last executing test programs: 2.570743247s ago: executing program 4 (id=12522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) 2.4814926s ago: executing program 2 (id=12524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="500000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000280012800b00010069703667726500001800028014000700ff00000000000000000000000000000108000400050001"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 2.393458583s ago: executing program 4 (id=12525): ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80004506, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141011b763620250501997539010203010902240001000010000904840402c4c61f0009050c02000202000a090582020002"], 0x0) 1.691854506s ago: executing program 2 (id=12534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a00010000000000000000000c00010000000000000000000c00020000000000000000000c000200ffffffffff"], 0x10c}, 0x1, 0xba01}, 0x0) 1.447950323s ago: executing program 2 (id=12538): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000001400)={0xa, 0x4e23, 0xb6d, @loopback={0x600}, 0x9}, 0x1c) 1.131824544s ago: executing program 3 (id=12546): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 1.032114197s ago: executing program 1 (id=12548): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts={{0x18, 0x29, 0x36, {0x6}}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}], 0x30}, 0x40010) 1.004063828s ago: executing program 3 (id=12549): r0 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 920.026711ms ago: executing program 1 (id=12551): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 875.894972ms ago: executing program 0 (id=12552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5, 0x200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x40a2}}}}]}, 0x38}}, 0x20000800) 811.773654ms ago: executing program 1 (id=12553): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f0000000240)='vfat\x00', 0x1004840, 0x0) 811.634114ms ago: executing program 3 (id=12554): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r0, 0x5609, 0xffffffffffffffff) 801.160424ms ago: executing program 0 (id=12555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="288200001522000014003c"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 776.061236ms ago: executing program 4 (id=12556): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x9}, 0x8) 593.211721ms ago: executing program 3 (id=12557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 592.785511ms ago: executing program 0 (id=12558): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 540.032463ms ago: executing program 4 (id=12559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000000000900030073797a310000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f787900001400028008000240ffffffff08000140000000020900010073797a30"], 0xc4}}, 0x0) 497.417164ms ago: executing program 1 (id=12560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) 476.993355ms ago: executing program 2 (id=12561): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 366.140929ms ago: executing program 3 (id=12562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '&\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '\x9a)!\xc5](\x04.\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) 366.004389ms ago: executing program 4 (id=12563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 365.670298ms ago: executing program 0 (id=12564): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x10b, 0xffff}, {0x10, 0x110, 0xd}], 0x20}, 0x44000) 251.701542ms ago: executing program 1 (id=12565): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, 0x0, 0x0) 251.562482ms ago: executing program 2 (id=12566): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000080)={0x6, "0ec9c713894cea737cc210de78e1916ae3b3f214a63bfc1e9fad9f9cf0e7a9be290a8d5ad96c6892675088d043d8001489854685ab9f5f496ec7dd52af678864ee997cdf08fe7b22fa3fae9a220c5cf927ac1eec04521d3ac7229dff0ca8274e7c4723fc7e9fb18031a86efef998e6bc8270e920b4119c166a9ddd9869ace27f"}) 197.177954ms ago: executing program 4 (id=12567): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 140.824265ms ago: executing program 0 (id=12568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003010102000000000000000002000009100001800c00028005008100840000000c0019800800010008"], 0x30}, 0x1, 0x0, 0x0, 0x18014}, 0x20004c00) 109.178267ms ago: executing program 2 (id=12569): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0xa, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x4010) 83.938488ms ago: executing program 1 (id=12570): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x1000000000000c8, 0x0, 0x3, 0x8, 0x3, 0xa, 0x5164}) 83.457778ms ago: executing program 3 (id=12571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 0s ago: executing program 0 (id=12572): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x9f0902, 0xfffffff2, @value=0x9}) kernel console output (not intermixed with test programs): 8][T28073] XFS (loop1): Quotacheck: Done. [ 1177.870379][ T4618] XFS (loop1): Unmounting Filesystem [ 1178.180294][T28120] loop3: detected capacity change from 0 to 764 [ 1178.598129][T28132] loop4: detected capacity change from 0 to 2048 [ 