last executing test programs: 3m4.435394396s ago: executing program 3 (id=1838): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 3m4.234013878s ago: executing program 3 (id=1844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m3.850534201s ago: executing program 3 (id=1850): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket(0x25, 0x801, 0x0) 3m3.672890952s ago: executing program 3 (id=1853): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m2.750713086s ago: executing program 3 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) 3m1.720713297s ago: executing program 3 (id=1875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) 3m1.446020844s ago: executing program 32 (id=1875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) 3.828171833s ago: executing program 1 (id=5014): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 3.643658404s ago: executing program 1 (id=5018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 3.455942135s ago: executing program 1 (id=5021): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 3.327205413s ago: executing program 1 (id=5025): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 2.957732635s ago: executing program 5 (id=5028): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}, 0x94}, 0x1c) 2.723214119s ago: executing program 5 (id=5030): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x5, 0x8, 0x4, 0x4000, 0xb, {0x77359400}, {0x5, 0x0, 0xf8, 0xc6, 0x6, 0xf, "a023d976"}, 0x6, 0x3, {0x0}, 0xfffffffd}) 2.595083656s ago: executing program 1 (id=5032): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 2.464470344s ago: executing program 5 (id=5034): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000440)={0x1, 0x200000000000007, 0x2}) 2.35887452s ago: executing program 1 (id=5035): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) 2.058895429s ago: executing program 4 (id=5039): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) read$FUSE(r0, 0x0, 0x0) 1.899256308s ago: executing program 4 (id=5041): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 1.725935858s ago: executing program 4 (id=5043): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000500)={[{@gid}, {@codepage={'codepage', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uid}]}, 0x5, 0x354, &(0x7f0000000100)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.417349106s ago: executing program 4 (id=5048): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000002a40)) 1.220246548s ago: executing program 0 (id=5051): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) 1.152229052s ago: executing program 5 (id=5053): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.108353575s ago: executing program 4 (id=5054): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000001780)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="e8a091ef1905f9488bb83b5ff5819f176270b4d57bf467b22712a297a2c9724589572090361a31"], 0x0, 0x0, &(0x7f0000001780)) 1.107795225s ago: executing program 0 (id=5055): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) 974.579702ms ago: executing program 2 (id=5056): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}}, 0x0) 887.665957ms ago: executing program 0 (id=5057): r0 = socket(0x23, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x40054) 720.162888ms ago: executing program 2 (id=5058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000000202010400000000000000000a0000047c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb1400040000004000000000000000ffffac1414aa060003"], 0x90}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) 612.709044ms ago: executing program 2 (id=5059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x50, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @private0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 545.641578ms ago: executing program 0 (id=5060): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x1, 0x4, 0xffff0000, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}}) 453.890563ms ago: executing program 2 (id=5061): setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) 312.242072ms ago: executing program 5 (id=5062): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0xa052) 312.006262ms ago: executing program 0 (id=5063): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x27, 0xa, 0x2, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x38414762}) 220.177087ms ago: executing program 2 (id=5064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x20, 0x9, 0x0, 0x0, {0x1, 0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}, 0x1c}}, 0x0) 151.682042ms ago: executing program 5 (id=5065): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 84.499405ms ago: executing program 0 (id=5066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 83.794285ms ago: executing program 2 (id=5067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) 0s ago: executing program 4 (id=5068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): DEV_CHANGE): vcan0: link becomes ready [ 245.863695][T11092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.931602][T11107] autofs4:pid:11107:autofs_fill_super: called with bogus options [ 246.266486][T11117] loop5: detected capacity change from 0 to 4096 [ 246.289465][T11117] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 246.379574][T11117] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 246.430982][T11117] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 246.478067][T11117] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 246.548204][T11117] ntfs: volume version 3.1. [ 246.577003][T11133] loop4: detected capacity change from 0 to 1024 [ 246.652548][T11133] EXT4-fs: Ignoring removed orlov option [ 246.688014][T11133] EXT4-fs: inline encryption not supported [ 246.706239][T11133] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 246.753174][T11133] EXT4-fs (loop4): invalid journal inode [ 246.783988][T11133] EXT4-fs (loop4): can't get journal size [ 246.819656][T11133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.853599][T11133] EXT4-fs (loop4): unmounting filesystem. [ 246.875760][T11144] netlink: 'syz.5.2987': attribute type 13 has an invalid length. [ 246.883819][T11144] netlink: 'syz.5.2987': attribute type 17 has an invalid length. [ 247.128782][T11144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.168867][T11144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.717866][ T26] audit: type=1326 audit(1769207625.816:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 247.807968][ T26] audit: type=1326 audit(1769207625.846:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 247.857969][ T26] audit: type=1326 audit(1769207625.856:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 247.897025][T11182] loop1: detected capacity change from 0 to 4096 [ 247.928183][ T26] audit: type=1326 audit(1769207625.856:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 247.970928][T11188] netlink: 'syz.2.3008': attribute type 13 has an invalid length. [ 247.993772][T11182] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 248.012922][T11188] netlink: 'syz.2.3008': attribute type 17 has an invalid length. [ 248.034419][ T26] audit: type=1326 audit(1769207625.856:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 248.098330][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 248.126651][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 248.167139][T11182] ntfs3: loop1: failed to convert "c46c" to cp775 [ 248.179755][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 248.378391][ T6718] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 248.408582][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.479031][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.521935][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.568077][ T6718] usb 5-1: Using ep0 maxpacket: 16 [ 248.576082][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.600799][ T26] audit: type=1326 audit(1769207626.706:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 248.626876][ T6718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.640483][ T6718] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 248.654790][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.671750][ T6718] usb 5-1: config 0 descriptor?? [ 248.684845][T11212] loop1: detected capacity change from 0 to 1024 [ 248.696347][ T6718] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 248.725874][T11212] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 248.746907][T11188] infiniband !yz!: set active [ 248.756529][T11212] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 248.774392][T11188] infiniband !yz!: set active [ 248.795051][T11212] EXT4-fs error (device loop1): ext4_get_journal_inode:5756: inode #5: comm syz.1.3023: unexpected bad inode w/o EXT4_IGET_BAD [ 248.830306][T11212] EXT4-fs (loop1): no journal found [ 248.835556][T11212] EXT4-fs (loop1): can't get journal size [ 248.865577][T11212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 248.875347][T11212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 248.912012][ T4327] usb 5-1: USB disconnect, device number 18 [ 248.933786][T11188] device wlan0 left promiscuous mode [ 249.044968][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 249.137604][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.173583][T11217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.707192][T11241] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3035'. [ 249.732021][T11241] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3035'. [ 249.819126][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 249.934894][T11248] netlink: 'syz.5.3041': attribute type 5 has an invalid length. [ 249.963475][T11248] netlink: 'syz.5.3041': attribute type 11 has an invalid length. [ 249.974771][T11251] loop1: detected capacity change from 0 to 2048 [ 250.005902][T11251] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 250.008221][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 250.047559][ T7] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 250.088532][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.105466][T11251] UDF-fs: unknown compression code (0) [ 250.136526][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.181966][ T7] usb 1-1: config 1 has no interface number 0 [ 250.199694][ T7] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.238306][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.258423][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.266459][ T7] usb 1-1: Product: syz [ 250.277979][ T7] usb 1-1: Manufacturer: syz [ 250.287979][ T7] usb 1-1: SerialNumber: syz [ 250.300991][ T7] cdc_wdm 1-1:1.128: skipping garbage [ 250.316620][ T7] cdc_wdm 1-1:1.128: invalid descriptor buffer length [ 250.335289][ T7] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 250.508178][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 250.573278][ T5321] usb 1-1: USB disconnect, device number 14 [ 250.708017][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 250.725364][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.746096][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.767999][ T7] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 250.791909][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.814114][ T7] usb 6-1: config 0 descriptor?? [ 250.843662][ T7] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 251.045455][T11283] netlink: 'syz.1.3058': attribute type 5 has an invalid length. [ 251.057045][T11283] netlink: 'syz.1.3058': attribute type 11 has an invalid length. [ 251.071426][ T4256] usb 6-1: USB disconnect, device number 3 [ 251.168042][ T4327] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.321752][T11293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3062'. [ 251.341289][T11293] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3062'. [ 251.394501][ T4327] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.407023][ T4327] usb 5-1: config 0 has no interface number 0 [ 251.430179][ T4327] usb 5-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 251.457572][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.473488][ T4327] usb 5-1: Product: syz [ 251.482468][ T4327] usb 5-1: Manufacturer: syz [ 251.487094][ T4327] usb 5-1: SerialNumber: syz [ 251.499657][ T4327] usb 5-1: config 0 descriptor?? [ 251.516800][ T4327] xsens_mt 5-1:0.1: xsens_mt converter detected [ 251.535265][ T4327] usb 5-1: xsens_mt converter now attached to ttyUSB0 [ 251.743337][ T5321] usb 5-1: USB disconnect, device number 19 [ 251.764416][ T5321] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 251.796937][ T5321] xsens_mt 5-1:0.1: device disconnected [ 251.950535][T11310] loop5: detected capacity change from 0 to 4096 [ 251.969764][T11310] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 252.049287][T11310] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 252.278378][ T2974] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 252.295008][ T8573] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 252.482249][T11327] loop5: detected capacity change from 0 to 1024 [ 252.521278][T11327] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 252.605214][T11334] loop2: detected capacity change from 0 to 128 [ 252.630059][T11327] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 252.672547][T11327] EXT4-fs error (device loop5): ext4_get_journal_inode:5756: inode #5: comm syz.5.3075: unexpected bad inode w/o EXT4_IGET_BAD [ 252.738371][T11327] EXT4-fs (loop5): no journal found [ 252.743631][T11327] EXT4-fs (loop5): can't get journal size [ 252.792024][T11327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 252.828522][T11327] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 252.981990][T11346] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3087'. [ 253.012374][T11346] netlink: zone id is out of range [ 253.034517][T11346] netlink: del zone limit has 4 unknown bytes [ 