last executing test programs: 8m5.616942421s ago: executing program 3 (id=9880): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) 8m5.495031642s ago: executing program 3 (id=9882): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 8m5.440236277s ago: executing program 3 (id=9883): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 8m5.330913607s ago: executing program 3 (id=9886): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m4.750490929s ago: executing program 3 (id=9894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x29}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m4.07216389s ago: executing program 3 (id=9904): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 8m3.703371683s ago: executing program 32 (id=9904): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 2m17.374411671s ago: executing program 1 (id=14450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 2m17.092899917s ago: executing program 1 (id=14452): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x0, 0x631, &(0x7f0000001940)="$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") ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x6) 2m16.449136194s ago: executing program 1 (id=14460): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1, 0x8, 0x3, 0x9) 2m16.233886583s ago: executing program 1 (id=14464): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0xfffffffc, 0x493, 0x34325852, 0x9, 0x1, [{0x8, 0x2}, {0xff, 0x76c88}, {0x76cb03cd}, {0x5, 0x7}, {0x7, 0x7e1}, {0x10000}, {0x1, 0x6}, {0x1, 0x2}], 0x7, 0x7}}) 2m16.069577268s ago: executing program 1 (id=14467): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m15.15329214s ago: executing program 1 (id=14483): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0xb, 0x4, 0x7ffcfffe}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m1.095819308s ago: executing program 33 (id=14483): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0xb, 0x4, 0x7ffcfffe}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.983756634s ago: executing program 2 (id=15999): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0x12) add_key(&(0x7f0000000640)='encrypted\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f0000000000)="e43f1841", 0x495c, 0xfffffffffffffffe) 3.544465293s ago: executing program 2 (id=16002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.190020325s ago: executing program 5 (id=16005): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980905, 0x7, '\x00', @ptr=0x8}}) 3.12721901s ago: executing program 2 (id=16006): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socket$key(0xf, 0x3, 0x2) 2.753903154s ago: executing program 5 (id=16008): mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.670550361s ago: executing program 2 (id=16009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, 0x1409, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xffffffffffffffb1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000014) 2.444051061s ago: executing program 4 (id=16010): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 2.247591579s ago: executing program 5 (id=16011): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x800) 2.201755133s ago: executing program 0 (id=16012): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {0xfe}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0xed}, @raw32}], 0x70) 2.005797531s ago: executing program 4 (id=16013): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) 1.893685601s ago: executing program 2 (id=16014): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r0, &(0x7f00000000c0)={0x13, 0x2d, 0xf96b, 0x3a, 0x9, 0x2c}, 0x48) 1.884640331s ago: executing program 5 (id=16015): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 1.745209164s ago: executing program 0 (id=16016): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) 1.556593071s ago: executing program 4 (id=16017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0xa7, 0x82, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x3, 0x0, 0x59d6}, {0x0, 0x0, 0x8000000, 0x3}, {0x0, 0x0, 0x3}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cfb(serpent)\x00'}, 0xfffffffffffffeb2}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x0, 0x70bd27, 0x70bd28}}]}, 0x154}}, 0x800) 1.360906958s ago: executing program 0 (id=16018): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000800)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7660500000052f436dd2a01", 0x2b}], 0x1) 1.295988374s ago: executing program 5 (id=16019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x26021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.153307817s ago: executing program 4 (id=16020): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x200001, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',,#'}}]}}) 841.011165ms ago: executing program 5 (id=16021): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000340)={[{@compress_force}, {@compress_force}, {@flushoncommit}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x36, 0x6b, 0x0, 0x32, 0x31, 0x34, 0x6d]}}, {@space_cache_v1}, {@commit={'commit', 0x3d, 0x7b}}, {@barrier}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000000000000000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x32, 0x37, 0x64, 0x64, 0x35, 0x33], 0x2d, [0x34, 0x34, 0x39, 0x62], 0x2d, [0x65, 0x30, 0x65, 0x65], 0x2d, [0x38, 0x39, 0x0, 0x37], 0x2d, [0x38, 0x65, 0x37, 0x32, 0x65, 0x30, 0x65, 0x63]}}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 785.14716ms ago: executing program 0 (id=16022): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x3247504d, 0x8, 0x4, [{0x9, 0x2}, {0x3, 0x8001}, {0xa64b80f0, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x80}, {0x7ff, 0x40}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x1, 0x5}}}) 646.378662ms ago: executing program 4 (id=16023): iopl(0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) 439.658651ms ago: executing program 0 (id=16024): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000) 263.712247ms ago: executing program 4 (id=16025): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x7, 0x5, {{0x5, 0x4, 0x1, 0x1a, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @local}}}}) 250.106118ms ago: executing program 2 (id=16026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40840) 0s ago: executing program 0 (id=16027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000102010200800000000000000a00000818000180050002"], 0x2c}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) kernel console output (not intermixed with test programs): ation [ 1337.381683][ T6077] loop2: detected capacity change from 0 to 4096 [ 1337.552104][ T6077] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1337.628889][ T6077] ntfs3: loop2: Failed to load $Extend (-22). [ 1337.662474][ T6077] ntfs3: loop2: Failed to initialize $Extend. [ 1337.961609][ T6096] loop4: detected capacity change from 0 to 256 [ 1338.086721][ T6096] FAT-fs (loop4): Directory bread(block 64) failed [ 1338.114114][ T6096] FAT-fs (loop4): Directory bread(block 65) failed [ 1338.120997][ T6096] FAT-fs (loop4): Directory bread(block 66) failed [ 1338.136143][ T6096] FAT-fs (loop4): Directory bread(block 67) failed [ 1338.145480][ T6096] FAT-fs (loop4): Directory bread(block 68) failed [ 1338.152596][ T6098] loop0: detected capacity change from 0 to 4096 [ 1338.155289][ T6096] FAT-fs (loop4): Directory bread(block 69) failed [ 1338.172643][ T6096] FAT-fs (loop4): Directory bread(block 70) failed [ 1338.179544][ T6096] FAT-fs (loop4): Directory bread(block 71) failed [ 1338.186212][ T6096] FAT-fs (loop4): Directory bread(block 72) failed [ 1338.193647][ T6096] FAT-fs (loop4): Directory bread(block 73) failed [ 1338.200223][ T5855] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1338.356409][ T28] audit: type=1800 audit(2000000199.001:460): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14490" name="file1" dev="loop4" ino=1048722 res=0 errno=0 [ 1338.377483][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 1338.386534][ T5855] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1338.396016][ T5855] usb 3-1: config 179 has no interface number 0 [ 1338.402343][ T5855] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1338.454808][ T5855] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1338.476744][ T5855] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1338.491077][ T5855] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1338.503104][ T5855] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1338.517860][ T5855] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1338.561823][ T5855] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1338.603458][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.643606][ T5855] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input88 [ 1338.643662][ T6102] QAT: failed to copy from user cfg_data. [ 1338.710898][ T5126] input input88: unable to receive magic message: -110 [ 1338.767111][ T5126] input input88: unable to receive magic message: -32 [ 1338.818233][ T6106] loop4: detected capacity change from 0 to 256 [ 1338.825451][ T5126] input input88: unable to receive magic message: -32 [ 1338.854120][ T5126] input input88: unable to receive magic message: -32 [ 1338.874054][ T6106] FAT-fs (loop4): Directory bread(block 64) failed [ 1338.886592][ T6106] FAT-fs (loop4): Directory bread(block 65) failed [ 1338.897721][ T5126] input input88: unable to receive magic message: -32 [ 1338.911887][ T6106] FAT-fs (loop4): Directory bread(block 66) failed [ 1338.928379][ T5126] input input88: unable to receive magic message: -32 [ 1338.939776][ T6106] FAT-fs (loop4): Directory bread(block 67) failed [ 1338.958103][ T6106] FAT-fs (loop4): Directory bread(block 68) failed [ 1338.982886][ T6106] FAT-fs (loop4): Directory bread(block 69) failed [ 1339.008464][ T6106] FAT-fs (loop4): Directory bread(block 70) failed [ 1339.026097][ T6106] FAT-fs (loop4): Directory bread(block 71) failed [ 1339.036972][ T6106] FAT-fs (loop4): Directory bread(block 72) failed [ 1339.043605][ T6106] FAT-fs (loop4): Directory bread(block 73) failed [ 1339.068670][ T5855] usb 3-1: USB disconnect, device number 55 [ 1339.074769][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1339.089969][ T5855] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1339.166098][ T6110] netlink: zone id is out of range [ 1339.543255][ T6120] xt_ipcomp: unknown flags 12 [ 1339.875900][ T6132] netlink: 'syz.2.14508': attribute type 6 has an invalid length. [ 1339.921591][ T6134] loop4: detected capacity change from 0 to 128 [ 1339.995283][ T6134] FAT-fs (loop4): Directory bread(block 524322) failed [ 1340.014222][ T6134] FAT-fs (loop4): Directory bread(block 524323) failed [ 1340.021686][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.040843][ T6134] FAT-fs (loop4): Directory bread(block 524324) failed [ 1340.048149][ T6134] FAT-fs (loop4): Directory bread(block 524325) failed [ 1340.061928][ T6134] FAT-fs (loop4): Directory bread(block 524326) failed [ 1340.070209][ T6134] FAT-fs (loop4): Directory bread(block 524327) failed [ 1340.084098][ T6134] FAT-fs (loop4): Directory bread(block 524328) failed [ 1340.096736][ T6134] FAT-fs (loop4): Directory bread(block 524329) failed [ 1340.125687][ T6134] FAT-fs (loop4): Directory bread(block 524322) failed [ 1340.136050][ T6134] FAT-fs (loop4): Directory bread(block 524323) failed [ 1340.250934][T28417] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1340.345484][ T6128] loop0: detected capacity change from 0 to 32768 [ 1340.368306][ T6128] (syz.0.14506,6128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1340.392098][ T6128] (syz.0.14506,6128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1340.423844][ T6128] JBD2: Ignoring recovery information on journal [ 1340.437980][T28417] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.470760][T28417] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1340.495239][ T6128] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1340.508959][T28417] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1340.569362][T28417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.602063][T28417] usb 3-1: config 0 descriptor?? [ 1340.848742][ T6136] loop2: detected capacity change from 0 to 1024 [ 1340.939762][ T1063] usb 3-1: USB disconnect, device number 56 [ 1340.959468][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 1341.115424][ T6152] openvswitch: netlink: Actions may not be safe on all matching packets [ 1341.398932][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14521'. [ 1341.488378][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 1341.760945][ T6174] overlayfs: missing 'lowerdir' [ 1341.994121][ T6182] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 1342.074097][ T6186] set_capacity_and_notify: 1 callbacks suppressed [ 1342.074114][ T6186] loop2: detected capacity change from 0 to 1764 [ 1342.139221][ T6186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1342.308114][ T6192] loop0: detected capacity change from 0 to 512 [ 1342.361237][ T6192] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1342.384029][ T6192] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1342.421250][ T6192] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1342.423379][ T5855] IPVS: starting estimator thread 0... [ 1342.438799][ T6192] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1342.456021][ T6200] sp0: Synchronizing with TNC [ 1342.461027][ T6192] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.14537: Failed to acquire dquot type 1 [ 1342.475629][ T6192] EXT4-fs (loop0): Remounting filesystem read-only [ 1342.482465][ T6192] EXT4-fs (loop0): 1 truncate cleaned up [ 1342.500143][ T6199] [U] [ 1342.555380][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1342.578413][ T6198] IPVS: using max 19 ests per chain, 45600 per kthread [ 1342.761869][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.055329][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14547'. [ 1343.064789][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14547'. [ 1343.168666][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14548'. [ 1343.277149][T28417] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1343.434770][ T6229] loop0: detected capacity change from 0 to 64 [ 1343.445400][T28417] usb 5-1: Using ep0 maxpacket: 16 [ 