1178.638810][T28132] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1178.683911][T28132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1178.903909][T22960] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1179.093119][T28150] loop3: detected capacity change from 0 to 4096 [ 1179.104037][T28157] loop2: detected capacity change from 0 to 64 [ 1179.112261][T22960] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1179.126768][T22960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.135198][T28150] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 1179.161154][T22960] usb 2-1: config 0 descriptor?? [ 1179.195879][T28158] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1179.362402][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.368831][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.422230][T28162] cgroup: none used incorrectly [ 1179.622807][T22960] [drm:udl_init] *ERROR* Selecting channel failed [ 1179.652930][T22960] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1179.660549][T22960] [drm] Initialized udl on minor 2 [ 1179.694732][T22960] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.724683][T22960] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1179.766702][T22960] usb 2-1: USB disconnect, device number 22 [ 1179.785531][T22968] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1179.825183][T22968] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1179.852046][T22968] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1180.243436][T28193] loop4: detected capacity change from 0 to 512 [ 1180.339667][T28193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1180.362439][T28201] loop1: detected capacity change from 0 to 64 [ 1180.364720][T28193] ext4 filesystem being mounted at /2110/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.578015][ T4625] EXT4-fs (loop4): unmounting filesystem. [ 1180.697394][T28178] loop3: detected capacity change from 0 to 32768 [ 1181.170304][T28224] netlink: 'syz.3.10714': attribute type 1 has an invalid length. [ 1181.490205][T28238] loop3: detected capacity change from 0 to 512 [ 1181.519103][T28238] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1181.617110][T28238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.10720: bg 0: block 104: invalid block bitmap [ 1181.654653][T28238] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1181.718173][T28238] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10720: invalid indirect mapped block 1 (level 1) [ 1181.735645][T28238] EXT4-fs (loop3): 1 truncate cleaned up [ 1181.741780][T28238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1181.857187][T28247] loop1: detected capacity change from 0 to 1024 [ 1181.886984][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1181.981560][T28250] loop4: detected capacity change from 0 to 1024 [ 1182.075547][T28220] loop0: detected capacity change from 0 to 32768 [ 1182.281411][T28220] XFS (loop0): Mounting V5 Filesystem [ 1182.388966][T28220] XFS (loop0): Ending clean mount [ 1182.391654][T28273] loop4: detected capacity change from 0 to 256 [ 1182.427438][T28220] XFS (loop0): Quotacheck needed: Please wait. [ 1182.504414][T28220] XFS (loop0): Quotacheck: Done. [ 1182.539642][T28273] FAT-fs (loop4): Directory bread(block 64) failed [ 1182.576933][T28273] FAT-fs (loop4): Directory bread(block 65) failed [ 1182.583566][T28273] FAT-fs (loop4): Directory bread(block 66) failed [ 1182.617325][T28273] FAT-fs (loop4): Directory bread(block 67) failed [ 1182.629620][T28279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10737'. [ 1182.665426][T28273] FAT-fs (loop4): Directory bread(block 68) failed [ 1182.666367][ T4619] XFS (loop0): Unmounting Filesystem [ 1182.671998][T28273] FAT-fs (loop4): Directory bread(block 69) failed [ 1182.701627][T28273] FAT-fs (loop4): Directory bread(block 70) failed [ 1182.708577][T28273] FAT-fs (loop4): Directory bread(block 71) failed [ 1182.715199][T28273] FAT-fs (loop4): Directory bread(block 72) failed [ 1182.722123][T28273] FAT-fs (loop4): Directory bread(block 73) failed [ 1183.472217][T28305] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1183.636580][T28309] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20001 [ 1183.850232][T28311] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1183.872556][T28311] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1183.966044][T28317] netlink: 456 bytes leftover after parsing attributes in process `syz.3.10757'. [ 1183.986742][T28311] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1184.032090][T28321] netlink: 'syz.2.10754': attribute type 11 has an invalid length. [ 1184.035264][T28311] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1184.088450][T28311] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1184.148714][T28311] ntfs: volume version 3.1. [ 1184.160484][T28311] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1184.222391][T28311] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1184.247204][T28311] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1184.302910][T28311] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1184.317889][T28311] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1184.743054][T28336] set_capacity_and_notify: 3 callbacks suppressed [ 