last executing test programs: 7m47.131540643s ago: executing program 1 (id=7232): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4b, &(0x7f0000000140)=""/133, &(0x7f0000000000)=0x85) 7m47.059561254s ago: executing program 1 (id=7233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newnexthop={0x38, 0x68, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x3}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1ff}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c8c5}, 0x0) 7m46.89007322s ago: executing program 1 (id=7235): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x82, 0x2}, @generic={0x7, 0xd, "091bf173c4fee367b50605"}]}}}], 0x40}, 0x20002800) 7m46.764262959s ago: executing program 1 (id=7237): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6164696e6963622c6164696e6963622c616e63686f723d30303030303030303030303030303030303030372c6c6f6e6761642c757466382c756e686964652c756e64656c6574652c696f636861727365743d757466380000000000000003636b3d31383434363734343037333730393535313630372c726f6f746469723d30303030303030303030303030303030303030362c6769643d666f726765742c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030312c6769643d666f726765742c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',bs=00000000000000035019,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000300)={[{@gid}]}) 7m46.193406665s ago: executing program 1 (id=7243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0xddc}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffe01}], 0x38) 7m45.5654586s ago: executing program 1 (id=7251): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0xf16) 7m45.29866532s ago: executing program 32 (id=7251): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0xf16) 3.83458506s ago: executing program 0 (id=14630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.641938038s ago: executing program 0 (id=14633): r0 = io_uring_setup(0x5978, &(0x7f0000000000)={0x0, 0x78bf, 0x1000, 0x1, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001f80)=[{0x0, 0x0, 0x0}, {0x0, 0x1, 0x0}], 0x2) 3.43288742s ago: executing program 0 (id=14638): pipe2$9p(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RATTACH(r0, 0x0, 0x0) 3.227522541s ago: executing program 0 (id=14643): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2008484, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x98, &(0x7f0000000200)="$eJzs0rEJwkAUBuBnCnUHCzdwB0cRS+2sFKsMY+cqjpANLNKKcPKiIEpakcD3wd3x/3fFFe9yO8+ijpjXEaVMy7287faHzWr73KPXqb9mMKqIWL5WzkDma4ZJ3o66N017XDftuDv//V8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IUqFt/5o3gEAAD//xMSIqg=") open(&(0x7f0000000000)='mnt\x00', 0x0, 0x11b) 2.6421986s ago: executing program 0 (id=14652): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) read(r0, &(0x7f0000000000)=""/51, 0x33) 2.4428506s ago: executing program 0 (id=14656): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0148c6db"]) 2.274938276s ago: executing program 4 (id=14657): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) preadv(r0, 0x0, 0x0, 0x1, 0xd) 2.003327046s ago: executing program 4 (id=14661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000200"}) 1.839758442s ago: executing program 4 (id=14665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xd07, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2882d, 0x60}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) 1.276614087s ago: executing program 3 (id=14669): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) 1.25533778s ago: executing program 4 (id=14670): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 1.119514941s ago: executing program 4 (id=14671): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 1.026384944s ago: executing program 3 (id=14673): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e00000000000000", 0x48}], 0x1) 991.71269ms ago: executing program 4 (id=14674): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$eJzs3M9vFFUcAPDvTH+BCEXEHyBqlZg0GltaUDl4UKOJMRiNesBjbRfSsFBDqxEkUozxZGJI9Ew8Gv0LvBkTop5MuBoPngwJUS6Ap5qZnaHLsgvUbtnS/XySad+bebPzvju/3ry3uwF0raGImI+IuyPi94gYjIikscBQ7d/liycmr1w8MZnEwsLbfyd5uUsXT0yWRfP1eiM2FJnhNCL9LKmt3GD22PFDE9Vq5WiRH507/P7o7LHjT394eOJg5WDlyPjevXt2jz337PgzbYkzi+vS9k9mdmx79d3Tr0/uP/3eL98nRdzREEe7DGWB/7OQa1z2RLs31mEb69JJbwcrwpL01E7Z6MvP/8HoicWdNxivfNrRygErKrs3DbRePL8ArGHJW2cXLwVAFylv9NnzbzndjnbHanHhxdoDUBb35WKqLemNtCjT1/B8205DEbF//t8z2RQr1A8BAFDvi8mv9/VHxMdXvnsta3sMRkTZH3R//vfP/O+mYgxlc0TcExFbIuLeiNgaEfcVZR+IiAeXWZ/r2z/p+WW+5A1l7b/ni7Gta9t/ZesvNvcUuY15/H3JgelqZVcM5O/JcPQNZPmxG2zjx5fPfdlqWX37L5uy7ZdtwaIe53sbOuimJuYm8kZpG1w4FbG9t1n8ydWRgCQitkXE9qW99KYyMf3ktztaFWoe/6Uzt7SFNowzLXyThTefxT8fDfGXkvrxyenrxidH10W1smu0dlQ08+tvn7/Zavs33/8r60Kl9r9u/zcW2ZzUj9fOtnf7//P4T/uTd/Jx5v5i3kcTc3NHxyL6k315/pr544vrlvmyfHb8D+9sfv5vKdbJ4n8oIrKD+OGIeCQiHi3q/lhEPB4RO28Q488v3Tz+SDu0/09FTDW9/l09/hv2/9ITPYfO/tBq+7e2//fkqeFiTn79u4lm1ckuF40VXM57BwAAAHeKNP8MfJKOXE2n6chI7TP8W+OutDozO/fUgZkPjkzFuU21/s+07OkaLPpDq9PVylgyX7xirX90vOgrLvtLdxf9xl/1rM/zI5Mz1akOxw7dbkOL8z/zV0+nawessPVN54733/aKAB3QOI6eLiYHIuLkG+FiAGuV72tD9yrP/xbP+/XfgwHWGPd/6F7Nzv+TDXljAbA2uf9D93L+Q5dKf1rGyp4K4E7n/g9daTnf61/BxLrVUY3OJFbrTskTEWUibVnmj+KXGlZLnZeaeKH4cczVUp+OJDp9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wIAAP//TR7jdg==") 885.517436ms ago: executing program 3 (id=14675): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x9b3b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) 742.484417ms ago: executing program 3 (id=14677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 610.527298ms ago: executing program 3 (id=14679): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) epoll_create1(0x0) 534.322919ms ago: executing program 3 (id=14680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 499.837004ms ago: executing program 2 (id=14681): r0 = timerfd_create(0x0, 0x80000) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) 419.349797ms ago: executing program 2 (id=14682): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x7, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}], 0x1, 0x4000000) 292.573716ms ago: executing program 2 (id=14683): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x0, '\x00', @p_u16=0x0}}) 163.426825ms ago: executing program 2 (id=14684): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4f24, 0x0, @mcast1}, 0x1c) 65.81711ms ago: executing program 2 (id=14685): r0 = fanotify_init(0x8, 0x1) fanotify_mark(r0, 0x279, 0x8000038, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=14686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002520702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.12782 (1803) [ 1072.092936][ T1803] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1072.121385][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12794'. [ 1072.133940][ T1803] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1072.160713][ T1803] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1072.190840][ T1803] BTRFS info (device loop3): use lzo compression, level 0 [ 1072.202067][ T1803] BTRFS info (device loop3): using free space tree [ 1072.217615][ T1827] bond5: option arp_interval: invalid value (18446744073356424202) [ 1072.299617][ T1827] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1072.327452][ T1827] bond5 (unregistering): Released all slaves [ 1072.391444][ T1803] BTRFS info (device loop3): enabling ssd optimizations [ 1072.399924][ T1803] BTRFS info (device loop3): auto enabling async discard [ 1072.549245][ T1853] netlink: 'syz.0.12799': attribute type 21 has an invalid length. [ 1072.557334][ T1853] netlink: 'syz.0.12799': attribute type 1 has an invalid length. [ 1072.668085][ T1853] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12799'. [ 1072.858724][ T5780] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1073.366727][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 1073.366746][ T27] audit: type=1326 audit(1700008379.325:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.3.12807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1073.479913][ T27] audit: type=1326 audit(1700008379.325:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.3.12807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1073.606732][ T27] audit: type=1326 audit(1700008379.362:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.3.12807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1073.726678][ T27] audit: type=1326 audit(1700008379.362:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.3.12807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1073.896168][ T27] audit: type=1326 audit(1700008379.362:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.3.12807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1074.215050][ T1896] loop3: detected capacity change from 0 to 512 [ 1074.254048][ T1896] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1074.273044][ T1896] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1074.306782][ T1896] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1074.343837][ T1896] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1074.381115][ T1896] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1074.432053][ T1896] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.12819: bg 0: block 15: invalid block bitmap [ 1074.463440][ T1896] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1074.483045][ T1896] EXT4-fs (loop3): 1 truncate cleaned up [ 1074.499603][ T1896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1074.571625][ T1896] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.12819: bad symlink. [ 1075.034000][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.430208][ T1917] netlink: 'syz.3.12829': attribute type 28 has an invalid length. [ 1075.463726][ T1917] netlink: 'syz.3.12829': attribute type 29 has an invalid length. [ 1075.473661][ T1917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12829'. [ 1075.745719][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12836'. [ 1076.309270][ T1951] comedi comedi4: bad chanlist[0]=0x0000c000 chan=49152 range length=2 [ 1076.691565][ T1963] netlink: 'syz.0.12852': attribute type 11 has an invalid length. [ 1076.746042][ T27] audit: type=1326 audit(1700008382.442:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1966 comm="syz.2.12854" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1076.853347][ T27] audit: type=1326 audit(1700008382.442:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1966 comm="syz.2.12854" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1076.950914][ T27] audit: type=1326 audit(1700008382.488:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1966 comm="syz.2.12854" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1077.039787][ T27] audit: type=1326 audit(1700008382.488:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1966 comm="syz.2.12854" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1078.629736][ T2035] netlink: 'syz.0.12886': attribute type 1 has an invalid length. [ 1078.653296][ T2035] netlink: 'syz.0.12886': attribute type 3 has an invalid length. [ 1079.040557][ T2047] loop2: detected capacity change from 0 to 2048 [ 1079.046517][ T2050] netlink: 'syz.0.12894': attribute type 2 has an invalid length. [ 1079.065323][ T2050] netlink: 'syz.0.12894': attribute type 11 has an invalid length. [ 1079.073317][ T2050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1079.073472][ T2047] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 1079.191681][ T2054] netlink: 'syz.3.12896': attribute type 13 has an invalid length. [ 1079.210137][ T2047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1079.354996][ T2056] loop4: detected capacity change from 0 to 512 [ 1079.405166][ T2056] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.12897: bad orphan inode 15 [ 1079.444016][ T2054] gretap0: refused to change device tx_queue_len [ 1079.489712][ T2054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1079.491173][ T2056] ext4_test_bit(bit=14, block=5) = 0 [ 1079.649120][ T2056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.713814][ T2056] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1079.758374][ T2056] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.12897: bit already cleared for inode 13 [ 1079.937144][T21831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.989956][ T2071] netlink: 'syz.0.12903': attribute type 1 has an invalid length. [ 1080.018535][ T2071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12903'. [ 1080.148293][ T2077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12904'. [ 1080.287857][ T2081] netlink: 'syz.0.12908': attribute type 29 has an invalid length. [ 1080.312215][ T2081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12908'. [ 1080.336547][ T2081] netlink: 'syz.0.12908': attribute type 29 has an invalid length. [ 1080.355572][ T2081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12908'. [ 1080.626078][ T2095] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1080.749941][ T2097] tmpfs: Group quota block hardlimit too large. [ 1081.524266][ T2129] overlayfs: missing 'lowerdir' [ 1082.545588][ T2137] loop2: detected capacity change from 0 to 32768 [ 1082.572815][ T2137] JBD2: Ignoring recovery information on journal [ 1082.589211][ T2162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12948'. [ 1082.661582][ T2137] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1082.796896][ T2137] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 1082.845644][ T2137] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1082.868204][ T2137] OCFS2: File system is now read-only. [ 1082.883851][ T2137] (syz.2.12937,2137,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 1082.918576][ T2137] (syz.2.12937,2137,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 1082.966326][ T2137] (syz.2.12937,2137,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 1082.995279][ T2137] (syz.2.12937,2137,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1083.019221][ T2137] (syz.2.12937,2137,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1083.040075][ T2137] (syz.2.12937,2137,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1083.060287][ T2137] (syz.2.12937,2137,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1083.078850][ T2137] (syz.2.12937,2137,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1083.090700][ T2137] (syz.2.12937,2137,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1083.103475][ T2137] (syz.2.12937,2137,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1083.116579][ T2137] (syz.2.12937,2137,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1083.126237][ T2137] (syz.2.12937,2137,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1083.143139][ T2137] (syz.2.12937,2137,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 1083.152637][ T2137] (syz.2.12937,2137,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 1083.165210][ T2137] (syz.2.12937,2137,1):ocfs2_symlink:1921 ERROR: status = -30 [ 1083.173814][ T2137] (syz.2.12937,2137,1):ocfs2_symlink:2075 ERROR: status = -30 [ 1083.339538][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 1084.141521][ T2191] SET target dimension over the limit! [ 1084.712688][ T2207] loop0: detected capacity change from 0 to 512 [ 1084.748742][ T2207] EXT4-fs: Ignoring removed mblk_io_submit option [ 1084.836820][ T2177] loop4: detected capacity change from 0 to 32768 [ 1085.051191][ T2207] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1085.057919][ T2207] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1085.625156][ T5830] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1085.649377][ T2207] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.12968: attempt to clear invalid blocks 2 len 1 [ 1085.699859][ T2059] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1085.713123][ T2207] EXT4-fs (loop0): Remounting filesystem read-only [ 1085.721175][ T2207] EXT4-fs (loop0): 1 truncate cleaned up [ 1085.745747][ T2207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1085.841962][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1085.873302][ T5830] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1085.908888][ T5830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.921757][ T2224] netlink: 632 bytes leftover after parsing attributes in process `syz.3.12977'. [ 1085.948237][ T5830] usb 3-1: config 1 has no interface number 0 [ 1085.965013][ T5830] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1085.986653][ T5830] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.012463][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.027564][ T5830] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1086.050360][ T5830] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1086.069578][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1086.077895][ T5830] usb 3-1: Product: syz [ 1086.088846][ T5830] usb 3-1: Manufacturer: syz [ 1086.099983][ T5830] usb 3-1: SerialNumber: syz [ 1086.201088][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12971'. [ 1086.386688][ T5830] aqc111: probe of 3-1:1.105 failed with error -22 [ 1086.600984][ T173] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1086.658967][ T5830] usb 3-1: USB disconnect, device number 68 [ 1086.721051][ T2238] loop4: detected capacity change from 0 to 4096 [ 1086.740395][ T2238] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1086.896824][ T173] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1086.917094][ T173] usb 1-1: not running at top speed; connect to a high speed hub [ 1086.997256][ T173] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 1087.012839][ T173] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.121270][ T173] usb 1-1: config 5 has no interface number 0 [ 1087.208038][ T173] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 196, setting to 64 [ 1087.240534][ T173] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.273068][ T173] usb 1-1: config 5 interface 246 has no altsetting 0 [ 1087.293977][ T173] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1087.316435][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.336114][ T173] usb 1-1: Product: syz [ 1087.346604][ T173] usb 1-1: Manufacturer: syz [ 1087.433689][ T2251] netlink: 'syz.3.12988': attribute type 11 has an invalid length. [ 1087.435801][ T173] usb 1-1: SerialNumber: syz [ 1087.457484][ T2251] netlink: 'syz.3.12988': attribute type 5 has an invalid length. [ 1087.533531][ T2229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1087.918380][ T2265] veth2: entered promiscuous mode [ 1087.942454][ T2265] veth2: entered allmulticast mode [ 1087.962540][ T173] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1088.003886][ T48] usb 1-1: Failed to submit usb control message: -71 [ 1088.015073][ T173] usb 1-1: USB disconnect, device number 73 [ 1088.028405][ T48] usb 1-1: unable to send the bmi data to the device: -71 [ 1088.037916][ T48] usb 1-1: unable to get target info from device [ 1088.044720][ T48] usb 1-1: could not get target info (-71) [ 1088.050825][ T48] usb 1-1: could not probe fw (-71) [ 1088.393663][ T2279] CIFS mount error: No usable UNC path provided in device string! [ 1088.393663][ T2279] [ 1088.406090][ T2279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1088.787837][ T2294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13008'. [ 1089.122018][ T2301] block device autoloading is deprecated and will be removed. [ 1089.154460][ T2301] syz.2.13011: attempt to access beyond end of device [ 1089.154460][ T2301] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1090.009819][ T2339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13029'. [ 1091.393254][ T5830] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1091.585173][ T2364] loop3: detected capacity change from 0 to 32768 [ 1091.617813][ T5830] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1091.641958][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.681402][ T2364] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1091.695256][ T5830] usb 3-1: Product: syz [ 1091.707665][ T5830] usb 3-1: Manufacturer: syz [ 1091.712382][ T5830] usb 3-1: SerialNumber: syz [ 1091.769246][ T5830] usb 3-1: config 0 descriptor?? [ 1092.020116][ T2364] XFS (loop3): Ending clean mount [ 1092.090930][ T5830] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1092.108846][ T5830] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1092.126368][ T5830] usb 3-1: USB disconnect, device number 69 [ 1092.252891][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1092.410333][ T2417] afs: Bad value for 'source' [ 1092.568221][ T2419] netlink: zone id is out of range [ 1092.722912][ T2423] netlink: 'syz.3.13059': attribute type 5 has an invalid length. [ 1093.494007][ T2465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13078'. [ 1093.599520][ T2467] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.13079'. [ 1094.050970][ T2492] PM: Enabling pm_trace changes system date and time during resume. [ 1094.050970][ T2492] PM: Correct system time has to be restored manually after resume. [ 1094.369694][ T27] audit: type=1326 audit(1700008398.693:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.454637][ T27] audit: type=1326 audit(1700008398.693:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.537472][ T27] audit: type=1326 audit(1700008398.693:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.561726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.635826][ T27] audit: type=1326 audit(1700008398.730:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.745594][ T27] audit: type=1326 audit(1700008398.730:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.819292][ T27] audit: type=1326 audit(1700008398.730:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1094.933298][ T27] audit: type=1326 audit(1700008398.730:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1095.040010][ T27] audit: type=1326 audit(1700008398.730:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1095.133946][ T27] audit: type=1326 audit(1700008398.730:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2501 comm="syz.2.13093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1095.158191][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.432758][ T2491] loop0: detected capacity change from 0 to 32768 [ 1095.473630][ T2491] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.13088 (2491) [ 1095.521506][ T2491] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1095.535175][ T5830] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1095.544228][ T2491] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1095.589463][ T2491] BTRFS info (device loop0): turning off barriers [ 1095.596375][ T2491] BTRFS info (device loop0): enabling auto defrag [ 1095.621632][ T2491] BTRFS info (device loop0): force zlib compression, level 3 [ 1095.643006][ T2491] BTRFS info (device loop0): enabling ssd optimizations [ 1095.666633][ T2491] BTRFS info (device loop0): using spread ssd allocation scheme [ 1095.674414][ T2491] BTRFS info (device loop0): using free space tree [ 1095.735774][ T2516] loop2: detected capacity change from 0 to 32768 [ 1095.749985][ T5830] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1095.762682][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.790902][ T5830] usb 4-1: config 0 has no interface number 0 [ 1095.810105][ T5830] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1095.833899][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.844841][ T5830] usb 4-1: Product: syz [ 1095.849087][ T5830] usb 4-1: Manufacturer: syz [ 1095.866727][ T5830] usb 4-1: SerialNumber: syz [ 1095.897868][ T5830] usb 4-1: config 0 descriptor?? [ 1096.110178][ T2491] BTRFS info (device loop0: state M): not using spread ssd allocation scheme [ 1096.119102][ T2491] BTRFS info (device loop0: state M): using spread ssd allocation scheme [ 1096.272997][ T173] usb 4-1: USB disconnect, device number 77 [ 1096.282509][ T5778] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1096.896716][ T2571] x_tables: unsorted underflow at hook 3 [ 1097.460663][ T2583] loop2: detected capacity change from 0 to 164 [ 1097.579749][ T2583] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1098.154597][ T27] audit: type=1326 audit(1700008402.189:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2619 comm="syz.0.13130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3339e159 code=0x7ffc0000 [ 1098.331319][ T2626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1098.357909][ T2628] blktrace: Concurrent blktraces are not allowed on sg0 [ 1098.380149][ T2626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1098.990666][ T2658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13146'. [ 1099.027143][ T2660] netlink: 'syz.2.13148': attribute type 19 has an invalid length. [ 1099.058567][ T2660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13148'. [ 1099.996303][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1099.996320][ T27] audit: type=1326 audit(1700008403.886:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2705 comm="syz.4.13167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1100.092314][ T27] audit: type=1326 audit(1700008403.886:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2705 comm="syz.4.13167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1100.186221][ T27] audit: type=1326 audit(1700008403.923:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2705 comm="syz.4.13167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1100.287616][ T27] audit: type=1326 audit(1700008403.923:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2705 comm="syz.4.13167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1100.370400][ T27] audit: type=1326 audit(1700008403.932:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.478805][ T27] audit: type=1326 audit(1700008403.932:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.553217][ T2731] netlink: 'syz.3.13177': attribute type 24 has an invalid length. [ 1100.575749][ T27] audit: type=1326 audit(1700008403.941:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.663115][ T27] audit: type=1326 audit(1700008403.941:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.804105][ T27] audit: type=1326 audit(1700008403.941:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.842943][ T2737] netlink: 'syz.4.13179': attribute type 2 has an invalid length. [ 1100.873094][ T2737] netlink: 'syz.4.13179': attribute type 4 has an invalid length. [ 1100.901904][ T2737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13179'. [ 1100.923457][ T27] audit: type=1326 audit(1700008403.941:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2706 comm="syz.3.13166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1100.947678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.358352][ T2760] netlink: 'syz.2.13187': attribute type 1 has an invalid length. [ 1101.541424][ T173] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1101.687808][ T2772] loop2: detected capacity change from 0 to 256 [ 1101.747296][ T173] usb 5-1: Using ep0 maxpacket: 32 [ 1101.808421][ T173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1101.827499][ T173] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1101.856486][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.864860][ T173] usb 5-1: Product: syz [ 1101.909912][ T173] usb 5-1: Manufacturer: syz [ 1101.914599][ T173] usb 5-1: SerialNumber: syz [ 1102.087775][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13197'. [ 1102.239502][ T173] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1102.248756][ T2795] loop0: detected capacity change from 0 to 256 [ 1102.256697][ T2795] exfat: Deprecated parameter 'utf8' [ 1102.278682][ T173] usb 5-1: unit 0 not found! [ 1102.293911][ T2795] exfat: Deprecated parameter 'namecase' [ 1102.354542][ T2795] exfat: Deprecated parameter 'namecase' [ 1102.360349][ T2795] exfat: Deprecated parameter 'namecase' [ 1102.387144][ T173] usb 5-1: USB disconnect, device number 24 [ 1102.492428][ T2796] udevd[2796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.659502][ T2795] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1103.862014][T26841] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1103.903988][ T2857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13223'. [ 1104.018111][ T2861] loop3: detected capacity change from 0 to 512 [ 1104.027714][ T2861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1104.034416][ T2861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1104.069888][ T2861] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1104.078859][T26841] usb 3-1: Using ep0 maxpacket: 16 [ 1104.111324][T26841] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1104.137862][T26841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.151921][T26841] usb 3-1: Product: syz [ 1104.164053][T26841] usb 3-1: Manufacturer: syz [ 1104.175836][T26841] usb 3-1: SerialNumber: syz [ 1104.190810][T26841] usb 3-1: config 0 descriptor?? [ 1104.215562][T26841] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1104.222428][ T2170] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1104.425293][ T2170] usb 5-1: Using ep0 maxpacket: 32 [ 1104.432147][ T2861] EXT4-fs (loop3): 1 truncate cleaned up [ 1104.450410][ T2170] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 1104.459324][ T2170] usb 5-1: config 4 has no interface number 0 [ 1104.465837][ T2170] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.478331][ T2170] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.489495][ T2170] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1104.505086][ T2170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.544915][ T2170] hub 5-1:4.128: USB hub found [ 1104.565006][ T2861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.577816][T26841] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 1104.586115][T26841] visor: probe of 3-1:0.0 failed with error -5 [ 1104.700293][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.808016][ T2170] hub 5-1:4.128: 19 ports detected [ 1104.827312][ T2170] hub 5-1:4.128: Using single TT (err -22) [ 1104.844833][ T2170] hub 5-1:4.128: insufficient power available to use all downstream ports [ 1104.854403][T26841] usb 3-1: USB disconnect, device number 70 [ 1105.027550][ T2170] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 1105.043830][ T2170] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 1105.106901][ T2170] usb 5-1: USB disconnect, device number 25 [ 1105.272490][ T2874] loop0: detected capacity change from 0 to 1024 [ 1106.378330][ T2170] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1106.655967][ T2170] usb 4-1: not running at top speed; connect to a high speed hub [ 1106.696502][ T2170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.734687][ T2170] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1106.743965][ T2170] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1106.806577][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.865377][ T2170] uvcvideo 4-1:1.0: Found Unit with invalid ID 0 [ 1107.029911][ T2916] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13250'. [ 1107.163399][ T2170] usb 4-1: string descriptor 0 read error: -71 [ 1107.185954][ T2170] usb 4-1: Found UVC 0.00 device (046d:0825) [ 1107.212872][ T2170] usb 4-1: No streaming interface found for terminal 2. [ 1107.256781][ T2170] usb 4-1: USB disconnect, device number 78 [ 1107.408925][ T2924] loop0: detected capacity change from 0 to 2048 [ 1107.520713][ T2924] NILFS (loop0): invalid segment: Magic number mismatch [ 1107.536829][ T2924] NILFS (loop0): trying rollback from an earlier position [ 1107.584864][ T2924] NILFS (loop0): recovery complete [ 1107.615224][ T2928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.611304][ T2945] loop0: detected capacity change from 0 to 2048 [ 1108.756182][ T2945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.152372][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1111.440199][ T3012] netlink: 'syz.0.13297': attribute type 3 has an invalid length. [ 1111.448118][ T3012] netlink: 'syz.0.13297': attribute type 1 has an invalid length. [ 1111.483146][ T3012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13297'. [ 1111.505000][ T23] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1111.746045][ T23] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1111.766234][ T23] usb 5-1: config 0 has no interface number 0 [ 1111.772552][ T23] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1111.827893][ T23] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1111.854805][ T23] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1111.876003][ T3022] kAFS: unable to lookup cell '.' [ 1111.877361][ T23] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1111.901452][ T23] usb 5-1: Manufacturer: syz [ 1111.921532][ T23] usb 5-1: SerialNumber: syz [ 1111.942442][ T23] usb 5-1: config 0 descriptor?? [ 1112.178531][ T23] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1112.185900][ T23] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 1112.232121][ T23] usb 5-1: USB disconnect, device number 26 [ 1112.383050][ T173] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1112.623483][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1112.633627][ T173] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1112.664789][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1112.685714][ T173] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1112.707649][ T173] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1112.729433][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.757751][ T173] usb 1-1: config 0 descriptor?? [ 1113.013420][ T173] hdpvr 1-1:0.0: firmware version 0x7e dated M8 9 >S|hnBk矉?qC$F [ 1113.044901][ T173] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1113.222125][ T173] hdpvr 1-1:0.0: device init failed [ 1113.233037][ T173] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1113.261920][ T173] usb 1-1: USB disconnect, device number 74 [ 1113.716926][ T23] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1113.830710][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1113.830729][ T27] audit: type=1400 audit(1700008416.642:4163): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1113.846939][ T3056] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptf%_cipher=aes] [ 1114.038514][ T23] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1114.052571][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.085024][ T23] usb 5-1: Product: syz [ 1114.089275][ T23] usb 5-1: Manufacturer: syz [ 1114.093916][ T23] usb 5-1: SerialNumber: syz [ 1114.142655][ T23] usb 5-1: config 0 descriptor?? [ 1114.173952][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 1114.193530][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 1114.200459][ T23] f81232 5-1:0.0: f81534a converter detected [ 1114.341328][ T3056] Could not find key with description: [0123456789abcdef] [ 1114.394870][ T3056] process_request_key_err: No key [ 1114.400981][ T23] usb 5-1: f81534a converter now attached to ttyUSB0 [ 1114.422442][ T3056] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 1114.497179][ T3056] One or more global auth toks could not properly register; rc = [-2] [ 1114.545247][ T3056] Error parsing options; rc = [-2] [ 1114.629383][ T27] audit: type=1326 audit(1700008417.389:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3070 comm="syz.3.13326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1114.735524][ T27] audit: type=1326 audit(1700008417.389:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3070 comm="syz.3.13326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1114.830723][ T27] audit: type=1326 audit(1700008417.426:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3070 comm="syz.3.13326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1114.856232][ T23] usb 5-1: USB disconnect, device number 27 [ 1114.888060][ T23] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1114.896677][ T23] f81232 5-1:0.0: device disconnected [ 1114.949479][ T27] audit: type=1326 audit(1700008417.426:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3070 comm="syz.3.13326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1115.051586][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13329'. [ 1115.563290][ T3094] netlink: 798 bytes leftover after parsing attributes in process `syz.0.13337'. [ 1115.877956][ T3106] xt_ipcomp: unknown flags 12 [ 1115.927559][ T3108] netlink: 'syz.0.13344': attribute type 20 has an invalid length. [ 1116.084611][ T3110] cgroup: none used incorrectly [ 1116.713250][ T3129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13353'. [ 1117.164684][ T3113] loop4: detected capacity change from 0 to 32768 [ 1117.260551][ T3113] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1117.291497][ T3145] syz.2.13359: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1117.408913][ T3113] XFS (loop4): Ending clean mount [ 1117.467631][ T3145] CPU: 1 PID: 3145 Comm: syz.2.13359 Not tainted syzkaller #0 [ 1117.475184][ T3145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1117.485300][ T3145] Call Trace: [ 1117.488629][ T3145] [ 1117.491607][ T3145] dump_stack_lvl+0x18c/0x250 [ 1117.496354][ T3145] ? show_regs_print_info+0x20/0x20 [ 1117.501625][ T3145] ? load_image+0x420/0x420 [ 1117.506187][ T3145] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1117.512679][ T3145] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1117.519263][ T3145] warn_alloc+0x246/0x340 [ 1117.523650][ T3145] ? _end+0x67dda14a/0x0 [ 1117.527948][ T3145] ? zone_watermark_ok_safe+0x230/0x230 [ 1117.533563][ T3145] ? _end+0x67dda14a/0x0 [ 1117.537882][ T3145] __vmalloc_node_range+0x129/0x1320 [ 1117.543246][ T3145] ? __mutex_trylock_common+0x160/0x270 [ 1117.548856][ T3145] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1117.555073][ T3145] ? rcu_is_watching+0x15/0xb0 [ 1117.559895][ T3145] ? trace_contention_end+0x39/0xe0 [ 1117.565147][ T3145] ? __mutex_lock+0x30d/0xc80 [ 1117.569970][ T3145] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1117.575704][ T3145] ? free_vm_area+0x50/0x50 [ 1117.580283][ T3145] ? dvb_demux_do_ioctl+0x317/0x530 [ 1117.585536][ T3145] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1117.591063][ T3145] ? mutex_lock_nested+0x20/0x20 [ 1117.596076][ T3145] ? _end+0x67dda14a/0x0 [ 1117.600402][ T3145] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1117.606283][ T3145] vmalloc+0x79/0x90 [ 1117.610255][ T3145] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1117.616135][ T3145] ? _end+0x67dda14a/0x0 [ 1117.620432][ T3145] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1117.626142][ T3145] dvb_demux_do_ioctl+0x454/0x530 [ 1117.631241][ T3145] ? _end+0x67dda14a/0x0 [ 1117.635539][ T3145] ? _end+0x67dda14a/0x0 [ 1117.639834][ T3145] dvb_usercopy+0x195/0x2b0 [ 1117.644407][ T3145] ? _end+0x67dda14a/0x0 [ 1117.648709][ T3145] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1117.654320][ T3145] ? dvb_generic_ioctl+0xb0/0xb0 [ 1117.659336][ T3145] ? _end+0x67dda14a/0x0 [ 1117.663633][ T3145] ? _end+0x67dda14a/0x0 [ 1117.667933][ T3145] ? dvb_demux_poll+0x210/0x210 [ 1117.672875][ T3145] ? _end+0x67dda14a/0x0 [ 1117.677172][ T3145] dvb_demux_ioctl+0x29/0x30 [ 1117.681832][ T3145] __se_sys_ioctl+0xfd/0x170 [ 1117.686497][ T3145] do_syscall_64+0x55/0xb0 [ 1117.690983][ T3145] ? clear_bhb_loop+0x40/0x90 [ 1117.695820][ T3145] ? clear_bhb_loop+0x40/0x90 [ 1117.700573][ T3145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.706536][ T3145] RIP: 0033:0x7fcf7af9e159 [ 1117.711008][ T3145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.730682][ T3145] RSP: 002b:00007fcf7bde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.739167][ T3145] RAX: ffffffffffffffda RBX: 00007fcf7b225fa0 RCX: 00007fcf7af9e159 [ 1117.747202][ T3145] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 1117.755232][ T3145] RBP: 00007fcf7b03506b R08: 0000000000000000 R09: 0000000000000000 [ 1117.763258][ T3145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.771276][ T3145] R13: 00007fcf7b226038 R14: 00007fcf7b225fa0 R15: 00007ffeaf9b2cf8 [ 1117.779318][ T3145] ? _end+0x67dda14a/0x0 [ 1117.783634][ T3145] [ 1117.949781][ T3145] Mem-Info: [ 1117.957285][T21831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1118.042469][ T3145] active_anon:17218 inactive_anon:6 isolated_anon:0 [ 1118.042469][ T3145] active_file:15858 inactive_file:41606 isolated_file:0 [ 1118.042469][ T3145] unevictable:768 dirty:367 writeback:0 [ 1118.042469][ T3145] slab_reclaimable:12527 slab_unreclaimable:102620 [ 1118.042469][ T3145] mapped:24729 shmem:11525 pagetables:704 [ 1118.042469][ T3145] sec_pagetables:0 bounce:0 [ 1118.042469][ T3145] kernel_misc_reclaimable:0 [ 1118.042469][ T3145] free:1308128 free_pcp:17698 free_cma:0 [ 1118.150679][ T3145] Node 0 active_anon:54704kB inactive_anon:24kB active_file:58700kB inactive_file:165924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:1464kB writeback:0kB shmem:30396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11268kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no [ 1118.187165][ T3145] Node 1 active_anon:10904kB inactive_anon:0kB active_file:4732kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:12440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1118.283477][ T3163] IPv6: sit2: Disabled Multicast RS [ 1118.303697][ T3145] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.421364][ T3145] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1118.427500][ T3145] Node 0 DMA32 free:1387856kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:46176kB inactive_anon:24kB active_file:58700kB inactive_file:165100kB unevictable:1536kB writepending:1476kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:13360kB local_pcp:6748kB free_cma:0kB [ 1118.536652][ T3145] lowmem_reserve[]: 0 0 0 0 0 [ 1118.554361][ T3169] loop0: detected capacity change from 0 to 16 [ 1118.573552][ T3145] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.606294][ T3169] erofs: (device loop0): mounted with root inode @ nid 36. [ 1118.743906][ T3145] lowmem_reserve[]: 0 0 0 0 0 [ 1118.768490][ T3145] Node 1 Normal free:3856348kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:6584kB inactive_anon:0kB active_file:4732kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:47172kB local_pcp:34480kB free_cma:0kB [ 1118.920428][ T3145] lowmem_reserve[]: 0 0 0 0 0 [ 1118.925272][ T3145] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1119.089753][ T3145] Node 0 DMA32: 2037*4kB (UME) 1200*8kB (UME) 294*16kB (UM) 297*32kB (UME) 126*64kB (UME) 157*128kB (UM) 85*256kB (UME) 44*512kB (UME) 38*1024kB (UM) 7*2048kB (UME) 300*4096kB (UM) = 1386452kB [ 1119.171318][ T3145] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1119.183671][ T2170] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1119.224085][ T3145] Node 1 Normal: 199*4kB (UME) 138*8kB (UME) 121*16kB (UME) 299*32kB (UME) 165*64kB (UME) 69*128kB (UME) 19*256kB (UM) 2*512kB (ME) 2*1024kB (UM) 3*2048kB (UME) 933*4096kB (M) = 3868444kB [ 1119.321477][ T3145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.347104][ T3145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.368252][ T3145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.398655][ T3145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.413950][ T2170] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1119.429908][ T2170] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1119.438165][ T3145] 61764 total pagecache pages [ 1119.449144][ T3145] 6 pages in swap cache [ 1119.453760][ T2170] usb 5-1: Product: syz [ 1119.457973][ T2170] usb 5-1: Manufacturer: syz [ 1119.475360][ T3145] Free swap = 124456kB [ 1119.479584][ T3145] Total swap = 124996kB [ 1119.483809][ T3145] 2097051 pages RAM [ 1119.488957][ T2170] usb 5-1: SerialNumber: syz [ 1119.501473][ T3145] 0 pages HighMem/MovableOnly [ 1119.513831][ T2170] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1119.528557][ T3167] loop3: detected capacity change from 0 to 32768 [ 1119.531530][ T3145] 416965 pages reserved [ 1119.542234][ T3145] 0 pages cma reserved [ 1119.558071][ T3167] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13368 (3167) [ 1119.592310][ T3167] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1119.636007][ T3167] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1119.679406][ T3167] BTRFS info (device loop3): force clearing of disk cache [ 1119.686690][ T3167] BTRFS info (device loop3): metadata ratio 0 [ 1119.745691][ T3167] BTRFS info (device loop3): using free space tree [ 1119.867345][ T3178] loop2: detected capacity change from 0 to 2048 [ 1119.954765][ T3194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1119.971936][ T3167] BTRFS info (device loop3): enabling ssd optimizations [ 1119.981669][ T3167] BTRFS info (device loop3): auto enabling async discard [ 1119.989979][ T2170] vp7045: USB control message 'in' went wrong. [ 1120.003894][ T2170] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1120.026463][ T2170] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1120.079806][ T2170] usb 5-1: USB disconnect, device number 28 [ 1120.089003][ T3167] BTRFS info (device loop3): rebuilding free space tree [ 1120.103102][ T3178] syz.2.13370: attempt to access beyond end of device [ 1120.103102][ T3178] loop2: rw=0, sector=144115188075855908, nr_sectors = 2 limit=2048 [ 1120.402390][ T3197] nvme_fabrics: missing parameter 'nqn=%s' [ 1120.557887][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1120.769386][ T2755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (2755) [ 1121.707238][ T3221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13380'. [ 1121.716372][ T3221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13380'. [ 1121.783842][ T3223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13384'. [ 1121.943814][ T3227] loop0: detected capacity change from 0 to 64 [ 1122.200281][ T3232] netlink: 'syz.4.13388': attribute type 2 has an invalid length. [ 1122.256155][ T3232] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13388'. [ 1122.796489][ T3250] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13397'. [ 1122.836823][ T3250] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13397'. [ 1123.015450][ T3257] sctp: [Deprecated]: syz.4.13401 (pid 3257) Use of int in maxseg socket option. [ 1123.015450][ T3257] Use struct sctp_assoc_value instead [ 1123.307380][ T3269] loop0: detected capacity change from 0 to 1024 [ 1123.522381][ T3269] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1123.571787][ T3269] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1123.707612][ T3277] loop2: detected capacity change from 0 to 4096 [ 1123.739962][ T27] audit: type=1326 audit(1700008425.783:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1123.824190][ T3277] ntfs3: loop2: ino=b, mi_enum_attr [ 1123.844157][ T3277] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1123.863889][ T27] audit: type=1326 audit(1700008425.801:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1123.880008][ T3277] ntfs3: loop2: Failed to load $Extend (-22). [ 1123.940188][ T3277] ntfs3: loop2: Failed to initialize $Extend. [ 1124.059385][ T27] audit: type=1326 audit(1700008425.829:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.161530][ T3287] loop4: detected capacity change from 0 to 2048 [ 1124.181939][ T27] audit: type=1326 audit(1700008425.829:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.248604][ T3287] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1124.308644][ T27] audit: type=1326 audit(1700008425.829:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.427586][ T3293] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.438456][ T27] audit: type=1326 audit(1700008425.829:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.515754][ T3296] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1124.558510][ T27] audit: type=1326 audit(1700008425.829:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.723154][ T27] audit: type=1326 audit(1700008425.829:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.765559][ T27] audit: type=1326 audit(1700008425.829:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3280 comm="syz.4.13412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f0919e159 code=0x7ffc0000 [ 1124.855776][ T3299] netlink: 'syz.2.13421': attribute type 2 has an invalid length. [ 1124.904746][ T3299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13421'. [ 1124.919518][ T27] audit: type=1800 audit(1700008426.041:4177): pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13410" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1125.423185][ T3314] MTD: Couldn't look up './dev': -15 [ 1125.692033][ T3292] loop0: detected capacity change from 0 to 32768 [ 1125.824589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.831202][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.785467][ T3316] loop4: detected capacity change from 0 to 40427 [ 1126.842856][ T3316] F2FS-fs (loop4): invalid crc value [ 1126.935684][ T3316] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1127.150562][ T3316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1127.383071][ T3357] netlink: 666 bytes leftover after parsing attributes in process `syz.3.13446'. [ 1128.385083][ T3394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13460'. [ 1129.498936][ T3392] loop0: detected capacity change from 0 to 32768 [ 1129.727953][ T3392] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1129.870193][ T3440] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1130.017993][ T3443] loop2: detected capacity change from 0 to 512 [ 1130.032499][ T3392] XFS (loop0): Ending clean mount [ 1130.087610][ T3443] EXT4-fs: Ignoring removed nobh option [ 1130.170512][ T3445] loop4: detected capacity change from 0 to 1024 [ 1130.221372][ T3445] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1130.329974][ T3443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.346397][ T3445] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 3: comm syz.4.13481: lblock 3 mapped to illegal pblock 3 (length 1) [ 1130.397528][ T3443] ext4 filesystem being mounted at /3229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.409125][ T3445] Quota error (device loop4): write_blk: dquota write failed [ 1130.423398][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1130.446449][ T3445] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 1130.492044][ T3445] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.544167][ T3445] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13481: Failed to acquire dquot type 0 [ 1130.619464][ T3445] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 3: comm syz.4.13481: lblock 3 mapped to illegal pblock 3 (length 1) [ 1130.666666][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.693892][ T3445] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.748302][ T3445] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13481: Failed to acquire dquot type 0 [ 1130.818033][ T3445] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.13481: Freeing blocks not in datazone - block = 0, count = 4096 [ 1130.864093][ T3445] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 3: comm syz.4.13481: lblock 3 mapped to illegal pblock 3 (length 1) [ 1130.932836][ T3445] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.957801][ T3445] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13481: Failed to acquire dquot type 0 [ 1131.022982][ T3445] EXT4-fs (loop4): 1 orphan inode deleted [ 1131.046447][ T3445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.142958][ T3445] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 3: comm syz.4.13481: lblock 3 mapped to illegal pblock 3 (length 1) [ 1131.225392][ T3450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 1131.257650][ T3445] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1131.295371][ T3445] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13481: Failed to acquire dquot type 0 [ 1131.458077][T21831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.655562][ T3475] loop0: detected capacity change from 0 to 512 [ 1131.692538][ T3475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1131.823465][ T3475] EXT4-fs (loop0): 1 truncate cleaned up [ 1131.840631][ T3475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.041745][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.896588][ T3511] loop3: detected capacity change from 0 to 16 [ 1132.936520][ T3511] erofs: (device loop3): mounted with root inode @ nid 36. [ 1132.989446][ T3511] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1133.030302][ T3511] syz.3.13508: attempt to access beyond end of device [ 1133.030302][ T3511] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1133.084503][ T3511] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1133.112627][ T3511] syz.3.13508: attempt to access beyond end of device [ 1133.112627][ T3511] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1133.155952][ T3511] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1133.213144][ T27] audit: type=1800 audit(1700008434.528:4178): pid=3511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13508" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1134.048433][ T3542] loop2: detected capacity change from 0 to 4096 [ 1134.136988][ T3542] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1134.226861][ T3542] ntfs3: loop2: Failed to load $Extend (-22). [ 1134.253671][ T3542] ntfs3: loop2: Failed to initialize $Extend. [ 1134.380858][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1134.597211][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1134.610599][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1134.704412][ T9] usb 1-1: config 0 has no interface number 0 [ 1134.726601][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1134.769933][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1134.806284][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1134.819929][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.856668][ T9] usb 1-1: Product: syz [ 1134.867783][ T9] usb 1-1: Manufacturer: syz [ 1134.878409][ T9] usb 1-1: SerialNumber: syz [ 1134.892055][ T9] usb 1-1: config 0 descriptor?? [ 1135.150056][ T9] radio-si470x 1-1:0.35: this is not a si470x device. [ 1135.377116][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1135.412939][ T27] audit: type=1326 audit(1700008436.557:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3569 comm="syz.3.13538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1135.470514][ T9] usb 1-1: USB disconnect, device number 75 [ 1135.519043][ T27] audit: type=1326 audit(1700008436.575:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3569 comm="syz.3.13538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1135.587562][ T3574] netlink: 'syz.4.13539': attribute type 32 has an invalid length. [ 1135.616472][ T27] audit: type=1326 audit(1700008436.585:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3569 comm="syz.3.13538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1135.985799][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1135.985818][ T27] audit: type=1326 audit(1700008437.073:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3585 comm="syz.3.13545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x0 [ 1136.126412][ T3590] loop4: detected capacity change from 0 to 1024 [ 1136.276047][ T3590] hfsplus: keylen 65060 too large [ 1136.306025][ T3598] loop3: detected capacity change from 0 to 512 [ 1136.353204][ T3590] hfsplus: keylen 65060 too large [ 1136.379956][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.450488][ T3598] ext4 filesystem being mounted at /3262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.862327][ T23] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1137.068778][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1137.090762][ T23] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1137.111595][ T23] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1137.122729][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1137.130955][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1137.152897][ T23] usb 4-1: config 0 has no interface number 0 [ 1137.167099][ T23] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 30097, setting to 64 [ 1137.207651][ T23] usb 4-1: config 0 interface 104 has no altsetting 1 [ 1137.220169][ T23] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1137.236837][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.245297][ T23] usb 4-1: Product: syz [ 1137.249511][ T23] usb 4-1: Manufacturer: syz [ 1137.259541][ T23] usb 4-1: SerialNumber: syz [ 1137.278006][ T23] usb 4-1: config 0 descriptor?? [ 1137.288039][ T23] asix: probe of 4-1:0.104 failed with error -22 [ 1137.373395][ T9] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 1137.384200][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.425962][ T9] usb 1-1: config 1 has no interface number 0 [ 1137.443581][ T9] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1137.479550][ T9] usb 1-1: config 1 interface 188 has no altsetting 0 [ 1137.504302][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1137.513870][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.522004][ T9] usb 1-1: Product: syz [ 1137.545184][ T9] usb 1-1: Manufacturer: syz [ 1137.556016][ T9] usb 1-1: SerialNumber: syz [ 1137.576419][ T3631] netlink: 376 bytes leftover after parsing attributes in process `syz.4.13565'. [ 1137.589097][ T23] usb 4-1: USB disconnect, device number 79 [ 1137.600680][ T3631] netlink: 'syz.4.13565': attribute type 2 has an invalid length. [ 1137.883678][ T9] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 1137.903010][ T9] usb 1-1: 188:0 : does not exist [ 1137.958519][ T9] usb 1-1: USB disconnect, device number 76 [ 1137.971599][ T3639] loop4: detected capacity change from 0 to 256 [ 1137.995482][ T3639] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 1138.037838][ T3639] exFAT-fs (loop4): failed to count the number of clusters in root [ 1138.071081][ T3639] exFAT-fs (loop4): failed to recognize exfat type [ 1138.251349][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.337447][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13572'. [ 1138.695467][ T3651] netlink: 'syz.4.13576': attribute type 13 has an invalid length. [ 1138.703459][ T3651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13576'. [ 1138.728088][ T3651] syz_tun: refused to change device tx_queue_len [ 1138.738137][ T3651] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1138.755230][ T3653] CIFS: Invalid mount helper version specified [ 1139.134380][ T3664] netlink: 'syz.3.13582': attribute type 7 has an invalid length. [ 1139.168410][ T3664] netlink: 'syz.3.13582': attribute type 8 has an invalid length. [ 1139.195918][ T3641] loop2: detected capacity change from 0 to 32768 [ 1139.202642][ T3664] netlink: 'syz.3.13582': attribute