1: SerialNumber: syz [ 1486.923002][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 1487.127650][ T628] loop2: detected capacity change from 0 to 128 [ 1487.168842][ T23] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1487.169217][ T628] affs: Error parsing options [ 1487.414922][ T23] usb 1-1: USB disconnect, device number 54 [ 1487.804247][ T653] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12016'. [ 1488.369796][ T666] loop1: detected capacity change from 0 to 4096 [ 1488.392054][ T666] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1488.628823][ T666] ntfs3: loop1: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 1489.551105][ T704] loop3: detected capacity change from 0 to 4096 [ 1489.569014][ T704] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1489.666707][ T704] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1490.975586][ T712] loop2: detected capacity change from 0 to 32768 [ 1491.030359][ T714] loop3: detected capacity change from 0 to 32768 [ 1491.130108][ T712] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1491.156058][ T28] audit: type=1800 audit(2000524838.527:151): pid=714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12045" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 1491.292454][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12052'. [ 1491.492443][ T712] XFS (loop2): Ending clean mount [ 1491.532737][ T712] XFS (loop2): Quotacheck needed: Please wait. [ 1491.725863][ T712] XFS (loop2): Quotacheck: Done. [ 1491.792458][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.798984][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.862197][ T710] loop1: detected capacity change from 0 to 40435 [ 1491.906883][ T710] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (16843008) [ 1491.950462][ T710] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1492.007303][ T710] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 1492.062227][ T746] netlink: 'syz.0.12058': attribute type 3 has an invalid length. [ 1492.096502][ T746] netlink: 'syz.0.12058': attribute type 1 has an invalid length. [ 1492.109148][ T748] kAFS: unparsable volume name [ 1492.110448][ T746] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12058'. [ 1492.124955][ T746] NCSI netlink: No device for ifindex 33022 [ 1492.163481][ T6073] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1492.343740][ T28] audit: type=1326 audit(2000524839.640:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=751 comm="syz.3.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1492.492731][ T28] audit: type=1326 audit(2000524839.640:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=751 comm="syz.3.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1492.623429][ T28] audit: type=1326 audit(2000524839.658:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=751 comm="syz.3.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1492.700302][ T28] audit: type=1326 audit(2000524839.658:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=751 comm="syz.3.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1492.957597][ T766] sctp: [Deprecated]: syz.3.12068 (pid 766) Use of int in maxseg socket option. [ 1492.957597][ T766] Use struct sctp_assoc_value instead [ 1493.714472][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12082'. [ 1493.765841][ T797] netlink: 'syz.3.12082': attribute type 1 has an invalid length. [ 1493.850816][ T800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12084'. [ 1493.859470][ T793] loop2: detected capacity change from 0 to 4096 [ 1493.936223][ T793] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1494.057165][ T793] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1494.413104][ T814] loop1: detected capacity change from 0 to 64 [ 1495.360473][ T843] loop2: detected capacity change from 0 to 512 [ 1495.500417][ T843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.589689][ T843] ext4 filesystem being mounted at /2935/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1495.634704][ T843] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 1495.664354][ T843] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1495.674632][ T843] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.12104: Failed to acquire dquot type 0 [ 1495.696776][ T843] EXT4-fs (loop2): Remounting filesystem read-only [ 1495.833738][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.193406][ T841] loop1: detected capacity change from 0 to 32768 [ 1496.228250][ T841] (syz.1.12105,841,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1496.259828][ T841] (syz.1.12105,841,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1496.346856][ T841] JBD2: Ignoring recovery information on journal [ 1496.442726][ T841] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1496.512994][ T6153] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1496.737454][ T6153] usb 1-1: Using ep0 maxpacket: 32 [ 1496.760237][ T6153] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1496.766827][ T6077] ocfs2: Unmounting device (7,1) on (node local) [ 1496.780198][ T6153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.796664][ T6153] usb 1-1: config 0 descriptor?? [ 1496.824340][ T6153] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1497.056944][ T886] netlink: 'syz.3.12125': attribute type 32 has an invalid length. [ 1497.245581][ T888] loop3: detected capacity change from 0 to 64 [ 1497.274094][ T6153] gspca_sq930x: ucbus_write failed -71 [ 1497.279710][ T6153] sq930x: probe of 1-1:0.0 failed with error -71 [ 1497.304539][ T6153] usb 1-1: USB disconnect, device number 55 [ 1497.331356][ T878] loop2: detected capacity change from 0 to 32768 [ 1497.380003][ T878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12120 (878) [ 1497.451028][ T878] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1497.475926][ T878] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1497.484918][ T878] BTRFS info (device loop2): using free space tree [ 1497.651435][ T878] BTRFS info (device loop2): enabling ssd optimizations [ 1497.667678][ T878] BTRFS info (device loop2): auto enabling async discard [ 1497.882624][ T6073] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1498.238790][ T946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12138'. [ 1498.251184][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12139'. [ 1498.277126][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12139'. [ 1498.554384][ T953] loop3: detected capacity change from 0 to 1024 [ 1498.604731][ T953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1498.631514][ T953] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1498.646110][ T953] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1498.664828][ T953] Quota error (device loop3): v2_read_file_info: Free block number 2147483648 out of range (1, 6). [ 1498.722902][ T953] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1498.738724][ T953] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1498.765002][ T953] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.12141: Freeing blocks not in datazone - block = 0, count = 4096 [ 1498.792642][ T953] EXT4-fs (loop3): Remounting filesystem read-only [ 1498.809908][ T953] EXT4-fs (loop3): 1 truncate cleaned up [ 1498.834928][ T953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1499.119866][ T969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12149'. [ 1499.159256][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.303301][ T975] netlink: 'syz.3.12151': attribute type 10 has an invalid length. [ 1499.358871][ T975] bond0: (slave wlan1): Opening slave failed [ 1499.387335][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12153'. [ 1499.418363][ T977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12153'. [ 1499.667144][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12157'. [ 1500.327767][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.327767][ T999] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1500.372844][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.372844][ T999] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1500.396796][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.396796][ T999] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1500.442184][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.442184][ T999] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1500.477322][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.477322][ T999] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1500.502126][ T999] syz.1.12163: attempt to access beyond end of device [ 1500.502126][ T999] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1500.562547][ T999] VFS: unable to find oldfs superblock on device nbd1 [ 1501.762646][T14246] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1501.776479][ T1057] netlink: 'syz.1.12184': attribute type 8 has an invalid length. [ 1501.959267][ T1062] loop2: detected capacity change from 0 to 4096 [ 1501.965928][T14246] usb 1-1: Using ep0 maxpacket: 8 [ 1501.976218][T14246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1501.992396][T14246] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1502.008042][ T1062] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1502.029465][T14246] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1502.042734][T14246] usb 1-1: Product: syz [ 1502.047529][T14246] usb 1-1: Manufacturer: syz [ 1502.057437][T14246] usb 1-1: SerialNumber: syz [ 1502.120600][ T1068] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1502.125594][ T1062] ntfs: volume version 3.1. [ 1502.303976][T14246] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1502.327175][T14246] usb 1-1: Handspring Visor / Palm OS: port 205, is for unknown use [ 1502.339439][T14246] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1502.353036][T14246] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1502.413823][ T1074] netlink: 'syz.3.12193': attribute type 3 has an invalid length. [ 1502.530714][T14246] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1502.530796][T14246] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1502.552787][T14246] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1502.556983][T14246] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1502.567529][T14246] usb 1-1: USB disconnect, device number 56 [ 1502.579666][T14246] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1502.590526][T14246] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1502.591183][T14246] visor 1-1:1.0: device disconnected [ 1503.313041][T16846] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1503.388033][T17972] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1503.559048][T16846] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1503.567298][T16846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.581761][T17972] usb 4-1: not running at top speed; connect to a high speed hub [ 1503.590142][T16846] usb 3-1: config 0 has no interface number 0 [ 1503.606714][T17972] usb 4-1: config 1 has an invalid interface number: 78 but max is 0 [ 1503.622824][T16846] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1503.644113][T17972] usb 4-1: config 1 has no interface number 0 [ 1503.650350][T16846] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1503.650386][T16846] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 