1184.743069][T28336] loop3: detected capacity change from 0 to 4096 [ 1184.844037][T28336] ntfs: volume version 3.1. [ 1185.946050][T28394] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1186.253934][ T4669] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1186.476980][ T4669] usb 3-1: Using ep0 maxpacket: 8 [ 1186.484678][ T4669] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 1186.508349][ T4669] usb 3-1: config 0 has no interface number 0 [ 1186.520194][ T4669] usb 3-1: config 0 interface 7 has no altsetting 0 [ 1186.539775][ T4669] usb 3-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 1186.559942][ T4669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.578999][ T4669] usb 3-1: Product: syz [ 1186.585548][ T4669] usb 3-1: Manufacturer: syz [ 1186.590189][ T4669] usb 3-1: SerialNumber: syz [ 1186.612901][ T4669] usb 3-1: config 0 descriptor?? [ 1186.704534][ T4705] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1186.780369][ T7695] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1186.833920][T28432] netlink: 'syz.3.10811': attribute type 2 has an invalid length. [ 1186.858367][ T4669] usb 3-1: bad CDC descriptors [ 1186.870298][ T4669] usb 3-1: bad CDC descriptors [ 1186.875752][ T4669] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1186.898099][ T4669] usb 3-1: USB disconnect, device number 23 [ 1186.921150][ T4705] usb 1-1: Using ep0 maxpacket: 32 [ 1186.928065][ T4705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.950040][ T4705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.971850][ T4705] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1186.983333][ T4705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.998862][ T7695] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1187.019733][ T4705] usb 1-1: config 0 descriptor?? [ 1187.024937][ T7695] usb 2-1: config 0 has no interface number 0 [ 1187.031751][ T7695] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1187.044821][ T4705] hub 1-1:0.0: USB hub found [ 1187.064447][ T7695] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1187.100183][ T7695] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1187.111130][ T7695] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1187.128613][ T7695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.152676][ T7695] usb 2-1: config 0 descriptor?? [ 1187.170494][ T7695] cp210x 2-1:0.255: cp210x converter detected [ 1187.264448][ T4705] hub 1-1:0.0: 5 ports detected [ 1187.272501][ T4705] hub 1-1:0.0: insufficient power available to use all downstream ports [ 1187.493591][ T4705] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1187.512948][ T4705] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1187.552560][ T4705] usbhid 1-1:0.0: can't add hid device: -71 [ 1187.561580][ T4705] usbhid: probe of 1-1:0.0 failed with error -71 [ 1187.597555][ T7695] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 1187.615535][ T4705] usb 1-1: USB disconnect, device number 15 [ 1187.622288][ T7695] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1187.645192][ T7695] usb 2-1: USB disconnect, device number 23 [ 1187.682841][ T7695] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1187.702086][ T7695] cp210x 2-1:0.255: device disconnected [ 1187.910293][T28462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.326151][T28477] loop1: detected capacity change from 0 to 764 [ 1188.349097][T28477] rock: directory entry would overflow storage [ 1188.357405][T28477] rock: sig=0x4654, size=5, remaining=4 [ 1188.486776][T22968] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1188.560294][T28483] loop4: detected capacity change from 0 to 8 [ 1188.698044][T22968] usb 1-1: Using ep0 maxpacket: 8 [ 1188.705617][T22968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.754579][T22968] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1188.775070][T22968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.802208][T22968] usb 1-1: Product: syz [ 1188.810985][T22968] usb 1-1: Manufacturer: syz [ 1188.815719][T22968] usb 1-1: SerialNumber: syz [ 1188.827286][T28493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10839'. [ 1188.851662][T22968] usb 1-1: config 0 descriptor?? [ 1188.866894][T22968] cdc_phonet 1-1:0.0: skipping garbage [ 1188.890981][T22968] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 1189.083867][T22968] usb 1-1: USB disconnect, device number 16 [ 1189.123407][T28504] delete_channel: no stack [ 1189.371409][T28516] overlayfs: unrecognized mount option "obj_type=@}\{" or missing value [ 1189.612107][T28525] loop1: detected capacity change from 0 to 256 [ 1189.998221][T22968] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1190.103599][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1190.103613][ T26] audit: type=1326 audit(1780902778.695:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.1.10865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1190.200322][ T26] audit: type=1326 audit(1780902778.704:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.1.10865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1190.268861][T22968] usb 5-1: Using ep0 maxpacket: 32 [ 1190.277757][T22968] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1190.308226][T22968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.324295][ T26] audit: type=1326 audit(1780902778.704:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.1.10865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1190.357245][T22968] usb 5-1: Product: syz [ 1190.361576][T22968] usb 5-1: Manufacturer: syz [ 1190.366201][T22968] usb 5-1: SerialNumber: syz [ 1190.377282][T28552] netlink: 'syz.2.10868': attribute type 1 has an invalid length. [ 1190.404015][T22968] usb 5-1: config 0 descriptor?? [ 1190.452889][T22968] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1190.460280][ T26] audit: type=1326 audit(1780902778.722:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.1.10865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1190.630078][T22968] gspca_sn9c2028: read1 error -71 [ 1190.646304][T22968] gspca_sn9c2028: read1 error -71 [ 1190.665743][T22968] gspca_sn9c2028: read1 error -71 [ 1190.674838][T22968] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 1190.742171][T22968] usb 5-1: USB disconnect, device number 22 [ 1191.003279][T28569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10877'. [ 1191.053977][T28569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10877'. [ 1191.342396][T28555] loop1: detected capacity change from 0 to 32768 [ 1191.799001][T28596] netlink: 'syz.0.10891': attribute type 1 has an invalid length. [ 1191.846249][T28598] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.10892'. [ 1192.008296][T28602] netlink: 'syz.3.10894': attribute type 2 has an invalid length. [ 1192.339576][T28612] loop4: detected capacity change from 0 to 4096 [ 1192.346771][T28612] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1192.479266][T28612] ntfs: volume version 3.1. [ 1192.535387][T28612] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1192.847501][ T7695] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1192.887600][T28632] loop4: detected capacity change from 0 to 4096 [ 1192.915216][T28632] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1192.953110][T28632] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1192.990112][T28632] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1193.037431][T28632] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1193.087577][ T7695] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1193.097895][T28632] ntfs: volume version 3.1. [ 1193.126081][ T7695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.161064][ T7695] usb 3-1: config 0 descriptor?? [ 1193.344889][T28648] loop0: detected capacity change from 0 to 128 [ 1193.374001][T28647] loop3: detected capacity change from 0 to 512 [ 1193.404717][T28648] FAT-fs (loop0): Directory bread(block 524322) failed [ 1193.439780][T28648] FAT-fs (loop0): Directory bread(block 524323) failed [ 1193.455188][T28647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1193.490930][T28648] FAT-fs (loop0): Directory bread(block 524324) failed [ 1193.517423][T28647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1193.530153][T28648] FAT-fs (loop0): Directory bread(block 524325) failed [ 1193.540946][T28648] FAT-fs (loop0): Directory bread(block 524326) failed [ 1193.547875][T28648] FAT-fs (loop0): Directory bread(block 524327) failed [ 1193.554391][T28647] ext4 filesystem being mounted at /2065/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.603357][T28648] FAT-fs (loop0): Directory bread(block 524328) failed [ 1193.611707][T28648] FAT-fs (loop0): Directory bread(block 524329) failed [ 1193.623204][ T7695] [drm:udl_init] *ERROR* Selecting channel failed [ 1193.642258][ T7695] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1193.660273][ T7695] [drm] Initialized udl on minor 2 [ 1193.665946][ T7695] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1193.676635][ T7695] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1193.692596][ T7695] usb 3-1: USB disconnect, device number 24 [ 1193.700591][T28648] FAT-fs (loop0): Directory bread(block 524322) failed [ 1193.701813][ T4705] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1193.720115][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1193.730313][ T4705] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1193.755566][ T4705] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1193.767569][T28648] FAT-fs (loop0): Directory bread(block 524323) failed [ 1193.798327][T28636] loop1: detected capacity change from 0 to 32768 [ 1193.834679][T28636] [ 1193.834679][T28636] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1193.834679][T28636] [ 1193.902324][T28636] ialloc: diAlloc returned -5! [ 1194.028788][ T4618] [ 1194.028788][ T4618] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1194.028788][ T4618] [ 1194.071995][ T4618] [ 1194.071995][ T4618] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1194.071995][ T4618] [ 1194.083419][T28659] loop0: detected capacity change from 0 to 4096 [ 1194.190309][T28659] ntfs: volume version 3.1. [ 1194.350417][T28667] netlink: 'syz.3.10923': attribute type 11 has an invalid length. [ 1194.437400][T28667] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10923'. [ 1194.712969][T28683] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10931'. [ 1194.765665][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10933'. [ 