1343.459814][T28417] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1343.469132][T28417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.486047][T28417] usb 5-1: Product: syz [ 1343.492134][T28417] usb 5-1: Manufacturer: syz [ 1343.496878][T28417] usb 5-1: SerialNumber: syz [ 1343.538568][T28417] r8152-cfgselector 5-1: config 0 descriptor?? [ 1343.965993][T28417] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1343.990814][T28417] r8152-cfgselector 5-1: USB disconnect, device number 27 [ 1344.201875][ T6239] loop0: detected capacity change from 0 to 4096 [ 1344.258899][ T6240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1344.779617][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1344.921715][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14569'. [ 1344.951901][ T6261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14568'. [ 1345.287951][ T28] audit: type=1400 audit(2000000002.564:461): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=6272 comm="syz.2.14575" [ 1345.426225][ T6278] binder: 6277:6278 ioctl 541b 0 returned -22 [ 1345.453355][ T6279] loop0: detected capacity change from 0 to 2048 [ 1345.485091][ T6279] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1345.536528][ T6279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1345.971204][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.257644][ T6303] netlink: 'syz.0.14590': attribute type 15 has an invalid length. [ 1346.288262][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14590'. [ 1346.636394][ T6319] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14597'. [ 1347.031367][ T6336] loop2: detected capacity change from 0 to 256 [ 1347.342998][ T6338] loop0: detected capacity change from 0 to 4096 [ 1347.390179][ T6338] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1347.423976][ T6338] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1347.453683][ T6338] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1347.499863][ T6338] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1347.521963][ T6338] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1347.553385][ T6338] ntfs: volume version 3.1. [ 1347.566260][ T6338] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1347.592151][ T6338] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1347.620006][ T6338] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1347.638890][ T6338] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1347.658414][ T6351] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~)V' [ 1347.670564][ T6351] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 1347.681085][ T6351] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 1347.688601][ T6351] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 1347.697521][ T6351] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 1347.714080][ T6351] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 1347.722510][ T6351] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 1347.736935][ T6351] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 1347.745932][ T6351] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 1347.760054][ T6351] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 1347.775746][ T6351] ALSA: mixer_oss: invalid OSS volume '[' [ 1347.781959][ T6351] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 1347.795997][ T6351] ALSA: mixer_oss: invalid OSS volume '$ 1 [ 1352.286111][ T6467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1352.294755][ T6467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1352.305098][ T6467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1352.313204][ T6467] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1352.321129][ T6467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1352.354117][T18480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1352.362271][T18480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1352.392329][T18480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1352.427096][T18480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1352.445615][T18480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1352.458438][T18480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1353.152203][ T6463] lo speed is unknown, defaulting to 1000 [ 1354.092389][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 1354.098735][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1354.285119][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1354.292763][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.303855][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1354.312936][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.324032][ T9] usb 1-1: config 0 descriptor?? [ 1354.381006][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1354.396882][ T6467] Bluetooth: hci4: command tx timeout [ 1354.419867][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.430128][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.437968][ T6463] bridge_slave_0: entered allmulticast mode [ 1354.446571][ T6463] bridge_slave_0: entered promiscuous mode [ 1354.457164][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.465103][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.472952][ T6463] bridge_slave_1: entered allmulticast mode [ 1354.481156][ T6463] bridge_slave_1: entered promiscuous mode [ 1354.557719][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.584051][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.675112][ T6463] team0: Port device team_slave_0 added [ 1354.704766][ T6463] team0: Port device team_slave_1 added [ 1354.715823][ T9] gspca_vc032x: reg_w err -71 [ 1354.725678][ T9] vc032x: probe of 1-1:0.0 failed with error -71 [ 1354.756336][ T9] usb 1-1: USB disconnect, device number 58 [ 1354.832742][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.852598][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.884577][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.898070][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.913347][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.947281][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.048063][ T6463] hsr_slave_0: entered promiscuous mode [ 1355.054908][ T6463] hsr_slave_1: entered promiscuous mode [ 1355.321002][ T6556] ieee802154 phy0 wpan0: encryption failed: -90 [ 1355.516210][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.726619][ T6463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1355.762578][ T6570] netlink: 'syz.2.14715': attribute type 3 has an invalid length. [ 1355.786937][ T6570] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.14715'. [ 1355.808291][ T6463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1355.823978][ T6463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1355.857087][ T6463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1355.954156][ T6583] netlink: 'syz.4.14717': attribute type 1 has an invalid length. [ 1355.976839][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1355.976854][ T28] audit: type=1326 audit(2000000014.033:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.14718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1356.050747][ T28] audit: type=1326 audit(2000000014.033:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.14718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1356.113203][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.131714][ T28] audit: type=1326 audit(2000000014.076:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.14718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1356.172344][ T6463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.195430][ T28] audit: type=1326 audit(2000000014.076:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.14718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1356.237146][ T6463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.265257][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.272494][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.290919][ T28] audit: type=1326 audit(2000000014.076:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.14718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1356.316409][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.323837][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.337938][ T6590] ieee802154 phy0 wpan0: encryption failed: -90 [ 1356.347137][ T6467] Bluetooth: hci4: command tx timeout [ 1356.972093][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.131419][ T6623] netlink: 'syz.4.14732': attribute type 21 has an invalid length. [ 1357.315471][ T6629] loop0: detected capacity change from 0 to 256 [ 1357.513094][ T6629] FAT-fs (loop0): Directory bread(block 64) failed [ 1357.548109][ T6629] FAT-fs (loop0): Directory bread(block 65) failed [ 1357.575590][ T6629] FAT-fs (loop0): Directory bread(block 66) failed [ 1357.594757][ T6629] FAT-fs (loop0): Directory bread(block 67) failed [ 1357.601429][ T6629] FAT-fs (loop0): Directory bread(block 68) failed [ 1357.636297][ T6629] FAT-fs (loop0): Directory bread(block 69) failed [ 1357.659633][ T6629] FAT-fs (loop0): Directory bread(block 70) failed [ 1357.666219][ T6629] FAT-fs (loop0): Directory bread(block 71) failed [ 1357.698863][ T6629] FAT-fs (loop0): Directory bread(block 72) failed [ 1357.725263][ T6629] FAT-fs (loop0): Directory bread(block 73) failed [ 1357.756103][ T6463] veth0_vlan: entered promiscuous mode [ 1357.808196][ T6463] veth1_vlan: entered promiscuous mode [ 1357.923990][ T6463] veth0_macvtap: entered promiscuous mode [ 1357.963321][ T6463] veth1_macvtap: entered promiscuous mode [ 1358.017736][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.040250][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.062341][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.075430][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.126990][ T6463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.153612][ T6463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.167345][ T6463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.176628][ T6463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.276878][ T6467] Bluetooth: hci4: command tx timeout [ 1358.420062][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.470054][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.486590][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.521480][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.114064][ T6680] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14759'. [ 1359.560939][ T1063] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1359.664007][ T28] audit: type=1326 audit(2000000017.992:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.4.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1359.717164][ T28] audit: type=1326 audit(2000000018.013:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.4.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1359.739587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.753542][ T28] audit: type=1326 audit(2000000018.024:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.4.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1359.776632][ T1063] usb 3-1: Using ep0 maxpacket: 8 [ 1359.786773][ T28] audit: type=1326 audit(2000000018.024:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.4.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1359.844769][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14772'. [ 1359.859361][ T28] audit: type=1326 audit(2000000018.024:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.4.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1359.882416][ T1063] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1359.902628][ T1063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.914871][ T1063] usb 3-1: Product: syz [ 1359.919095][ T1063] usb 3-1: Manufacturer: syz [ 1359.932289][ T1063] usb 3-1: SerialNumber: syz [ 1359.955075][ T1063] usb 3-1: config 0 descriptor?? [ 1360.001247][ T1063] gspca_main: se401-2.14.0 probing 047d:5003 [ 1360.213002][ T6467] Bluetooth: hci4: command tx timeout [ 1360.364041][ T1063] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1360.381241][ T1063] se401: probe of 3-1:0.0 failed with error -71 [ 1360.390675][ T1063] usb 3-1: USB disconnect, device number 58 [ 1360.510189][ T6734] netlink: 'syz.0.14784': attribute type 7 has an invalid length. [ 1360.596301][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1360.617817][ T6738] netlink: 'syz.4.14785': attribute type 10 has an invalid length. [ 1360.626049][ T6738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14785'. [ 1360.643663][ T6738] bridge0: port 3(veth0_vlan) entered blocking state [ 1360.651060][ T6738] bridge0: port 3(veth0_vlan) entered disabled state [ 1360.665683][ T6738] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1360.772560][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1360.787363][ T9] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 1360.807555][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.819225][ T9] usb 6-1: config 0 has no interface number 0 [ 1360.825522][ T9] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1360.840140][ T9] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1360.850706][ T9] usb 6-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.864420][ T9] usb 6-1: config 0 interface 223 has no altsetting 0 [ 1360.876052][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1360.885937][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1360.897826][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.916690][ T9] usb 6-1: Product: syz [ 1360.920910][ T9] usb 6-1: Manufacturer: syz [ 1360.928069][ T9] usb 6-1: SerialNumber: syz [ 1360.975610][ T9] usb 6-1: config 0 descriptor?? [ 1360.985396][ T6744] netlink: 'syz.0.14789': attribute type 1 has an invalid length. [ 1361.046755][ T6746] kAFS: unparsable volume name [ 1361.092405][ T6748] loop4: detected capacity change from 0 to 256 [ 1361.444704][ T9] usb 6-1: USB disconnect, device number 2 [ 1361.500811][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1362.482183][ T6790] loop0: detected capacity change from 0 to 4096 [ 1362.649269][ T6790] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1362.674946][ T6790] ntfs3: loop0: Failed to load $Extend (-22). [ 1362.692975][ T6790] ntfs3: loop0: Failed to initialize $Extend. [ 1362.824910][ T6804] netlink: 'syz.2.14819': attribute type 13 has an invalid length. [ 1362.835302][ T6790] ntfs3: loop0: mft corrupted [ 1362.865061][ T6804] netlink: 'syz.2.14819': attribute type 27 has an invalid length. [ 1363.149262][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1363.346943][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1363.372179][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1363.419596][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1363.438185][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.448272][ T9] usb 6-1: Product: syz [ 1363.452514][ T9] usb 6-1: Manufacturer: syz [ 1363.468821][ T9] usb 6-1: SerialNumber: syz [ 1363.495440][ T9] usb 6-1: config 0 descriptor?? [ 1363.511388][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 1364.060021][ T6840] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14837'. [ 1364.104290][ T967] usb 6-1: USB disconnect, device number 3 [ 1364.224135][ T6842] syz.4.14838: attempt to access beyond end of device [ 1364.224135][ T6842] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1364.262139][ T6842] F2FS-fs (nbd4): Unable to read 1th superblock [ 1364.283980][ T6842] syz.4.14838: attempt to access beyond end of device [ 1364.283980][ T6842] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1364.307681][ T6842] F2FS-fs (nbd4): Unable to read 2th superblock [ 1364.545636][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14842'. [ 1364.914901][ T6864] netlink: 144 bytes leftover after parsing attributes in process `syz.4.14849'. [ 1365.080267][ T6870] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14852'. [ 1365.262060][ T28] audit: type=1326 audit(2000000024.000:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.4.