1503.652954][T16846] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1503.716246][T17972] usb 4-1: config 1 interface 78 has no altsetting 0 [ 1503.738271][T16846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.758164][T17972] usb 4-1: string descriptor 0 read error: -22 [ 1503.759678][T16846] usb 3-1: Product: syz [ 1503.771210][T17972] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1503.779714][T16846] usb 3-1: Manufacturer: syz [ 1503.787372][T17972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.801333][T16846] usb 3-1: SerialNumber: syz [ 1503.810773][T17972] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1503.824099][T16846] usb 3-1: config 0 descriptor?? [ 1503.829737][T17972] usb 4-1: selecting invalid altsetting 0 [ 1503.850465][T16846] HFC-S_USB: probe of 3-1:0.117 failed with error -5 [ 1503.958790][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1503.968354][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1503.978232][ T1100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1504.158211][T14246] usb 4-1: USB disconnect, device number 53 [ 1504.165649][ T2319] pvrusb2: control-write URB failure, status=-71 [ 1504.174861][T16846] usb 3-1: USB disconnect, device number 49 [ 1504.195530][ T2319] pvrusb2: Device being rendered inoperable [ 1504.235429][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1504.275260][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1504.345192][ T1092] loop1: detected capacity change from 0 to 40427 [ 1504.371879][ T1092] F2FS-fs (loop1): invalid crc value [ 1504.557035][ T1092] F2FS-fs (loop1): Start checkpoint disabled! [ 1504.585212][ T1092] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1505.308229][ T1126] netlink: 'syz.2.12219': attribute type 21 has an invalid length. [ 1506.319119][ T1161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12235'. [ 1506.348991][ T1161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12235'. [ 1506.482710][ T1165] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12237'. [ 1506.853030][T16846] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1506.982765][ T1178] loop2: detected capacity change from 0 to 512 [ 1507.002736][ T1178] EXT4-fs: Ignoring removed bh option [ 1507.049765][ T1178] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1507.077223][ T1178] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1507.085641][T16846] usb 4-1: Using ep0 maxpacket: 8 [ 1507.100650][T16846] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1507.109174][ T1178] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1507.124664][ T1178] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1507.126375][T16846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.164121][ T1178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.167087][T16846] usb 4-1: Product: syz [ 1507.252671][T16846] usb 4-1: Manufacturer: syz [ 1507.290481][T16846] usb 4-1: SerialNumber: syz [ 1507.387786][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.766113][T16846] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1507.775122][T16846] mxuport: probe of 4-1:254.0 failed with error -5 [ 1507.804376][T16846] usb 4-1: USB disconnect, device number 54 [ 1508.075504][ T1213] netlink: 'syz.0.12258': attribute type 1 has an invalid length. [ 1508.092362][ T1213] netlink: 248 bytes leftover after parsing attributes in process `syz.0.12258'. [ 1508.519200][ T1222] loop2: detected capacity change from 0 to 4096 [ 1508.586952][ T1230] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1509.365549][ T1253] kernel read not supported for file /  (pid: 1253 comm: syz.2.12278) [ 1509.396801][ T28] audit: type=1800 audit(2000524855.596:156): pid=1253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12278" name=200120 dev="mqueue" ino=85760 res=0 errno=0 [ 1510.670075][ T6113] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1510.874863][ T6113] usb 4-1: Using ep0 maxpacket: 16 [ 1510.906588][ T6113] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.929504][ T6113] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.959040][ T6113] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1510.971685][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.000353][ T6113] usb 4-1: Product: syz [ 1511.004816][ T6113] usb 4-1: Manufacturer: syz [ 1511.009499][ T6113] usb 4-1: SerialNumber: syz [ 1511.054990][ T1319] loop1: detected capacity change from 0 to 64 [ 1511.310519][ T28] audit: type=1326 audit(2000524857.382:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1324 comm="syz.2.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980678f749 code=0x7ffc0000 [ 1511.396258][ T6113] usb 4-1: cannot find UAC_HEADER [ 1511.406914][ T28] audit: type=1326 audit(2000524857.382:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1324 comm="syz.2.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980678f749 code=0x7ffc0000 [ 1511.459320][ T28] audit: type=1326 audit(2000524857.429:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1324 comm="syz.2.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f980678f749 code=0x7ffc0000 [ 1511.467890][ T6113] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1511.540890][ T28] audit: type=1326 audit(2000524857.429:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1324 comm="syz.2.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980678f749 code=0x7ffc0000 [ 1511.541376][ T6113] usb 4-1: USB disconnect, device number 55 [ 1511.626108][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.669513][ T28] audit: type=1326 audit(2000524857.429:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1324 comm="syz.2.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980678f749 code=0x7ffc0000 [ 1511.704840][ T1334] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1512.078183][ T1347] raw_sendmsg: syz.1.12320 forgot to set AF_INET. Fix it! [ 1512.512984][ T1353] loop1: detected capacity change from 0 to 4096 [ 1512.537669][ T1353] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1512.642039][ T1365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12329'. [ 1512.679927][ T1353] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1512.979087][ T6077] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 1513.382797][ T1385] loop1: detected capacity change from 0 to 1024 [ 1513.415176][ T1385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1513.439704][ T1389] netlink: 'syz.2.12340': attribute type 1 has an invalid length. [ 1513.447709][ T1389] netlink: 'syz.2.12340': attribute type 2 has an invalid length. [ 1513.460938][ T1385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1513.511829][ T1385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1513.682977][ T1398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12344'. [ 1513.798521][ T6077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.481023][ T1425] loop2: detected capacity change from 0 to 2048 [ 1514.588062][ T1425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.891020][ T28] audit: type=1326 audit(2000524860.730:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1514.963466][ T28] audit: type=1326 audit(2000524860.730:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1515.037993][ T28] audit: type=1326 audit(2000524860.777:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1515.071672][ T1441] loop3: detected capacity change from 0 to 2048 [ 1515.089454][ T28] audit: type=1326 audit(2000524860.777:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a8af8f783 code=0x7ffc0000 [ 1515.135763][ T28] audit: type=1326 audit(2000524860.843:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a8af8e1ff code=0x7ffc0000 [ 1515.158286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.170523][ T28] audit: type=1326 audit(2000524860.899:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7a8af8f7d7 code=0x7ffc0000 [ 1515.192810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.206906][ T1441] Alternate GPT is invalid, using primary GPT. [ 1515.234635][ T28] audit: type=1326 audit(2000524860.899:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a8af8df90 code=0x7ffc0000 [ 1515.257587][ T1441] loop3: p2 p3 p7 [ 1515.265052][ T28] audit: type=1326 audit(2000524860.899:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a8af8f34b code=0x7ffc0000 [ 1515.288805][ T28] audit: type=1326 audit(2000524860.917:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a8af8e3aa code=0x7ffc0000 [ 1515.311843][ T28] audit: type=1326 audit(2000524860.917:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1440 comm="syz.3.12365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a8af8f34b code=0x7ffc0000 [ 1515.518191][ T7691] udevd[7691]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1515.522597][T31736] udevd[31736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1515.531585][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1516.118434][ T1470] loop2: detected capacity change from 0 to 4096 [ 1516.227002][ T1478] netlink: 'syz.0.12384': attribute type 1 has an invalid length. [ 1516.236054][ T1480] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1516.372592][ T1470] syz.2.12381: attempt to access beyond end of device [ 1516.372592][ T1470] loop2: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1516.418153][ T1470] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 1516.761112][ T1490] loop3: detected capacity change from 0 to 4096 [ 1516.846306][ T1497] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1517.364652][ T1511] loop2: detected capacity change from 0 to 64 [ 1518.173913][ T1534] netlink: 'syz.0.12410': attribute type 15 has an invalid length. [ 1518.333152][ T1540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12413'. [ 1518.923697][ T1561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12423'. [ 1519.156997][ T1568] SET target dimension over the limit! [ 1519.584303][ T1552] loop3: detected capacity change from 0 to 32768 [ 1519.660850][ T1552] jfs_strtoUCS: char2uni returned -22. [ 1519.682355][ T1552] charset = cp874, char = 0xfc [ 1520.025296][ T1589] loop2: detected capacity change from 0 to 512 [ 1520.032661][ T1589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1520.079585][ T1589] EXT4-fs: Ignoring removed i_version option [ 1520.141744][ T1589] EXT4-fs (loop2): 1 orphan inode deleted [ 1520.149984][ T1589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.677035][ T6113] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1520.887763][ T6113] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1520.908219][ T6113] usb 3-1: config 0 has no interface number 0 [ 1520.924824][ T6113] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 1520.965218][ T6113] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1521.007932][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.030403][ T6113] usb 3-1: config 0 descriptor?? [ 1521.041029][ T1589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1521.059557][ T6113] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input102 [ 1521.420485][ T6113] usb 3-1: USB disconnect, device number 50 [ 1521.744200][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12465'. [ 1521.756607][ T1646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1521.764016][ T1646] IPv6: NLM_F_CREATE should be set when creating new route [ 1521.771498][ T1646] IPv6: NLM_F_CREATE should be set when creating new route [ 1521.839573][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1521.839591][ T28] audit: type=1326 audit(2000524867.231:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1649 comm="syz.1.