253.068959][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 253.829433][T11386] loop4: detected capacity change from 0 to 4096 [ 253.912620][T11386] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 254.019489][T11386] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 254.093490][T11386] ntfs3: loop4: ino=21, "memory.events" The size of extended attributes must not exceed 64KiB [ 254.499070][T11409] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 254.827565][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 255.047346][T11437] loop4: detected capacity change from 0 to 2048 [ 255.114544][T11437] loop4: p1 < > p4 < > [ 255.175065][ T3638] loop4: p1 < > p4 < > [ 255.251073][ T4268] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 255.258983][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.269248][ T4617] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.289260][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.308773][ T4617] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.320136][ T4260] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.352661][ T4617] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 255.382890][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.391400][ T4617] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.421071][ T4260] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.431769][ T4617] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 255.454079][T11449] loop1: detected capacity change from 0 to 256 [ 255.454492][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.472051][ T4617] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.472772][T11451] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3139'. [ 255.490301][ T4260] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.500103][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.517975][ T4260] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.522133][ T4617] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 255.535658][ T4260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.558071][ T4260] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.622010][T11451] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3139'. [ 255.623460][ T4617] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 255.690981][ T4617] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 255.740880][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.779668][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 255.815136][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 255.891092][T11461] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 255.928639][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 255.986390][T11465] loop2: detected capacity change from 0 to 512 [ 255.989469][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 256.087266][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 256.095636][ T4617] udevd[4617]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 256.130905][T11465] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.143295][T11465] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 256.154867][T11465] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3158: Corrupt directory, running e2fsck is recommended [ 256.201288][T11465] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 256.218683][T11465] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.3158: corrupted in-inode xattr [ 256.250428][T11465] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3158: couldn't read orphan inode 15 (err -117) [ 256.291772][T11465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.492456][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 256.931846][T11510] loop2: detected capacity change from 0 to 256 [ 257.383873][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 257.398027][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 257.967778][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'. [ 258.152496][T11567] netlink: 'syz.5.3195': attribute type 1 has an invalid length. [ 258.324087][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 258.356352][T11576] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3202'. [ 258.370697][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 258.576819][T11586] Scaler: ================= START STATUS ================= [ 258.598023][T11586] Scaler: ================== END STATUS ================== [ 258.732929][T11591] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.993197][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3216'. [ 259.142416][T11615] loop1: detected capacity change from 0 to 512 [ 259.202516][T11620] trusted_key: encrypted_key: insufficient parameters specified [ 259.241848][T11615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.258283][T11615] ext4 filesystem being mounted at /668/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.401809][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 259.518946][T11631] Scaler: ================= START STATUS ================= [ 259.526367][T11631] Scaler: ================== END STATUS ================== [ 260.679370][T11687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.725138][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.755631][T11687] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.803343][T11691] __nla_validate_parse: 1 callbacks suppressed [ 260.803359][T11691] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3267'. [ 262.285531][T11761] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3290'. [ 262.380516][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 262.490667][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'. [ 262.528778][ T5080] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 262.597854][T11776] netlink: 57 bytes leftover after parsing attributes in process `syz.4.3297'. [ 262.618965][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 262.717990][ T5080] usb 6-1: Using ep0 maxpacket: 32 [ 262.725400][ T5080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.769923][ T5080] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 262.800577][ T5080] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 262.813633][ T7] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 262.844277][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.861668][ T5080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.872909][ T7] usb 2-1: Product: syz [ 262.877122][ T7] usb 2-1: Manufacturer: syz [ 262.882207][ T5080] usb 6-1: Product: syz [ 262.886397][ T5080] usb 6-1: Manufacturer: syz [ 262.891510][ T7] usb 2-1: SerialNumber: syz [ 262.896986][ T5080] usb 6-1: SerialNumber: syz [ 262.909390][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 263.149669][ T5080] usb 6-1: Invalid number of CPorts: 0 [ 263.155324][ T5080] es2_ap_driver: probe of 6-1:7.0 failed with error -22 [ 263.351263][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 263.389346][ T7] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 263.407275][ T5080] usb 6-1: USB disconnect, device number 4 [ 264.050260][ T4327] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.154641][T11821] netlink: 'syz.5.3330': attribute type 2 has an invalid length. [ 264.211468][T11823] loop1: detected capacity change from 0 to 256 [ 264.238076][ T4327] usb 3-1: Using ep0 maxpacket: 8 [ 264.245037][ T4327] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 264.282169][T11823] FAT-fs (loop1): Directory bread(block 64) failed [ 264.300273][ T4327] usb 3-1: config 0 has no interface number 0 [ 264.308215][T11823] FAT-fs (loop1): Directory bread(block 65) failed [ 264.314885][T11823] FAT-fs (loop1): Directory bread(block 66) failed [ 264.318795][ T4327] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 264.351953][T11823] FAT-fs (loop1): Directory bread(block 67) failed [ 264.363800][ T4327] usb 3-1: config 0 interface 96 has no altsetting 0 [ 264.370919][T11823] FAT-fs (loop1): Directory bread(block 68) failed [ 264.370953][T11823] FAT-fs (loop1): Directory bread(block 69) failed [ 264.384053][ T4327] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 264.398698][T11823] FAT-fs (loop1): Directory bread(block 70) failed [ 264.404056][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.452768][T11823] FAT-fs (loop1): Directory bread(block 71) failed [ 264.457948][ T4327] usb 3-1: Product: syz [ 264.464570][T11823] FAT-fs (loop1): Directory bread(block 72) failed [ 264.468029][ T4327] usb 3-1: Manufacturer: syz [ 264.494839][T11823] FAT-fs (loop1): Directory bread(block 73) failed [ 264.494857][ T4327] usb 3-1: SerialNumber: syz [ 264.508485][ T4327] usb 3-1: config 0 descriptor?? [ 264.730507][T11835] loop4: detected capacity change from 0 to 2048 [ 264.801718][T11835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.922646][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3340'. [ 265.014790][ T7] usb 3-1: USB disconnect, device number 15 [ 265.377967][ T4327] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 265.595596][ T4327] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 265.625148][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.650431][ T4327] usb 1-1: Product: syz [ 265.664873][ T4327] usb 1-1: Manufacturer: syz [ 265.674996][ T4327] usb 1-1: SerialNumber: syz [ 265.691644][ T4327] r8152-cfgselector 1-1: config 0 descriptor?? [ 266.155863][ T4327] r8152-cfgselector 1-1: Unknown version 0x0000 [ 266.176906][ T4327] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 266.198239][T11880] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3350'. [ 266.578136][ T5321] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.774804][T11911] kcapi: manufacturer command 18446744073709551608 unknown. [ 266.788109][ T5321] usb 2-1: Using ep0 maxpacket: 8 [ 266.801413][ T5321] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 266.822824][ T5321] usb 2-1: config 0 has no interface number 0 [ 266.850798][ T5321] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 266.884683][ T5321] usb 2-1: config 0 interface 96 has no altsetting 0 [ 266.923510][ T5321] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 266.953827][T11916] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.964172][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.981714][ T5321] usb 2-1: Product: syz [ 266.985921][ T5321] usb 2-1: Manufacturer: syz [ 267.004919][ T5321] usb 2-1: SerialNumber: syz [ 267.020178][ T5321] usb 2-1: config 0 descriptor?? [ 267.414014][T11938] loop4: detected capacity change from 0 to 512 [ 267.484378][ T5321] usb 2-1: USB disconnect, device number 17 [ 267.521925][T11938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.605441][T11938] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.3379: Directory block failed checksum [ 267.742014][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 267.795999][T11953] loop2: detected capacity change from 0 to 1024 [ 268.003530][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 268.005578][T11961] netlink: 'syz.5.3386': attribute type 27 has an invalid length. [ 268.418097][T11976] wg1 speed is unknown, defaulting to 1000 [ 268.474593][T11985] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 268.655012][T11990] xt_limit: Overflow, try lower: 0/0 [ 268.919632][T12004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.085421][T12010] loop1: detected capacity change from 0 to 512 [ 269.240110][T12010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 269.344137][T12010] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.3408: Directory block failed checksum [ 269.425212][T12021] loop2: detected capacity change from 0 to 4096 [ 269.448444][T12021] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 269.505778][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 269.530866][T12021] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 269.577862][T12021] ntfs3: loop2: Failed to load $Extend. [ 269.600560][T12025] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3417'. [ 269.763391][T12033] xt_limit: Overflow, try lower: 0/0 [ 269.851299][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 269.851312][ T26] audit: type=1326 audit(1769207647.956:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 269.898306][T12038] netlink: 'syz.2.3422': attribute type 27 has an invalid length. [ 269.978611][ T26] audit: type=1326 audit(1769207648.016:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 270.106589][T12046] loop5: detected capacity change from 0 to 1024 [ 270.127775][ T26] audit: type=1326 audit(1769207648.016:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 270.213687][ T26] audit: type=1326 audit(1769207648.016:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.4.