type 15 has an invalid length. [ 1140.166848][ T3689] loop3: detected capacity change from 0 to 2048 [ 1140.223257][ T3696] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.331355][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.453225][ T3689] Remounting filesystem read-only [ 1140.458947][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.491618][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.530916][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.559176][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.595990][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.635306][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.666980][ T3689] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.699543][ T27] audit: type=1800 audit(1700008441.427:4185): pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13593" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1140.831294][ T3689] syz.3.13593 (3689) used greatest stack depth: 18632 bytes left [ 1140.863414][ T3708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13602'. [ 1141.445001][ T3731] netlink: 'syz.3.13612': attribute type 1 has an invalid length. [ 1141.734541][ T3742] netlink: 'syz.4.13619': attribute type 5 has an invalid length. [ 1142.174317][ T2170] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1142.274496][ T3760] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13628'. [ 1142.394368][ T2170] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1142.409671][ T2170] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1142.423072][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.440488][ T2170] usb 4-1: Product: syz [ 1142.455905][ T2170] usb 4-1: Manufacturer: syz [ 1142.471989][ T2170] usb 4-1: SerialNumber: syz [ 1142.521162][ T2170] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1142.563585][ T2170] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1142.948163][ T3775] netlink: 'syz.2.13635': attribute type 21 has an invalid length. [ 1143.108851][ T2170] usb 4-1: USB disconnect, device number 80 [ 1143.132588][ T2170] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1143.157618][ T2170] cyberjack 4-1:1.0: device disconnected [ 1143.317183][ T3784] netlink: 'syz.0.13640': attribute type 32 has an invalid length. [ 1143.627283][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1143.806750][ T3804] loop3: detected capacity change from 0 to 128 [ 1143.850525][ T3804] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1143.865613][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1143.880351][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.898324][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.918264][ T23] usb 5-1: string descriptor 0 read error: -22 [ 1143.925099][ T23] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1143.941113][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.964200][ T23] usb 5-1: selecting invalid altsetting 1 [ 1143.970879][ T23] usb 5-1: unit 3 not found! [ 1143.977777][ T3804] ext4 filesystem being mounted at /3276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.229391][ T23] usb 5-1: unit 0 not found! [ 1144.307868][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1144.554061][ T23] usb 5-1: USB disconnect, device number 29 [ 1145.182401][ T3814] loop2: detected capacity change from 0 to 32768 [ 1145.272154][ T3814] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1145.416382][ T3840] siw: device registration error -23 [ 1145.504465][ T3814] XFS (loop2): Ending clean mount [ 1146.598688][ T3873] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1146.686278][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1147.888011][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13698'. [ 1148.047808][ T3919] netlink: 'syz.4.13701': attribute type 21 has an invalid length. [ 1148.408010][ T3930] netlink: 'syz.4.13706': attribute type 21 has an invalid length. [ 1148.450340][ T3930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1148.459617][ T3930] netlink: 'syz.4.13706': attribute type 5 has an invalid length. [ 1148.482839][ T3930] netlink: 'syz.4.13706': attribute type 6 has an invalid length. [ 1148.516485][ T3930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1148.570356][ T3932] xt_connbytes: Forcing CT accounting to be enabled [ 1148.840112][ T3915] loop3: detected capacity change from 0 to 32768 [ 1149.281478][ T3926] loop2: detected capacity change from 0 to 32768 [ 1149.345855][ T3942] loop0: detected capacity change from 0 to 256 [ 1150.109867][ T3942] FAT-fs (loop0): Directory bread(block 64) failed [ 1150.117071][ T3942] FAT-fs (loop0): Directory bread(block 65) failed [ 1150.152243][ T3942] FAT-fs (loop0): Directory bread(block 66) failed [ 1150.158887][ T3942] FAT-fs (loop0): Directory bread(block 67) failed [ 1150.260608][ T3942] FAT-fs (loop0): Directory bread(block 68) failed [ 1150.282226][ T3942] FAT-fs (loop0): Directory bread(block 69) failed [ 1150.288928][ T3942] FAT-fs (loop0): Directory bread(block 70) failed [ 1150.314731][ T3942] FAT-fs (loop0): Directory bread(block 71) failed [ 1150.321451][ T3942] FAT-fs (loop0): Directory bread(block 72) failed [ 1150.351011][ T3942] FAT-fs (loop0): Directory bread(block 73) failed [ 1151.512889][ T3991] loop3: detected capacity change from 0 to 4096 [ 1151.617093][ T3994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1151.742532][ T3991] syz.3.13735: attempt to access beyond end of device [ 1151.742532][ T3991] loop3: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 1151.781799][ T3991] syz.3.13735: attempt to access beyond end of device [ 1151.781799][ T3991] loop3: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 1151.810978][ T27] audit: type=1800 audit(2000000003.699:4186): pid=3991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13735" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1151.934849][ T3999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13738'. [ 1151.944186][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13738'. [ 1152.090845][ T3983] loop2: detected capacity change from 0 to 32768 [ 1152.146007][ T3983] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1152.437681][ T2755] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1152.670430][ T4009] loop3: detected capacity change from 0 to 256 [ 1152.750951][ T4015] CacheFiles: No cache directory specified [ 1153.267460][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13753'. [ 1154.206409][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1154.293468][ T4066] loop2: detected capacity change from 0 to 8 [ 1154.529603][ T5779] SQUASHFS error: Unable to read directory block [1d0:22] [ 1154.544087][ T4070] netlink: 'syz.3.13773': attribute type 1 has an invalid length. [ 1154.568287][ T4070] netlink: 'syz.3.13773': attribute type 2 has an invalid length. [ 1154.579906][ T5779] SQUASHFS error: Unable to read directory block [1d0:22] [ 1155.585490][ T4107] netlink: 'syz.3.13792': attribute type 1 has an invalid length. [ 1155.615203][ T4107] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13792'. [ 1155.986506][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13799'. [ 1155.999901][ T4121] loop0: detected capacity change from 0 to 1764 [ 1156.147436][ T4121] CIFS mount error: No usable UNC path provided in device string! [ 1156.147436][ T4121] [ 1156.178801][ T4121] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1156.402849][ T27] audit: type=1400 audit(2000000007.924:4187): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4132 comm="syz.3.13806" [ 1156.589335][ T4141] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13808'. [ 1156.680105][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1157.045354][T20432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1157.264870][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1157.434145][ T4170] xt_hashlimit: size too large, truncated to 1048576 [ 1157.451984][ T4170] xt_hashlimit: max too large, truncated to 1048576 [ 1157.803217][ T4187] netlink: 372 bytes leftover after parsing attributes in process `syz.4.13831'. [ 1157.994732][ T4192] netlink: 'syz.3.13834': attribute type 11 has an invalid length. [ 1158.163204][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1158.190342][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1158.294068][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13839'. [ 1158.332574][ T4201] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1158.508766][ T4210] netlink: 'syz.3.13843': attribute type 1 has an invalid length. [ 1158.530676][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13843'. [ 1158.574589][ T2170] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1158.587118][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1158.802760][ T2170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.824600][ T2170] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.849953][ T4219] ALSA: mixer_oss: invalid OSS volume ';' [ 1158.855884][ T2170] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1158.881950][ T4222] netlink: 'syz.3.13850': attribute type 30 has an invalid length. [ 1158.882919][ T2170] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1158.925823][ T2170] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1158.946185][ T2170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.105047][ T4229] vcan1: entered allmulticast mode [ 1159.237699][ T2170] snd-usb-caiaq 3-1:1.0: invalid EPs [ 1159.254703][ T2170] usb 3-1: unable to init card! (ret=-22) [ 1159.269224][ T2170] snd-usb-caiaq: probe of 3-1:1.0 failed with error -22 [ 1159.519502][ T2170] usb 3-1: USB disconnect, device number 71 [ 1159.973554][ T4253] netlink: 'syz.0.13864': attribute type 7 has an invalid length. [ 1160.344931][ T9] nvmet: connect request for invalid subsystem testsubsys! [ 1160.352904][ T4261] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1160.893453][ T4289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13882'. [ 1161.506889][ T27] audit: type=1326 audit(2000000012.639:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.579068][ T27] audit: type=1326 audit(2000000012.639:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.660597][ T27] audit: type=1326 audit(2000000012.639:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.739436][ T27] audit: type=1326 audit(2000000012.639:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.839092][ T27] audit: type=1326 audit(2000000012.657:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.912855][ T27] audit: type=1326 audit(2000000012.657:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1161.997227][ T27] audit: type=1326 audit(2000000012.666:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1162.088099][ T27] audit: type=1326 audit(2000000012.666:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.2.13893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcf7af9e159 code=0x7ffc0000 [ 1162.259874][ T4333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13901'. [ 1162.540336][ T4312] loop3: detected capacity change from 0 to 32768 [ 1162.640856][ T4312] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 1162.640856][ T4312] [ 1162.705693][ T4312] xtLookup: xtSearch returned -5 [ 1162.710728][ T4312] add_index: get/read_metapage failed! [ 1163.007724][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1163.584529][ T4372] dlm: no locking on control device [ 1163.599195][ T4374] overlayfs: cannot append lower layer [ 1163.779020][ T4379] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13924'. [ 1163.818322][ T4382] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1163.996751][ T4386] loop0: detected capacity change from 0 to 64 [ 1164.426569][ T4400] delete_channel: no stack [ 1164.626032][ T4409] netlink: 'syz.4.13938': attribute type 2 has an invalid length. [ 1165.066014][ T4425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1165.145400][ T4427] delete_channel: no stack [ 1165.149526][ T4421] loop3: detected capacity change from 0 to 4096 [ 1165.217072][ T4421] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1165.289921][ T4421] ntfs3: loop3: Failed to load $Extend (-22). [ 1165.338120][ T4421] ntfs3: loop3: Failed to initialize $Extend. [ 1165.940103][ T4448] netlink: 'syz.4.13959': attribute type 16 has an invalid length. [ 1165.974381][ T4448] netlink: 'syz.4.13959': attribute type 17 has an invalid length. [ 1166.896343][ T4482] loop2: detected capacity change from 0 to 1024 [ 1167.010500][ T4482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.033371][ T4486] loop3: detected capacity change from 0 to 24 [ 1167.051912][ T4486] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1167.095740][ T4482] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 1167.108406][ T4486] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1167.489642][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.760216][ T4496] loop3: detected capacity change from 0 to 1764 [ 1168.009881][ T4504] netlink: 'syz.2.13986': attribute type 1 has an invalid length. [ 1168.048109][ T4504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13986'. [ 1168.315779][ T4510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1168.333187][ T4510] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1168.755240][ T4526] netlink: 'syz.2.13996': attribute type 10 has an invalid length. [ 1168.773618][ T4526] hsr0: entered promiscuous mode [ 1168.814532][ T4526] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1168.862270][ T4526] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 1168.883036][ T4526] .