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1521.954043][ T28] audit: type=1326 audit(2000524867.231:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1649 comm="syz.1.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1522.065600][ T28] audit: type=1326 audit(2000524867.231:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1649 comm="syz.1.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1522.127179][ T28] audit: type=1326 audit(2000524867.231:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1649 comm="syz.1.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1522.154331][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.177045][ T28] audit: type=1326 audit(2000524867.231:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1649 comm="syz.1.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1522.434861][ T1662] bond2: entered promiscuous mode [ 1522.440104][ T1662] bond2: entered allmulticast mode [ 1522.446132][ T1662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1522.486912][ T1667] loop1: detected capacity change from 0 to 128 [ 1522.537682][ T1667] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1522.578903][ T1667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1523.849222][ T1675] loop3: detected capacity change from 0 to 32768 [ 1523.872781][ T1675] [ 1523.872781][ T1675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1523.872781][ T1675] [ 1523.970443][ T1675] [ 1523.970443][ T1675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1523.970443][ T1675] [ 1524.057060][ T1675] [ 1524.057060][ T1675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1524.057060][ T1675] [ 1524.153790][ T113] [ 1524.153790][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1524.153790][ T113] [ 1524.248623][ T6074] [ 1524.248623][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1524.248623][ T6074] [ 1524.260475][ T6074] [ 1524.260475][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1524.260475][ T6074] [ 1524.586024][ T1692] loop2: detected capacity change from 0 to 40427 [ 1524.641306][ T1692] F2FS-fs (loop2): build fault injection attr: rate: 7, type: 0x7ffff [ 1524.673039][ T1692] F2FS-fs (loop2): Image doesn't support compression [ 1524.708603][ T1692] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2ac [ 1524.758937][ T1692] F2FS-fs (loop2): invalid crc value [ 1524.782377][ T1692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 1524.863253][ T1692] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1524.931962][ T1725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12502'. [ 1524.962277][ T1692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 1524.967775][ T1725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12502'. [ 1525.046256][ T1692] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1525.178327][ T1692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xc0/0x5c0 [ 1525.743355][ T1746] loop1: detected capacity change from 0 to 128 [ 1525.769074][ T1746] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1525.796080][ T1746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.985806][ T1750] loop2: detected capacity change from 0 to 1024 [ 1526.514771][ T1761] loop1: detected capacity change from 0 to 4096 [ 1526.527780][ T1761] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1526.555866][ T1761] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1526.620838][ T1761] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1526.649443][ T1761] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1526.674363][ T1761] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1526.712544][ T1773] loop3: detected capacity change from 0 to 256 [ 1526.761606][ T1761] ntfs: volume version 3.1. [ 1526.891153][ T1773] FAT-fs (loop3): Directory bread(block 64) failed [ 1526.930507][ T1773] FAT-fs (loop3): Directory bread(block 65) failed [ 1526.941442][ T1773] FAT-fs (loop3): Directory bread(block 66) failed [ 1526.963401][ T1773] FAT-fs (loop3): Directory bread(block 67) failed [ 1526.970184][ T1773] FAT-fs (loop3): Directory bread(block 68) failed [ 1526.995695][ T1773] FAT-fs (loop3): Directory bread(block 69) failed [ 1527.002463][ T1773] FAT-fs (loop3): Directory bread(block 70) failed [ 1527.052609][ T1773] FAT-fs (loop3): Directory bread(block 71) failed [ 1527.086602][ T1773] FAT-fs (loop3): Directory bread(block 72) failed [ 1527.105309][ T1773] FAT-fs (loop3): Directory bread(block 73) failed [ 1527.645384][ T1797] loop3: detected capacity change from 0 to 8 [ 1527.775061][ T1797] SQUASHFS error: Failed to read block 0x636: -5 [ 1527.829435][ T1797] SQUASHFS error: Unable to read metadata cache entry [634] [ 1527.836838][ T1797] SQUASHFS error: Unable to read metadata cache entry [634] [ 1527.883009][ T1797] SQUASHFS error: Unable to read directory block [629:0] [ 1528.877413][ T6113] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1529.080411][ T6113] usb 2-1: Using ep0 maxpacket: 8 [ 1529.095185][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1529.120577][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1529.143420][ T1824] loop2: detected capacity change from 0 to 32768 [ 1529.163626][ T6113] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1529.188478][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1529.189657][ T1824] ERROR: (device loop2): diAllocAG: error reading iag [ 1529.189657][ T1824] [ 1529.219981][ T6113] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1529.251944][ T6113] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1529.261090][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.263710][ T1824] ialloc: diAlloc returned -5! [ 1529.291639][ T6113] usb 2-1: config 0 descriptor?? [ 1529.306816][ T1830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1529.449311][ T1846] loop3: detected capacity change from 0 to 4096 [ 1529.515027][ T1848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12560'. [ 1529.565007][ T1846] __ntfs_error: 11 callbacks suppressed [ 1529.565028][ T1846] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1529.609817][ T1846] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1529.654152][ T1846] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1529.731425][ T1846] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1529.785489][ T1846] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1529.870880][ T1846] ntfs: volume version 3.1. [ 1529.886089][ T1846] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1529.905961][T25250] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1529.914867][ T1846] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1529.916623][T14246] usb 2-1: USB disconnect, device number 42 [ 1529.955020][ T1846] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1529.969224][ T1846] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1530.007669][ T1846] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1530.302010][ T1856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12564'. [ 1530.406550][ T1858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12565'. [ 1530.482409][ T1860] sctp: [Deprecated]: syz.2.12566 (pid 1860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1530.482409][ T1860] Use struct sctp_sack_info instead [ 1531.105257][ T1880] xt_hashlimit: size too large, truncated to 1048576 [ 1531.191097][ T1884] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12578'. [ 1531.761087][ T1903] loop3: detected capacity change from 0 to 1024 [ 1531.978546][ T2967] hfsplus: b-tree write err: -5, ino 4 [ 1532.173209][ T1914] loop3: detected capacity change from 0 to 512 [ 1532.252844][ T1914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.265760][ T1914] ext4 filesystem being mounted at /3159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.294532][ T1914] EXT4-fs error (device loop3): ext4_xattr_block_get:600: inode #12: comm syz.3.12591: corrupted xattr block 6: invalid header [ 1532.487441][ T1921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12594'. [ 1532.767408][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.938902][ T1899] loop2: detected capacity change from 0 to 40427 [ 1532.999099][ T1899] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1533.034026][ T1899] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1533.147042][ T1899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1533.321532][ T1899] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1533.357516][ T1899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1533.781338][ T1948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1534.195912][ T1963] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12613'. [ 1535.113735][ T1988] loop2: detected capacity change from 0 to 4096 [ 1535.165030][ T1988] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1535.307233][ T1988] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1535.372469][ T2000] loop3: detected capacity change from 0 to 512 [ 1535.404790][ T2000] EXT4-fs: Ignoring removed orlov option [ 1535.462912][ T2000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1535.524027][ T2000] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1535.578205][ T2000] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12630: bg 0: block 248: padding at end of block bitmap is not set [ 1535.669685][ T2000] __quota_error: 6 callbacks suppressed [ 1535.669715][ T2000] Quota error (device loop3): write_blk: dquota write failed [ 1535.687066][ T2007] overlayfs: missing 'workdir' [ 1535.703445][ T2000] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1535.741516][ T2000] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12630: Failed to acquire dquot type 1 [ 1535.815187][ T2000] EXT4-fs (loop3): 1 truncate cleaned up [ 1535.962982][ T2000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1536.037439][ T2019] netlink: 'syz.0.12639': attribute type 1 has an invalid length. [ 1536.079586][ T2000] EXT4-fs: Ignoring removed orlov option [ 1536.094731][ T2000] EXT4-fs: can't change dax mount option while remounting [ 1536.224459][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.577177][ T2037] xt_policy: neither incoming nor outgoing policy selected [ 1536.726986][ T2041] loop1: detected capacity change from 0 to 512 [ 1536.823566][T31736] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1536.864903][ T2045] netlink: 'syz.3.12652': attribute type 1 has an invalid length. [ 1537.669112][ T2070] bond0: Error: Cannot enslave bond to itself. [ 1537.692074][ T2069] team0: left allmulticast mode [ 1537.697032][ T2069] team_slave_0: left allmulticast mode [ 1537.711897][ T2069] team_slave_1: left allmulticast mode [ 1537.717938][ T2069] team0: left promiscuous mode [ 1537.730752][ T2069] team_slave_0: left promiscuous mode [ 1537.744665][ T2069] team_slave_1: left promiscuous mode [ 1537.750666][ T2069] bridge0: port 3(team0) entered disabled state [ 1537.757664][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1537.778772][ T2069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.799425][ T2069] bridge_slave_1: left allmulticast mode [ 1537.810278][ T2074] loop2: detected capacity