1194.985920][T28695] netlink: 'syz.3.10938': attribute type 21 has an invalid length. [ 1194.996366][T28695] netlink: 'syz.3.10938': attribute type 1 has an invalid length. [ 1195.009198][T28695] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10938'. [ 1195.085499][T28699] loop0: detected capacity change from 0 to 128 [ 1195.723342][T28723] netlink: 'syz.2.10951': attribute type 32 has an invalid length. [ 1196.057767][T28735] IPv6: Can't replace route, no match found [ 1196.073254][T28701] loop1: detected capacity change from 0 to 40427 [ 1196.114116][T28701] F2FS-fs (loop1): invalid crc value [ 1196.139299][T28701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1196.147878][T28738] loop2: detected capacity change from 0 to 1024 [ 1196.304847][T28701] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1196.327930][T28744] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1196.348991][T28701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1196.560699][T28751] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1197.229469][T28778] set_capacity_and_notify: 1 callbacks suppressed [ 1197.229486][T28778] loop1: detected capacity change from 0 to 512 [ 1197.318117][T28778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1197.340637][T28778] ext4 filesystem being mounted at /2102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.455826][T28761] loop2: detected capacity change from 0 to 32768 [ 1197.509830][ T4618] EXT4-fs (loop1): unmounting filesystem. [ 1197.581207][T28761] XFS (loop2): Mounting V5 Filesystem [ 1197.707927][T28761] XFS (loop2): Ending clean mount [ 1197.717109][T28761] XFS (loop2): Quotacheck needed: Please wait. [ 1197.793012][T28761] XFS (loop2): Quotacheck: Done. [ 1197.975137][ T4624] XFS (loop2): Unmounting Filesystem [ 1198.073913][T28812] loop3: detected capacity change from 0 to 512 [ 1198.200363][T28810] loop1: detected capacity change from 0 to 4096 [ 1198.208003][T28812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1198.228669][T28810] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1198.264503][T28812] ext4 filesystem being mounted at /2080/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.325468][T28818] netlink: 'syz.4.10992': attribute type 3 has an invalid length. [ 1198.356804][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1199.238969][T28856] overlayfs: missing 'lowerdir' [ 1199.994781][T28895] loop2: detected capacity change from 0 to 512 [ 1200.045826][T28895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1200.056601][T28895] ext4 filesystem being mounted at /2188/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.095543][ T4705] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1200.122909][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1200.158236][T28904] tc_dump_action: action bad kind [ 1200.308856][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1200.308872][ T26] audit: type=1326 audit(1780902788.109:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28910 comm="syz.1.11033" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x0 [ 1200.345746][ T4705] usb 4-1: Using ep0 maxpacket: 16 [ 1200.370628][ T4705] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1200.390230][ T4705] usb 4-1: config 1 has no interface number 0 [ 1200.396463][ T4705] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1200.422267][T28913] netlink: 'syz.4.11035': attribute type 30 has an invalid length. [ 1200.456365][ T4705] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1200.483517][T28913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11035'. [ 1200.501086][ T4705] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1200.511827][T28913] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1200.521794][T28913] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1200.531982][ T4705] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1200.542027][ T4705] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1200.583163][ T4705] usb 4-1: Product: syz [ 1200.593979][ T4705] usb 4-1: Manufacturer: syz [ 1200.604739][ T4705] usb 4-1: SerialNumber: syz [ 1200.633283][T28883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1200.866038][ T4705] aqc111: probe of 4-1:1.105 failed with error -22 [ 1201.014755][T28933] loop4: detected capacity change from 0 to 256 [ 1201.062317][T28933] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 1201.099147][ T4705] usb 4-1: USB disconnect, device number 26 [ 1201.128822][T28917] loop2: detected capacity change from 0 to 32768 [ 1201.158779][T28917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11036 (28917) [ 1201.211428][T28917] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1201.254937][T28917] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1201.264025][T28917] BTRFS info (device loop2): using free space tree [ 1201.544089][T28917] BTRFS info (device loop2): enabling ssd optimizations [ 1201.685484][T28944] loop1: detected capacity change from 0 to 32768 [ 1201.724607][T28883] Process accounting resumed [ 1201.736548][ T4624] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1201.747280][T28944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.11050 (28944) [ 