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1365.284534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.358243][ T28] audit: type=1326 audit(2000000024.032:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.4.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1365.389941][ T28] audit: type=1326 audit(2000000024.032:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.4.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1365.457455][ T28] audit: type=1326 audit(2000000024.032:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.4.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1365.508639][ T6886] comedi comedi3: s526: I/O port conflict (0x48,64) [ 1365.519493][ T6882] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1365.547562][ T6882] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1365.609667][ T6882] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1365.618532][ T6882] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1365.639476][ T6882] geneve2: entered promiscuous mode [ 1365.645285][ T6882] geneve2: entered allmulticast mode [ 1365.691895][ T6882] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1365.720939][ T6882] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1365.749244][ T6882] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1365.765624][ T6882] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1366.259250][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1366.280932][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1366.294858][ T6912] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) [ 1366.358552][ T6915] netlink: 'syz.0.14875': attribute type 1 has an invalid length. [ 1367.223608][ T6950] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1367.256403][ T6952] netlink: zone id is out of range [ 1367.278309][ T6952] netlink: del zone limit has 8 unknown bytes [ 1367.457656][ T6960] netlink: 'syz.0.14897': attribute type 5 has an invalid length. [ 1368.363508][ T6996] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1368.608659][ T7003] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1368.627904][ T7003] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1368.652193][ T7006] loop2: detected capacity change from 0 to 256 [ 1368.709976][ T7006] FAT-fs (loop2): Directory bread(block 64) failed [ 1368.723743][ T7006] FAT-fs (loop2): Directory bread(block 65) failed [ 1368.730418][ T7006] FAT-fs (loop2): Directory bread(block 66) failed [ 1368.748536][ T7006] FAT-fs (loop2): Directory bread(block 67) failed [ 1368.759250][ T7006] FAT-fs (loop2): Directory bread(block 68) failed [ 1368.804473][ T7006] FAT-fs (loop2): Directory bread(block 69) failed [ 1368.843953][ T7006] FAT-fs (loop2): Directory bread(block 70) failed [ 1368.850546][ T7006] FAT-fs (loop2): Directory bread(block 71) failed [ 1368.872361][ T28] audit: type=1326 audit(2000000027.863:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1368.902662][ T7006] FAT-fs (loop2): Directory bread(block 72) failed [ 1368.934572][ T7006] FAT-fs (loop2): Directory bread(block 73) failed [ 1368.951393][ T28] audit: type=1326 audit(2000000027.863:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1368.990952][ T7008] loop4: detected capacity change from 0 to 2048 [ 1369.031033][ T28] audit: type=1326 audit(2000000027.895:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1369.109083][ T28] audit: type=1326 audit(2000000027.895:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe00299c392 code=0x7ffc0000 [ 1369.139407][ T7008] Alternate GPT is invalid, using primary GPT. [ 1369.151439][ T7008] loop4: p2 p3 p7 [ 1369.197582][ T28] audit: type=1326 audit(2000000027.927:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe00295cece code=0x7ffc0000 [ 1369.279087][ T5141] Alternate GPT is invalid, using primary GPT. [ 1369.281678][ T28] audit: type=1326 audit(2000000027.991:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.14922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe00299c457 code=0x7ffc0000 [ 1369.308431][ T5141] loop4: p2 p3 p7 [ 1369.315537][ T6992] loop5: detected capacity change from 0 to 32768 [ 1369.401279][ T6992] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1369.443631][ T5786] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1369.571059][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1369.620942][ T7733] udevd[7733]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 1369.645361][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1369.797942][ T7733] udevd[7733]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1369.810683][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 1369.813591][ T6992] XFS (loop5): Ending clean mount [ 1369.825805][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1369.933021][ T6992] XFS (loop5): Quotacheck needed: Please wait. [ 1370.033359][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14931'. [ 1370.087223][ T6992] XFS (loop5): Quotacheck: Done. [ 1370.143298][ T7041] netdevsim netdevsim2 : renamed from netdevsim0 [ 1370.341400][ T7046] loop4: detected capacity change from 0 to 64 [ 1370.353897][ T6463] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1370.912722][ T7058] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1371.260652][ T7073] xt_CONNSECMARK: invalid mode: 0 [ 1371.431750][ T7081] binder: binder_mmap: 7079 200000001000-20000000b000 bad vm_flags failed -1 [ 1371.624827][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.639227][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.913219][ T7093] loop0: detected capacity change from 0 to 4096 [ 1371.952678][ T7093] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1372.124401][ T7093] ntfs3: loop0: failed to convert "c46c" to cp437 [ 1372.490445][ T7083] loop4: detected capacity change from 0 to 32768 [ 1373.001293][ T7121] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1373.742044][ T7145] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 1374.528850][ T7140] loop5: detected capacity change from 0 to 32768 [ 1374.594577][ T7140] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1374.655077][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14992'. [ 1374.854584][ T7140] XFS (loop5): Ending clean mount [ 1374.876972][ T7179] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1375.037645][ T6463] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1376.247921][ T7190] loop4: detected capacity change from 0 to 32768 [ 1376.288762][ T7190] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.15001 (7190) [ 1376.347125][ T7190] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1376.377793][ T7190] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1376.440099][ T7190] BTRFS info (device loop4): using free space tree [ 1376.682055][ T7190] BTRFS info (device loop4): enabling ssd optimizations [ 1376.705437][ T7190] BTRFS info (device loop4): auto enabling async discard [ 1376.904702][ T7248] netlink: 'syz.0.15020': attribute type 1 has an invalid length. [ 1376.993139][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1377.004815][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.012088][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.251359][T28112] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1377.308643][ T7258] bridge6: entered allmulticast mode [ 1378.687546][ T7304] loop0: detected capacity change from 0 to 512 [ 1378.748652][ T7304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1378.789518][ T7304] ext4 filesystem being mounted at /3769/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.819409][ T7304] __quota_error: 19 callbacks suppressed [ 1378.819429][ T7304] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1378.846860][ T7304] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1378.905143][ T7304] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.15047: Failed to acquire dquot type 0 [ 1379.112074][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1379.349957][ T7324] xt_hashlimit: max too large, truncated to 1048576 [ 1379.762912][ T7338] netlink: 'syz.5.15063': attribute type 1 has an invalid length. [ 1380.072734][ T7346] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15067'. [ 1380.357734][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1380.385793][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1380.441115][ T7334] loop0: detected capacity change from 0 to 32768 [ 1380.723487][ T7362] libceph: resolve '0.' (ret=-3): failed [ 1381.100466][ T967] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1381.191508][ T7374] misc userio: No port type given on /dev/userio [ 1381.356958][ T967] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1381.375700][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.392066][ T967] usb 3-1: Product: syz [ 1381.401900][ T967] usb 3-1: Manufacturer: syz [ 1381.414052][ T967] usb 3-1: SerialNumber: syz [ 1381.443219][ T967] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1381.471581][T28417] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1381.763416][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1381.988565][ T967] usb 3-1: USB disconnect, device number 59 [ 1382.231495][ T7399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1382.358854][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15096'. [ 1382.368555][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.436275][T28417] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1382.445063][T28417] ath9k_htc: Failed to initialize the device [ 1382.461890][ T967] usb 3-1: ath9k_htc: USB layer deinitialized [ 1382.877149][ T7423] [U] ^R [ 1383.010908][ T967] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1383.138783][ T7431] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.15109'. [ 1383.193043][ T967] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1383.212325][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.246653][ T967] usb 3-1: config 0 descriptor?? [ 1383.255425][ T967] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1383.653847][ T967] gp8psk: usb in 128 operation failed. [ 1383.669367][ T967] gp8psk: usb in 137 operation failed. [ 1383.679453][ T967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1383.717607][ T7445] loop4: detected capacity change from 0 to 4096 [ 1383.724284][ T967] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1383.751937][ T967] usb 3-1: USB disconnect, device number 60 [ 1383.794525][ T7445] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1383.831393][ T7445] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1383.888748][ T7445] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1383.929120][ T7445] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1383.943781][ T7445] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1383.977335][ T7445] ntfs: volume version 3.1. [ 1384.056946][ T7445] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1384.073749][ T7445] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1384.090168][ T7445] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1384.106489][ T7445] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1384.121010][ T7445] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1384.373171][ T7437] loop5: detected capacity change from 0 to 40427 [ 1384.420532][ T7437] F2FS-fs (loop5): invalid crc value [ 1384.503045][ T7437] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1384.696984][ T7437] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1385.098113][ T7477] loop2: detected capacity change from 0 to 512 [ 1385.255398][ T7477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1385.667260][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15137'. [ 1386.644618][ T7527] loop2: detected capacity change from 0 to 2048 [ 1386.760352][ T7532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.042972][ T7532] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1387.072082][ T7532] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1387.112386][ T7532] Remounting filesystem read-only [ 1387.117576][ T49] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 1387.131543][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1387.142425][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1387.167972][ T49] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 1387.175813][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.223557][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.232499][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.261224][ T49] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1387.277010][ T49] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1387.317673][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.354903][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.382287][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.391262][ T49] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1387.429257][ T49] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1387.436611][ T49] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1387.488615][ T49] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1387.501804][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.527139][ T7542] overlayfs: conflicting options: metacopy=off,verity=on [ 1387.540638][ T49] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 1387.547815][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.587474][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.592027][ T7540] loop4: detected capacity change from 0 to 4096 [ 1387.615196][ T49] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 1387.622583][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.653493][ T7543] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.693553][ T49] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1387.710148][ T49] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1387.728951][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.761060][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.781445][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.821532][ T5775] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1387.876551][ T5775] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1387.883305][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.910821][ T7529] loop0: detected capacity change from 0 to 32768 [ 1387.933600][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1387.967751][ T5775] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1388.015753][ T5775] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1388.176773][ T766] read_mapping_page failed! [ 1388.212113][ T766] ERROR: (device loop0): txCommit: [ 1388.212113][ T766] [ 1388.241083][ T766] jfs_write_inode: jfs_commit_inode failed! [ 1388.288836][ T7551] loop2: detected capacity change from 0 to 64 [ 1388.379501][ T1063] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1388.603477][ T1063] usb 6-1: Using ep0 maxpacket: 32 [ 1388.620911][ T1063] usb 6-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1388.641640][ T7561] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1388.649763][ T1063] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0 [ 1388.709752][ T1063] usb 6-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024 [ 1388.731036][ T1063] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1388.750344][ T1063] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1388.766534][ T1063] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1388.789331][ T1063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.815733][ T1063] usb 6-1: Product: syz [ 1388.845948][ T1063] usb 6-1: Manufacturer: syz [ 1388.859130][ T1063] usb 6-1: SerialNumber: syz [ 1388.901469][ T7547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1388.996630][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15173'. [ 1389.020983][ T7570] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1389.136023][ T1063] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1389.185850][ T1063] usb 6-1: USB disconnect, device number 4 [ 1389.715810][ T7595] xt_TCPMSS: Only works on TCP SYN packets [ 1389.746267][ T7597] loop0: detected capacity change from 0 to 256 [ 1389.806914][ T7597] exfat: Deprecated parameter 'namecase' [ 1389.812661][ T7597] exfat: Deprecated parameter 'namecase' [ 1389.925467][ T7597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1390.018786][ T7597] fuse: Bad value for 'fd' [ 1390.209246][ T7610] comedi comedi2: Cannot bond this driver to itself! [ 1390.605536][ T7627] loop0: detected capacity change from 0 to 256 [ 1390.869240][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15205'. [ 1391.340859][ T7651] netlink: 'syz.5.15215': attribute type 2 has an invalid length. [ 1391.696528][ T7667] loop4: detected capacity change from 0 to 512 [ 1391.768408][ T7667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1391.781302][ T7667] ext4 filesystem being mounted at /1308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.810488][ T7667] __quota_error: 6 callbacks suppressed [ 1391.810508][ T7667] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1391.856497][ T7667] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1391.902607][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1391.914144][ T7667] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.15221: Failed to acquire dquot type 0 [ 1392.039764][ T7676] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15225'. [ 1392.080764][T28112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1392.118323][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15226'. [ 1392.137626][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15226'. [ 1392.499893][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1392.695115][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1392.948770][ T5817] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1392.974221][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.008173][ T5817] usb 6-1: Product: syz [ 1393.020730][ T5817] usb 6-1: Manufacturer: syz [ 1393.030216][ T5817] usb 6-1: SerialNumber: syz [ 1393.041264][ T5817] usb 6-1: config 0 descriptor?? [ 1393.248145][ T5817] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1393.298235][ T28] audit: type=1326 audit(2000000054.074:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.15248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1393.343724][ T28] audit: type=1326 audit(2000000054.074:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.15248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1393.420925][ T28] audit: type=1326 audit(2000000054.074:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.15248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1393.484877][ T28] audit: type=1326 audit(2000000054.127:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.15248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1393.512826][ T967] usb 6-1: USB disconnect, device number 5 [ 1393.540548][ T28] audit: type=1326 audit(2000000054.127:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.15248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1394.178710][ T7750] loop2: detected capacity change from 0 to 2048 [ 1394.275761][ T7754] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1394.371418][ T7750] syz.2.15259: attempt to access beyond end of device [ 1394.371418][ T7750] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 1394.409676][ T7750] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 1394.452814][ T7750] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1394.478789][ T7750] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1394.492800][ T7750] Remounting filesystem read-only [ 1394.505998][ T7750] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1394.559349][ T5775] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1394.566382][ T5775] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1394.586092][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1394.596925][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1394.607584][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1394.617257][ T5775] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1394.642983][T28417] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1394.795903][ T7767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1394.829242][T28417] usb 1-1: Using ep0 maxpacket: 32 [ 1394.856626][T28417] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.941079][T28417] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1394.950192][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.980807][T28417] usb 1-1: Product: syz [ 1394.985045][T28417] usb 1-1: Manufacturer: syz [ 1395.013872][T28417] usb 1-1: SerialNumber: syz [ 1395.031104][T28417] usb 1-1: config 0 descriptor?? [ 1395.069918][T28417] usb 1-1: bad CDC descriptors [ 1395.091390][T28417] usb 1-1: unsupported MDLM descriptors [ 1395.289559][T23225] usb 1-1: USB disconnect, device number 59 [ 1395.824765][ T7804] loop4: detected capacity change from 0 to 512 [ 1395.837884][ T7804] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1395.882840][ T7804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1395.916460][ T7804] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1395.948366][ T7804] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.15285: bad orphan inode 267 [ 1395.983587][ T7804] EXT4-fs (loop4): Remounting filesystem read-only [ 1396.043608][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1396.143662][ T7804] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.15285: dx entry: limit 0 != root limit 125 [ 1396.187334][ T7804] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.15285: Corrupt directory, running e2fsck is recommended [ 1396.312581][T28112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1397.282052][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.676971][ T7868] netlink: 'syz.0.15316': attribute type 4 has an invalid length. [ 1397.677052][ T7868] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.15316'. [ 1397.868271][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.922376][ T7876] ieee802154 phy0 wpan0: encryption failed: -22 [ 1398.237263][ T7886] sctp: [Deprecated]: syz.0.15326 (pid 7886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1398.237263][ T7886] Use struct sctp_sack_info instead [ 1398.864285][ T28] audit: type=1326 audit(2000000060.050:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.4.15337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1398.918073][ T28] audit: type=1326 audit(2000000060.050:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.4.15337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1398.940517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.995632][ T28] audit: type=1326 audit(2000000060.082:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.4.15337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1399.018082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.082406][ T28] audit: type=1326 audit(2000000060.082:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.4.15337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1399.099063][T28417] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1399.335465][T28417] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1399.371333][T28417] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.404998][T28417] usb 3-1: config 0 has no interface number 0 [ 1399.419899][T28417] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1399.434005][T28417] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.457425][T28417] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1399.468869][T28417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.477483][T28417] usb 3-1: Product: syz [ 1399.482223][T28417] usb 3-1: Manufacturer: syz [ 1399.487354][T28417] usb 3-1: SerialNumber: syz [ 1399.499547][T28417] usb 3-1: config 0 descriptor?? [ 1399.925393][T23225] usb 3-1: USB disconnect, device number 61 [ 1400.265204][ T7926] loop4: detected capacity change from 0 to 32768 [ 1400.359807][ T7926] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1400.433325][ T7926] XFS (loop4): Ending clean mount [ 1400.461402][ T7926] XFS (loop4): Quotacheck needed: Please wait. [ 1400.576685][ T7926] XFS (loop4): Quotacheck: Done. [ 1400.824428][T28112] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1401.158190][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1401.374287][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 1401.383507][ T5817] usb 6-1: config 0 has an invalid interface number: 228 but max is 0 [ 1401.407317][ T5817] usb 6-1: config 0 has no interface number 0 [ 1401.441472][ T5817] usb 6-1: config 0 interface 228 has no altsetting 0 [ 1401.457073][ T7984] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1401.477071][ T5817] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 1401.495523][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.521730][ T5817] usb 6-1: Product: syz [ 1401.526026][ T5817] usb 6-1: Manufacturer: syz [ 1401.540602][ T5817] usb 6-1: SerialNumber: syz [ 1401.547846][ T5817] usb 6-1: config 0 descriptor?? [ 1401.670757][T28417] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1401.804869][ T5817] net1080 6-1:0.228 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, be:d7:b4:7c:e1:5b [ 1401.873542][ T7990] loop2: detected capacity change from 0 to 8192 [ 1401.885154][T28417] usb 5-1: Using ep0 maxpacket: 8 [ 1401.916508][T28417] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.938429][T28417] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1401.969244][T28417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.990149][T28417] usb 5-1: config 0 descriptor?? [ 1402.020585][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15375'. [ 1402.062316][ T7995] netlink: 660 bytes leftover after parsing attributes in process `syz.0.15375'. [ 1402.074698][ T1063] usb 6-1: USB disconnect, device number 6 [ 1402.082275][ T1063] net1080 6-1:0.228 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 1402.242072][ T5817] usb 5-1: USB disconnect, device number 28 [ 1402.352244][ T8000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1402.433502][ T8005] loop2: detected capacity change from 0 to 8 [ 1403.244872][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.786715][ T8051] netlink: 'syz.5.15396': attribute type 12 has an invalid length. [ 1403.991514][T28417] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1404.202564][T28417] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.240707][T28417] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1404.278731][T28417] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1404.311333][T28417] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1404.340240][T28417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.377956][T28417] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1404.408460][T28417] usb 3-1: invalid MIDI out EP 0 [ 1404.552844][ T8080] netlink: 'syz.4.15406': attribute type 3 has an invalid length. [ 1404.574198][ T8080] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.15406'. [ 1404.659490][T28417] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1404.700591][T28417] usb 