change from 0 to 1024 [ 1537.822556][ T2069] bridge_slave_1: left promiscuous mode [ 1537.831391][ T2069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.877090][ T2069] bond0: (slave bond_slave_0): Releasing backup interface [ 1537.942154][ T2069] infiniband syz!: set down [ 1537.978442][ T2069] team0: Port device team_slave_0 removed [ 1537.984629][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1537.996199][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.010686][ T9] usb 1-1: config 0 descriptor?? [ 1538.051759][ T2069] team0: Port device team_slave_1 removed [ 1538.058514][ T2069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.093708][ T2069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.116968][ T2069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.131881][ T2069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.545456][ T9] ath6kl: Failed to submit usb control message: -71 [ 1538.552276][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1538.574627][ T9] ath6kl: Unable to send get target info: -71 [ 1538.583482][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1538.594081][ T9] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1538.622098][ T9] usb 1-1: USB disconnect, device number 57 [ 1538.684059][ T2095] loop2: detected capacity change from 0 to 164 [ 1539.090335][ T2107] loop3: detected capacity change from 0 to 8 [ 1539.566267][ T2121] loop3: detected capacity change from 0 to 1024 [ 1539.631673][ T2121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.814057][ T2121] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #11: comm syz.3.12689: directory missing '..' [ 1539.876873][ T2121] EXT4-fs (loop3): Remounting filesystem read-only [ 1539.960150][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12695'. [ 1539.986682][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.995901][ T2138] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12696'. [ 1540.431221][ T2152] loop2: detected capacity change from 0 to 64 [ 1540.732094][ T2162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12708'. [ 1540.790895][ T2158] loop3: detected capacity change from 0 to 4096 [ 1540.799818][ T2158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1540.855849][ T2158] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1540.902549][ T2158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1541.127514][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.322736][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1541.531116][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1541.553956][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.586551][ T9] usb 2-1: Product: syz [ 1541.601073][ T9] usb 2-1: Manufacturer: syz [ 1541.605776][ T9] usb 2-1: SerialNumber: syz [ 1541.636078][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1541.665405][T14246] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1541.812188][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12723'. [ 1541.858298][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12723'. [ 1542.063851][ T2197] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12725'. [ 1542.086841][ T2197] openvswitch: netlink: Key type 29 is not supported [ 1542.373228][ T2203] loop3: detected capacity change from 0 to 1024 [ 1542.380733][ T2203] EXT4-fs: inline encryption not supported [ 1542.405445][ T9] usb 2-1: USB disconnect, device number 43 [ 1542.453994][ T2203] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1542.461123][ T2207] netlink: 'syz.2.12730': attribute type 6 has an invalid length. [ 1542.504983][ T2207] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12730'. [ 1542.577690][ T2203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1542.769488][ T6074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.873540][T14246] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1542.880673][T14246] ath9k_htc: Failed to initialize the device [ 1542.904662][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1542.987537][ T2220] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 1543.131808][ T2224] loop3: detected capacity change from 0 to 64 [ 1543.763079][ T2218] loop2: detected capacity change from 0 to 32768 [ 1543.798622][ T2218] (syz.2.12735,2218,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1543.848133][ T2218] (syz.2.12735,2218,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1543.867527][ T2242] "syz.0.12746" (2242) uses obsolete ecb(arc4) skcipher [ 1543.941088][ T2218] JBD2: Ignoring recovery information on journal [ 1544.188157][ T2218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1544.222284][ T2254] netlink: 'syz.1.12751': attribute type 6 has an invalid length. [ 1544.256404][ T2254] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12751'. [ 1544.660471][ T6073] ocfs2: Unmounting device (7,2) on (node local) [ 1544.703772][ T2270] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1545.258696][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12767'. [ 1545.873394][ T2302] loop2: detected capacity change from 0 to 4096 [ 1545.889384][ T2302] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1545.977379][ T2302] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1546.022192][ T2302] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1546.146618][ T2302] ntfs: volume version 3.1. [ 1546.965957][ T2343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12795'. [ 1547.082866][ T2347] netlink: 'syz.1.12797': attribute type 21 has an invalid length. [ 1547.280543][ T2355] kernel profiling enabled (shift: 5) [ 1548.034240][ T2378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12809'. [ 1548.206597][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.254073][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.282692][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.305931][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.325474][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.347980][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.367024][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1548.396845][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1549.049632][ T2416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.164735][ T2421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.223982][T16846] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1549.416381][T16846] usb 1-1: Using ep0 maxpacket: 32 [ 1549.429885][T16846] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1549.445088][T16846] usb 1-1: config 0 has no interface number 0 [ 1549.466117][T16846] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1549.485028][T16846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.500265][T16846] usb 1-1: Product: syz [ 1549.512524][T16846] usb 1-1: Manufacturer: syz [ 1549.533201][T16846] usb 1-1: SerialNumber: syz [ 1549.550952][T16846] usb 1-1: config 0 descriptor?? [ 1549.563907][T16846] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1549.804254][T16846] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1549.822745][T16846] quatech2: probe of 1-1:0.51 failed with error -8 [ 1550.077251][T16846] usb 1-1: USB disconnect, device number 58 [ 1550.196992][ T2464] loop1: detected capacity change from 0 to 256 [ 1550.228138][ T2464] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1550.263663][ T2464] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1550.732248][T14246] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1550.784165][ T2487] loop1: detected capacity change from 0 to 2048 [ 1550.835619][ T2487] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1550.894349][ T2487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1550.953230][T14246] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1550.970302][ T2487] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 1550.984620][T14246] usb 3-1: config 0 has no interface number 0 [ 1550.999718][T14246] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1551.028791][T14246] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1551.052034][T14246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.060201][T14246] usb 3-1: Product: syz [ 1551.101608][T14246] usb 3-1: Manufacturer: syz [ 1551.106930][T14246] usb 3-1: SerialNumber: syz [ 1551.149809][T14246] usb 3-1: config 0 descriptor?? [ 1551.200910][T14246] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1551.690766][T16846] usb 3-1: USB disconnect, device number 51 [ 1551.711252][T16846] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1552.581080][ T1537] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1552.805748][ T1537] usb 1-1: Using ep0 maxpacket: 16 [ 1552.817487][ T1537] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1552.841705][ T1537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.874128][ T1537] usb 1-1: Product: syz [ 1552.878390][ T1537] usb 1-1: Manufacturer: syz [ 1552.907447][ T1537] usb 1-1: SerialNumber: syz [ 1552.921286][ T1537] r8152-cfgselector 1-1: config 0 descriptor?? [ 1553.402314][ T2561] __nla_validate_parse: 77 callbacks suppressed [ 1553.402337][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.423174][ T1537] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1553.448254][ T1537] r8152-cfgselector 1-1: USB disconnect, device number 59 [ 1553.480922][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.512151][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.540261][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.550170][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.573630][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.595313][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.614092][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.659234][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1553.670320][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 1554.611806][ T2589] loop2: detected capacity change from 0 to 1024 [ 1555.258238][ T2604] QAT: failed to copy from user cfg_data. [ 1555.388506][ T2585] loop1: detected capacity change from 0 to 32768 [ 1555.440356][ T2585] (syz.1.12892,2585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1555.487474][ T2585] (syz.1.12892,2585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1555.580997][ T2585] JBD2: Ignoring recovery information on journal [ 1555.622217][ T2585] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1555.878731][ T6077] ocfs2: Unmounting device (7,1) on (node local) [ 1557.302209][ T2629] loop2: detected capacity change from 0 to 32768 [ 1557.340843][ T2629] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1557.372864][ T2629] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1557.411772][ T28] audit: type=1326 audit(2000524900.499:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2649 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1557.462350][ T2629] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1557.471753][ T28] audit: type=1326 audit(2000524900.499:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2649 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1557.486844][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.511178][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.525986][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1557.533118][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1557.537846][ T28] audit: type=1326 audit(2000524900.499:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2649 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1557.607621][ T28] audit: type=1326 audit(2000524900.499:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2649 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1557.684353][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 1557.694545][ T28] audit: type=1326 audit(2000524900.499:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2649 comm="syz.1.12917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1557.728728][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 1557.740848][ T2629] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1558.302938][ T2629] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1558.818646][ T6073] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 1558.840646][ T6073] CPU: 0 PID: 6073 Comm: syz-executor Not tainted syzkaller #0 [ 1558.848311][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1558.858433][ T6073] Call Trace: [ 1558.861750][ T6073] [ 1558.864797][ T6073] dump_stack_lvl+0x16c/0x230 [ 1558.869535][ T6073] ? show_regs_print_info+0x20/0x20 [ 1558.875226][ T6073] ? load_image+0x3b0/0x3b0 [ 1558.879807][ T6073] ? do_raw_spin_unlock+0x121/0x230 [ 1558.885069][ T6073] gfs2_assert_warn_i+0x193/0x2c0 [ 1558.890270][ T6073] gfs2_qd_dispose+0x4aa/0x5b0 [ 1558.895268][ T6073] gfs2_quota_cleanup+0x406/0x6d0 [ 1558.900453][ T6073] ? spin_lock_bucket+0x150/0x150 [ 1558.905535][ T6073] ? __might_sleep+0xe0/0xe0 [ 1558.910171][ T6073] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 1558.915331][ T6073] ? gfs2_quota_sync+0x591/0x5a0 [ 1558.920348][ T6073] gfs2_make_fs_ro+0x27f/0x300 [ 1558.925206][ T6073] ? gfs2_dinode_out+0xb10/0xb10 [ 1558.930201][ T6073] ? __lock_acquire+0x7c80/0x7c80 [ 1558.935285][ T6073] ? __rwlock_init+0x150/0x150 [ 1558.940102][ T6073] ? do_raw_spin_unlock+0x121/0x230 [ 1558.945349][ T6073] gfs2_put_super+0x224/0x930 [ 1558.950213][ T6073] ? gfs2_evict_inode+0x1220/0x1220 [ 1558.950506][ T2664] __nla_validate_parse: 77 callbacks suppressed [ 1558.950522][ T2664] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12923'. [ 1558.955516][ T6073] generic_shutdown_super+0x134/0x2b0 [ 1558.955562][ T6073] kill_block_super+0x44/0x90 [ 1558.955581][ T6073] deactivate_locked_super+0x97/0x100 [ 1558.955610][ T6073] cleanup_mnt+0x429/0x4c0 [ 1558.955639][ T6073] task_work_run+0x1ce/0x250 [ 1558.955668][ T6073] ? task_work_cancel+0x240/0x240 [ 1558.955699][ T6073] ? exit_to_user_mode_loop+0x3b/0x110 [ 1558.955728][ T6073] exit_to_user_mode_loop+0xe6/0x110 [ 1558.955754][ T6073] exit_to_user_mode_prepare+0xf6/0x180 [ 1558.984408][ T2664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1558.986688][ T6073] syscall_exit_to_user_mode+0x1a/0x50 [ 1558.986718][ T6073] do_syscall_64+0x61/0xb0 [ 1558.986740][ T6073] ? clear_bhb_loop+0x40/0x90 [ 1558.986761][ T6073] ? clear_bhb_loop+0x40/0x90 [ 1558.986784][ T6073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1559.057902][ T6073] RIP: 0033:0x7f9806790a77 [ 1559.062370][ T6073] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1559.082117][ T6073] RSP: 002b:00007ffca9efd4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1559.090586][ T6073] RAX: 0000000000000000 RBX: 00007f9806813d7d RCX: 00007f9806790a77 [ 1559.099219][ T6073] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9efd580 [ 1559.107240][ T6073] RBP: 00007ffca9efd580 R08: 0000000000000000 R09: 0000000000000000 [ 1559.115256][ T6073] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca9efe610 [ 1559.123265][ T6073] R13: 00007f9806813d7d R14: 000000000016abf2 R15: 00007ffca9efe650 [ 1559.131311][ T6073] [ 1559.890256][ T2686] loop1: detected capacity change from 0 to 2048 [ 1559.925842][ T2686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1560.263810][ T2695] netlink: 'syz.0.12934': attribute type 39 has an invalid length. [ 1560.472718][ T2697] loop1: detected capacity change from 0 to 1024 [ 1560.512343][ T2697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1560.548236][ T2697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1560.589373][ T2697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1560.617797][ T2697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1560.708640][ T2697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.046385][ T6077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.099076][ T2717] Cannot find set identified by id 0 to match [ 1562.250399][ T2745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.524804][ T2752] netlink: 'syz.1.12956': attribute type 21 has an invalid length. [ 1562.532837][ T2752] netlink: 'syz.1.12956': attribute type 6 has an invalid length. [ 1562.562305][ T2752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12956'. [ 1562.729938][ T6153] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1562.924223][ T6153] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1562.954740][ T6153] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 1562.986295][ T6153] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1563.000704][ T6153] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1563.021378][ T6153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.038246][ T6153] usb 4-1: Product: syz [ 1563.042475][ T6153] usb 4-1: Manufacturer: syz [ 1563.060733][ T6153] usb 4-1: SerialNumber: syz [ 1563.081693][ T6153] usb 4-1: config 0 descriptor?? [ 1563.113654][ T6153] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1563.121702][ T2774] loop2: detected capacity change from 0 to 512 [ 1563.183413][ T2774] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1563.213471][ T2774] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1563.228018][ T2774] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1563.246479][ T2774] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.12967: Failed to acquire dquot type 1 [ 1563.269210][ T2774] EXT4-fs (loop2): 1 truncate cleaned up [ 1563.292880][ T2774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1563.370931][ T6153] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1563.371320][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.399981][ T6153] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1563.671447][ T6153] usb 4-1: USB disconnect, device number 56 [ 1564.072909][ T28] audit: type=1326 audit(2000524906.719:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2804 comm="syz.1.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1564.179473][ T28] audit: type=1326 audit(2000524906.719:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2804 comm="syz.1.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1564.241017][ T28] audit: type=1326 audit(2000524906.737:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2804 comm="syz.1.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1564.325779][ T28] audit: type=1326 audit(2000524906.737:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2804 comm="syz.1.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1564.348814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.447054][ T28] audit: type=1326 audit(2000524906.737:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2804 comm="syz.1.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1564.951316][ T2846] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1565.090541][ T28] audit: type=1326 audit(2000524907.673:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1565.181419][ T28] audit: type=1326 audit(2000524907.673:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1565.203983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.249364][ T28] audit: type=1326 audit(2000524907.673:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f7a8af8f749 code=0x7ffc0000 [ 1565.643997][ T2869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13002'. [ 1565.700370][ T2869] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1566.080959][ T2879] loop3: detected capacity change from 0 to 1024 [ 1566.140071][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1566.194016][ T2861] loop2: detected capacity change from 0 to 32768 [ 1566.427005][T16846] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1566.648888][ T2873] loop1: detected capacity change from 0 to 32768 [ 1566.651690][T16846] usb 1-1: Using ep0 maxpacket: 16 [ 1566.673629][T16846] usb 1-1: config 0 has no interfaces? [ 1566.699413][T16846] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1566.722682][ T2873] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 1566.722682][ T2873] [ 1566.732188][T16846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.758617][ T2873] ERROR: (device loop1): remounting filesystem as read-only [ 1566.770536][ T2873] jfs_lookup: dtSearch returned -5 [ 1566.776148][T16846] usb 1-1: Product: syz [ 1566.791213][T16846] usb 1-1: Manufacturer: syz [ 1566.796141][T16846] usb 1-1: SerialNumber: syz [ 1566.844702][T16846] r8152-cfgselector 1-1: config 0 descriptor?? [ 1567.082634][T16846] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1567.086550][ T2892] loop1: detected capacity change from 0 to 512 [ 1567.176238][ T2892] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.13013: Invalid inode bitmap blk 4 in block_group 0 [ 1567.222970][ T2892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1567.261350][ T2884] loop3: detected capacity change from 0 to 32768 [ 1567.273565][ T2892] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.13013: Invalid inode bitmap blk 4 in block_group 0 [ 1567.278445][ T2892] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1567.321992][ T2884] (syz.3.13009,2884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1567.360675][ T9] usb 1-1: USB disconnect, device number 60 [ 1567.398229][ T2884] (syz.3.13009,2884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1567.490884][ T2884] JBD2: Ignoring recovery information on journal [ 1567.527489][ T6077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.551923][ T2884] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1567.748360][ T6074] ocfs2: Unmounting device (7,3) on (node local) [ 1567.934764][ T2908] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13019'. [ 1568.247679][ T2916] netlink: 'syz.1.13023': attribute type 29 has an invalid length. [ 1568.325128][ T2918] loop2: detected capacity change from 0 to 8 [ 1568.433734][ T2918] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1569.573110][ T2950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13039'. [ 1569.606799][ T2950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13039'. [ 1569.959844][ T2962] loop2: detected capacity change from 0 to 512 [ 1570.017784][ T2962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1570.053459][ T2962] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.13045: corrupted in-inode xattr: invalid size in ea xattr [ 1570.081013][ T2962] EXT4-fs (loop2): Remounting filesystem read-only [ 1570.117346][ T2962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1570.345024][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.039236][ T3001] IPVS: set_ctl: invalid protocol: 41 172.30.0.1:65534 [ 1571.144156][ T3003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13064'. [ 1571.240444][ T3007] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.13066'. [ 1571.829000][ T2993] comedi comedi0: reset error (fatal) [ 1572.044334][ T3032] netlink: 'syz.2.13079': attribute type 7 has an invalid length. [ 1572.082110][ T3032] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13079'. [ 1573.339331][ T3081] netlink: 268 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1573.357041][ T3081] unsupported nla_type 65024 [ 1573.433206][ T3083] cifs: Unknown parameter '2í¡Qƒé [ 1573.433206][ T3083] @Ý"2a×ch}#úä`Ü[TäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1573.433206][ T3083] SÃÿ' [ 1574.223650][ T3109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13117'. [ 1574.289809][ T3113] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13120'. [ 1574.307123][ T3115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1574.459288][ T3114] loop1: detected capacity change from 0 to 4096 [ 1574.489510][ T3114] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1574.558271][ T3120] netlink: 'syz.3.13122': attribute type 1 has an invalid length. [ 1574.627792][ T3120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13122'. [ 1575.588883][ T3156] loop1: detected capacity change from 0 to 512 [ 1575.708890][ T3156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.766029][ T3163] loop2: detected capacity change from 0 to 4096 [ 1575.776439][ T3163] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1575.786968][ T3156] ext4 filesystem being mounted at /3259/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.818555][ T3156] EXT4-fs error (device loop1): ext4_xattr_block_get:600: inode #15: comm syz.1.13139: corrupted xattr block 33: overlapping e_value [ 1575.889647][ T6153] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1575.990322][ T6077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.105669][ T6153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1576.135265][ T6153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.188690][ T6153] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1576.216272][ T6153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.269837][ T6153] usb 4-1: config 0 descriptor?? [ 1576.297366][ T6153] xbox_remote_probe: endpoint_in message size==0? [ 1576.526789][ T6153] usbhid 4-1:0.0: can't add hid device: -71 [ 1576.545474][ T6153] usbhid: probe of 4-1:0.0 failed with error -71 [ 1576.577154][ T6153] usb 4-1: USB disconnect, device number 57 [ 1577.277354][ T3209] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.13162'. [ 1578.067453][ T3224] loop2: detected capacity change from 0 to 4096 [ 1578.110445][ T3224] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1578.148799][ T3224] ntfs3: loop2: $AttrDef is corrupted. [ 1579.204724][ T3264] loop1: detected capacity change from 0 to 128 [ 1579.231885][ T3264] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1579.366173][ T6077] sysv_free_block: flc_count > flc_size [ 1579.371832][ T6077] sysv_free_block: flc_count > flc_size [ 1579.396135][ T6077] sysv_free_block: flc_count > flc_size [ 1579.418541][ T6077] sysv_free_block: flc_count > flc_size [ 1579.450929][ T6077] sysv_free_block: flc_count > flc_size [ 1579.456661][ T6077] sysv_free_block: flc_count > flc_size [ 1579.514581][ T6077] sysv_free_block: flc_count > flc_size [ 1579.520215][ T6077] sysv_free_block: flc_count > flc_size [ 1579.543254][ T6077] sysv_free_block: flc_count > flc_size [ 1579.558887][ T6077] sysv_free_block: flc_count > flc_size [ 1579.579708][ T6077] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1579.920694][ T3284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13199'. [ 1579.955242][ T3284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13199'. [ 1580.555987][ T3305] tipc: Can't bind to reserved service type 2 [ 1580.602112][ T3308] x_tables: unsorted entry at hook 3 [ 1581.068585][ T3325] C: renamed from team_slave_0 (while UP) [ 1581.127253][ T3325] netlink: 'syz.2.13219': attribute type 1 has an invalid length. [ 1581.127278][ T3325] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13219'. [ 1581.127297][ T3325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1581.177285][ T3329] SET target dimension over the limit! [ 1581.207101][ T3331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13222'. [ 1581.371153][ T3334] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1581.825092][ T3345] loop3: detected capacity change from 0 to 2048 [ 1581.910515][ T3345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1582.004557][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1582.004576][ T28] audit: type=1800 audit(2000524923.498:206): pid=3345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13229" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 1582.676168][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13238'. [ 1582.833360][ T3351] loop1: detected capacity change from 0 to 32768 [ 1582.933206][ T3351] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1583.165469][ T3393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13245'. [ 1583.265274][ T3351] XFS (loop1): Ending clean mount [ 1583.302055][ T3351] XFS (loop1): Quotacheck needed: Please wait. [ 1583.443277][ T3351] XFS (loop1): Quotacheck: Done. [ 1583.603206][ T3401] loop3: detected capacity change from 0 to 4096 [ 1583.685233][ T3401] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1583.721816][ T3401] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1583.761236][ T6077] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1583.876000][ T3401] ntfs: volume version 3.1. [ 1583.893896][ T3401] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1583.929708][ T3401] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 1583.937785][ T3401] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1584.048000][ T3401] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1584.135134][ T3401] ntfs: (device loop3): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 1584.187050][ T3401] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1584.644856][ T3423] loop3: detected capacity change from 0 to 256 [ 1584.800696][ T3423] FAT-fs (loop3): Directory bread(block 64) failed [ 1584.811144][ T3423] FAT-fs (loop3): Directory bread(block 65) failed [ 1584.840298][ T3423] FAT-fs (loop3): Directory bread(block 66) failed [ 1584.847081][ T3423] FAT-fs (loop3): Directory bread(block 67) failed [ 1584.854869][ T3429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13262'. [ 1584.902226][ T3429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13262'. [ 1584.913655][ T3423] FAT-fs (loop3): Directory bread(block 68) failed [ 1584.920252][ T3423] FAT-fs (loop3): Directory bread(block 69) failed [ 1584.958868][ T3423] FAT-fs (loop3): Directory bread(block 70) failed [ 1584.989817][ T3423] FAT-fs (loop3): Directory bread(block 71) failed [ 1585.022714][ T3423] FAT-fs (loop3): Directory bread(block 72) failed [ 1585.029362][ T3423] FAT-fs (loop3): Directory bread(block 73) failed [ 1585.308806][ T6017] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1585.533432][ T6017] usb 3-1: Using ep0 maxpacket: 8 [ 1585.541950][ T6017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.558174][ T6017] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1585.584782][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.613029][ T6017] usb 3-1: config 0 descriptor?? [ 1585.810071][ T3447] autofs4:pid:3447:autofs_fill_super: called with bogus options [ 1585.880065][ T6017] usb 3-1: USB disconnect, device number 52 [ 1586.111297][ T3455] loop1: detected capacity change from 0 to 16 [ 1586.152969][ T3455] erofs: (device loop1): mounted with root inode @ nid 36. [ 1586.178610][ T3457] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.13277'. [ 1586.204069][ T3455] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1586.256204][ T3455] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1586.514554][ T3465] netlink: 'syz.1.13280': attribute type 5 has an invalid length. [ 1586.572290][ T3467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13281'. [ 1586.862284][ T3479] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13287'. [ 1586.949108][ T3483] loop1: detected capacity change from 0 to 736 [ 1587.019004][ T3483] rock: directory entry would overflow storage [ 1587.029805][ T3483] rock: sig=0x3b10, size=4, remaining=3 [ 1587.171150][ T3487] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1587.176194][ T6113] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1587.183737][ T3487] bond0: (slave lo): Error: Device can not be enslaved while up [ 1587.416303][ T6113] usb 4-1: Using ep0 maxpacket: 32 [ 1587.429962][ T6113] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 1587.453118][ T6113] usb 4-1: config 0 has no interface number 1 [ 1587.467930][ T6113] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1587.480300][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.488435][ T6113] usb 4-1: Product: syz [ 1587.496840][ T6113] usb 4-1: Manufacturer: syz [ 1587.503637][ T6113] usb 4-1: SerialNumber: syz [ 1587.522584][ T6113] usb 4-1: config 0 descriptor?? [ 1587.585228][ T6113] snd-usb-audio: probe of 4-1:0.74 failed with error -22 [ 1587.699183][T31736] udevd[31736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.973768][ T6113] usb 4-1: USB disconnect, device number 58 [ 1588.036358][ T3511] netlink: 'syz.0.13303': attribute type 3 has an invalid length. [ 1588.044724][ T3511] netlink: 'syz.0.13303': attribute type 3 has an invalid length. [ 1588.075399][ T3511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13303'. [ 1588.114077][ T3513] loop1: detected capacity change from 0 to 64 [ 1588.214446][ T3517] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13306'. [ 1588.826690][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1588.858476][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1588.867597][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1589.205592][ T3551] sctp: [Deprecated]: syz.0.13323 (pid 3551) Use of int in max_burst socket option. [ 1589.205592][ T3551] Use struct sctp_assoc_value instead [ 1590.445946][ T3555] loop2: detected capacity change from 0 to 32768 [ 1590.525226][ T3555] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1590.532412][ T28] audit: type=1326 audit(2000524931.476:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1590.562863][ T28] audit: type=1326 audit(2000524931.504:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1590.645566][ T28] audit: type=1326 audit(2000524931.523:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1590.709942][ T6113] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1590.738730][ T28] audit: type=1326 audit(2000524931.607:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1590.761273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.767848][ T6113] XFS (loop2): Unmount and run xfs_repair [ 1590.783472][ T6113] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1590.790929][ T6113] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 1590.821728][ T28] audit: type=1326 audit(2000524931.607:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1590.854487][ T6113] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 1590.891138][ T6113] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1590.916105][ T6113] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 1590.925635][ T3607] netlink: 'syz.0.13344': attribute type 21 has an invalid length. [ 1590.928236][ T28] audit: type=1326 