1201.807539][T28944] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1201.817736][T28944] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1201.888505][T28972] loop0: detected capacity change from 0 to 512 [ 1201.914608][T28944] BTRFS info (device loop1): setting nodatasum [ 1201.956636][T28944] BTRFS info (device loop1): force zlib compression, level 3 [ 1202.000310][T28944] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1202.074370][T28972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1202.116688][T28944] BTRFS info (device loop1): use lzo compression, level 0 [ 1202.179572][T28944] BTRFS info (device loop1): turning on flush-on-commit [ 1202.197579][T28972] ext4 filesystem being mounted at /2183/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.234595][T28944] BTRFS info (device loop1): enabling auto defrag [ 1202.255923][T28944] BTRFS info (device loop1): max_inline at 4096 [ 1202.266829][T28944] BTRFS info (device loop1): using free space tree [ 1202.303419][T28981] netlink: 'syz.2.11057': attribute type 2 has an invalid length. [ 1202.363115][ T4619] EXT4-fs (loop0): unmounting filesystem. [ 1202.393682][T28981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11057'. [ 1202.483613][T28973] loop3: detected capacity change from 0 to 32768 [ 1202.550666][T28973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11058 (28973) [ 1202.643001][T28973] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1202.663277][T29003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11062'. [ 1202.672560][T28944] BTRFS info (device loop1): enabling ssd optimizations [ 1202.719940][T28973] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1202.729932][T28973] BTRFS info (device loop3): using free space tree [ 1202.953001][T28973] BTRFS info (device loop3): enabling ssd optimizations [ 1202.990719][ T4618] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1203.138896][ T4628] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1203.392329][T29039] comedi comedi3: 8255: I/O port conflict (0x40404f24,4) [ 1203.399549][T29039] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1203.447905][ T5304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5304) [ 1203.502308][T29039] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1203.518058][T29039] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 1203.543633][T29039] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1203.551232][T29039] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1203.649340][T29039] comedi comedi3: 8255: I/O port conflict (0x4c95238c,4) [ 1203.674367][T29039] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1203.703161][T29039] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 1203.758748][T29039] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1203.790043][T29039] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1203.797195][T29039] comedi comedi3: 8255: I/O port conflict (0x400e1c6,4) [ 1203.867973][T29039] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1203.898406][T29039] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1203.904999][T29039] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1203.956303][T29039] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1203.962913][T29039] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1204.017609][T29039] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1204.039701][T29039] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 1204.090321][T29059] loop1: detected capacity change from 0 to 256 [ 1204.210814][T29059] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1204.703222][T29084] ieee802154 phy0 wpan0: encryption failed: -22 [ 1205.738992][T29140] netlink: 'syz.4.11118': attribute type 29 has an invalid length. [ 1205.806705][T29140] netlink: 'syz.4.11118': attribute type 29 has an invalid length. [ 1206.125341][T29158] netlink: 'syz.0.11127': attribute type 11 has an invalid length. [ 1206.670428][ T26] audit: type=1326 audit(1780902793.979:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.1.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1206.747771][ T26] audit: type=1326 audit(1780902794.016:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.1.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1206.818590][T29188] loop2: detected capacity change from 0 to 764 [ 1206.832834][ T26] audit: type=1326 audit(1780902794.016:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.1.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1206.917789][ T26] audit: type=1326 audit(1780902794.016:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.1.