`: (slave hsr0): Error -95 calling set_mac_address [ 1169.396935][ T4550] 9p: Unknown Cache mode or invalid value re [ 1169.480396][ T4552] loop0: detected capacity change from 0 to 1024 [ 1169.494088][ T4552] EXT4-fs: Ignoring removed i_version option [ 1169.535058][ T4552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1169.545136][ T4548] loop3: detected capacity change from 0 to 4096 [ 1169.587242][ T4552] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1169.604085][ T4548] ntfs: volume version 3.1. [ 1169.664976][ T4552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1169.697094][ T4552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1169.703739][ T4552] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.14008: Freeing blocks not in datazone - block = 0, count = 4096 [ 1169.906066][ T4552] EXT4-fs (loop0): Remounting filesystem read-only [ 1169.923606][ T4552] EXT4-fs (loop0): 1 orphan inode deleted [ 1169.942305][ T4552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1170.097290][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14015'. [ 1170.128251][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.870268][ T4585] binder: 4584:4585 ioctl c018620c 200000000240 returned -22 [ 1170.881473][ T4589] loop2: detected capacity change from 0 to 256 [ 1170.940458][ T4589] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1171.134353][ T4589] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1171.180564][ T4589] exFAT-fs (loop2): Filesystem has been set read-only [ 1171.809346][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14039'. [ 1171.818414][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14039'. [ 1172.156099][ T23] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1172.373036][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1172.386411][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1172.416412][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.438325][ T23] usb 3-1: Product: syz [ 1172.442564][ T23] usb 3-1: Manufacturer: syz [ 1172.450837][ T23] usb 3-1: SerialNumber: syz [ 1172.466886][ T23] usb 3-1: config 0 descriptor?? [ 1172.483328][ T23] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1172.484513][ T173] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1172.654411][ T27] audit: type=1326 audit(2000000022.916:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1172.778678][ T173] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1172.795530][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.805885][ T27] audit: type=1326 audit(2000000022.953:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1172.839050][ T173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1172.847980][ T173] usb 1-1: config 1 has no interface number 0 [ 1172.872403][ T27] audit: type=1326 audit(2000000022.953:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1172.927511][ T27] audit: type=1326 audit(2000000022.953:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1172.969138][ T23] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 1172.979982][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1172.999551][ T173] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1173.026895][ T23] visor: probe of 3-1:0.0 failed with error -71 [ 1173.032843][ T173] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1173.063947][ T23] usb 3-1: USB disconnect, device number 72 [ 1173.066992][ T173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.079683][ T27] audit: type=1326 audit(2000000022.962:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1173.125037][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.158917][ T173] usb 1-1: Product: syz [ 1173.163492][ T173] usb 1-1: Manufacturer: syz [ 1173.185747][ T27] audit: type=1326 audit(2000000022.962:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1173.210732][ T173] usb 1-1: SerialNumber: syz [ 1173.250378][ T27] audit: type=1326 audit(2000000022.962:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1173.295364][ T27] audit: type=1326 audit(2000000023.008:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1173.322553][ T27] audit: type=1326 audit(2000000023.008:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.3.14053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1173.356653][ T4651] netlink: 'syz.3.14057': attribute type 1 has an invalid length. [ 1173.708777][ T173] usb 1-1: USB disconnect, device number 77 [ 1173.815917][ T4663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14063'. [ 1173.982077][ T27] audit: type=1326 audit(2000000024.143:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.3.14066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1174.042942][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14067'. [ 1174.883770][ T4690] loop0: detected capacity change from 0 to 512 [ 1174.921108][ T4690] EXT4-fs: Ignoring removed orlov option [ 1175.066914][ T4690] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1175.131682][ T4698] netlink: 'syz.3.14079': attribute type 12 has an invalid length. [ 1175.212707][ T4690] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.14076: corrupted inode contents [ 1175.245233][ T4690] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #11: comm syz.0.14076: mark_inode_dirty error [ 1175.303160][ T4690] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.14076: invalid indirect mapped block 1 (level 1) [ 1175.334615][ T4704] netlink: 22 bytes leftover after parsing attributes in process `syz.4.14080'. [ 1175.362829][ T4690] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.14076: corrupted inode contents [ 1175.406363][ T4706] xt_time: unknown flags 0x4 [ 1175.407217][ T4690] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1175.447939][ T4690] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.14076: corrupted inode contents [ 1175.474191][ T4690] EXT4-fs error (device loop0): ext4_truncate:4314: inode #11: comm syz.0.14076: mark_inode_dirty error [ 1175.526494][ T4690] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1175.545189][ T4702] loop2: detected capacity change from 0 to 4096 [ 1175.564421][ T4690] EXT4-fs (loop0): 1 truncate cleaned up [ 1175.571983][ T4690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.590307][ T4709] loop4: detected capacity change from 0 to 256 [ 1175.658704][ T4690] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.14076: iget: bogus i_mode (3355) [ 1175.685986][ T4709] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 1) [ 1175.717701][ T4709] exFAT-fs (loop4): failed to load alloc-bitmap [ 1175.742997][ T4709] exFAT-fs (loop4): failed to recognize exfat type [ 1175.807463][ T4702] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1175.994694][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.958911][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1176.968322][ T4746] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.003914][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.110052][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.131354][ T4746] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.164840][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.185655][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1177.440255][ T4759] x_tables: duplicate entry at hook 2 [ 1177.807991][ T4775] netlink: 'syz.0.14117': attribute type 10 has an invalid length. [ 1177.836388][ T4775] syz_tun: entered promiscuous mode [ 1177.940618][ T4775] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 1178.132249][ T4786] netlink: 'syz.3.14124': attribute type 1 has an invalid length. [ 1178.380999][ T4788] loop0: detected capacity change from 0 to 8192 [ 1178.422281][ T4788] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1178.545854][ T4788] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1178.562183][ T23] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1178.573399][ T4788] REISERFS (device loop0): using ordered data mode [ 1178.579976][ T4788] reiserfs: using flush barriers [ 1178.614379][ T4788] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1178.725299][ T4788] REISERFS (device loop0): checking transaction log (loop0) [ 1178.790557][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1178.808999][ T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1178.833033][ T23] usb 3-1: config 179 has no interface number 0 [ 1178.876483][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1178.909703][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1178.968789][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1179.013649][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1179.058272][ T23] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1179.091914][ T23] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1179.116296][ T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1179.150719][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.277567][ T4788] REISERFS (device loop0): Using tea hash to sort names [ 1179.284130][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input64 [ 1179.300067][ T4788] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1179.435035][ T5127] input input64: unable to receive magic message: -110 [ 1179.534972][ T5127] input input64: unable to receive magic message: -32 [ 1179.561523][ T5127] input input64: unable to receive magic message: -32 [ 1179.613864][ T5127] input input64: unable to receive magic message: -32 [ 1179.664575][ T5127] input input64: unable to receive magic message: -32 [ 1179.749258][ T5127] input input64: unable to receive magic message: -32 [ 1179.808359][ T23] usb 3-1: USB disconnect, device number 73 [ 1179.814494][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1179.852487][ T23] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1180.231150][ T4832] __nla_validate_parse: 46 callbacks suppressed [ 1180.231171][ T4832] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14144'. [ 1180.313111][ T4833] loop3: detected capacity change from 0 to 512 [ 1180.317262][ T4835] netlink: 'syz.4.14147': attribute type 32 has an invalid length. [ 1180.393102][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1180.448720][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1180.458544][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1180.542575][ T4833] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1180.578170][ T4833] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1180.602764][ T4833] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1180.626067][ T4833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.14145: bg 0: block 34: padding at end of block bitmap is not set [ 1180.688706][ T4833] __quota_error: 12 callbacks suppressed [ 1180.688724][ T4833] Quota error (device loop3): write_blk: dquota write failed [ 1180.726452][ T4833] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1180.752688][ T4833] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.14145: Failed to acquire dquot type 1 [ 1180.806525][ T4833] EXT4-fs (loop3): 1 truncate cleaned up [ 1180.851476][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1180.955247][ T4833] ext4: Unknown parameter 'fd' [ 1181.030427][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.591503][ T4873] loop4: detected capacity change from 0 to 512 [ 1181.657489][ T4873] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1181.666530][ T4873] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.14163: inode #15: comm syz.4.14163: iget: illegal inode # [ 1181.697354][ T4873] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.14163: couldn't read orphan inode 15 (err -117) [ 1181.712590][ T4873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.742347][ T4873] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 1181.796442][T21831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.922604][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1181.975674][ T4882] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.013351][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.031330][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.052524][ T4882] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.073302][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.095321][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.123154][ T4882] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1182.144575][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1183.295869][ T4936] loop2: detected capacity change from 0 to 1024 [ 1183.330325][ T4936] hfsplus: unable to parse mount options [ 1183.678680][ T23] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1183.918797][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 1183.930729][ T23] usb 3-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 1183.957565][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1183.991229][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1184.013202][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.064946][ T23] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1184.076400][ T23] usb 3-1: No valid video chain found. [ 1184.342643][ T23] usb 3-1: USB disconnect, device number 74 [ 1184.745913][ T4954] loop0: detected capacity change from 0 to 32768 [ 1184.802168][ T4954] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1184.832494][ T4954] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1184.968306][ T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1185.088827][ T4954] XFS (loop0): Ending clean mount [ 1185.108340][ T4954] XFS (loop0): Quotacheck needed: Please wait. [ 1185.211329][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1185.259271][ T4954] XFS (loop0): Quotacheck: Done. [ 1185.263700][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.277414][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1185.293291][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1185.312550][ T23] usb 5-1: Product: syz [ 1185.350115][ T23] usb 5-1: Manufacturer: syz [ 1185.395540][ T23] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 1185.443706][ T4997] loop2: detected capacity change from 0 to 128 [ 1185.460307][ T4997] ufs: ufstype=nextstep-cd is supported read-only [ 1185.560366][ T4997] loop2: detected capacity change from 0 to 1024 [ 1185.619910][ T23] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1185.652064][ T23] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1185.662624][ T23] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 1185.695432][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1185.725410][ T23] usb 5-1: USB disconnect, device number 30 [ 1185.968716][ T5001] __nla_validate_parse: 23 callbacks suppressed [ 1185.968736][ T5001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14221'. [ 1185.987207][T26841] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1186.007452][ T5001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14221'. [ 1186.202668][T26841] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1186.213354][T26841] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1186.228502][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14223'. [ 1186.241999][T26841] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1186.258047][T26841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.277179][T26841] usb 4-1: Product: syz [ 1186.290933][T26841] usb 4-1: Manufacturer: syz [ 1186.295610][T26841] usb 4-1: SerialNumber: syz [ 1186.346682][T26841] usb 4-1: config 0 descriptor?? [ 1186.379030][T26841] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1186.826056][T26841] gspca_sunplus: reg_r err -71 [ 1186.839921][T26841] sunplus: probe of 4-1:0.0 failed with error -71 [ 1186.852955][T26841] usb 4-1: USB disconnect, device number 81 [ 1186.889584][ T5023] loop4: detected capacity change from 0 to 256 [ 1187.828657][ T5043] netlink: 'syz.3.14233': attribute type 28 has an invalid length. [ 