audit(2000524931.625:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3601 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f317efc2005 code=0x7ffc0000 [ 1590.956428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.973733][ T6113] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1590.974362][ T3607] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13344'. [ 1591.001151][ T6113] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 1591.023924][ T3607] netlink: 'syz.0.13344': attribute type 5 has an invalid length. [ 1591.034811][ T6113] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1591.054193][ T3607] netlink: 'syz.0.13344': attribute type 6 has an invalid length. [ 1591.073191][ T6113] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1591.084072][ T28] audit: type=1326 audit(2000524931.775:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3601 comm="syz.1.13340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f317ef8f749 code=0x7ffc0000 [ 1591.103715][ T3607] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13344'. [ 1591.113275][ T3555] XFS (loop2): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1591.128087][ T3555] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 1591.142304][ T3555] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592). Shutting down filesystem. [ 1591.179253][ T3555] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1591.187796][ T3555] XFS (loop2): Ending clean mount [ 1591.199159][ T3555] XFS (loop2): Failed to initialize disk quotas. [ 1591.209812][ T3555] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1591.786182][ T3619] netlink: 'syz.0.13350': attribute type 1 has an invalid length. [ 1591.794311][ T3619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13350'. [ 1591.807429][ T3619] nbd: must specify at least one socket [ 1591.934544][ T3605] loop3: detected capacity change from 0 to 32768 [ 1591.959524][ T3605] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1592.014532][ T3605] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1592.044967][ T3623] netlink: 'syz.2.13353': attribute type 2 has an invalid length. [ 1592.097058][ T3605] (syz.3.13345,3605,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 1592.114594][ T3605] (syz.3.13345,3605,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1592.123687][ T3605] (syz.3.13345,3605,0):ocfs2_mknod:298 ERROR: status = -2 [ 1592.132536][ T3605] (syz.3.13345,3605,0):ocfs2_mknod:502 ERROR: status = -2 [ 1592.140007][ T3605] (syz.3.13345,3605,0):ocfs2_create:676 ERROR: status = -2 [ 1592.305681][ T6074] ocfs2: Unmounting device (7,3) on (node local) [ 1592.469896][ T3635] loop1: detected capacity change from 0 to 512 [ 1592.505776][ T3635] EXT4-fs: Ignoring removed orlov option [ 1592.552827][ T3635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1592.586911][ T3635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1592.663197][ T3635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.13358: bg 0: block 248: padding at end of block bitmap is not set [ 1592.761487][ T3635] EXT4-fs (loop1): Remounting filesystem read-only [ 1592.780019][ T3635] Quota error (device loop1): write_blk: dquota write failed [ 1592.835989][ T3635] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1592.846100][ T3635] EXT4-fs (loop1): 1 truncate cleaned up [ 1592.881804][ T3635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1593.043320][ T3635] EXT4-fs: Ignoring removed orlov option [ 1593.049100][ T3635] EXT4-fs: Cannot specify journal on remount [ 1593.147928][ T6077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.402967][ T6153] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1593.619956][ T6153] usb 4-1: Using ep0 maxpacket: 8 [ 1593.629111][ T6153] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 1593.656535][ T6153] usb 4-1: config 0 has no interface number 0 [ 1593.672595][ T6153] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 1593.687323][ T6153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.700106][ T6153] usb 4-1: Product: syz [ 1593.711136][ T6153] usb 4-1: Manufacturer: syz [ 1593.716204][ T6153] usb 4-1: SerialNumber: syz [ 1593.740310][ T6153] usb 4-1: config 0 descriptor?? [ 1593.988658][ T6153] usb 4-1: Invalid descriptor size=18. [ 1593.990551][ T6017] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1594.012481][ T6153] usb 4-1: USB disconnect, device number 59 [ 1594.226201][ T6017] usb 3-1: Using ep0 maxpacket: 32 [ 1594.234015][ T6017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.249131][ T6017] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1594.273892][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.289746][ T6017] usb 3-1: Product: syz [ 1594.295048][ T6017] usb 3-1: Manufacturer: syz [ 1594.299874][ T6017] usb 3-1: SerialNumber: syz [ 1594.323228][ T6017] usb 3-1: config 0 descriptor?? [ 1594.335863][ T6017] usb 3-1: bad CDC descriptors [ 1594.365967][ T6017] usb 3-1: unsupported MDLM descriptors [ 1594.490048][ T3674] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13376'. [ 1594.646933][ T6017] usb 3-1: USB disconnect, device number 53 [ 1594.860649][ T3683] netlink: 'syz.0.13381': attribute type 1 has an invalid length. [ 1594.894400][ T3683] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13381'. [ 1594.972227][ T3690] netlink: 'syz.1.13384': attribute type 16 has an invalid length. [ 1595.158591][ T3696] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13385'. [ 1595.759625][ T3714] ieee802154 phy0 wpan0: encryption failed: -90 [ 1595.803620][ T27] kworker/dying (27) used greatest stack depth: 15592 bytes left [ 1596.097683][ T3728] loop2: detected capacity change from 0 to 64 [ 1596.169933][ T3728] hfs: unable to locate alternate MDB [ 1596.183034][ T3728] hfs: continuing without an alternate MDB [ 1596.403996][ T6153] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1596.631460][ T6153] usb 2-1: Using ep0 maxpacket: 32 [ 1596.656207][ T6153] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1596.675078][ T6153] usb 2-1: config 0 has no interface number 0 [ 1596.695589][ T6153] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.717780][ T6153] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1596.741859][ T6153] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1596.758869][ T6153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.804773][ T6153] usb 2-1: Product: syz [ 1596.809112][ T6153] usb 2-1: Manufacturer: syz [ 1596.843753][ T6153] usb 2-1: SerialNumber: syz [ 1596.860458][ T6153] usb 2-1: config 0 descriptor?? [ 1596.875612][ T6153] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1597.156225][ T6153] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1597.163449][ T6153] quatech2: probe of 2-1:0.51 failed with error -90 [ 1597.422021][ T9] usb 2-1: USB disconnect, device number 44 [ 1597.496012][ T3769] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.13422'. [ 1597.670780][ T3774] netlink: 'syz.0.13425': attribute type 12 has an invalid length. [ 1597.689377][ T3774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13425'. [ 1598.987394][ T3782] loop3: detected capacity change from 0 to 32768 [ 1599.423301][ T3822] comedi comedi2: rti800: I/O port conflict (0x6,16) [ 1599.735131][ T3831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13450'. [ 1599.756023][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13450'. [ 1599.768549][ T3834] netlink: 'syz.3.13453': attribute type 8 has an invalid length. [ 1599.788660][ T3834] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13453'. [ 1600.811244][ T3833] loop2: detected capacity change from 0 to 32768 [ 1602.242033][ T3903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1602.319858][ T3906] netlink: 'syz.1.13488': attribute type 62 has an invalid length. [ 1602.657007][ T3919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13494'. [ 1602.982809][ T6113] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1603.188411][ T6113] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.217625][ T6113] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.254872][ T6113] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1603.275569][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1603.295656][ T6113] usb 3-1: SerialNumber: syz [ 1603.555638][ T6113] usb 3-1: 0:2 : does not exist [ 1603.657676][ T6113] usb 3-1: USB disconnect, device number 54 [ 1603.734094][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1603.918019][ T3959] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1603.930991][ T3959] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1604.157514][ T3966] loop3: detected capacity change from 0 to 64 [ 1604.233462][ T3966] hfs: unable to locate alternate MDB [ 1604.242336][ T3966] hfs: continuing without an alternate MDB [ 1604.340268][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1604.539888][ T3970] loop2: detected capacity change from 0 to 4096 [ 1604.554140][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1604.568143][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1604.620154][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1604.631408][ T9] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1604.648623][ T9] usb 2-1: Product: syz [ 1604.663607][ T9] usb 2-1: Manufacturer: syz [ 1604.672600][ T9] usb 2-1: SerialNumber: syz [ 1604.690960][ T9] usb 2-1: config 0 descriptor?? [ 1605.047285][ T9] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1605.142289][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.364602][ T9] usb 2-1: USB disconnect, device number 45 [ 1605.391847][ T3986] netlink: 'syz.3.13528': attribute type 10 has an invalid length. [ 1605.907672][ T3999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13534'. [ 1605.928753][ T3999] netlink: 'syz.3.13534': attribute type 1 has an invalid length. [ 1605.950360][ T3999] netlink: 'syz.3.13534': attribute type 2 has an invalid length. [ 1605.977181][ T3999] netlink: 116 bytes leftover after parsing attributes in process `syz.3.13534'. [ 1606.140952][ T23] IPVS: starting estimator thread 0... [ 1606.285551][ T4007] IPVS: using max 20 ests per chain, 48000 per kthread [ 1606.502918][ T4019] cgroup: Name too long [ 1606.741523][ T4029] openvswitch: netlink: Actions may not be safe on all matching packets [ 1607.229690][ T4045] loop1: detected capacity change from 0 to 64 [ 1607.533874][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13560'. [ 1607.566155][ T4053] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1608.183987][ T4078] netlink: 'syz.1.13571': attribute type 5 has an invalid length. [ 1608.781581][ T4099] MPI: mpi too large (107144 bits) [ 1610.226332][ T4147] loop2: detected capacity change from 0 to 256 [ 1610.498863][ T4122] loop3: detected capacity change from 0 to 32768 [ 1610.806736][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13613'. [ 1610.939394][ T4165] loop1: detected capacity change from 0 to 1024 [ 1611.099701][ T4169] ALSA: mixer_oss: invalid OSS volume ';' [ 1611.350593][ T4178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1611.358039][ T4178] IPv6: NLM_F_CREATE should be set when creating new route [ 1611.366284][ T4178] IPv6: NLM_F_CREATE should be set when creating new route [ 1611.875790][ T4196] loop1: detected capacity change from 0 to 8 [ 1611.957923][ T4196] overlayfs: failed to resolve 