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759ce59 code=0x7ffc0000 [ 1206.974492][T29188] Symlink component flag not implemented [ 1207.007880][T29188] Symlink component flag not implemented [ 1207.028127][T29188] Symlink component flag not implemented (129) [ 1207.062037][T29188] Symlink component flag not implemented (6) [ 1207.254882][ T4590] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1207.462786][ T4590] usb 5-1: Using ep0 maxpacket: 16 [ 1207.476457][ T4590] usb 5-1: config 0 has no interfaces? [ 1207.512789][ T4590] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1207.542279][ T4590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.571123][ T4590] usb 5-1: Product: syz [ 1207.575414][ T4590] usb 5-1: Manufacturer: syz [ 1207.580029][ T4590] usb 5-1: SerialNumber: syz [ 1207.616563][ T4590] r8152-cfgselector 5-1: config 0 descriptor?? [ 1207.824914][T29232] loop3: detected capacity change from 0 to 256 [ 1207.849223][ T4590] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1207.887011][T29232] FAT-fs (loop3): Directory bread(block 64) failed [ 1207.921489][T29232] FAT-fs (loop3): Directory bread(block 65) failed [ 1207.928339][T29232] FAT-fs (loop3): Directory bread(block 66) failed [ 1207.957083][T29232] FAT-fs (loop3): Directory bread(block 67) failed [ 1207.975004][T29232] FAT-fs (loop3): Directory bread(block 68) failed [ 1207.992588][T29232] FAT-fs (loop3): Directory bread(block 69) failed [ 1208.003578][T29232] FAT-fs (loop3): Directory bread(block 70) failed [ 1208.020928][T29232] FAT-fs (loop3): Directory bread(block 71) failed [ 1208.045648][T29232] FAT-fs (loop3): Directory bread(block 72) failed [ 1208.070186][T29232] FAT-fs (loop3): Directory bread(block 73) failed [ 1208.096695][ T4590] usb 5-1: USB disconnect, device number 23 [ 1208.306352][T29245] loop0: detected capacity change from 0 to 512 [ 1208.349517][T29245] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1208.363180][T29245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1208.371630][T29245] System zones: 0-1, 15-15, 18-18, 34-34 [ 1208.465105][T29245] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1208.503691][T29245] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1208.513090][T29245] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1208.569964][T29259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1208.579270][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1208.589824][T29245] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1208.601484][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1208.636186][T29245] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.11170: bad orphan inode 16 [ 1208.759633][T29245] ext4_test_bit(bit=15, block=18) = 1 [ 1208.773826][T29245] is_bad_inode(inode)=0 [ 1208.778023][T29245] NEXT_ORPHAN(inode)=0 [ 1208.816527][T29245] max_ino=32 [ 1208.826969][T29245] i_nlink=2 [ 1208.841554][T29245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1208.907142][T29245] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1209.058250][ T4619] EXT4-fs (loop0): unmounting filesystem. [ 1209.472230][ T4705] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1209.698315][ T4705] usb 5-1: Using ep0 maxpacket: 32 [ 1209.705180][ T4705] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1209.721584][ T4705] usb 5-1: config 0 has no interface number 0 [ 1209.728130][ T4705] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1209.750735][ T4705] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1209.796793][ T4705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.825624][ T4705] usb 5-1: Product: syz [ 1209.846851][ T4705] usb 5-1: Manufacturer: syz [ 1209.851506][ T4705] usb 5-1: SerialNumber: syz [ 1209.886844][ T4705] usb 5-1: config 0 descriptor?? [ 1209.901974][T29281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1209.990104][T29290] loop3: detected capacity change from 0 to 32768 [ 1210.049973][T29290] XFS (loop3): Mounting V5 Filesystem [ 1210.098119][T29290] XFS (loop3): Ending clean mount [ 1210.131499][T29281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.146336][T29290] XFS (loop3): Quotacheck needed: Please wait. [ 1210.256506][T29290] XFS (loop3): Quotacheck: Done. [ 1210.403915][ T4705] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1210.421527][ T4705] asix: probe of 5-1:0.188 failed with error -71 [ 1210.439424][ T4705] usb 5-1: USB disconnect, device number 24 [ 1210.778606][ T4628] XFS (loop3): Unmounting Filesystem [ 1210.989847][T29334] loop0: detected capacity change from 0 to 128 [ 1211.023182][T29334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1211.094426][T29334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1211.118368][T29334] ext4 filesystem being mounted at /2217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1211.362160][ T4619] EXT4-fs (loop0): unmounting filesystem. [ 1211.400818][T29348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1211.772983][T29367] loop3: detected capacity change from 0 to 256 [ 1211.837882][T29367] FAT-fs (loop3): Directory bread(block 64) failed [ 1211.869147][T29367] FAT-fs (loop3): Directory bread(block 65) failed [ 1211.895853][T29367] FAT-fs (loop3): Directory bread(block 66) failed [ 1211.902539][T29367] FAT-fs (loop3): Directory bread(block 67) failed [ 1211.934751][T29367] FAT-fs (loop3): Directory bread(block 68) failed [ 1211.972696][T29367] FAT-fs (loop3): Directory bread(block 69) failed [ 1211.979346][T29367] FAT-fs (loop3): Directory bread(block 70) failed [ 1212.042227][T29367] FAT-fs (loop3): Directory bread(block 71) failed [ 1212.065817][T29367] FAT-fs (loop3): Directory bread(block 72) failed [ 1212.083791][T29367] FAT-fs (loop3): Directory bread(block 73) failed [ 1212.304988][T29383] loop1: detected capacity change from 0 to 8 [ 1212.356195][T29383] SQUASHFS error: Unable to read directory block [629:26] [ 