1187.894922][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14233'. [ 1187.969919][ T5045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14234'. [ 1188.022690][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14234'. [ 1188.388815][ T5061] netlink: 'syz.4.14241': attribute type 29 has an invalid length. [ 1189.338824][ T5099] loop3: detected capacity change from 0 to 1024 [ 1189.385572][ T5099] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1189.410723][ T5099] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1189.444827][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14261'. [ 1189.456552][ T5099] EXT4-fs (loop3): journal inode is deleted [ 1189.911023][T26841] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1189.913350][ T5120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14267'. [ 1190.011200][ T5125] loop2: detected capacity change from 0 to 256 [ 1190.129042][ T5132] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1190.133703][T26841] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 1190.211482][T26841] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 1190.257900][T26841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1190.267747][T26841] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1190.294647][T26841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.317007][T26841] usb 4-1: Product: syz [ 1190.327891][T26841] usb 4-1: Manufacturer: syz [ 1190.332563][T26841] usb 4-1: SerialNumber: syz [ 1190.351127][T26841] usb 4-1: config 0 descriptor?? [ 1190.361672][T26841] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1190.377344][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1190.397998][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1190.418410][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1190.441048][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1190.471083][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1190.488983][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1190.519791][T26841] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1190.552608][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1190.572806][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1190.602085][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1190.610695][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1190.618800][T26841] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1190.655867][T26841] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1190.702053][T26841] usb 4-1: USB disconnect, device number 82 [ 1190.762321][T26841] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1190.814617][ T5143] trusted_key: encrypted_key: keylen parameter is missing [ 1190.835823][T26841] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1190.856035][T26841] keyspan 4-1:0.0: device disconnected [ 1191.063675][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14280'. [ 1191.481004][ T5155] loop2: detected capacity change from 0 to 8192 [ 1191.514399][ T5155] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1191.676492][ T5169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14289'. [ 1191.707394][ T5155] ntfs3: loop2: ino=b, mi_enum_attr [ 1191.732648][ T5155] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1191.776845][ T5155] ntfs3: loop2: Failed to load $Extend (-22). [ 1191.783028][ T5155] ntfs3: loop2: Failed to initialize $Extend. [ 1191.932805][ T27] audit: type=1326 audit(2000000040.712:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.3.14292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1192.038691][ T27] audit: type=1326 audit(2000000040.777:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.3.14292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1192.171243][ T27] audit: type=1326 audit(2000000040.777:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.3.14292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1192.233646][ T5171] loop4: detected capacity change from 0 to 8192 [ 1192.267554][ T27] audit: type=1326 audit(2000000040.777:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.3.14292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1192.393236][ T27] audit: type=1326 audit(2000000040.777:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.3.14292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353279e159 code=0x7ffc0000 [ 1192.415742][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1192.427537][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1192.442874][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.821511][ T5193] loop2: detected capacity change from 0 to 256 [ 1193.115423][ T5201] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14304'. [ 1193.786411][ T5227] netlink: 'syz.2.14317': attribute type 21 has an invalid length. [ 1194.321144][ T5211] loop4: detected capacity change from 0 to 32768 [ 1194.396316][ T5211] (syz.4.14309,5211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1194.457157][ T5211] (syz.4.14309,5211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1194.560684][ T5211] JBD2: Ignoring recovery information on journal [ 1194.724902][ T5211] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1194.882492][ T5251] bond5: option lp_interval: invalid value (0) [ 1194.897174][ T5251] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1194.980597][ T5251] bond5 (unregistering): Released all slaves [ 1195.066750][T21831] ocfs2: Unmounting device (7,4) on (node local) [ 1195.108907][ T5258] loop3: detected capacity change from 0 to 64 [ 1195.133833][ T5258] hfs: unable to locate alternate MDB [ 1195.162941][ T5258] hfs: continuing without an alternate MDB [ 1195.490529][ T5262] loop3: detected capacity change from 0 to 512 [ 1195.591095][ T5262] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1195.615033][ T5262] EXT4-fs (loop3): Remounting filesystem read-only [ 1195.622103][ T5262] EXT4-fs (loop3): 1 truncate cleaned up [ 1195.629891][ T5262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.710302][ T5266] netlink: 'syz.2.14333': attribute type 1 has an invalid length. [ 1195.727952][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.850718][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14330'. [ 1197.389524][ T5294] loop2: detected capacity change from 0 to 32768 [ 1197.468831][ T27] audit: type=1800 audit(2000000045.814:4223): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14345" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 1197.564302][ T173] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1197.843441][ T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.932007][ T173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.963007][ T173] usb 1-1: string descriptor 0 read error: -22 [ 1197.975480][ T173] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1197.984893][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.052429][ T173] usb 1-1: 0:1 : does not exist [ 1198.057384][ T173] usb 1-1: 0:2 : does not exist [ 1198.214072][ T2170] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1198.329997][ T5329] loop4: detected capacity change from 0 to 8 [ 1198.427370][ T2170] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1198.462002][ T2170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.499249][ T2170] usb 3-1: Product: syz [ 1198.503510][ T2170] usb 3-1: Manufacturer: syz [ 1198.523678][ T2170] usb 3-1: SerialNumber: syz [ 1198.596280][ T173] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 1198.645089][ T173] usb 1-1: USB disconnect, device number 78 [ 1198.685995][T26841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1199.299826][ T2170] usb 3-1: USB disconnect, device number 75 [ 1199.772302][ T5362] loop3: detected capacity change from 0 to 2048 [ 1199.783974][ T5364] comedi comedi1: dt2814: I/O port conflict (0x300,2) [ 1199.838439][ T5365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1199.882661][T26841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1199.900762][T26841] ath9k_htc: Failed to initialize the device [ 1199.907129][ T5362] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 1199.938224][ T2170] usb 3-1: ath9k_htc: USB layer deinitialized [ 1200.078410][ T5362] Remounting filesystem read-only [ 1200.197524][ T5374] program syz.0.14383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.399560][ T5380] netlink: 'syz.2.14386': attribute type 1 has an invalid length. [ 1200.426429][ T5380] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14386'. [ 1200.435676][ T5380] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14386'. [ 1200.849347][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14393'. [ 1200.910875][ T5400] loop3: detected capacity change from 0 to 1024 [ 1200.945830][ T5400] EXT4-fs: inline encryption not supported [ 1200.974931][ T5400] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1201.041738][ T5400] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.14396: lblock 2 mapped to illegal pblock 2 (length 1) [ 1201.182789][ T5400] EXT4-fs (loop3): Remounting filesystem read-only [ 1201.216342][ T5400] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1201.224545][ T5400] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1201.265828][ T5400] EXT4-fs (loop3): 1 orphan inode deleted [ 1201.282069][ T5410] gretap0: left allmulticast mode [ 1201.287194][ T5410] gretap0: left promiscuous mode [ 1201.294875][ T5400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.318142][ T5410] bridge0: port 3(gretap0) entered disabled state [ 1201.386859][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.404760][ T5410] bridge_slave_1: left allmulticast mode [ 1201.410487][ T5410] bridge_slave_1: left promiscuous mode [ 1201.484520][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.533029][ T5410] bridge_slave_0: left allmulticast mode [ 1201.538769][ T5410] bridge_slave_0: left promiscuous mode [ 1201.568317][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.597724][ T5418] loop3: detected capacity change from 0 to 16 [ 1201.664830][ T5418] erofs: (device loop3): mounted with root inode @ nid 36. [ 1202.040777][ T5426] netlink: 'syz.0.14407': attribute type 49 has an invalid length. [ 1202.123448][ T5429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14409'. [ 1202.343740][ T5442] loop0: detected capacity change from 0 to 8 [ 1202.453166][ T5445] netlink: 296 bytes leftover after parsing attributes in process `syz.2.14414'. [ 1202.862713][ T5459] sctp: [Deprecated]: syz.0.14421 (pid 5459) Use of int in maxseg socket option. [ 1202.862713][ T5459] Use struct sctp_assoc_value instead [ 1203.360517][ T5475] loop4: detected capacity change from 0 to 512 [ 1203.485910][ T5475] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1203.516653][ T5475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 1203.524831][ T5475] System zones: 0-1, 15-15, 18-18, 34-34 [ 1203.531870][ T5475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1203.540173][ T5475] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1203.550112][ T5475] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1203.600700][ T5475] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1203.613150][ T5485] x_tables: duplicate entry at hook 1 [ 1203.633836][ T5475] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.14427: bad orphan inode 16 [ 1203.647869][ T5475] ext4_test_bit(bit=15, block=18) = 1 [ 1203.653496][ T5475] is_bad_inode(inode)=0 [ 1203.657981][ T5475] NEXT_ORPHAN(inode)=0 [ 1203.662182][ T5475] max_ino=32 [ 1203.665576][ T5475] i_nlink=2 [ 1203.674062][ T5475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1203.706949][ T5475] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 1203.802784][T21831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.274998][ T5503] misc userio: The device must be registered before sending interrupts [ 1204.555818][ T5518] netlink: 'syz.2.14448': attribute type 21 has an invalid length. [ 1204.575172][ T5518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14448'. [ 1205.764493][T19579] Bluetooth: hci3: command 0x0c1a tx timeout [ 1205.805754][ T5570] loop0: detected capacity change from 0 to 256 [ 1205.970090][ T5574] loop3: detected capacity change from 0 to 256 [ 1206.267015][ T5582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14477'. [ 1206.308019][ T5582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14477'. [ 1207.569861][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14500'. [ 1207.640644][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14503'. [ 1207.660948][ T5639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14503'. [ 1207.782044][ T5642] netlink: 'syz.3.14505': attribute type 1 has an invalid length. [ 1207.806195][ T5642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14505'. [ 1208.096357][ T27] audit: type=1326 audit(2000000055.621:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.0.14509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3339e159 code=0x7ffc0000 [ 1208.175297][ T27] audit: type=1326 audit(2000000055.621:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.0.14509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3339e159 code=0x7ffc0000 [ 1208.282802][ T27] audit: type=1326 audit(2000000055.648:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.0.14509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2b3339e159 code=0x7ffc0000 [ 1208.372123][ T27] audit: type=1326 audit(2000000055.648:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.0.14509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3339e159 code=0x7ffc0000 [ 1208.457148][ T5668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14515'. [ 1208.459407][ T5666] openvswitch: netlink: IP tunnel dst address not specified [ 1208.480317][ T5668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14515'. [ 1208.743231][ T27] audit: type=1800 audit(2000000056.211:4228): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.14517" name="/" dev="sockfs" ino=105591 res=0 errno=0 [ 1209.446916][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1209.878372][ T5722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14539'. [ 1210.386270][ T5735] loop0: detected capacity change from 0 to 4096 [ 1210.427898][ T5740] netlink: 'syz.3.14550': attribute type 21 has an invalid length. [ 1210.716870][ T5735] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1211.012418][ T5735] ntfs3: loop0: Failed to load $Extend (-22). [ 1211.030970][ T5735] ntfs3: loop0: Failed to initialize $Extend. [ 1211.586398][ T5770] MTD: Couldn't look up 'mtd0/file0': -2 [ 