'fscontext=system_u': -2 [ 1612.223879][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13637'. [ 1612.259685][ T4211] loop3: detected capacity change from 0 to 1024 [ 1612.410039][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 1612.565445][ T4218] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1612.790175][ T4227] loop3: detected capacity change from 0 to 8 [ 1612.951610][ T4227] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1612.988186][ T4227] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1613.355639][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13653'. [ 1613.383164][ T4242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13653'. [ 1613.569277][ T4248] loop2: detected capacity change from 0 to 64 [ 1613.890609][ T28] audit: type=1326 audit(2000524953.324:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.13660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980678f749 code=0x0 [ 1613.913663][ T4258] binder: 4257:4258 ioctl c00c6211 ffffffffffffffff returned -14 [ 1614.138794][ T4264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13664'. [ 1614.392060][ T4274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1614.710659][ T4283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13675'. [ 1614.737618][ T4283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13675'. [ 1614.938521][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13678'. [ 1615.960687][ T4290] loop3: detected capacity change from 0 to 32768 [ 1616.073578][ T4290] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1616.147635][ T4325] loop2: detected capacity change from 0 to 1024 [ 1616.297122][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1616.407287][ T4325] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.13691: Abort forced by user [ 1616.435786][ T4290] XFS (loop3): Ending clean mount [ 1616.441192][ T4325] EXT4-fs (loop2): Remounting filesystem read-only [ 1616.451100][ T4290] XFS (loop3): Quotacheck needed: Please wait. [ 1616.490538][ T4325] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1616.622177][ T4290] XFS (loop3): Quotacheck: Done. [ 1616.704421][ T6073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.903531][ T4339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.944714][ T6074] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1617.863473][ T4364] loop2: detected capacity change from 0 to 16 [ 1617.878737][ T4364] erofs: (device loop2): mounted with root inode @ nid 36. [ 1617.915160][ T4364] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1617.976638][ T4364] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851] [ 1618.032510][ T4364] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1618.259049][ T4373] netlink: 'syz.2.13713': attribute type 4 has an invalid length. [ 1619.397259][ T4403] netlink: 115 bytes leftover after parsing attributes in process `syz.3.13729'. [ 1619.681172][ T4414] xt_l2tp: v2 doesn't support IP mode [ 1620.089991][ T4425] IPVS: Unknown mcast interface: hsr0 [ 1620.686079][ T4439] bond3: entered promiscuous mode [ 1620.699133][ T4439] bond3: entered allmulticast mode [ 1621.044996][ T4446] netlink: 'syz.3.13747': attribute type 1 has an invalid length. [ 1621.068622][ T4446] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.13747'. [ 1621.069146][ T4423] loop1: detected capacity change from 0 to 32768 [ 1621.158144][ T4423] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1621.158144][ T4423] [ 1621.170952][ T4423] ialloc: diAlloc returned -5! [ 1621.335761][ T4455] loop3: detected capacity change from 0 to 16 [ 1621.364845][ T4455] erofs: (device loop3): mounted with root inode @ nid 36. [ 1621.421429][ T4455] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1621.497154][ T4455] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851] [ 1621.500778][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13752'. [ 1621.522256][ T4455] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1621.925908][ T4470] loop2: detected capacity change from 0 to 2048 [ 1621.971886][ T4470] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1622.083986][ T4477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1622.423442][ T4486] loop2: detected capacity change from 0 to 256 [ 1622.478174][ T4486] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1623.174252][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1623.180772][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.312679][ T4515] ieee802154 phy0 wpan0: encryption failed: -90 [ 1623.539993][ T4519] loop1: detected capacity change from 0 to 8192 [ 1623.573052][ T4526] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.13786'. [ 1623.611455][ T4519] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1623.690191][ T4519] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1623.714312][ T4519] REISERFS (device loop1): using ordered data mode [ 1623.720895][ T4519] reiserfs: using flush barriers [ 1623.741607][ T4519] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1623.795832][ T4519] REISERFS (device loop1): checking transaction log (loop1) [ 1623.828835][ T4532] loop2: detected capacity change from 0 to 256 [ 1623.838142][ T4519] REISERFS (device loop1): Using r5 hash to sort names [ 1623.878873][ T4519] reiserfs: enabling write barrier flush mode [ 1623.909767][ T4519] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 1623.962611][ T4519] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1624.014974][ T4532] FAT-fs (loop2): Directory bread(block 64) failed [ 1624.024185][ T4519] REISERFS (device loop1): Remounting filesystem read-only [ 1624.031574][ T4519] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 1624.071703][ T4532] FAT-fs (loop2): Directory bread(block 65) failed [ 1624.084597][ T4519] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 1624.100395][ T4532] FAT-fs (loop2): Directory bread(block 66) failed [ 1624.106990][ T4532] FAT-fs (loop2): Directory bread(block 67) failed [ 1624.127525][ T4532] FAT-fs (loop2): Directory bread(block 68) failed [ 1624.147669][ T4519] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1624.172597][ T4532] FAT-fs (loop2): Directory bread(block 69) failed [ 1624.181987][ T4519] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 1624.208041][ T4532] FAT-fs (loop2): Directory bread(block 70) failed [ 1624.214808][ T4519] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 1624.249579][ T4532] FAT-fs (loop2): Directory bread(block 71) failed [ 1624.260709][ T4532] FAT-fs (loop2): Directory bread(block 72) failed [ 1624.285655][ T4519] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1624.301311][ T4532] FAT-fs (loop2): Directory bread(block 73) failed [ 1624.311835][ T4519] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 1624.348491][ T4519] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 1624.555689][ T6077] ------------[ cut here ]------------ [ 1624.561422][ T6077] kernel BUG at fs/reiserfs/journal.c:1916! [ 1624.600537][ T6077] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1624.606685][ T6077] CPU: 1 PID: 6077 Comm: syz-executor Not tainted syzkaller #0 [ 1624.614386][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1624.624557][ T6077] RIP: 0010:do_journal_release+0x53a/0x550 [ 1624.630417][ T6077] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 80 d0 b6 ff e9 ac fc ff ff e8 46 75 5f ff <0f> 0b e8 3f 75 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1624.650215][ T6077] RSP: 0018:ffffc900032b7b00 EFLAGS: 00010293 [ 1624.656324][ T6077] RAX: ffffffff82261a4a RBX: ffff888074ec6000 RCX: ffff888023598000 [ 1624.664423][ T6077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1624.672521][ T6077] RBP: ffffc900032b7bf8 R08: ffffc900032b7b77 R09: 0000000000000000 [ 1624.680568][ T6077] R10: ffffc900032b7b40 R11: fffff52000656f6f R12: ffffc9000bb3d000 [ 1624.688574][ T6077] R13: 1ffff92000656f64 R14: ffff888074ec6630 R15: 0000000000000000 [ 1624.696583][ T6077] FS: 0000555555b03500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1624.705602][ T6077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1624.712221][ T6077] CR2: 00007f74133ffc94 CR3: 000000005f34c000 CR4: 00000000003506e0 [ 1624.720247][ T6077] Call Trace: [ 1624.723554][ T6077] [ 1624.726508][ T6077] ? journal_release+0x30/0x30 [ 1624.731375][ T6077] journal_release+0x1f/0x30 [ 1624.736098][ T6077] reiserfs_put_super+0x222/0x480 [ 1624.741188][ T6077] ? hook_inode_free_security+0xb0/0xb0 [ 1624.746858][ T6077] ? reiserfs_dirty_inode+0x240/0x240 [ 1624.752278][ T6077] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 1624.757966][ T6077] ? reiserfs_dirty_inode+0x240/0x240 [ 1624.763402][ T6077] generic_shutdown_super+0x134/0x2b0 [ 1624.768913][ T6077] kill_block_super+0x44/0x90 [ 1624.773634][ T6077] deactivate_locked_super+0x97/0x100 [ 1624.779053][ T6077] cleanup_mnt+0x429/0x4c0 [ 1624.783508][ T6077] task_work_run+0x1ce/0x250 [ 1624.788138][ T6077] ? task_work_cancel+0x240/0x240 [ 1624.793203][ T6077] ? exit_to_user_mode_loop+0x3b/0x110 [ 1624.798704][ T6077] exit_to_user_mode_loop+0xe6/0x110 [ 1624.804028][ T6077] exit_to_user_mode_prepare+0xf6/0x180 [ 1624.809612][ T6077] syscall_exit_to_user_mode+0x1a/0x50 [ 1624.815104][ T6077] do_syscall_64+0x61/0xb0 [ 1624.819561][ T6077] ? clear_bhb_loop+0x40/0x90 [ 1624.824278][ T6077] ? clear_bhb_loop+0x40/0x90 [ 1624.828991][ T6077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.835006][ T6077] RIP: 0033:0x7f317ef90a77 [ 1624.839460][ T6077] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1624.859184][ T6077] RSP: 002b:00007fffbe0ab2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1624.867771][ T6077] RAX: 0000000000000000 RBX: 00007f317f013d7d RCX: 00007f317ef90a77 [ 1624.875745][ T6077] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbe0ab360 [ 1624.883803][ T6077] RBP: 00007fffbe0ab360 R08: 0000000000000000 R09: 0000000000000000 [ 1624.891769][ T6077] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffbe0ac3f0 [ 1624.899736][ T6077] R13: 00007f317f013d7d R14: 0000000000179cc6 R15: 00007fffbe0ac430 [ 1624.907932][ T6077] [ 1624.911119][ T6077] Modules linked in: [ 1624.916017][ T6077] ---[ end trace 0000000000000000 ]--- [ 1624.921611][ T6077] RIP: 0010:do_journal_release+0x53a/0x550 [ 1624.928337][ T6077] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 80 d0 b6 ff e9 ac fc ff ff e8 46 75 5f ff <0f> 0b e8 3f 75 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1624.948680][ T6077] RSP: 0018:ffffc900032b7b00 EFLAGS: 00010293 [ 1624.955022][ T6077] RAX: ffffffff82261a4a RBX: ffff888074ec6000 RCX: ffff888023598000 [ 1624.963017][ T6077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1624.973461][ T6077] RBP: ffffc900032b7bf8 R08: ffffc900032b7b77 R09: 0000000000000000 [ 1624.981590][ T6077] R10: ffffc900032b7b40 R11: fffff52000656f6f R12: ffffc9000bb3d000 [ 1624.989701][ T6077] R13: 1ffff92000656f64 R14: ffff888074ec6630 R15: 0000000000000000 [ 1624.997747][ T6077] FS: 0000555555b03500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1625.006789][ T6077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1625.013662][ T6077] CR2: 00007f74133ffc94 CR3: 000000005f34c000 CR4: 00000000003506e0 [ 1625.021739][ T6077] Kernel panic - not syncing: Fatal exception [ 1625.028071][ T6077] Kernel Offset: disabled [ 1625.032413][ T6077] Rebooting in 86400 seconds..