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 270.342872][ T75] hfsplus: b-tree write err: -5, ino 4 [ 270.438716][T12059] tmpfs: Bad value for 'mpol' [ 270.804341][T12071] loop1: detected capacity change from 0 to 4096 [ 270.812249][T12077] netlink: 'syz.4.3441': attribute type 10 has an invalid length. [ 270.826385][T12071] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 270.856644][T12071] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 270.875289][T12071] ntfs3: loop1: Failed to load $Extend. [ 270.891275][ T26] audit: type=1326 audit(1769207648.996:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 270.919875][T12077] team0: Port device netdevsim0 added [ 270.925897][T12076] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3440'. [ 270.939077][ T26] audit: type=1326 audit(1769207648.996:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 270.961421][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.969707][ T26] audit: type=1326 audit(1769207649.016:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 270.992152][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.057196][ T26] audit: type=1326 audit(1769207649.016:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 271.143661][ T26] audit: type=1326 audit(1769207649.016:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 271.301338][T12091] loop4: detected capacity change from 0 to 512 [ 271.353488][T12091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.365283][T12096] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 271.365283][T12096] program syz.0.3462 not setting count and/or reply_len properly [ 271.526681][T12091] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.779603][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 271.980039][T12122] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 272.365757][T12137] 9pnet_fd: Insufficient options for proto=fd [ 272.862615][ T26] audit: type=1326 audit(1769207650.966:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 272.967216][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3484'. [ 273.358734][T12182] kernel read not supported for file /  (pid: 12182 comm: syz.2.3493) [ 273.527391][T12190] loop5: detected capacity change from 0 to 1024 [ 274.249549][T12227] loop4: detected capacity change from 0 to 64 [ 274.314997][T12229] loop5: detected capacity change from 0 to 256 [ 274.364026][T12229] exfat: Deprecated parameter 'utf8' [ 274.401822][T12229] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 275.082920][T12224] loop1: detected capacity change from 0 to 32768 [ 275.173615][T12224] XFS (loop1): Mounting V5 Filesystem [ 275.339307][T12224] XFS (loop1): Ending clean mount [ 275.467288][ T4269] XFS (loop1): Unmounting Filesystem [ 276.124906][T12307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3552'. [ 276.186942][T12313] No such timeout policy "syz1" [ 276.356099][T12317] loop2: detected capacity change from 0 to 16 [ 276.398868][T12317] erofs: (device loop2): mounted with root inode @ nid 36. [ 277.567955][T12343] loop5: detected capacity change from 0 to 32768 [ 277.624487][ T5080] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 277.649749][T12343] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page [ 277.649749][T12343] [ 277.689820][T12343] ERROR: (device loop5): remounting filesystem as read-only [ 277.702979][T12343] jfs_mkdir: dtInsert returned -EIO [ 277.722328][T12343] ERROR: (device loop5): jfs_mkdir: [ 277.722328][T12343] [ 277.811379][ T5080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.851127][ T5080] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.890648][ T5080] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 277.917290][ T5080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.933089][ T5080] usb 2-1: Product: syz [ 277.937322][ T5080] usb 2-1: Manufacturer: syz [ 277.943267][ T5080] usb 2-1: SerialNumber: syz [ 277.956697][ T5080] usb 2-1: config 0 descriptor?? [ 278.141251][ T4327] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 278.173038][ T5080] usb 2-1: USB disconnect, device number 18 [ 278.349905][ T4327] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 278.361864][ T4327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.387232][ T4327] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 278.408011][ T5321] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.416668][ T4327] usb 3-1: config 1 has no interface number 1 [ 278.429355][ T4327] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.468074][ T4327] usb 3-1: config 1 interface 105 has no altsetting 0 [ 278.478417][ T4327] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 278.487498][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.519857][ T4327] usb 3-1: Product: syz [ 278.524664][ T4327] usb 3-1: Manufacturer: syz [ 278.535196][ T4327] usb 3-1: SerialNumber: syz [ 278.567258][T12401] loop4: detected capacity change from 0 to 1024 [ 278.584810][T12401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.618420][T12401] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.633288][ T5321] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 278.652759][ T5321] usb 6-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 278.652785][ T5321] usb 6-1: Product: syz [ 278.652799][ T5321] usb 6-1: Manufacturer: syz [ 278.652838][ T5321] usb 6-1: SerialNumber: syz [ 278.654766][ T5321] r8152-cfgselector 6-1: config 0 descriptor?? [ 278.672005][T12401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 278.748496][T12401] System zones: 0-1, 3-36 [ 278.755039][ T4327] aqc111: probe of 3-1:1.105 failed with error -22 [ 278.762440][T12401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.873125][T12409] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 278.967231][ T4327] usb 3-1: USB disconnect, device number 16 [ 279.007332][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 279.062391][ T5321] r8152-cfgselector 6-1: Unknown version 0x0000 [ 279.081179][ T5321] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 279.394923][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3611'. [ 279.446908][T12431] loop4: detected capacity change from 0 to 8192 [ 279.501831][T12431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.527517][T12431] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 279.544405][T12431] REISERFS (device loop4): using ordered data mode [ 279.557676][T12431] reiserfs: using flush barriers [ 279.579805][T12431] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.596440][T12431] REISERFS (device loop4): checking transaction log (loop4) [ 279.737454][T12431] REISERFS (device loop4): Using tea hash to sort names [ 279.772709][T12440] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 279.789572][T12431] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 279.848046][T12431] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 280.190713][T12455] netlink: 'syz.5.3624': attribute type 30 has an invalid length. [ 280.340906][T12460] overlayfs: missing 'lowerdir' [ 280.493673][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3630'. [ 280.922515][T12488] CIFS: VFS: Malformed UNC in devname [ 281.057499][T12494] usb usb8: usbfs: process 12494 (syz.5.3643) did not claim interface 8 before use [ 281.065866][T12496] tmpfs: Bad value for 'mpol' [ 281.713385][T12528] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3660'. [ 281.801532][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 281.801547][ T26] audit: type=1326 audit(1769207659.906:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 281.829936][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.867787][ T26] audit: type=1326 audit(1769207659.906:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 281.911718][T12537] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.929674][T12537] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.938204][ T26] audit: type=1326 audit(1769207659.946:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 281.960567][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.018106][ T26] audit: type=1326 audit(1769207659.946:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 282.085723][ T26] audit: type=1326 audit(1769207659.946:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 282.261382][T12554] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 282.319214][ T5603] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 282.364039][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3675'. [ 282.519766][ T5603] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.538080][ T5603] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 282.567986][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.600143][ T5603] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 282.939565][T12584] loop1: detected capacity change from 0 to 764 [ 283.003368][T12584] rock: directory entry would overflow storage [ 283.065683][T12584] rock: sig=0x4654, size=5, remaining=4 [ 283.405185][T12602] netlink: 'syz.0.3697': attribute type 30 has an invalid length. [ 283.505313][T12605] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 283.732240][ T26] audit: type=1326 audit(1769207661.836:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 283.782913][T12617] netlink: 'syz.0.3704': attribute type 21 has an invalid length. [ 283.808077][ T26] audit: type=1326 audit(1769207661.836:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 283.811806][T12617] netlink: 'syz.0.3704': attribute type 1 has an invalid length. [ 283.830466][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.865333][ T5603] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 283.885622][ T26] audit: type=1326 audit(1769207661.836:138): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.1.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 283.918218][ T5603] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 283.926731][ T5603] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 283.952486][ T5603] usb 3-1: USB disconnect, device number 17 [ 284.106450][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3708'. [ 284.602458][ T26] audit: type=1326 audit(1769207662.706:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 284.674323][ T26] audit: type=1326 audit(1769207662.736:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 284.810236][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 284.843136][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 284.884945][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 284.964070][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3724'. [ 284.989810][T12667] tmpfs: Bad value for 'mpol' [ 286.257951][ T4327] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 286.477824][ T4327] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 286.498943][ T4327] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.517954][ T4327] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 286.538526][ T4327] usb 6-1: config 1 has no interface number 1 [ 286.544747][ T4327] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.600367][ T4327] usb 6-1: config 1 interface 105 has no altsetting 0 [ 286.626543][ T4327] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 286.652060][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.675136][ T4327] usb 6-1: Product: syz [ 286.689075][ T4327] usb 6-1: Manufacturer: syz [ 286.704165][ T4327] usb 6-1: SerialNumber: syz [ 286.905521][T12725] loop2: detected capacity change from 0 to 32768 [ 286.932499][ T4327] aqc111: probe of 6-1:1.105 failed with error -22 [ 287.012211][T12725] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.120859][T12725] (syz.2.3754,12725,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 287.166436][ T4327] usb 6-1: USB disconnect, device number 6 [ 287.197975][T12725] (syz.2.3754,12725,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 287.214066][T12725] (syz.2.3754,12725,1):ocfs2_mknod:298 ERROR: status = -2 [ 287.233647][T12725] (syz.2.3754,12725,1):ocfs2_mknod:502 ERROR: status = -2 [ 287.255428][T12725] (syz.2.3754,12725,1):ocfs2_create:676 ERROR: status = -2 [ 287.377221][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 287.523698][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 287.523711][ T26] audit: type=1326 audit(1769207665.626:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.0.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 287.613152][ T26] audit: type=1326 audit(1769207665.626:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.0.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 287.669622][ T26] audit: type=1326 audit(1769207665.656:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.0.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 287.745335][ T26] audit: type=1326 audit(1769207665.656:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.0.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 287.755187][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 287.802989][ T26] audit: type=1326 audit(1769207665.656:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.0.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d659acb9 code=0x7ffc0000 [ 287.834422][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'. [ 287.918170][ T26] audit: type=1326 audit(1769207666.026:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 287.966519][ T26] audit: type=1326 audit(1769207666.056:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 288.003923][ T26] audit: type=1326 audit(1769207666.056:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 288.175886][T12757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.328091][T12787] netlink: 'syz.5.3784': attribute type 1 has an invalid length. [ 288.335874][T12787] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 288.376255][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3784'. [ 289.377984][ T7] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 289.418088][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.556193][T12842] loop5: detected capacity change from 0 to 512 [ 289.566303][T12844] loop1: detected capacity change from 0 to 256 [ 289.573779][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 289.596545][T12842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.603969][ T7] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 289.619936][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.640503][ T7] usb 5-1: Product: syz [ 289.653791][ T7] usb 5-1: Manufacturer: syz [ 289.665707][T12844] FAT-fs (loop1): Directory bread(block 64) failed [ 289.672111][ T7] usb 5-1: SerialNumber: syz [ 289.691270][ T7] usb 5-1: config 0 descriptor?? [ 289.693760][T12844] FAT-fs (loop1): Directory bread(block 65) failed [ 289.704928][ T7] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 289.720144][T12844] FAT-fs (loop1): Directory bread(block 66) failed [ 289.727198][T12844] FAT-fs (loop1): Directory bread(block 67) failed [ 289.748043][T12844] FAT-fs (loop1): Directory bread(block 68) failed [ 289.748076][ T5080] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 289.754594][T12844] FAT-fs (loop1): Directory bread(block 69) failed [ 