3-1: USB disconnect, device number 62 [ 1405.082238][ T8095] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1405.249346][ T8101] loop0: detected capacity change from 0 to 512 [ 1405.329511][ T8105] sctp: [Deprecated]: syz.4.15416 (pid 8105) Use of int in maxseg socket option. [ 1405.329511][ T8105] Use struct sctp_assoc_value instead [ 1405.377108][ T8101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.399002][ T8101] ext4 filesystem being mounted at /3872/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.743040][ T8116] loop5: detected capacity change from 0 to 1764 [ 1405.879196][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.057509][ T8123] bond5: entered promiscuous mode [ 1406.111691][ T8123] bond5: entered allmulticast mode [ 1406.141768][ T8123] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1406.261156][ T8137] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1406.269239][ T8137] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1406.276720][ T8137] veth0_to_bridge: entered allmulticast mode [ 1406.284565][ T8137] veth0_to_bridge: entered promiscuous mode [ 1406.290662][ T8137] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1406.311919][ T8137] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1406.319355][ T8137] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1407.028303][ T8164] cgroup: Bad value for 'name' [ 1407.403666][ T8180] netlink: 'syz.4.15449': attribute type 4 has an invalid length. [ 1407.422291][ T8180] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15449'. [ 1407.446163][ T8180] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1407.467965][T28417] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1407.654499][ T1063] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1407.665645][T28417] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.678387][T28417] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1407.687818][T28417] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1407.697140][T28417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.709119][T28417] usb 6-1: config 0 descriptor?? [ 1407.728162][ T8184] bond9: entered promiscuous mode [ 1407.733627][ T8184] bond9: entered allmulticast mode [ 1407.739330][ T8184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1407.850529][ T1063] usb 3-1: Using ep0 maxpacket: 32 [ 1407.860000][ T1063] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1407.868144][ T1063] usb 3-1: config 0 has no interface number 0 [ 1407.890827][ T1063] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1407.941552][ T1063] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1407.984195][ T1063] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1408.000694][ T1063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.010643][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.018164][ T1063] usb 3-1: Product: syz [ 1408.034985][ T1063] usb 3-1: Manufacturer: syz [ 1408.042860][ T1063] usb 3-1: SerialNumber: syz [ 1408.073526][ T1063] usb 3-1: config 0 descriptor?? [ 1408.097927][ T1063] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1408.118227][T28417] Bluetooth: Can't get state to change to load configuration err [ 1408.136995][T28417] Bluetooth: Loading sysconfig file failed [ 1408.148349][T28417] ath3k: probe of 6-1:0.0 failed with error -16 [ 1408.164671][T28417] usb 6-1: USB disconnect, device number 7 [ 1408.282889][ T1063] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1408.298083][ T1063] quatech2: probe of 3-1:0.51 failed with error -90 [ 1408.371633][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1408.498404][ T1063] usb 3-1: USB disconnect, device number 63 [ 1408.606586][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.657224][ T8204] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1409.300148][ T8225] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1409.477880][ T8233] netlink: 'syz.0.15475': attribute type 9 has an invalid length. [ 1410.151828][ T8259] loop5: detected capacity change from 0 to 1024 [ 1410.301797][ T5817] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1410.401119][ T8265] netlink: 'syz.2.15491': attribute type 12 has an invalid length. [ 1410.463066][ T8263] loop4: detected capacity change from 0 to 4096 [ 1410.513526][ T8263] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1410.527012][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 1410.548653][ T5817] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1410.571986][ T8263] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1410.590928][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.603687][ T5817] usb 1-1: Product: syz [ 1410.607947][ T5817] usb 1-1: Manufacturer: syz [ 1410.621411][ T8263] ntfs: (device loop4): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1410.648315][ T5817] usb 1-1: SerialNumber: syz [ 1410.665751][ T8263] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1410.679744][ T5817] usb 1-1: config 0 descriptor?? [ 1410.719834][ T8263] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1410.732148][ T5817] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1410.755266][ T8263] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1410.790834][ T8263] ntfs: volume version 3.1. [ 1410.811752][ T8263] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1410.826911][ T8263] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 1410.850029][ T8263] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1410.866235][ T8263] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1411.121180][ T5817] ssu100: probe of 1-1:0.0 failed with error -71 [ 1411.156767][ T5817] usb 1-1: USB disconnect, device number 60 [ 1411.178585][ T8275] loop5: detected capacity change from 0 to 4096 [ 1411.259100][ T8275] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1411.356592][ T8275] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1411.442940][ T8275] ntfs3: loop5: ino=5, "/" directory corrupted [ 1411.540427][ T8281] loop2: detected capacity change from 0 to 4096 [ 1412.129790][ T8279] loop4: detected capacity change from 0 to 32768 [ 1412.154536][ T8279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15498 (8279) [ 1412.231432][ T8279] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1412.276717][ T8279] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1412.326065][ T8279] BTRFS info (device loop4): using free space tree [ 1412.560227][ T8279] BTRFS info (device loop4): enabling ssd optimizations [ 1412.622662][ T8279] BTRFS info (device loop4): auto enabling async discard [ 1412.951077][T28112] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1413.038223][ T8335] SET target dimension over the limit! [ 1413.154802][ T8337] loop2: detected capacity change from 0 to 512 [ 1413.200963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.320437][ T5969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5969) [ 1413.336112][ T8337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.398271][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.419318][ T8337] ext4 filesystem being mounted at /3993/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.471684][ T8337] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.15519: verity file corrupted; can't find descriptor [ 1413.507686][ T8337] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1413.573412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.782608][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.990416][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.993090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.263770][ T8365] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15530'. [ 1414.490447][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15533'. [ 1414.557450][ T8376] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15534'. [ 1415.144500][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15545'. [ 1415.305298][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15548'. [ 1415.352998][ T8402] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15548'. [ 1415.390592][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15548'. [ 1415.415871][ T8402] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15548'. [ 1415.470806][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15551'. [ 1415.599495][ T8411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1415.754466][ T8417] tmpfs: Bad value for 'mpol' [ 1416.454162][ T8439] usb usb8: usbfs: process 8439 (syz.4.15566) did not claim interface 0 before use [ 1416.813998][ T8425] loop2: detected capacity change from 0 to 32768 [ 1416.829648][ T8425] (syz.2.15559,8425,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1416.844552][ T8425] (syz.2.15559,8425,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1417.013068][ T8425] JBD2: Ignoring recovery information on journal [ 1417.113783][ T8425] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1417.428104][ T8461] netlink: 'syz.4.15575': attribute type 3 has an invalid length. [ 1417.516439][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1417.830780][ T8471] loop0: detected capacity change from 0 to 1024 [ 1417.913669][ T8471] hfsplus: catalog name length corrupted [ 1418.227524][ T8481] loop0: detected capacity change from 0 to 2048 [ 1418.254210][ T8481] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1418.302926][ T8479] loop2: detected capacity change from 0 to 4096 [ 1418.324146][ T8486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1418.327292][ T8481] syz.0.15586: attempt to access beyond end of device [ 1418.327292][ T8481] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1418.353026][ T8479] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1418.375643][ T8485] x_tables: duplicate underflow at hook 2 [ 1418.625028][ T8481] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1418.629143][ T8479] ntfs3: loop2: failed to convert "c46c" to ascii [ 1418.676451][ T8481] Remounting filesystem read-only [ 1418.700593][ T8481] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1418.733106][ T8481] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1418.746861][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.757726][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1418.757739][ T28] audit: type=1800 audit(2000000081.390:515): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15586" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1418.807630][ T8481] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 16777227 [ 1418.848111][ T8481] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1418.885670][ T8481] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1419.106062][ T8481] syz.0.15586 (8481) used greatest stack depth: 18728 bytes left [ 1419.147584][ T5776] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1419.154613][ T5776] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1419.230244][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.253894][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.267741][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.277013][ T5776] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1419.310113][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1419.322686][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.343883][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1419.379913][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.388856][ T5776] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1419.425500][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.656742][ T8510] netlink: 'syz.0.15594': attribute type 10 has an invalid length. [ 1419.682440][ T8510] veth1_macvtap: left promiscuous mode [ 1419.710057][ T8515] loop5: detected capacity change from 0 to 512 [ 1419.755573][ T8515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.803935][ T8515] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.015887][ T6463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.175759][ T8526] loop5: detected capacity change from 0 to 1024 [ 1420.195260][ T8526] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1420.223656][ T8526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082] [ 1420.237251][ T8526] System zones: 0-1, 3-36 [ 1420.257298][ T8526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.597619][ T8535] loop2: detected capacity change from 0 to 4096 [ 1420.653475][ T6463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.716645][ T8541] loop4: detected capacity change from 0 to 512 [ 1420.731805][ T8541] EXT4-fs: Ignoring removed bh option [ 1420.763137][ T8541] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1420.807979][ T8541] EXT4-fs (loop4): 1 truncate cleaned up [ 1420.830659][ T8541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1421.186012][T28112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.257998][ T8552] loop2: detected capacity change from 0 to 1764 [ 1421.313771][ T8552] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1421.473202][ T8556] loop5: detected capacity change from 0 to 4096 [ 1421.823662][ T8568] __nla_validate_parse: 1 callbacks suppressed [ 1421.823681][ T8568] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.15626'. [ 1422.090008][ T8578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15630'. [ 1422.599310][ T28] audit: type=1326 audit(2000000085.520:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.2.15639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413c99c629 code=0x7ffc0000 [ 1422.651521][ T28] audit: type=1326 audit(2000000085.520:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.2.15639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413c99c629 code=0x7ffc0000 [ 1422.735290][ T28] audit: type=1326 audit(2000000085.553:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.2.15639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f413c99c629 code=0x7ffc0000 [ 1422.841385][ T28] audit: type=1326 audit(2000000085.553:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.2.15639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413c99c629 code=0x7ffc0000 [ 1422.903010][ T28] audit: type=1326 audit(2000000085.553:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.2.15639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413c99c629 code=0x7ffc0000 [ 1422.935957][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15644'. [ 