1211.995297][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1212.034524][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1212.055731][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1212.081894][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1212.132322][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1212.154046][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1212.177491][ T5790] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1212.232920][ T5805] netlink: 'syz.3.14573': attribute type 21 has an invalid length. [ 1212.245665][ T5806] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1212.253272][ T5790] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1212.262845][ T5805] __nla_validate_parse: 1 callbacks suppressed [ 1212.262860][ T5805] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14573'. [ 1212.283975][ T5790] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1212.303552][ T5805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14573'. [ 1213.302695][ T2170] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1213.533037][ T2170] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1213.556345][ T2170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.581290][ T2170] usb 5-1: Product: syz [ 1213.595012][ T2170] usb 5-1: Manufacturer: syz [ 1213.599684][ T2170] usb 5-1: SerialNumber: syz [ 1213.639034][ T2170] usb 5-1: USB2VGA dongle found at address 31 [ 1213.665863][ T2170] usb 5-1: Allocated 8 output buffers [ 1214.040482][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14605'. [ 1214.111138][ T2170] usb 5-1: Failed to early initialize device [ 1214.152052][ T2170] usb 5-1: USB disconnect, device number 31 [ 1214.224879][ T5742] udevd[5742]: setting mode of /dev/bus/usb/005/031 to 020664 failed: No such file or directory [ 1214.267128][ T5742] udevd[5742]: setting owner of /dev/bus/usb/005/031 to uid=0, gid=0 failed: No such file or directory [ 1214.296541][ T5883] loop2: detected capacity change from 0 to 512 [ 1214.337472][ T5883] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.14607: bg 0: block 5: invalid block bitmap [ 1214.404984][ T5883] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1214.418436][ T5883] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.14607: invalid indirect mapped block 3 (level 2) [ 1214.492517][ T5883] EXT4-fs (loop2): 1 orphan inode deleted [ 1214.504702][ T5883] EXT4-fs (loop2): 1 truncate cleaned up [ 1214.544801][ T5883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.662466][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.324166][ T5915] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14621'. [ 1215.362507][ T5915] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14621'. [ 1216.381302][ T5958] loop0: detected capacity change from 0 to 65 [ 1216.402322][ T5958] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1217.455092][ T173] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1217.786820][ T173] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1217.800557][ T173] usb 1-1: config 0 has no interface number 0 [ 1217.811883][ T173] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1217.843927][ T173] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.864204][ T6003] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1217.891588][ T6003] bond5 (unregistering): Released all slaves [ 1217.904833][ T173] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1218.006509][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.053484][ T6007] bridge6: entered promiscuous mode [ 1218.071627][ T6007] bridge6: entered allmulticast mode [ 1218.095581][ T173] usb 1-1: Product: syz [ 1218.099836][ T173] usb 1-1: Manufacturer: syz [ 1218.125744][ T173] usb 1-1: SerialNumber: syz [ 1218.133258][ T173] usb 1-1: config 0 descriptor?? [ 1218.148156][ T5985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1218.159004][ T173] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1218.191419][ T173] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1218.693328][ T173] usb 1-1: USB disconnect, device number 79 [ 1218.714999][ T173] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1218.747085][ T173] cyberjack 1-1:0.69: device disconnected [ 1218.910635][ T2170] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1219.131553][ T2170] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.147129][ T2170] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1219.168796][ T2170] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1219.194621][ T2170] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.226068][ T2170] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1219.246393][ T2170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.273602][ T6022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1219.283407][ T6022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1219.308140][ T2170] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 1219.584084][ T6022] loop4: detected capacity change from 0 to 512 [ 1219.648842][ T6022] ------------[ cut here ]------------ [ 1219.655512][ T6022] EA inode 11 i_nlink=0 [ 1219.675435][ T6022] WARNING: CPU: 1 PID: 6022 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1219.690274][ T6022] Modules linked in: [ 1219.694219][ T6022] CPU: 1 PID: 6022 Comm: syz.4.14674 Not tainted syzkaller #0 [ 1219.701774][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1219.712203][ T6022] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1219.718859][ T6022] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 1219.738893][ T6022] RSP: 0018:ffffc9000323f360 EFLAGS: 00010246 [ 1219.745269][ T6022] RAX: 0b35653a12209c00 RBX: ffff888076a4f2a8 RCX: 0000000000080000 [ 1219.753444][ T6022] RDX: ffffc9000caf2000 RSI: 0000000000019d36 RDI: 0000000000019d37 [ 1219.761491][ T6022] RBP: ffffc9000323f450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1219.769584][ T6022] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888076a4f100 [ 1219.777678][ T6022] R13: ffffc9000323f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1219.785744][ T6022] FS: 00007f3f0a1256c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1219.794731][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.801443][ T6022] CR2: 00007fcf7afeb840 CR3: 000000007a2eb000 CR4: 00000000003506e0 [ 1219.809539][ T6022] Call Trace: [ 1219.812865][ T6022] [ 1219.815869][ T6022] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1219.821777][ T6022] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1219.827966][ T6022] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1219.834030][ T6022] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1219.839774][ T6022] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1219.846216][ T6022] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1219.851868][ T6022] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1219.858021][ T6022] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1219.863833][ T6022] ext4_evict_inode+0xa88/0xe70 [ 1219.868760][ T6022] ? evict+0x482/0x8a0 [ 1219.872938][ T6022] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1219.878921][ T6022] ? do_raw_spin_unlock+0x121/0x230 [ 1219.884250][ T6022] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1219.890209][ T6022] evict+0x4b7/0x8a0 [ 1219.894254][ T6022] ? __lock_acquire+0x7d80/0x7d80 [ 1219.899343][ T6022] ? proc_nr_inodes+0x230/0x230 [ 1219.904334][ T6022] ? do_raw_spin_unlock+0x121/0x230 [ 1219.909600][ T6022] ? _raw_spin_unlock+0x28/0x40 [ 1219.914572][ T6022] ext4_orphan_cleanup+0xdff/0x1650 [ 1219.919864][ T6022] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1219.926254][ T6022] ? ext4_orphan_del+0xc90/0xc90 [ 1219.931416][ T6022] ? ext4_register_li_request+0x182/0x930 [ 1219.937224][ T6022] ? errseq_check_and_advance+0x66/0x120 [ 1219.942927][ T6022] ext4_fill_super+0x5fb5/0x6870 [ 1219.948002][ T6022] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1219.954311][ T6022] ? __might_sleep+0xe0/0xe0 [ 1219.959191][ T6022] ? read_lock_is_recursive+0x20/0x20 [ 1219.964630][ T6022] ? snprintf+0xe9/0x140 [ 1219.969029][ T6022] ? down_read_killable+0x340/0x340 [ 1219.974289][ T6022] ? setup_bdev_super+0x56b/0x660 [ 1219.979484][ T6022] get_tree_bdev+0x3e5/0x520 [ 1219.984149][ T6022] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1219.990523][ T6022] ? setup_bdev_super+0x660/0x660 [ 1219.995603][ T6022] ? apparmor_capable+0x137/0x1a0 [ 1220.000696][ T6022] ? bpf_lsm_capable+0x9/0x10 [ 1220.005460][ T6022] ? security_capable+0x89/0xb0 [ 1220.010375][ T6022] vfs_get_tree+0x8c/0x280 [ 1220.015019][ T6022] do_new_mount+0x24a/0xa40 [ 1220.019592][ T6022] __se_sys_mount+0x2e7/0x3d0 [ 1220.024387][ T6022] ? __x64_sys_mount+0xc0/0xc0 [ 1220.029204][ T6022] ? lockdep_hardirqs_on+0x98/0x150 [ 1220.034527][ T6022] ? __x64_sys_mount+0x20/0xc0 [ 1220.039360][ T6022] do_syscall_64+0x55/0xb0 [ 1220.044000][ T6022] ? clear_bhb_loop+0x40/0x90 [ 1220.048836][ T6022] ? clear_bhb_loop+0x40/0x90 [ 1220.053581][ T6022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.059561][ T6022] RIP: 0033:0x7f3f0919f3ca [ 1220.064062][ T6022] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.084093][ T6022] RSP: 002b:00007f3f0a124e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1220.092632][ T6022] RAX: ffffffffffffffda RBX: 00007f3f0a124ee0 RCX: 00007f3f0919f3ca [ 1220.100883][ T6022] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f3f0a124ea0 [ 1220.108920][ T6022] RBP: 0000200000000180 R08: 00007f3f0a124ee0 R09: 0000000000000000 [ 1220.117017][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1220.125093][ T6022] R13: 00007f3f0a124ea0 R14: 000000000000048d R15: 000000000000002c [ 1220.133169][ T6022] [ 1220.136229][ T6022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1220.143553][ T6022] CPU: 1 PID: 6022 Comm: syz.4.14674 Not tainted syzkaller #0 [ 1220.151067][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1220.161173][ T6022] Call Trace: [ 1220.164490][ T6022] [ 1220.167460][ T6022] dump_stack_lvl+0x18c/0x250 [ 1220.172220][ T6022] ? show_regs_print_info+0x20/0x20 [ 1220.177467][ T6022] ? load_image+0x420/0x420 [ 1220.182051][ T6022] panic+0x2ca/0x720 [ 1220.186011][ T6022] ? bpf_jit_dump+0xd0/0xd0 [ 1220.190582][ T6022] __warn+0x2e0/0x470 [ 1220.194695][ T6022] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1220.200745][ T6022] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1220.206773][ T6022] report_bug+0x2be/0x4f0 [ 1220.211248][ T6022] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1220.217272][ T6022] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1220.223472][ T6022] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 1220.229493][ T6022] handle_bug+0xcf/0x120 [ 1220.233803][ T6022] exc_invalid_op+0x1a/0x50 [ 1220.238379][ T6022] asm_exc_invalid_op+0x1a/0x20 [ 1220.243285][ T6022] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1220.249930][ T6022] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 1220.269614][ T6022] RSP: 0018:ffffc9000323f360 EFLAGS: 00010246 [ 1220.275746][ T6022] RAX: 0b35653a12209c00 RBX: ffff888076a4f2a8 RCX: 0000000000080000 [ 1220.283754][ T6022] RDX: ffffc9000caf2000 RSI: 0000000000019d36 RDI: 0000000000019d37 [ 1220.291763][ T6022] RBP: ffffc9000323f450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1220.299781][ T6022] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888076a4f100 [ 1220.307808][ T6022] R13: ffffc9000323f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1220.315848][ T6022] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1220.321540][ T6022] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1220.327672][ T6022] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1220.333725][ T6022] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1220.339450][ T6022] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1220.345678][ T6022] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1220.351209][ T6022] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1220.357333][ T6022] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1220.363033][ T6022] ext4_evict_inode+0xa88/0xe70 [ 1220.367938][ T6022] ? evict+0x482/0x8a0 [ 1220.372141][ T6022] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1220.378095][ T6022] ? do_raw_spin_unlock+0x121/0x230 [ 1220.383350][ T6022] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1220.389296][ T6022] evict+0x4b7/0x8a0 [ 1220.393236][ T6022] ? __lock_acquire+0x7d80/0x7d80 [ 1220.398309][ T6022] ? proc_nr_inodes+0x230/0x230 [ 1220.403297][ T6022] ? do_raw_spin_unlock+0x121/0x230 [ 1220.408551][ T6022] ? _raw_spin_unlock+0x28/0x40 [ 1220.413461][ T6022] ext4_orphan_cleanup+0xdff/0x1650 [ 1220.418708][ T6022] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1220.425003][ T6022] ? ext4_orphan_del+0xc90/0xc90 [ 1220.429990][ T6022] ? ext4_register_li_request+0x182/0x930 [ 1220.435758][ T6022] ? errseq_check_and_advance+0x66/0x120 [ 1220.441478][ T6022] ext4_fill_super+0x5fb5/0x6870 [ 1220.446492][ T6022] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1220.452788][ T6022] ? __might_sleep+0xe0/0xe0 [ 1220.457431][ T6022] ? read_lock_is_recursive+0x20/0x20 [ 1220.462849][ T6022] ? snprintf+0xe9/0x140 [ 1220.467157][ T6022] ? down_read_killable+0x340/0x340 [ 1220.472408][ T6022] ? setup_bdev_super+0x56b/0x660 [ 1220.477488][ T6022] get_tree_bdev+0x3e5/0x520 [ 1220.482128][ T6022] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1220.488418][ T6022] ? setup_bdev_super+0x660/0x660 [ 1220.493487][ T6022] ? apparmor_capable+0x137/0x1a0 [ 1220.498561][ T6022] ? bpf_lsm_capable+0x9/0x10 [ 1220.503279][ T6022] ? security_capable+0x89/0xb0 [ 1220.508209][ T6022] vfs_get_tree+0x8c/0x280 [ 1220.512680][ T6022] do_new_mount+0x24a/0xa40 [ 1220.517241][ T6022] __se_sys_mount+0x2e7/0x3d0 [ 1220.521964][ T6022] ? __x64_sys_mount+0xc0/0xc0 [ 1220.526784][ T6022] ? lockdep_hardirqs_on+0x98/0x150 [ 1220.532024][ T6022] ? __x64_sys_mount+0x20/0xc0 [ 1220.536854][ T6022] do_syscall_64+0x55/0xb0 [ 1220.541321][ T6022] ? clear_bhb_loop+0x40/0x90 [ 1220.546048][ T6022] ? clear_bhb_loop+0x40/0x90 [ 1220.550779][ T6022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.556725][ T6022] RIP: 0033:0x7f3f0919f3ca [ 1220.561177][ T6022] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.580825][ T6022] RSP: 002b:00007f3f0a124e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1220.589291][ T6022] RAX: ffffffffffffffda RBX: 00007f3f0a124ee0 RCX: 00007f3f0919f3ca [ 1220.597324][ T6022] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f3f0a124ea0 [ 1220.605337][ T6022] RBP: 0000200000000180 R08: 00007f3f0a124ee0 R09: 0000000000000000 [ 1220.613355][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1220.621364][ T6022] R13: 00007f3f0a124ea0 R14: 000000000000048d R15: 000000000000002c [ 1220.629393][ T6022] [ 1220.633043][ T6022] Kernel Offset: disabled [ 1220.637538][ T6022] Rebooting in 86400 seconds..