289.773134][T12842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.786007][T12842] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.849388][T12844] FAT-fs (loop1): Directory bread(block 70) failed [ 289.856015][T12844] FAT-fs (loop1): Directory bread(block 71) failed [ 289.908201][T12844] FAT-fs (loop1): Directory bread(block 72) failed [ 289.914838][T12844] FAT-fs (loop1): Directory bread(block 73) failed [ 289.939922][ T5080] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.954847][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 289.962297][ T5080] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 1.ff [ 289.981791][ T5080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.000130][ T5080] usb 3-1: SerialNumber: syz [ 290.006900][ T5080] usb 3-1: config 0 descriptor?? [ 290.049053][ T5080] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 290.058465][ T5080] usb 3-1: Detected SIO [ 290.064891][ T5080] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 290.103427][ T7] gspca_topro: reg_w err -71 [ 290.149207][ T7] gspca_topro: Sensor soi763a [ 290.163122][ T7] usb 5-1: USB disconnect, device number 20 [ 290.263781][ T5080] usb 3-1: USB disconnect, device number 18 [ 290.288785][ T5080] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 290.321530][ T5080] ftdi_sio 3-1:0.0: device disconnected [ 290.878959][ T5080] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 291.023217][T12870] libceph: resolve '.' (ret=-3): failed [ 291.068062][ T5080] usb 6-1: Using ep0 maxpacket: 32 [ 291.077658][ T5080] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 291.115199][ T5080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.142590][ T5080] usb 6-1: Product: syz [ 291.146893][ T5080] usb 6-1: Manufacturer: syz [ 291.168004][ T5080] usb 6-1: SerialNumber: syz [ 291.198820][ T5080] usb 6-1: config 0 descriptor?? [ 291.412435][ T5080] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 291.424026][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3832'. [ 291.434065][ T5080] eb 2a 3b 80 9b e4 7a f0 [ 291.448537][ T5080] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 291.540832][T12894] netlink: 'syz.0.3835': attribute type 26 has an invalid length. [ 291.633557][ T5080] usb 6-1: USB disconnect, device number 7 [ 291.732833][T12901] loop1: detected capacity change from 0 to 512 [ 291.861542][T12910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 291.877329][T12901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.930953][T12901] ext4 filesystem being mounted at /765/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.994445][T12915] netlink: 'syz.4.3843': attribute type 21 has an invalid length. [ 292.009150][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 292.107982][ T4327] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 292.321115][ T4327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.340784][ T4327] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.385737][ T4327] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.389680][T12931] loop1: detected capacity change from 0 to 512 [ 292.402365][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.418019][ T4327] usb 3-1: Product: syz [ 292.455223][ T4327] usb 3-1: Manufacturer: syz [ 292.485594][ T4327] usb 3-1: SerialNumber: syz [ 292.494268][T12931] EXT4-fs (loop1): orphan cleanup on readonly fs [ 292.504765][T12931] Quota error (device loop1): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 292.516777][ T4327] usb 3-1: config 0 descriptor?? [ 292.527214][T12931] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 292.543348][T12931] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 292.561446][T12931] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.3850: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 292.627148][T12931] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3850: couldn't read orphan inode 13 (err -117) [ 292.627476][T12931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.806687][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 292.818266][ T4327] usb 3-1: USB disconnect, device number 19 [ 292.909311][T12950] netlink: 'syz.0.3859': attribute type 21 has an invalid length. [ 293.004673][T12947] loop4: detected capacity change from 0 to 4096 [ 293.111827][T12947] ntfs: volume version 3.1. [ 293.360969][T12959] loop1: detected capacity change from 0 to 8192 [ 293.452969][T12959] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.502971][T12959] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 293.555997][T12959] FAT-fs (loop1): Filesystem has been set read-only [ 293.592076][T12959] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 293.639099][T12959] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 293.646355][T12959] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 293.761557][T12972] libceph: resolve '.' (ret=-3): failed [ 293.967613][T12977] loop5: detected capacity change from 0 to 8192 [ 294.005960][T12977] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 294.006020][T12977] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 294.006090][T12977] REISERFS (device loop5): using ordered data mode [ 294.006101][T12977] reiserfs: using flush barriers [ 294.007251][T12977] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 294.007621][T12977] REISERFS (device loop5): checking transaction log (loop5) [ 294.305030][T12977] REISERFS (device loop5): Using tea hash to sort names [ 294.305341][T12977] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 294.305394][T12977] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 294.808096][ T4327] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.976215][T13023] loop5: detected capacity change from 0 to 1024 [ 294.983615][T13023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.001539][ T4327] usb 3-1: Using ep0 maxpacket: 32 [ 295.026793][T13023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.039357][ T4327] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 295.047472][ T4327] usb 3-1: config 0 has no interface number 1 [ 295.067673][ T4327] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 295.077618][T13023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 295.124002][T13023] System zones: 0-1, 3-36 [ 295.136452][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.165062][T13023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 295.179250][ T4327] usb 3-1: Product: syz [ 295.183455][ T4327] usb 3-1: Manufacturer: syz [ 295.240754][T13035] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3896'. [ 295.241889][ T4327] usb 3-1: SerialNumber: syz [ 295.270537][T13035] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 295.300641][ T4327] usb 3-1: config 0 descriptor?? [ 295.330287][T13033] loop1: detected capacity change from 0 to 8192 [ 295.360084][T13033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 295.382780][T13033] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 295.396356][T13033] REISERFS (device loop1): using ordered data mode [ 295.407272][T13033] reiserfs: using flush barriers [ 295.422388][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 295.429521][ T4327] viperboard 3-1:0.61: version 0.00 found at bus 003 address 020 [ 295.430261][T13033] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.458608][T13033] REISERFS (device loop1): checking transaction log (loop1) [ 295.516662][ T4327] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 295.565128][ T4327] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 295.618020][ T4327] viperboard 3-1:0.0: version 0.00 found at bus 003 address 020 [ 295.650708][T13033] REISERFS (device loop1): Using tea hash to sort names [ 295.658154][ T4327] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 295.666854][ T4327] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 295.677465][T13033] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 295.691939][T13033] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 295.699008][ T4327] usb 3-1: USB disconnect, device number 20 [ 296.378518][T13055] loop5: detected capacity change from 0 to 512 [ 296.492742][ T4327] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 296.695950][ T4327] usb 5-1: Using ep0 maxpacket: 32 [ 296.707291][ T4327] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 296.726464][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.745110][ T4327] usb 5-1: Product: syz [ 296.764281][ T4327] usb 5-1: Manufacturer: syz [ 296.779189][ T4327] usb 5-1: SerialNumber: syz [ 296.792114][ T4327] usb 5-1: config 0 descriptor?? [ 296.813987][T13055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 296.844446][T13055] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.027496][ T4327] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 297.044246][ T4327] eb 2a 3b 80 9b e4 7a f0 [ 297.053890][ T4327] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 297.063287][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 297.111197][ T26] audit: type=1326 audit(1769207675.216:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.167646][T13051] syz.0.3904 (13051): drop_caches: 2 [ 297.182120][ T26] audit: type=1326 audit(1769207675.216:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.213036][ T26] audit: type=1326 audit(1769207675.216:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.251270][ T5080] usb 5-1: USB disconnect, device number 21 [ 297.327664][ T26] audit: type=1326 audit(1769207675.216:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.428186][ T26] audit: type=1326 audit(1769207675.216:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.472170][ T26] audit: type=1326 audit(1769207675.216:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 297.496110][ T26] audit: type=1326 audit(1769207675.216:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 298.146730][T13113] No such timeout policy "syz1" [ 298.555696][T13137] loop1: detected capacity change from 0 to 16 [ 298.608496][T13137] erofs: (device loop1): mounted with root inode @ nid 36. [ 299.126973][T13162] loop2: detected capacity change from 0 to 1024 [ 299.139327][T13162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.158311][T13162] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.197759][T13162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 299.206506][T13162] System zones: 0-1, 3-36 [ 299.225442][T13162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.472857][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 299.493083][T13173] loop4: detected capacity change from 0 to 8 [ 300.439151][T13207] loop1: detected capacity change from 0 to 64 [ 300.996857][T13217] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.146664][T13224] loop5: detected capacity change from 0 to 512 [ 301.202990][T13219] loop2: detected capacity change from 0 to 8192 [ 301.211536][T13224] EXT4-fs (loop5): orphan cleanup on readonly fs [ 301.221674][T13227] loop1: detected capacity change from 0 to 1024 [ 301.234638][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.254953][T13227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.293871][T13219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 301.307564][T13224] Quota error (device loop5): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 301.393250][T13219] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 301.398491][T13224] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.438136][T13224] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 301.438204][T13227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 301.448062][T13227] System zones: 0-1, 3-36 [ 301.467717][T13219] REISERFS (device loop2): using ordered data mode [ 301.480606][T13219] reiserfs: using flush barriers [ 301.488108][T13219] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.505984][T13219] REISERFS (device loop2): checking transaction log (loop2) [ 301.512754][T13224] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.3989: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 301.561983][T13227] [ 301.567356][T13227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 301.703311][T13219] REISERFS (device loop2): Using tea hash to sort names [ 301.711756][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 301.727576][T13219] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 301.742365][T13224] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3989: couldn't read orphan inode 13 (err -117) [ 301.806775][T13219] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 301.835813][T13224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 302.064459][T13252] loop4: detected capacity change from 0 to 1024 [ 302.073808][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 302.156913][T13252] hfsplus: invalid length 32517 has been corrected to 255 [ 302.187996][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.387992][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 302.394952][ T7] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 302.429876][ T7] usb 2-1: config 0 has no interface number 1 [ 302.472938][ T7] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 302.493623][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.512634][ T7] usb 2-1: Product: syz [ 302.516844][ T7] usb 2-1: Manufacturer: syz [ 302.543018][ T7] usb 2-1: SerialNumber: syz [ 302.563552][ T7] usb 2-1: config 0 descriptor?? [ 302.648255][ T5321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 302.709245][ T7] viperboard 2-1:0.61: version 0.00 found at bus 002 address 019 [ 302.744533][ T7] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 302.762769][ T7] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 302.800168][ T7] viperboard 2-1:0.0: version 0.00 found at bus 002 address 019 [ 302.829494][ T7] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 302.847957][ T7] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 302.860055][ T5321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.883446][ T5321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.884358][ T7] usb 2-1: USB disconnect, device number 19 [ 302.940929][ T5321] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 302.948054][ T26] audit: type=1326 audit(1769207681.046:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 303.002634][ T5321] usb 1-1: config 1 interface 0 has no altsetting 0 [ 303.030644][ T5321] usb 1-1: config 1 interface 0 has no altsetting 1 [ 303.043021][ T5321] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 303.060464][ T26] audit: type=1326 audit(1769207681.096:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 303.087220][ T5321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.120587][ T5321] usb 1-1: Product: syz [ 303.129344][ T5321] usb 1-1: Manufacturer: syz [ 303.134012][ T5321] usb 1-1: SerialNumber: syz [ 303.145460][ T26] audit: type=1326 audit(1769207681.096:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 303.218663][ T26] audit: type=1326 audit(1769207681.096:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 303.296688][T13288] SET target dimension over the limit! [ 303.369464][ T5321] smsusb:smsusb_probe: board id=8, interface number 0 [ 303.386527][ T5321] usb 1-1: selecting invalid altsetting 0 [ 303.396633][ T5321] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 303.416861][ T5321] smsusb: probe of 1-1:1.0 failed with error -22 [ 303.446598][ T5321] usb 1-1: USB disconnect, device number 16 [ 303.483598][T13276] loop2: detected capacity change from 0 to 32768 [ 303.551256][ T48] read_mapping_page failed! [ 303.568330][ T48] ERROR: (device loop2): txCommit: [ 303.568330][ T48] [ 303.622727][ T48] jfs_write_inode: jfs_commit_inode failed! [ 303.917987][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 304.142326][T13308] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4028'. [ 304.417310][T13322] SET target dimension over the limit! [ 304.918724][ T26] audit: type=1326 audit(1769207683.026:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 305.026376][ T26] audit: type=1326 audit(1769207683.026:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 305.062497][T13314] loop5: detected capacity change from 0 to 32768 [ 305.086805][T13314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4032 (13314) [ 305.125214][ T26] audit: type=1326 audit(1769207683.026:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 305.159734][T13314] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.183568][ T26] audit: type=1326 audit(1769207683.026:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 305.196578][T13314] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 305.279829][T13314] BTRFS info (device loop5): force clearing of disk cache [ 305.303325][T13328] loop2: detected capacity change from 0 to 32768 [ 305.317999][T13314] BTRFS info (device loop5): metadata ratio 0 [ 305.324306][T13314] BTRFS info (device loop5): using free space tree [ 305.421319][T13328] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 305.458091][T13358] SET target dimension over the limit! [ 305.489452][T13364] netlink: 'syz.1.4062': attribute type 6 has an invalid length. [ 305.513451][T13328] (syz.2.4039,13328,1):ocfs2_symlink:2065 ERROR: status = -2 [ 305.644851][T13314] BTRFS info (device loop5): enabling ssd optimizations [ 305.704979][T13314] BTRFS info (device loop5): rebuilding free space tree [ 305.706280][ T4273] (syz-executor,4273,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 305.789906][T13380] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 305.813778][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 305.820573][T13314] BTRFS warning (device loop5): can't clear the incompat:0,default_subvol,compress_lzo,compress_zstd feature bits while mounted [ 305.827991][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4053'. [ 305.933285][T13380] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 305.948045][ T8573] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.103153][ T4617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4617) [ 306.279113][T13391] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4060'. [ 306.384857][ T26] audit: type=1326 audit(1769207684.486:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13394 comm="syz.5.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 306.458232][ T26] audit: type=1326 audit(1769207684.486:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13394 comm="syz.5.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a59acb9 code=0x7ffc0000 [ 306.643898][T13382] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 306.719832][T13407] netlink: 'syz.5.4067': attribute type 6 has an invalid length. [ 306.987337][T13419] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4074'. [ 307.688126][T13453] loop4: detected capacity change from 0 to 16 [ 307.740067][T13453] erofs: (device loop4): mounted with root inode @ nid 36. [ 307.854592][T13453] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 307.898013][ T4282] Bluetooth: hci0: command 0x080f tx timeout [ 307.926615][T13453] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 307.953572][T13453] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 308.070234][T13465] loop2: detected capacity change from 0 to 2048 [ 308.252635][T13465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.277228][T13465] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.328254][T13482] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 308.498829][T13465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4097: bg 0: block 345: padding at end of block bitmap is not set [ 308.557214][T13465] EXT4-fs (loop2): Remounting filesystem read-only [ 308.600829][T13492] IPVS: length: 120 != 24 [ 308.617124][T13488] loop5: detected capacity change from 0 to 4096 [ 308.667243][T13488] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 308.703548][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 309.372189][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4120'. [ 309.406071][T13496] loop4: detected capacity change from 0 to 32768 [ 309.523886][T13496] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 309.640968][T13496] (syz.4.4112,13496,0):ocfs2_symlink:2065 ERROR: status = -2 [ 309.766980][ T4268] (syz-executor,4268,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 309.804954][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 310.228959][T13534] loop5: detected capacity change from 0 to 4096 [ 310.312553][T13508] loop2: detected capacity change from 0 to 65536 [ 310.394363][T13546] netlink: 'syz.0.4135': attribute type 4 has an invalid length. [ 310.449018][T13546] device veth1_macvtap left promiscuous mode [ 310.458364][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 310.485937][T13508] XFS (loop2): Mounting V5 Filesystem [ 310.560177][T13508] XFS (loop2): Ending clean mount [ 310.598847][T13508] XFS (loop2): Quotacheck needed: Please wait. [ 310.651642][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 310.668086][ T7] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 310.686619][ T7] usb 5-1: Product: syz [ 310.691688][ T7] usb 5-1: Manufacturer: syz [ 310.696306][ T7] usb 5-1: SerialNumber: syz [ 310.708355][T13508] XFS (loop2): Quotacheck: Done. [ 310.719027][ T7] usb 5-1: config 0 descriptor?? [ 310.725940][ T7] ch341 5-1:0.0: ch341-uart converter detected [ 310.927113][ T4273] XFS (loop2): Unmounting Filesystem [ 311.131868][ T7] usb 5-1: failed to send control message: -71 [ 311.147118][ T7] ch341-uart: probe of ttyUSB0 failed with error -71 [ 311.186294][ T7] usb 5-1: USB disconnect, device number 22 [ 311.207068][ T7] ch341 5-1:0.0: device disconnected [ 311.728143][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4155'. [ 312.230388][T13619] loop5: detected capacity change from 0 to 2048 [ 312.301010][T13619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.558532][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4174'. [ 312.672912][T13635] netlink: 'syz.5.4175': attribute type 4 has an invalid length. [ 312.724391][T13635] device veth1_macvtap left promiscuous mode [ 313.492856][T13671] loop1: detected capacity change from 0 to 4096 [ 313.748083][T13676] xt_CT: No such helper "pptp" [ 313.897393][T13691] loop4: detected capacity change from 0 to 64 [ 313.974939][T13684] xt_CT: No such helper "netbios-ns" [ 314.032665][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 314.095045][T13697] loop1: detected capacity change from 0 to 1764 [ 314.193943][T13697] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 314.561159][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4216'. [ 315.032083][T13737] netlink: 'syz.1.4224': attribute type 3 has an invalid length. [ 315.062386][T13737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4224'. [ 315.479127][T13761] loop1: detected capacity change from 0 to 256 [ 315.787476][T13763] xt_CT: No such helper "netbios-ns" [ 315.909301][T13776] trusted_key: encrypted_key: master key parameter is missing [ 316.320397][T13793] netlink: 'syz.5.4262': attribute type 3 has an invalid length. [ 316.340071][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4262'. [ 316.509524][T13798] xt_CT: No such helper "pptp" [ 316.556149][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4258'. [ 316.639542][T13809] No such timeout policy "syz0" [ 316.673903][T13811] loop2: detected capacity change from 0 to 256 [ 316.732378][T13811] FAT-fs (loop2): Directory bread(block 64) failed [ 316.741984][T13815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.770908][T13811] FAT-fs (loop2): Directory bread(block 65) failed [ 316.777577][T13811] FAT-fs (loop2): Directory bread(block 66) failed [ 316.814726][T13811] FAT-fs (loop2): Directory bread(block 67) failed [ 316.842807][T13811] FAT-fs (loop2): Directory bread(block 68) failed [ 316.860589][T13811] FAT-fs (loop2): Directory bread(block 69) failed [ 316.887033][T13811] FAT-fs (loop2): Directory bread(block 70) failed [ 316.926182][T13811] FAT-fs (loop2): Directory bread(block 71) failed [ 316.952530][T13811] FAT-fs (loop2): Directory bread(block 72) failed [ 316.975581][T13811] FAT-fs (loop2): Directory bread(block 73) failed [ 317.185639][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.758971][T13858] loop5: detected capacity change from 0 to 256 [ 317.846109][T13858] FAT-fs (loop5): Directory bread(block 64) failed [ 317.864544][T13858] FAT-fs (loop5): Directory bread(block 65) failed [ 317.902939][T13858] FAT-fs (loop5): Directory bread(block 66) failed [ 317.951077][T13858] FAT-fs (loop5): Directory bread(block 67) failed [ 317.959478][T13858] FAT-fs (loop5): Directory bread(block 68) failed [ 317.966044][T13858] FAT-fs (loop5): Directory bread(block 69) failed [ 317.998103][T13858] FAT-fs (loop5): Directory bread(block 70) failed [ 318.004689][T13858] FAT-fs (loop5): Directory bread(block 71) failed [ 318.037248][T13858] FAT-fs (loop5): Directory bread(block 72) failed [ 318.044219][T13858] FAT-fs (loop5): Directory bread(block 73) failed [ 318.153159][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 318.153173][ T26] audit: type=1326 audit(1769207696.256:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 318.161098][T13877] loop4: detected capacity change from 0 to 256 [ 318.224903][ T26] audit: type=1326 audit(1769207696.316:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 318.279869][ T26] audit: type=1326 audit(1769207696.316:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 318.401797][ T26] audit: type=1326 audit(1769207696.316:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007359acb9 code=0x7ffc0000 [ 318.518651][T13883] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4297'. [ 318.824893][T13895] netlink: 193 bytes leftover after parsing attributes in process `syz.0.4303'. [ 318.832737][T13897] sctp: [Deprecated]: syz.4.4304 (pid 13897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.832737][T13897] Use struct sctp_sack_info instead [ 318.916176][T13901] loop5: detected capacity change from 0 to 764 [ 318.968993][T13901] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.987590][T13901] Symlink component flag not implemented [ 319.021333][T13901] Symlink component flag not implemented (7) [ 319.114480][T13909] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 319.282503][T13915] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4312'. [ 319.413107][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4314'. [ 319.525217][ T4282] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 319.553650][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.589113][T13926] No such timeout policy "syz0" [ 319.872967][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4324'. [ 319.896991][T13938] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 320.109498][T13949] xt_addrtype: ipv6 does not support BROADCAST matching [ 320.196586][T13955] loop1: detected capacity change from 0 to 256 [ 320.269429][T13955] FAT-fs (loop1): Directory bread(block 64) failed [ 320.287973][T13955] FAT-fs (loop1): Directory bread(block 65) failed [ 320.294650][T13955] FAT-fs (loop1): Directory bread(block 66) failed [ 320.328449][T13955] FAT-fs (loop1): Directory bread(block 67) failed [ 320.353187][T13955] FAT-fs (loop1): Directory bread(block 68) failed [ 320.386083][T13955] FAT-fs (loop1): Directory bread(block 69) failed [ 320.393942][T13955] FAT-fs (loop1): Directory bread(block 70) failed [ 320.403890][T13955] FAT-fs (loop1): Directory bread(block 71) failed [ 320.417674][T13955] FAT-fs (loop1): Directory bread(block 72) failed [ 320.431954][T13955] FAT-fs (loop1): Directory bread(block 73) failed [ 320.822832][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4345'. [ 321.539104][T14007] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 322.398715][T14041] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 322.428017][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 322.485803][T14043] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4375'. [ 