1423.124745][ T8610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15647'. [ 1423.168851][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15648'. [ 1423.198353][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15648'. [ 1423.225692][ T8612] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15648'. [ 1423.267407][ T8616] xt_HMARK: spi-set and port-set can't be combined [ 1423.758358][ T8632] loop4: detected capacity change from 0 to 1764 [ 1423.813724][ T8632] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1424.115126][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1424.358090][ T8654] i2c i2c-0: Invalid block write size 252 [ 1424.515537][ T8659] xt_HMARK: spi-set and port-set can't be combined [ 1424.651999][ T8664] netlink: 'syz.5.15674': attribute type 9 has an invalid length. [ 1424.690154][ T8664] netlink: 911 bytes leftover after parsing attributes in process `syz.5.15674'. [ 1424.713256][ T682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.055156][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.074140][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.082133][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.125797][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.156796][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.166548][ T8683] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15682'. [ 1425.186677][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.194745][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15682'. [ 1425.208863][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.233788][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.261353][ T8679] netlink: 'syz.4.15681': attribute type 3 has an invalid length. [ 1425.462087][ T8691] loop0: detected capacity change from 0 to 256 [ 1425.514109][ T8691] exfat: Deprecated parameter 'namecase' [ 1425.519880][ T8691] exfat: Deprecated parameter 'namecase' [ 1425.594377][ T8691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1426.545219][ T8725] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 1426.570708][ T8725] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1426.840774][ T28] audit: type=1326 audit(2000000090.069:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1426.938286][ T28] audit: type=1326 audit(2000000090.069:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.023148][ T28] audit: type=1326 audit(2000000090.069:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.096009][ T28] audit: type=1326 audit(2000000090.091:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.199769][ T28] audit: type=1326 audit(2000000090.091:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.285178][ T28] audit: type=1326 audit(2000000090.091:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.350890][ T28] audit: type=1326 audit(2000000090.091:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.405036][ T28] audit: type=1326 audit(2000000090.091:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.486464][ T28] audit: type=1326 audit(2000000090.091:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.0.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87b219c629 code=0x7ffc0000 [ 1427.620470][ T8722] loop5: detected capacity change from 0 to 32768 [ 1427.666672][ T8722] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1428.011383][ T8722] XFS (loop5): Ending clean mount [ 1428.206715][ T6463] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1428.367436][ T8753] loop0: detected capacity change from 0 to 32768 [ 1428.404839][ T8753] [ 1428.404839][ T8753] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1428.404839][ T8753] [ 1428.671568][ T5776] [ 1428.671568][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1428.671568][ T5776] [ 1428.702369][ T5776] [ 1428.702369][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1428.702369][ T5776] [ 1429.448452][ T8796] loop0: detected capacity change from 0 to 64 [ 1429.484683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.497151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.504432][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.510451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.532202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.544764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.557327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.569839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.582368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.594994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1429.607504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1430.853510][ T8822] C: renamed from lo (while UP) [ 1431.291304][ T5817] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1431.531864][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.565192][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1431.607384][ T5817] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1431.645762][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1431.701485][ T5817] usb 3-1: SerialNumber: syz [ 1431.950678][ T5817] usb 3-1: 0:2 : does not exist [ 1431.991708][ T8847] __nla_validate_parse: 1 callbacks suppressed [ 1431.991727][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15759'. [ 1432.070898][ T5817] usb 3-1: USB disconnect, device number 64 [ 1432.258002][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.710429][ T8858] validate_nla: 41 callbacks suppressed [ 1432.710457][ T8858] netlink: 'syz.4.15763': attribute type 25 has an invalid length. [ 1432.977582][ T8859] loop0: detected capacity change from 0 to 4096 [ 1433.071502][ T8859] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1433.230194][ T8859] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1434.152836][ C0] net_ratelimit: 10676 callbacks suppressed [ 1434.152855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.171382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.183887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.196408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.208949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.221464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.233974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.246526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.259002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.271649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1434.296370][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.302845][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.672623][ T8888] netlink: 'syz.0.15777': attribute type 3 has an invalid length. [ 1434.853524][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1436.347849][ T8915] loop4: detected capacity change from 0 to 512 [ 1436.383000][ T8915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 1436.436997][ T8915] System zones: 0-2, 18-18, 34-34 [ 1436.442521][ T8915] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1436.512917][ T8915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.15790: bg 0: block 248: padding at end of block bitmap is not set [ 1436.623594][ T8915] Quota error (device loop4): write_blk: dquota write failed [ 1436.661721][ T8915] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1436.701442][ T8915] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.15790: Failed to acquire dquot type 1 [ 1436.777542][ T8915] EXT4-fs (loop4): 1 orphan inode deleted [ 1436.864897][ T766] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 1436.874119][ T766] EXT4-fs error (device loop4): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 1436.974088][ T8915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1437.103373][ T967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1437.180452][ T8915] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.15790: deleted inode referenced: 12 [ 1437.348772][ T8926] netlink: 148 bytes leftover after parsing attributes in process `syz.0.15795'. [ 1437.386298][T28112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.471175][ T8899] loop5: detected capacity change from 0 to 40427 [ 1437.517692][ T8899] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1437.581672][ T8899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1437.622396][ T8929] netlink: 'syz.4.15796': attribute type 12 has an invalid length. [ 1437.641753][ T8899] F2FS-fs (loop5): invalid crc value [ 1437.696465][ T8899] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1437.819203][ T967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1437.834180][ T8926] netlink: 148 bytes leftover after parsing attributes in process `syz.0.15795'. [ 1437.966230][ T967] usb 3-1: config 66 interface 0 has no altsetting 0 [ 1438.126994][ T967] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1438.254480][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.277904][ T967] usb 3-1: Product: syz [ 1438.299089][ T967] usb 3-1: Manufacturer: syz [ 1438.346106][ T967] usb 3-1: SerialNumber: syz [ 1438.763842][ T8944] xt_nfacct: accounting object `syz1' does not exist [ 1438.822388][ C0] net_ratelimit: 10039 callbacks suppressed [ 1438.822410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.841103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.853807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.866607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.879324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.892010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.904656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.917330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.930055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.942788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.972833][ T967] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1439.028535][ T967] usb 3-1: USB disconnect, device number 65 [ 1439.940971][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15808'. [ 1440.130489][ T8960] x_tables: duplicate underflow at hook 3 [ 1440.230568][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.245659][ T8962] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15810'. [ 1440.979935][ T8976] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15817'. [ 1441.336107][ T8981] loop5: detected capacity change from 0 to 512 [ 1441.360221][ T8981] EXT4-fs: Ignoring removed mblk_io_submit option [ 1441.406663][ T8981] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1441.435404][ T8981] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1441.457778][ T8981] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.15820: attempt to clear invalid blocks 2 len 1 [ 1441.491175][ T8981] EXT4-fs (loop5): Remounting filesystem read-only [ 1441.520837][ T8981] EXT4-fs (loop5): 1 truncate cleaned up [ 1441.561540][ T8981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1441.576081][ T8985] binder: 8979:8985 ioctl c018620c 0 returned -14 [ 1442.743933][ T9007] loop2: detected capacity change from 0 to 164 [ 1443.419607][ T9022] loop0: detected capacity change from 0 to 16 [ 1443.435928][ T9022] erofs: (device loop0): mounted with root inode @ nid 36. [ 1443.492039][ C0] net_ratelimit: 10497 callbacks suppressed [ 1443.492059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.492448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.492863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.493296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.493733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.494169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.494612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.495045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.495486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.495913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.885606][ T6463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.573040][T23225] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1444.673272][ T9032] loop2: detected capacity change from 0 to 512 [ 1444.718926][ T9032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1444.778544][T23225] usb 1-1: Using ep0 maxpacket: 16 [ 1444.796539][ T5817] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1444.807088][T23225] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1444.857840][T23225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.871672][ T9032] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.15844: corrupted xattr entries [ 1444.907153][T23225] usb 1-1: Product: syz [ 1444.923978][T23225] usb 1-1: Manufacturer: syz [ 1444.935285][ T9032] EXT4-fs (loop2): Remounting filesystem read-only [ 1444.963116][ T9032] EXT4-fs (loop2): 1 truncate cleaned up [ 1444.972819][T23225] usb 1-1: SerialNumber: syz [ 1445.004300][ T9032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.028581][T23225] r8152-cfgselector 1-1: config 0 descriptor?? [ 1445.035099][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 1445.067766][ T5817] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1445.098762][ T9032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.122233][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.175727][ T5817] usb 5-1: config 0 descriptor?? [ 1445.254694][ T5817] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1445.517682][T23225] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1445.579327][T23225] r8152-cfgselector 1-1: USB disconnect, device number 61 [ 1445.601702][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.700339][ T5817] gspca_nw80x: reg_r err -71 [ 1445.705086][ T5817] nw80x: probe of 5-1:0.0 failed with error -71 [ 1445.784465][ T5817] usb 5-1: USB disconnect, device number 29 [ 1447.398473][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1447.816251][ T662] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1448.049383][ T662] usb 6-1: Using ep0 maxpacket: 32 [ 1448.069438][ T9079] binder: BC_ACQUIRE_RESULT not supported [ 1448.077512][ T662] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1448.107523][ T9079] binder: 9078:9079 ioctl c0306201 200000000040 returned -22 [ 1448.123278][ T662] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1448.161881][ C0] net_ratelimit: 10312 callbacks suppressed [ 1448.161903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.179672][ T662] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1448.181387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.201255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.213875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.226593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.239131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.251687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.255874][ T662] usb 6-1: config 1 has no interface number 0 [ 1448.264669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.282561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.295206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.339932][ T662] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1448.431010][ T662] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1448.534277][ T662] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1448.607593][ T662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.692321][ T662] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1448.945271][ T662] snd_usb_pod 6-1:1.1: invalid control EP [ 1449.002118][ T662] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1449.008963][ T662] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1449.070916][ T9089] loop2: detected capacity change from 0 to 256 [ 1449.090194][ T662] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 1449.280160][ T9089] FAT-fs (loop2): Directory bread(block 64) failed [ 1449.318711][ T9089] FAT-fs (loop2): Directory bread(block 65) failed [ 1449.325471][ T9089] FAT-fs (loop2): Directory bread(block 66) failed [ 1449.381875][T23225] usb 6-1: USB disconnect, device number 8 [ 1449.424602][ T9089] FAT-fs (loop2): Directory bread(block 67) failed [ 1449.482077][ T9089] FAT-fs (loop2): Directory bread(block 68) failed [ 1449.528162][ T9089] FAT-fs (loop2): Directory bread(block 69) failed [ 1449.574969][ T9089] FAT-fs (loop2): Directory bread(block 70) failed [ 1449.614923][ T9089] FAT-fs (loop2): Directory bread(block 71) failed [ 1449.653960][ T9089] FAT-fs (loop2): Directory bread(block 72) failed [ 1449.660575][ T9089] FAT-fs (loop2): Directory bread(block 73) failed [ 1450.782781][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15879'. [ 1451.063916][ T9107] loop0: detected capacity change from 0 to 4096 [ 1451.143964][ T9107] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1451.332780][ T9107] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1451.728407][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15885'. [ 1451.824844][ T9122] netlink: 'syz.5.15885': attribute type 2 has an invalid length. [ 1451.832744][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15885'. [ 1452.761361][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.831306][ C0] net_ratelimit: 9704 callbacks suppressed [ 1452.831327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.849783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.862355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.875041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.887606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.900142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.914629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.927229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.939809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.952358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1453.374312][ T9148] loop4: detected capacity change from 0 to 256 [ 1453.428705][ T9148] exfat: Deprecated parameter 'namecase' [ 1453.434499][ T9148] exfat: Deprecated parameter 'namecase' [ 1453.577017][ T9148] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1453.894274][ T9148] exFAT-fs (loop4): invalid start cluster (4278190088) [ 1454.145157][ T9156] Sensor A: ================= START STATUS ================= [ 1454.201368][ T9156] Sensor A: Test Pattern: 75% Colorbar [ 1454.237597][ T9156] Sensor A: Show Information: All [ 1454.256414][ T9156] Sensor A: Vertical Flip: false [ 1454.294756][ T9156] Sensor A: Horizontal Flip: false [ 1454.332394][ T9156] Sensor A: Brightness: 128 [ 1454.359810][ T9156] Sensor A: Contrast: 128 [ 1454.388073][ T9156] Sensor A: Hue: 0 [ 1454.414607][ T9156] Sensor A: Saturation: 128 [ 1454.452691][ T9156] Sensor A: ================== END STATUS ================== [ 1454.546439][ T2939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1455.111543][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15906'. [ 1455.157435][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15906'. [ 1455.206453][ T9168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15906'. [ 1455.386135][ T9150] loop5: detected capacity change from 0 to 32768 [ 1455.489337][ T9150] (syz.5.15898,9150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1455.618862][ T9150] (syz.5.15898,9150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1455.766187][ T9150] JBD2: Ignoring recovery information on journal [ 1456.136733][ T9150] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1456.176832][ T28] audit: type=1326 audit(2000000121.538:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.4.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1456.452438][ T28] audit: type=1326 audit(2000000121.538:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.4.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1456.760442][ T6463] ocfs2: Unmounting device (7,5) on (node local) [ 1456.767640][ T28] audit: type=1326 audit(2000000121.581:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.4.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1456.927480][ T28] audit: type=1326 audit(2000000121.581:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.4.15912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00299c629 code=0x7ffc0000 [ 1457.105217][ T9195] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 1457.501846][ C0] net_ratelimit: 3648 callbacks suppressed [ 1457.501868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.521413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.534931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.548454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.562195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.575816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.589378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.602969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.616412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.629891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1458.133851][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.467518][ T9210] loop4: detected capacity change from 0 to 1024 [ 1459.039571][ T2920] hfsplus: b-tree write err: -5, ino 4 [ 1459.180617][ T9220] netlink: 'syz.5.15931': attribute type 3 has an invalid length. [ 1459.233777][ T9220] netlink: 'syz.5.15931': attribute type 1 has an invalid length. [ 1459.299587][ T9220] netlink: 216 bytes leftover after parsing attributes in process `syz.5.15931'. [ 1459.337549][ T9220] NCSI netlink: No device for ifindex 33022 [ 1459.361319][ T9224] tmpfs: Bad value for 'mpol' [ 1459.920814][ T1325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1459.932342][T23225] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1460.159143][T23225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.190839][T23225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 1460.256056][T23225] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1460.314174][T23225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.342677][T23225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1460.376066][T23225] usb 3-1: SerialNumber: syz [ 1460.408688][ T9228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1460.466537][ T9243] loop5: detected capacity change from 0 to 1764 [ 1460.639642][ T9228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1460.879976][T23225] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1460.935560][T23225] usb 3-1: USB disconnect, device number 66 [ 1461.236383][ T9249] loop0: detected capacity change from 0 to 4096 [ 1461.272878][ T9249] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1461.316584][ T9249] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1461.381150][ T9249] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 1461.414949][ T9249] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 1461.452613][ T9249] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1461.509823][ T9249] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1461.593910][ T9249] ntfs: volume version 3.1. [ 1461.598575][ T9249] ntfs: (device loop0): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 1461.688899][ T9249] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1461.723671][ T9249] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1462.170825][ C0] net_ratelimit: 2984 callbacks suppressed [ 1462.170846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.190324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.203748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.217337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.230818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.244542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.258102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.271704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.285265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.298876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.590228][ T9268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.784864][ T9294] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15967'. [ 1463.824311][ T9294] netlink: 172 bytes leftover after parsing attributes in process `syz.4.15967'. [ 1464.742527][ T662] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1464.835740][ T5969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1464.947268][ T662] usb 5-1: Using ep0 maxpacket: 16 [ 1464.981214][ T662] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1465.041289][ T662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 125, changing to 7 [ 1465.104480][ T662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 42438, setting to 1024 [ 1465.175193][ T662] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.283430][T17002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.313543][ T662] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1465.361635][ T662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.425784][ T662] usb 5-1: Product: syz [ 1465.467148][ T662] usb 5-1: Manufacturer: syz [ 1465.488077][ T662] usb 5-1: SerialNumber: syz [ 1465.535988][ T662] usb 5-1: config 0 descriptor?? [ 1465.602450][ T9317] loop5: detected capacity change from 0 to 4096 [ 1465.646708][ T662] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1465.704949][ T9317] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1465.717183][ T662] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1465.810981][ T9317] ntfs: volume version 3.1. [ 1465.998338][ T9317] __ntfs_error: 16 callbacks suppressed [ 1465.998361][ T9317] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1466.066992][ T662] peak_usb: probe of 5-1:0.0 failed with error -22 [ 1466.131883][ T9317] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1466.182999][ T662] usb 5-1: USB disconnect, device number 30 [ 1466.343395][ T9317] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1466.388247][ T9317] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1466.533848][ T9317] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 1466.611986][ T9317] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1466.840088][ C0] net_ratelimit: 3024 callbacks suppressed [ 1466.840108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.859559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.873115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.886786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.900363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.914062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.927780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.941393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.955192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.968783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1467.954099][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15993'. [ 1468.284571][ T8874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.734753][ T9359] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1468.804504][ T9361] trusted_key: encrypted_key: master key parameter is missing [ 1469.487240][ T9371] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16004'. [ 1469.552014][ T9371] 6eth1_to_bond: renamed from gre0 (while UP) [ 1469.602879][T18480] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.309072][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16009'. [ 1470.521529][ T9388] dlm: no locking on control device [ 1470.643632][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1470.900949][ T9392] kernel profiling enabled (shift: 19) [ 1471.391628][ T9401] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1471.391628][ T9401] program syz.0.16018 not setting count and/or reply_len properly [ 1471.509695][ C0] net_ratelimit: 3018 callbacks suppressed [ 1471.509715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.529174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.542743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.556316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.569848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.583420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.597650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.611232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.624823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.638453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.705594][ T9405] 9pnet_fd: Insufficient options for proto=fd [ 1472.443931][ T29] INFO: task syz-executor:5772 blocked for more than 143 seconds. [ 1472.478943][ T29] Not tainted syzkaller #0 [ 1472.517034][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1472.587222][ T29] task:syz-executor state:D stack:21704 pid:5772 ppid:1 flags:0x00004004 [ 1472.623662][ T29] Call Trace: [ 1472.646788][ T29] [ 1472.660995][ T29] __schedule+0x1553/0x45a0 [ 1472.699794][ T29] ? asan.module_dtor+0x20/0x20 [ 1472.723081][ T29] ? mark_lock+0x94/0x320 [ 1472.752639][ T29] ? lock_chain_count+0x20/0x20 [ 