322.508127][T14043] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 322.526062][T14021] loop1: detected capacity change from 0 to 32768 [ 322.591128][T14021] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 322.686837][T14021] (syz.1.4364,14021,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 322.696827][T14021] (syz.1.4364,14021,1):ocfs2_search_one_group:1684 ERROR: status = -12 [ 322.707455][T14021] (syz.1.4364,14021,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12 [ 322.716399][T14021] (syz.1.4364,14021,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 322.725524][T14021] (syz.1.4364,14021,1):ocfs2_claim_new_inode:2226 ERROR: status = -12 [ 322.733879][T14021] (syz.1.4364,14021,1):ocfs2_claim_new_inode:2241 ERROR: status = -12 [ 322.748468][T14021] (syz.1.4364,14021,1):ocfs2_mknod_locked:639 ERROR: status = -12 [ 322.756441][T14021] (syz.1.4364,14021,1):ocfs2_symlink:1941 ERROR: status = -12 [ 322.765686][T14021] (syz.1.4364,14021,1):ocfs2_symlink:2065 ERROR: status = -12 [ 322.823306][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 323.090074][T14063] loop2: detected capacity change from 0 to 512 [ 323.155848][T14063] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 323.199633][T14063] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 323.241526][T14063] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.4385: Failed to acquire dquot type 1 [ 323.344916][T14063] EXT4-fs (loop2): 1 truncate cleaned up [ 323.388195][T14063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.397180][T14063] ext4 filesystem being mounted at /848/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.465102][T14076] netlink: 'syz.0.4390': attribute type 24 has an invalid length. [ 323.570209][T14063] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 323.634469][T14063] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 323.687070][T14063] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.4385: Failed to acquire dquot type 1 [ 323.894591][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 324.185654][T14103] loop5: detected capacity change from 0 to 1024 [ 324.243575][T14103] hfsplus: keylen 65060 too large [ 324.247721][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 324.292987][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 324.367924][T14106] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 324.521917][T14106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.992916][T14138] loop5: detected capacity change from 0 to 4096 [ 325.027308][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4423'. [ 325.052533][T14138] ntfs3: loop5: ino=3, Correct links count -> 2. [ 325.440732][T14162] netlink: 'syz.0.4430': attribute type 2 has an invalid length. [ 325.551985][T14168] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 325.911376][T14186] netlink: 'syz.5.4444': attribute type 1 has an invalid length. [ 326.185518][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 326.227019][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 326.264301][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 326.353601][T14203] loop1: detected capacity change from 0 to 16 [ 326.387266][T14203] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 326.420413][T14203] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 326.444287][T14203] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 327.043230][T14229] loop4: detected capacity change from 0 to 512 [ 327.169738][T14229] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 327.212385][T14229] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 327.247979][T14229] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.4464: Failed to acquire dquot type 1 [ 327.308895][T14229] EXT4-fs (loop4): 1 truncate cleaned up [ 327.314647][T14229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.324064][T14244] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4471'. [ 327.367182][T14229] ext4 filesystem being mounted at /913/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.474126][T14229] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 327.536151][T14229] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 327.553887][T14255] loop5: detected capacity change from 0 to 512 [ 327.569542][T14255] EXT4-fs: Ignoring removed i_version option [ 327.576489][T14229] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.4464: Failed to acquire dquot type 1 [ 327.598384][T14255] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.675897][T14255] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.4475: inode #13: comm syz.5.4475: iget: illegal inode # [ 327.712793][T14255] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4475: couldn't read orphan inode 13 (err -117) [ 327.713319][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 327.729552][T14255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 327.768866][T14264] netlink: 'syz.0.4482': attribute type 1 has an invalid length. [ 327.964549][ T8573] EXT4-fs (loop5): unmounting filesystem. [ 328.031069][T14272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'. [ 328.455092][T14293] netlink: 'syz.2.4492': attribute type 2 has an invalid length. [ 328.603605][T14295] loop4: detected capacity change from 0 to 512 [ 328.652135][T14295] EXT4-fs: Ignoring removed i_version option [ 328.674438][T14295] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.705724][T14295] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4495: inode #13: comm syz.4.4495: iget: illegal inode # [ 328.720426][T14295] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4495: couldn't read orphan inode 13 (err -117) [ 328.733023][T14295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 328.822028][T14302] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4508'. [ 328.851306][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 328.946603][T14278] loop5: detected capacity change from 0 to 32768 [ 329.031661][T14309] dlm: no locking on control device [ 329.063795][T14278] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 329.191218][T14278] (syz.5.4484,14278,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 329.199685][T14278] (syz.5.4484,14278,1):ocfs2_search_one_group:1684 ERROR: status = -12 [ 329.208049][T14278] (syz.5.4484,14278,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12 [ 329.216582][T14278] (syz.5.4484,14278,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 329.238027][T14278] (syz.5.4484,14278,1):ocfs2_claim_new_inode:2226 ERROR: status = -12 [ 329.246246][T14278] (syz.5.4484,14278,1):ocfs2_claim_new_inode:2241 ERROR: status = -12 [ 329.277484][T14278] (syz.5.4484,14278,1):ocfs2_mknod_locked:639 ERROR: status = -12 [ 329.323075][T14278] (syz.5.4484,14278,1):ocfs2_symlink:1941 ERROR: status = -12 [ 329.368225][T14278] (syz.5.4484,14278,1):ocfs2_symlink:2065 ERROR: status = -12 [ 329.595033][ T8573] ocfs2: Unmounting device (7,5) on (node local) [ 329.666583][T14334] loop4: detected capacity change from 0 to 16 [ 329.702190][T14334] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 329.730875][T14334] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 329.763786][T14334] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 329.973382][T14347] loop4: detected capacity change from 0 to 8 [ 330.034395][T14347] cramfs: Error -3 while decompressing! [ 330.066566][T14347] cramfs: ffffffff96d8b1e8(26)->ffff888050882000(4096) [ 330.077492][ T4617] udevd[4617]: incorrect cramfs checksum on /dev/loop4 [ 330.088120][T14347] cramfs: Error -3 while decompressing! [ 330.101440][T14347] cramfs: ffffffff96d8b202(26)->ffff8880508cc000(4096) [ 330.120684][T14347] cramfs: Error -3 while decompressing! [ 330.127817][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4520'. [ 330.147992][T14347] cramfs: ffffffff96d8b21c(16)->ffff88804dc22000(4096) [ 330.168177][T14347] cramfs: Error -3 while decompressing! [ 330.204207][T14347] cramfs: ffffffff96d8b1e8(26)->ffff888050882000(4096) [ 331.164980][T14395] dlm: no locking on control device [ 331.598000][ T4256] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 331.608738][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'. [ 331.637496][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4555'. [ 331.797935][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 331.811448][ T4256] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 331.851145][ T4256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.892377][ T4256] usb 3-1: config 0 has no interface number 0 [ 331.906093][ T4256] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.952616][ T4256] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 331.972370][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.007797][ T4256] usb 3-1: Product: syz [ 332.012332][ T4256] usb 3-1: Manufacturer: syz [ 332.016992][ T4256] usb 3-1: SerialNumber: syz [ 332.043133][ T4256] usb 3-1: config 0 descriptor?? [ 332.070027][ T4256] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 332.096839][ T26] audit: type=1326 audit(1769207710.196:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 332.119208][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.137370][ T4256] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 332.146606][ T26] audit: type=1326 audit(1769207710.196:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 332.168986][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.232935][ T26] audit: type=1326 audit(1769207710.196:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 332.269367][ T4256] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 332.274145][T14445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.277083][ T4256] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 332.343947][ T26] audit: type=1326 audit(1769207710.196:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.4.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 332.513347][ T5080] usb 3-1: USB disconnect, device number 21 [ 332.716620][T14460] netlink: 'syz.4.4574': attribute type 8 has an invalid length. [ 332.755920][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 333.290973][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4584'. [ 333.773838][T14502] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 333.819098][T14502] netlink: 'syz.1.4595': attribute type 3 has an invalid length. [ 333.856989][T14502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4595'. [ 334.182259][T14524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.201326][T14526] netlink: 'syz.5.4607': attribute type 27 has an invalid length. [ 334.416567][T14532] loop1: detected capacity change from 0 to 2048 [ 334.439955][T14532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.687082][T14542] loop5: detected capacity change from 0 to 1024 [ 334.710914][T14542] EXT4-fs: Ignoring removed bh option [ 334.753652][T14542] EXT4-fs: inline encryption not supported [ 334.841365][T14551] ./file0: Can't open blockdev [ 334.882896][T14542] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.4615: lblock 2 mapped to illegal pblock 2 (length 1) [ 334.925636][T14542] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 334.938981][T14542] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.4615: lblock 0 mapped to illegal pblock 48 (length 1) [ 334.965221][T14542] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 335.037989][T14542] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.4615: Failed to acquire dquot type 0 [ 335.083146][T14542] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 335.135362][T14542] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.4615: mark_inode_dirty error [ 335.170282][T14542] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 335.208349][T14542] EXT4-fs (loop5): 1 orphan inode deleted [ 335.214135][T14542] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 335.228258][ T2974] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.267378][ T2974] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 335.296589][ T2974] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 335.354219][T14542] EXT4-fs (loop5): unmounting filesystem. [ 335.363087][T14542] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.4615: Invalid inode table block 1 in block_group 0 [ 335.387668][T14542] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 335.399760][T14542] EXT4-fs error (device loop5): ext4_quota_off:7141: inode #3: comm syz.5.4615: mark_inode_dirty error [ 335.813838][T14591] loop5: detected capacity change from 0 to 2048 [ 335.899516][T14591] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 335.962608][T14591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.315598][T14618] loop1: detected capacity change from 0 to 256 [ 336.345298][T14618] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 336.528027][ T4256] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 336.728226][ T4256] usb 6-1: Using ep0 maxpacket: 8 [ 336.735795][ T4256] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 336.768272][ T4256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.802597][ T4256] usb 6-1: config 0 has no interface number 0 [ 336.814707][ T4256] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 336.824533][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.833199][ T4256] usb 6-1: Product: syz [ 336.837783][ T4256] usb 6-1: Manufacturer: syz [ 336.842929][ T4256] usb 6-1: SerialNumber: syz [ 336.859234][ T4256] usb 6-1: config 0 descriptor?? [ 337.074207][ T4256] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 337.084500][ T4256] usb 6-1: No valid video chain found. [ 337.250311][T14653] PM: Enabling pm_trace changes system date and time during resume. [ 337.250311][T14653] PM: Correct system time has to be restored manually after resume. [ 337.285684][ T4256] usb 6-1: USB disconnect, device number 8 [ 338.568993][ T4334] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.583766][T14683] loop2: detected capacity change from 0 to 32768 [ 338.638519][T14683] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 338.685996][T14683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 338.741448][T14683] (syz.2.4684,14683,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 338.758278][ T4334] usb 5-1: Using ep0 maxpacket: 32 [ 338.774337][ T4334] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 338.795973][ T4334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.807281][T14697] loop1: detected capacity change from 0 to 32768 [ 338.820136][T14697] resize option for remount only [ 338.853420][ T4334] usb 5-1: config 0 has no interface number 0 [ 338.893434][ T4334] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.959309][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 338.964451][ T4334] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 339.012730][ T4334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.038069][ T4334] usb 5-1: Product: syz [ 339.065307][ T4334] usb 5-1: Manufacturer: syz [ 339.075401][ T4334] usb 5-1: SerialNumber: syz [ 339.103263][ T4334] usb 5-1: config 0 descriptor?? [ 339.132396][ T4334] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 339.165494][ T4334] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 339.338116][ T4334] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 339.345505][ T4334] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 339.457484][T14733] netlink: 'syz.2.4706': attribute type 20 has an invalid length. [ 339.572357][ T4334] usb 5-1: USB disconnect, device number 23 [ 340.523605][T14773] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 340.577063][T14751] loop2: detected capacity change from 0 to 32768 [ 340.684997][T14751] XFS (loop2): Mounting V5 Filesystem [ 340.775756][T14792] loop4: detected capacity change from 0 to 256 [ 340.783113][T14792] exfat: Deprecated parameter 'utf8' [ 340.793172][T14792] exfat: Deprecated parameter 'utf8' [ 340.798673][T14792] exfat: Deprecated parameter 'utf8' [ 340.873049][T14792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 340.903005][T14751] XFS (loop2): Ending clean mount [ 341.005560][T14792] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 341.049079][T14792] exFAT-fs (loop4): Filesystem has been set read-only [ 341.089237][ T4273] XFS (loop2): Unmounting Filesystem [ 341.132740][T14801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.850277][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4750'. [ 341.877978][ T4334] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 341.902957][T14829] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 342.098001][ T4334] usb 2-1: Using ep0 maxpacket: 16 [ 342.105600][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.137105][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.147612][ T4334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.172590][T14821] loop5: detected capacity change from 0 to 32768 [ 342.172777][ T4334] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 342.198972][T14821] resize option for remount only [ 342.238246][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.268661][ T4334] usb 2-1: config 0 descriptor?? [ 342.301138][ T4334] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 342.339260][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.360971][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.403850][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.503998][T13039] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.546957][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.590027][T14817] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.630338][ T3623] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 342.640722][ T4334] usb 2-1: USB disconnect, device number 20 [ 342.769414][T14855] loop4: detected capacity change from 0 to 256 [ 342.839041][T14855] exfat: Deprecated parameter 'utf8' [ 342.847031][T14855] exfat: Deprecated parameter 'namecase' [ 342.878487][T14855] exfat: Deprecated parameter 'utf8' [ 342.900610][T14855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 342.974281][T14855] exFAT-fs (loop4): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 343.124327][T14866] loop2: detected capacity change from 0 to 4096 [ 343.184447][ T26] audit: type=1326 audit(1769207721.286:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 343.257065][T14866] ntfs: volume version 3.1. [ 343.271887][ T26] audit: type=1326 audit(1769207721.286:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 343.338947][ T5319] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 343.398035][ T26] audit: type=1326 audit(1769207721.326:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 343.406426][T14875] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 343.437964][ T26] audit: type=1326 audit(1769207721.326:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 343.568883][ T26] audit: type=1326 audit(1769207721.326:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17879acb9 code=0x7ffc0000 [ 343.592380][ T5319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 343.612378][ T5319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 343.647967][ T5319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 343.694180][ T5319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 343.742225][ T5319] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 343.765885][ T5319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.784010][T14887] netlink: 'syz.4.4780': attribute type 8 has an invalid length. [ 343.792256][ T5319] usb 6-1: config 0 descriptor?? [ 344.028282][ T5319] hdpvr 6-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 344.028282][ T5319] pY [ 344.242119][ T5319] hdpvr 6-1:0.0: device init failed [ 344.250443][ T5319] hdpvr: probe of 6-1:0.0 failed with error -12 [ 344.289399][ T5319] usb 6-1: USB disconnect, device number 9 [ 344.510433][T14907] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 344.536907][T14907] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 344.641960][T14916] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.032095][T14933] loop5: detected capacity change from 0 to 256 [ 345.069326][T14933] exfat: Deprecated parameter 'utf8' [ 345.074792][T14933] exfat: Deprecated parameter 'namecase' [ 345.096684][T14933] exfat: Deprecated parameter 'utf8' [ 345.163071][T14933] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 345.256666][T14933] exFAT-fs (loop5): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 345.482372][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4811'. [ 345.542168][T14948] netlink: 74 bytes leftover after parsing attributes in process `syz.2.4811'. [ 345.563084][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4813'. [ 345.791802][T14966] Cannot find map_set index 33 as target [ 345.896482][T14964] loop5: detected capacity change from 0 to 4096 [ 345.952167][T14964] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 345.997942][T14964] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 345.998529][T14973] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 346.075277][T14964] ntfs: volume version 3.1. [ 346.093921][T14973] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 346.098087][T14964] ntfs: (device loop5): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 346.153779][T14964] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 346.174835][T14964] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 346.687995][ T5080] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 346.751974][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.770136][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.790225][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.798865][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.842589][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.862932][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.891643][ T5080] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.901481][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.908575][ T5080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.918133][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.927761][ T5080] usb 5-1: Product: syz [ 346.932297][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.938850][ T5080] usb 5-1: Manufacturer: syz [ 346.948587][ T5080] usb 5-1: SerialNumber: syz [ 346.953212][T15001] netlink: 'syz.5.4837': attribute type 3 has an invalid length. [ 346.969882][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 346.983321][ T5080] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 347.018734][ T4256] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 347.097835][ T5080] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 347.208020][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 347.215451][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.257589][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.288595][ T4256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.336797][ T4256] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 347.366780][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.406173][ T4256] usb 3-1: config 0 descriptor?? [ 347.422335][ T4256] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 347.463442][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.491834][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.539002][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.544931][ T4256] usb 5-1: USB disconnect, device number 24 [ 347.570390][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.597695][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.625399][ T4260] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.648134][T15003] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 347.664740][ T7] usb 3-1: USB disconnect, device number 22 [ 347.665137][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 347.703655][ T3623] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 347.738458][ T5603] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 347.928238][ T5603] usb 2-1: Using ep0 maxpacket: 8 [ 347.937789][ T5603] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 347.963645][ T5603] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 347.982022][ T5603] usb 2-1: Product: syz [ 347.991485][ T5603] usb 2-1: Manufacturer: syz [ 347.999241][ T5603] usb 2-1: SerialNumber: syz [ 348.009105][ T5603] usb 2-1: config 0 descriptor?? [ 348.051663][ T5603] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 348.120889][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 348.138240][ T5080] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 348.160828][ T5080] ath9k_htc: Failed to initialize the device [ 348.207577][ T4256] usb 5-1: ath9k_htc: USB layer deinitialized [ 348.336115][T15056] loop5: detected capacity change from 0 to 4096 [ 348.404454][T15056] ntfs: volume version 3.1. [ 348.428191][ T5603] gspca_zc3xx: reg_r err -71 [ 348.434165][ T5603] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 348.466019][ T5603] usb 2-1: USB disconnect, device number 21 [ 348.562713][T15062] loop2: detected capacity change from 0 to 4096 [ 348.589865][T15062] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 348.843954][T15070] loop5: detected capacity change from 0 to 4096 [ 348.876127][T15070] __ntfs_error: 8 callbacks suppressed [ 348.876144][T15070] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 348.933088][T15076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 348.940382][T15076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.979996][T15070] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 349.014252][T15076] vhci_hcd vhci_hcd.0: Device attached [ 349.018688][T15070] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 349.075744][T15070] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 349.108338][T15070] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 349.113518][T15079] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 349.126029][T15079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.129276][T15070] ntfs: volume version 3.1. [ 349.155951][T15070] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 349.201132][T15079] vhci_hcd vhci_hcd.0: Device attached [ 349.215662][T15070] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 349.237946][T15080] vhci_hcd: connection closed [ 349.241587][ T75] vhci_hcd: stop threads [ 349.255789][T15077] vhci_hcd: connection closed [ 349.270032][ T75] vhci_hcd: release socket [ 349.288139][ T4334] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 349.290476][ T75] vhci_hcd: disconnect device [ 349.299577][T15078] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 349.310730][T15070] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 349.348267][T15070] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 349.360348][ T75] vhci_hcd: stop threads [ 349.364629][ T75] vhci_hcd: release socket [ 349.387827][ T75] vhci_hcd: disconnect device [ 349.418093][T15070] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 349.603172][T15099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4883'. [ 349.917131][T15111] loop4: detected capacity change from 0 to 1024 [ 349.935890][T15112] netlink: 920 bytes leftover after parsing attributes in process `syz.0.4889'. [ 350.067356][T15111] hfsplus: invalid extended attribute record [ 350.240259][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 350.254350][T15123] loop1: detected capacity change from 0 to 2048 [ 350.298578][T15123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.347950][ T4256] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.542908][ T4256] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.568166][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.576436][ T4256] usb 3-1: Product: syz [ 350.616880][ T4256] usb 3-1: Manufacturer: syz [ 350.626155][ T4256] usb 3-1: SerialNumber: syz [ 350.647765][ T4256] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 350.707041][ T4256] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.171830][ T5080] usb 3-1: USB disconnect, device number 23 [ 351.316315][T15161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4915'. [ 351.331822][T15163] tmpfs: Bad value for 'mpol' [ 351.390099][T15133] loop5: detected capacity change from 0 to 32768 [ 351.486235][T15133] XFS (loop5): Mounting V5 Filesystem [ 351.596950][T15181] device bond3 entered promiscuous mode [ 351.615653][T15133] XFS (loop5): Ending clean mount [ 351.622137][T15181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.793887][T15186] kernel read not supported for file / (pid: 15186 comm: syz.4.4922) [ 351.803651][ T8573] XFS (loop5): Unmounting Filesystem [ 351.818387][ T4256] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 351.836040][ T4256] ath9k_htc: Failed to initialize the device [ 351.856731][ T5080] usb 3-1: ath9k_htc: USB layer deinitialized [ 352.136220][T15199] loop1: detected capacity change from 0 to 512 [ 352.228470][T15199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 352.259457][T15199] ext4 filesystem being mounted at /1006/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.644638][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 352.718619][T15220] validate_nla: 45 callbacks suppressed [ 352.718639][T15220] netlink: 'syz.4.4937': attribute type 3 has an invalid length. [ 352.746088][T15220] netlink: 'syz.4.4937': attribute type 3 has an invalid length. [ 352.764671][T15224] SET target dimension over the limit! [ 352.775405][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4937'. [ 352.853788][T15226] loop5: detected capacity change from 0 to 256 [ 352.939713][T15226] FAT-fs (loop5): Directory bread(block 64) failed [ 352.960861][T15226] FAT-fs (loop5): Directory bread(block 65) failed [ 353.009322][T15226] FAT-fs (loop5): Directory bread(block 66) failed [ 353.016032][T15226] FAT-fs (loop5): Directory bread(block 67) failed [ 353.079163][T15226] FAT-fs (loop5): Directory bread(block 68) failed [ 353.113062][T15226] FAT-fs (loop5): Directory bread(block 69) failed [ 353.126816][T15226] FAT-fs (loop5): Directory bread(block 70) failed [ 353.154977][T15226] FAT-fs (loop5): Directory bread(block 71) failed [ 353.191665][T15226] FAT-fs (loop5): Directory bread(block 72) failed [ 353.211064][T15226] FAT-fs (loop5): Directory bread(block 73) failed [ 353.662734][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4958'. [ 353.896286][ T4256] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 353.958717][T15276] bridge0: port 3(dummy0) entered disabled state [ 353.994084][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.016865][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.079894][T15281] bridge0: port 3(netdevsim0) entered blocking state [ 354.094445][T15281] bridge0: port 3(netdevsim0) entered disabled state [ 354.106574][ T4256] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 354.129168][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.137571][T15281] device netdevsim0 entered promiscuous mode [ 354.152375][ T4256] usb 1-1: config 0 descriptor?? [ 354.161323][T15281] bridge0: port 3(netdevsim0) entered blocking state [ 354.168929][T15281] bridge0: port 3(netdevsim0) entered forwarding state [ 354.376732][ T4256] snd-usb-hiface: probe of 1-1:0.0 failed with error -22 [ 354.458160][ T47] Bluetooth: hci0: command 0x2016 tx timeout [ 354.468260][ T4334] vhci_hcd: vhci_device speed not set [ 354.578395][ T5318] usb 1-1: USB disconnect, device number 17 [ 354.788066][ T22] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 354.977915][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 354.984988][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.006837][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.031006][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.047931][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.073878][ T22] usb 5-1: config 0 descriptor?? [ 355.082366][T15301] loop5: detected capacity change from 0 to 32768 [ 355.092294][ T22] hub 5-1:0.0: USB hub found [ 355.140587][T15301] (syz.5.4976,15301,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=7, slot=0 [ 355.168177][T15301] (syz.5.4976,15301,0):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 355.213229][T15301] (syz.5.4976,15301,0):ocfs2_mount_volume:1815 ERROR: status = -22 [ 355.288598][T15301] (syz.5.4976,15301,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 355.317981][ T22] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 355.522884][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 355.537169][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 355.598747][ T22] usb 5-1: USB disconnect, device number 25 [ 355.676116][T15313] loop2: detected capacity change from 0 to 32768 [ 355.685671][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4992'. [ 355.935024][T15343] netlink: 'syz.1.4997': attribute type 2 has an invalid length. [ 355.978501][T15343] netlink: 'syz.1.4997': attribute type 1 has an invalid length. [ 356.040225][T15345] netlink: 'syz.5.4998': attribute type 12 has an invalid length. [ 356.091204][T15345] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 356.640447][T15371] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5010'. [ 357.293288][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 357.293303][ T26] audit: type=1326 audit(1769207735.396:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 357.330745][T15369] loop5: detected capacity change from 0 to 32768 [ 357.386238][T15369] ea_get: invalid extended attribute [ 357.399119][T15369] ffff88807048f230: 04 00 00 00 .... [ 357.420424][ T26] audit: type=1326 audit(1769207735.396:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 357.554585][ T26] audit: type=1326 audit(1769207735.436:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 357.635954][ T26] audit: type=1326 audit(1769207735.686:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 357.640489][T15407] loop2: detected capacity change from 0 to 136 [ 357.735067][ T26] audit: type=1326 audit(1769207735.706:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bfd9acb9 code=0x7ffc0000 [ 357.816862][ T4260] blk_print_req_error: 2 callbacks suppressed [ 357.816879][ T4260] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.549323][ T5318] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 358.739647][ T5318] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 358.772475][T15438] netlink: 'syz.2.5042': attribute type 3 has an invalid length. [ 358.773257][ T5318] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 358.799349][T15438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5042'. [ 358.828082][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.869790][ T5318] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 358.893750][T15440] loop4: detected capacity change from 0 to 64 [ 358.981915][T15421] loop5: detected capacity change from 0 to 32768 [ 359.098702][T15421] XFS (loop5): Mounting V5 Filesystem [ 359.271927][T15421] XFS (loop5): Ending clean mount [ 359.283837][T15460] Timeout policy `syz1' can only be used by L3 protocol number 33790 [ 359.387039][ T8573] XFS (loop5): Unmounting Filesystem [ 359.698529][T15469] loop4: detected capacity change from 0 to 8192 [ 359.733375][T15469] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 359.748263][T15469] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 359.800389][T15469] REISERFS (device loop4): using ordered data mode [ 359.808228][T15469] reiserfs: using flush barriers [ 359.815526][T15469] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.849336][T15469] REISERFS (device loop4): checking transaction log (loop4) [ 359.860333][T15477] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5058'. [ 359.870355][T15469] REISERFS (device loop4): Using r5 hash to sort names [ 359.898430][ T5318] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 359.905202][T15469] reiserfs: enabling write barrier flush mode [ 359.963531][T15479] netlink: 'syz.5.5053': attribute type 3 has an invalid length. [ 359.970641][T15469] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 360.006509][T15469] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 360.030673][T15469] REISERFS (device loop4): Remounting filesystem read-only [ 360.039825][T15469] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 360.091438][T15469] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 360.111445][ T5318] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 360.136502][ T5318] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 360.159874][ T5318] usb 2-1: USB disconnect, device number 22 [ 360.167085][T15469] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 360.208120][T15469] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 360.224599][T15469] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 360.270396][T15469] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 360.301373][T15469] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 360.348509][T15469] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 360.506562][ T4268] ------------[ cut here ]------------ [ 360.512212][ T4268] kernel BUG at fs/reiserfs/journal.c:1916! [ 360.535229][ T4268] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 360.541356][ T4268] CPU: 1 PID: 4268 Comm: syz-executor Not tainted syzkaller #0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 360.548917][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.558996][ T4268] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 360.564826][ T4268] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 360.584542][ T4268] RSP: 0018:ffffc90003f97b00 EFLAGS: 00010293 [ 360.590653][ T4268] RAX: ffffffff821b2332 RBX: 1ffff920007f2f64 RCX: ffff888029cc0000 [ 360.598637][ T4268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.606654][ T4268] RBP: ffffc90003f97bf8 R08: ffffc90003f97b77 R09: ffffc90003f97b40 [ 360.614665][ T4268] R10: dffffc0000000000 R11: fffff520007f2f6f R12: ffffc90003459000 [ 360.622737][ T4268] R13: dffffc0000000000 R14: ffff8880768b8678 R15: 0000000000000000 [ 360.630735][ T4268] FS: 00005555925fe500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 360.639693][ T4268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.646378][ T4268] CR2: 00002000000003c0 CR3: 000000005c815000 CR4: 00000000003506e0 [ 360.654364][ T4268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.662355][ T4268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.670348][ T4268] Call Trace: [ 360.673652][ T4268] [ 360.676587][ T4268] ? journal_release+0x30/0x30 [ 360.681383][ T4268] journal_release+0x1b/0x30 [ 360.685996][ T4268] reiserfs_put_super+0x267/0x510 [ 360.691043][ T4268] ? hook_inode_free_security+0xa0/0xa0 [ 360.696608][ T4268] ? evict_inodes+0x642/0x6a0 [ 360.701393][ T4268] ? reiserfs_dirty_inode+0x260/0x260 [ 360.706884][ T4268] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 360.712537][ T4268] ? reiserfs_dirty_inode+0x260/0x260 [ 360.717921][ T4268] generic_shutdown_super+0x130/0x340 [ 360.723300][ T4268] kill_block_super+0x7c/0xe0 [ 360.728016][ T4268] deactivate_locked_super+0x93/0xf0 [ 360.733315][ T4268] cleanup_mnt+0x42c/0x4b0 [ 360.737744][ T4268] ? lockdep_hardirqs_on+0x94/0x140 [ 360.742960][ T4268] task_work_run+0x1d0/0x260 [ 360.747568][ T4268] ? task_work_cancel+0x220/0x220 [ 360.752660][ T4268] ? exit_to_user_mode_loop+0x3b/0x110 [ 360.758147][ T4268] exit_to_user_mode_loop+0xe6/0x110 [ 360.763448][ T4268] exit_to_user_mode_prepare+0xee/0x180 [ 360.769014][ T4268] syscall_exit_to_user_mode+0x16/0x40 [ 360.774479][ T4268] do_syscall_64+0x58/0xa0 [ 360.778909][ T4268] ? clear_bhb_loop+0x60/0xb0 [ 360.783629][ T4268] ? clear_bhb_loop+0x60/0xb0 [ 360.788316][ T4268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.794223][ T4268] RIP: 0033:0x7fd17879bf17 [ 360.798662][ T4268] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 360.818368][ T4268] RSP: 002b:00007ffd8c4ecbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 360.826801][ T4268] RAX: 0000000000000000 RBX: 00007fd17880471f RCX: 00007fd17879bf17 [ 360.834788][ T4268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8c4ecc80 [ 360.842863][ T4268] RBP: 00007ffd8c4ecc80 R08: 00007ffd8c4edc80 R09: 00000000ffffffff [ 360.850938][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c4edd10 [ 360.858940][ T4268] R13: 00007fd17880471f R14: 0000000000057fbc R15: 00007ffd8c4edd50 [ 360.867026][ T4268] [ 360.870069][ T4268] Modules linked in: [ 360.873997][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.889606][ T4268] ---[ end trace 0000000000000000 ]--- [ 360.895336][ T4268] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 360.902836][ T4268] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 360.922658][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.930670][ T4268] RSP: 0018:ffffc90003f97b00 EFLAGS: 00010293 [ 360.936888][ T4268] RAX: ffffffff821b2332 RBX: 1ffff920007f2f64 RCX: ffff888029cc0000 [ 360.945505][ T4268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.957600][ T4268] RBP: ffffc90003f97bf8 R08: ffffc90003f97b77 R09: ffffc90003f97b40 [ 360.965816][ T4268] R10: dffffc0000000000 R11: fffff520007f2f6f R12: ffffc90003459000 [ 360.987879][ T4268] R13: dffffc0000000000 R14: ffff8880768b8678 R15: 0000000000000000 [ 360.995986][ T4268] FS: 00005555925fe500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 361.018171][ T4268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.024831][ T4268] CR2: 00002000000003c0 CR3: 000000005c815000 CR4: 00000000003506e0 [ 361.055480][ T4268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.077927][ T4268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.087376][ T4268] Kernel panic - not syncing: Fatal exception [ 361.093973][ T4268] Kernel Offset: disabled [ 361.098402][ T4268] Rebooting in 86400 seconds..