1472.785950][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1472.814234][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1472.848389][ T29] schedule+0xbd/0x170 [ 1472.869918][ T29] io_schedule+0x80/0xd0 [ 1472.903389][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1472.925618][ T29] ? folio_wait_bit+0x30/0x30 [ 1472.946758][ T29] ? filemap_get_entry+0x379/0x3f0 [ 1472.976499][ T29] ? _compound_head+0x120/0x120 [ 1473.012181][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 1473.027282][ T29] __filemap_get_folio+0xbc/0xbb0 [ 1473.050467][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 1473.069251][ T29] ? mapping_evict_folio+0x510/0x510 [ 1473.081689][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1473.100655][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1473.125170][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1473.137565][ T29] evict+0x4dd/0x8d0 [ 1473.151113][ T29] ? proc_nr_inodes+0x230/0x230 [ 1473.159784][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1473.170677][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1473.187295][ T29] evict_inodes+0x606/0x6a0 [ 1473.192041][ T29] ? clear_inode+0x150/0x150 [ 1473.199231][ T29] generic_shutdown_super+0x97/0x2b0 [ 1473.210255][ T29] kill_block_super+0x44/0x90 [ 1473.233812][ T29] deactivate_locked_super+0x97/0x100 [ 1473.243059][ T29] cleanup_mnt+0x43b/0x4d0 [ 1473.252282][ T29] task_work_run+0x1d4/0x260 [ 1473.262674][ T29] ? task_work_cancel+0x220/0x220 [ 1473.274673][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1473.286382][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1473.298609][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1473.307027][ T9407] loop5: detected capacity change from 0 to 32768 [ 1473.314012][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1473.331405][ T29] do_syscall_64+0x61/0xa0 [ 1473.350496][ T9407] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.16021 (9407) [ 1473.364906][ T29] ? clear_bhb_loop+0x40/0x90 [ 1473.376287][ T29] ? clear_bhb_loop+0x40/0x90 [ 1473.410520][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1473.430159][ T9407] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1473.475608][ T29] RIP: 0033:0x7fba2fd9d897 [ 1473.480467][ T29] RSP: 002b:00007fff6f1d3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1473.496730][ T9407] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1473.522583][ T29] RAX: 0000000000000000 RBX: 00007fba2fe31ef0 RCX: 00007fba2fd9d897 [ 1473.538865][ T9407] BTRFS info (device loop5): force zlib compression, level 3 [ 1473.569324][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f1d3fb0 [ 1473.577586][ T9407] BTRFS info (device loop5): turning on flush-on-commit [ 1473.594917][ T29] RBP: 00007fff6f1d3fb0 R08: 00007fff6f1d4fb0 R09: 00000000ffffffff [ 1473.624597][ T9407] BTRFS info (device loop5): max_inline at 4096 [ 1473.632015][ T766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1473.643867][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6f1d5040 [ 1473.664368][ T9407] BTRFS info (device loop5): using free space tree [ 1473.676273][ T29] R13: 00007fba2fe31ef0 R14: 00000000001510a0 R15: 00007fff6f1d5080 [ 1473.702652][ T29] [ 1473.720148][ T29] [ 1473.720148][ T29] Showing all locks held in the system: [ 1473.746285][ T29] 1 lock held by khungtaskd/29: [ 1473.758639][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1473.810480][ T29] 2 locks held by getty/5531: [ 1473.821150][ T29] #0: ffff88802d8510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1473.844961][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1473.875136][ T29] 1 lock held by syz-executor/5772: [ 1473.897520][ T29] #0: ffff8880297d20e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1473.915977][ T29] 2 locks held by kworker/u4:4/8874: [ 1473.921504][ T29] 4 locks held by kworker/0:4/8922: [ 1473.927771][ T29] 2 locks held by kworker/0:6/9074: [ 1473.940795][ T29] 1 lock held by syz.5.16021/9407: [ 1473.946630][ T29] #0: ffff8880669080e0 (&type->s_umount_key#66/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920 [ 1473.965592][ T29] [ 1473.968235][ T29] ============================================= [ 1473.968235][ T29] [ 1474.026515][ T29] NMI backtrace for cpu 1 [ 1474.030934][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1474.038176][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1474.048296][ T29] Call Trace: [ 1474.051621][ T29] [ 1474.054705][ T29] dump_stack_lvl+0x18c/0x250 [ 1474.059477][ T29] ? show_regs_print_info+0x20/0x20 [ 1474.064755][ T29] ? load_image+0x400/0x400 [ 1474.069348][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1474.074367][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1474.080586][ T29] ? _printk+0xde/0x130 [ 1474.084817][ T29] ? load_image+0x400/0x400 [ 1474.089389][ T29] ? load_image+0x400/0x400 [ 1474.093961][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1474.100101][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1474.106152][ T29] watchdog+0xf3d/0xf80 [ 1474.110466][ T29] ? watchdog+0x1e1/0xf80 [ 1474.114867][ T29] kthread+0x2fa/0x390 [ 1474.118989][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1474.124082][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1474.128744][ T29] ret_from_fork+0x48/0x80 [ 1474.133217][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1474.137872][ T29] ret_from_fork_asm+0x11/0x20 [ 1474.142708][ T29] [ 1474.146727][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1474.152015][ C0] NMI backtrace for cpu 0 [ 1474.152028][ C0] CPU: 0 PID: 7410 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1474.152045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1474.152057][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1474.152079][ C0] RIP: 0010:unwind_next_frame+0x27e/0x2970 [ 1474.152099][ C0] Code: 85 24 0b b2 8f 48 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 d8 21 00 00 8b 6d 00 ff c5 4b 8d 44 6d 00 48 8d 84 00 a0 69 08 8f <48> 89 44 24 30 48 3d 24 0b b2 8f 0f 83 f4 1c 00 00 48 8d 44 6d 00 [ 1474.152115][ C0] RSP: 0018:ffffc90000006d18 EFLAGS: 00000202 [ 1474.152128][ C0] RAX: ffffffff8f0e38ec RBX: dffffc0000000000 RCX: 0000000000000100 [ 1474.152141][ C0] RDX: ffff88807e611e00 RSI: 0000000000005268 RDI: 000000000009c000 [ 1474.152152][ C0] RBP: 000000000000f7e3 R08: ffffc90000006eb0 R09: 0000000000000011 [ 1474.152164][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000006de8 [ 1474.152175][ C0] R13: 000000000000f7e2 R14: ffffc90000006e1d R15: 0000000000005268 [ 1474.152187][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1474.152201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1474.152213][ C0] CR2: 00007fe0038c8ff8 CR3: 000000002e5df000 CR4: 00000000003506f0 [ 1474.152238][ C0] Call Trace: [ 1474.152244][ C0] [ 1474.152254][ C0] ? handle_softirqs+0x27f/0x820 [ 1474.152274][ C0] ? handle_softirqs+0x280/0x820 [ 1474.152291][ C0] ? handle_softirqs+0x280/0x820 [ 1474.152314][ C0] ? stack_trace_save+0x100/0x100 [ 1474.152335][ C0] arch_stack_walk+0x144/0x190 [ 1474.152355][ C0] ? handle_softirqs+0x280/0x820 [ 1474.152374][ C0] stack_trace_save+0xaa/0x100 [ 1474.152395][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1474.152420][ C0] ? dsa_slave_port_attr_set+0x8e0/0x8e0 [ 1474.152447][ C0] kasan_set_track+0x4e/0x70 [ 1474.152466][ C0] ? kasan_set_track+0x4e/0x70 [ 1474.152482][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1474.152501][ C0] ? slab_post_alloc_hook+0x6e/0x4b0 [ 1474.152525][ C0] ? kmem_cache_alloc_node+0x14c/0x320 [ 1474.152549][ C0] ? __alloc_skb+0x103/0x2c0 [ 1474.152574][ C0] ? fdb_notify+0xa6/0x160 [ 1474.152591][ C0] ? br_fdb_update+0x476/0x630 [ 1474.152609][ C0] ? br_handle_frame_finish+0x5fc/0x19b0 [ 1474.152630][ C0] ? br_nf_hook_thresh+0x3cd/0x4a0 [ 1474.152656][ C0] ? br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 [ 1474.152673][ C0] ? br_nf_pre_routing_ipv6+0x349/0x6b0 [ 1474.152689][ C0] ? br_handle_frame+0x1245/0x14d0 [ 1474.152710][ C0] ? __netif_receive_skb_core+0xfab/0x3af0 [ 1474.152728][ C0] ? __netif_receive_skb+0x74/0x290 [ 1474.152743][ C0] ? process_backlog+0x391/0x6f0 [ 1474.152760][ C0] ? __napi_poll+0xc0/0x460 [ 1474.152774][ C0] ? net_rx_action+0x616/0xc40 [ 1474.152790][ C0] ? handle_softirqs+0x280/0x820 [ 1474.152825][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1474.152848][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1474.152869][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 1474.152898][ C0] kmem_cache_alloc_node+0x14c/0x320 [ 1474.152923][ C0] ? __alloc_skb+0x103/0x2c0 [ 1474.152950][ C0] __alloc_skb+0x103/0x2c0 [ 1474.152977][ C0] fdb_notify+0xa6/0x160 [ 1474.152996][ C0] br_fdb_update+0x476/0x630 [ 1474.153019][ C0] ? br_fdb_add_local+0x50/0x50 [ 1474.153043][ C0] br_handle_frame_finish+0x5fc/0x19b0 [ 1474.153071][ C0] ? brport_get_ownership+0x80/0x80 [ 1474.153093][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1474.153117][ C0] ? rhashtable_lookup_fast+0xee/0x930 [ 1474.153135][ C0] ? rht_unlock+0x1d0/0x1d0 [ 1474.153153][ C0] ? nf_hook_slow+0x16c/0x200 [ 1474.153174][ C0] ? brport_get_ownership+0x80/0x80 [ 1474.153195][ C0] br_nf_hook_thresh+0x3cd/0x4a0 [ 1474.153232][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 1474.153260][ C0] ? brport_get_ownership+0x80/0x80 [ 1474.153288][ C0] br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 [ 1474.153312][ C0] ? brport_get_ownership+0x80/0x80 [ 1474.153343][ C0] br_nf_pre_routing_ipv6+0x349/0x6b0 [ 1474.153361][ C0] ? br_nf_pre_routing_ipv6+0x3f2/0x6b0 [ 1474.153378][ C0] ? br_validate_ipv6+0x730/0x730 [ 1474.153396][ C0] ? br_nf_pre_routing_ipv6+0x6b0/0x6b0 [ 1474.153412][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 1474.153441][ C0] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 1474.153473][ C0] br_handle_frame+0x1245/0x14d0 [ 1474.153500][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 1474.153523][ C0] ? brport_get_ownership+0x80/0x80 [ 1474.153544][ C0] ? ip6_mc_input+0xaa0/0xcb0 [ 1474.153569][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 1474.153591][ C0] __netif_receive_skb_core+0xfab/0x3af0 [ 1474.153611][ C0] ? ip6_input_finish+0x2c0/0x2c0 [ 1474.153634][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 1474.153661][ C0] ? NF_HOOK+0x32d/0x3b0 [ 1474.153688][ C0] ? qdisc_run+0x230/0x230 [ 1474.153708][ C0] ? process_backlog+0x2cf/0x6f0 [ 1474.153726][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1474.153746][ C0] ? process_backlog+0x2cf/0x6f0 [ 1474.153763][ C0] __netif_receive_skb+0x74/0x290 [ 1474.153783][ C0] ? process_backlog+0x2cf/0x6f0 [ 1474.153799][ C0] process_backlog+0x391/0x6f0 [ 1474.153824][ C0] ? trigger_rx_softirq+0x60/0x60 [ 1474.153840][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1474.153862][ C0] ? lock_chain_count+0x20/0x20 [ 1474.153882][ C0] __napi_poll+0xc0/0x460 [ 1474.153896][ C0] ? net_rx_action+0x3a0/0xc40 [ 1474.153920][ C0] net_rx_action+0x616/0xc40 [ 1474.153943][ C0] ? net_tx_action+0x980/0x980 [ 1474.153961][ C0] ? detach_timer+0x2b0/0x2b0 [ 1474.153979][ C0] ? lock_chain_count+0x20/0x20 [ 1474.154003][ C0] handle_softirqs+0x280/0x820 [ 1474.154022][ C0] ? do_softirq+0xfa/0x1a0 [ 1474.154041][ C0] ? do_softirq+0x1a0/0x1a0 [ 1474.154060][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1474.154077][ C0] do_softirq+0xfa/0x1a0 [ 1474.154092][ C0] [ 1474.154098][ C0] [ 1474.154104][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1474.154121][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 1474.154144][ C0] ? rcu_is_watching+0x15/0xb0 [ 1474.154169][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1474.154186][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1474.154201][ C0] ? rcu_read_lock_bh_held+0x7a/0x100 [ 1474.154220][ C0] ? rcu_read_lock_held+0x40/0x40 [ 1474.154239][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1474.154256][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1474.154272][ C0] wg_packet_tx_worker+0x586/0x7c0 [ 1474.154288][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1474.154310][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1474.154331][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1474.154353][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1474.154390][ C0] ? assign_work+0x430/0x430 [ 1474.154413][ C0] ? assign_work+0x3d0/0x430 [ 1474.154436][ C0] worker_thread+0xa55/0xfc0 [ 1474.154458][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1474.154476][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1474.154492][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1474.154521][ C0] kthread+0x2fa/0x390 [ 1474.154537][ C0] ? pr_cont_work+0x560/0x560 [ 1474.154558][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1474.154575][ C0] ret_from_fork+0x48/0x80 [ 1474.154595][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1474.154612][ C0] ret_from_fork_asm+0x11/0x20 [ 1474.154655][ C0] [ 1474.855881][ T9407] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1474.856813][ T9407] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1474.907050][ T9407] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1475.037780][ T9407] BTRFS error (device loop5): open_ctree failed: -12 [ 1475.119516][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1475.126452][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1475.133775][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1475.143880][ T29] Call Trace: [ 1475.147204][ T29] [ 1475.150180][ T29] dump_stack_lvl+0x18c/0x250 [ 1475.154926][ T29] ? show_regs_print_info+0x20/0x20 [ 1475.160177][ T29] ? load_image+0x400/0x400 [ 1475.164761][ T29] panic+0x2dc/0x730 [ 1475.168716][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1475.174426][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1475.178979][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1475.184585][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1475.190804][ T29] watchdog+0xf7c/0xf80 [ 1475.195020][ T29] ? watchdog+0x1e1/0xf80 [ 1475.199419][ T29] kthread+0x2fa/0x390 [ 1475.203526][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1475.208638][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1475.213286][ T29] ret_from_fork+0x48/0x80 [ 1475.217748][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1475.222468][ T29] ret_from_fork_asm+0x11/0x20 [ 1475.227305][ T29] [ 1475.230928][ T29] Kernel Offset: disabled [ 1475.235266][ T29] Rebooting in 86400 seconds..