1212.408683][T29387] loop2: detected capacity change from 0 to 512 [ 1212.465989][T29387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1212.503500][T29387] System zones: 0-2, 18-18, 34-34 [ 1212.542424][T29391] loop4: detected capacity change from 0 to 64 [ 1212.552386][T29387] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1212.628845][T29363] loop0: detected capacity change from 0 to 40427 [ 1212.640398][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1212.651546][T29363] F2FS-fs (loop0): invalid crc value [ 1212.663961][T29387] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.11234: corrupted inode contents [ 1212.687695][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1212.694708][T29387] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.11234: mark_inode_dirty error [ 1212.711478][T29363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1212.766698][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1212.784485][T29387] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.11234: corrupted inode contents [ 1212.840635][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1212.864206][T29400] futex_wake_op: syz.1.11238 tries to shift op by 32; fix this program [ 1212.872681][T29363] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 1212.890459][T29363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1212.898450][T29387] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.11234: mark_inode_dirty error [ 1212.993552][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.001087][T29387] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.11234: corrupted inode contents [ 1213.078980][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.166270][T29387] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.11234: mark_inode_dirty error [ 1213.235671][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.268234][T29387] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.11234: corrupted inode contents [ 1213.330827][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.341245][T29387] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1213.401257][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.407839][T29387] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.11234: corrupted inode contents [ 1213.428131][T29418] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1213.473730][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.500819][T29387] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.11234: mark_inode_dirty error [ 1213.546759][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.557251][T29387] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1213.586060][T29387] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.593162][T29387] EXT4-fs (loop2): 1 truncate cleaned up [ 1213.603445][T29387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1213.621907][T26774] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1213.637508][T29387] ext4 filesystem being mounted at /2233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.648450][T26774] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:20: Failed to release dquot type 1 [ 1213.687806][T26774] EXT4-fs (loop2): Remounting filesystem read-only [ 1213.811512][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1214.208539][T29445] netlink: 'syz.4.11261': attribute type 5 has an invalid length. [ 1214.223887][T29447] netlink: 'syz.0.11260': attribute type 4 has an invalid length. [ 1214.238623][T29447] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1214.372678][T29453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11264'. [ 1214.816588][T29474] loop4: detected capacity change from 0 to 256 [ 1214.874437][T29439] loop2: detected capacity change from 0 to 40427 [ 1214.898788][T29474] FAT-fs (loop4): Directory bread(block 64) failed [ 1214.905386][T29474] FAT-fs (loop4): Directory bread(block 65) failed [ 1214.906017][T29439] F2FS-fs (loop2): invalid crc value [ 1214.949383][T29474] FAT-fs (loop4): Directory bread(block 66) failed [ 1214.955953][T29474] FAT-fs (loop4): Directory bread(block 67) failed [ 1215.007011][T29439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1215.036040][T29474] FAT-fs (loop4): Directory bread(block 68) failed [ 1215.042647][T29474] FAT-fs (loop4): Directory bread(block 69) failed [ 1215.092953][T29482] loop3: detected capacity change from 0 to 128 [ 1215.100637][T29474] FAT-fs (loop4): Directory bread(block 70) failed [ 1215.118686][T29474] FAT-fs (loop4): Directory bread(block 71) failed [ 1215.134478][T29474] FAT-fs (loop4): Directory bread(block 72) failed [ 1215.149420][T29439] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 1215.175305][T29474] FAT-fs (loop4): Directory bread(block 73) failed [ 1215.199977][T29439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1215.434412][T29487] x_tables: duplicate underflow at hook 4 [ 1215.742252][T29471] loop1: detected capacity change from 0 to 32768 [ 1215.800480][T29471] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1215.991256][T29505] loop4: detected capacity change from 0 to 64 [ 1216.195284][ T5304] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1216.332405][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11293'. [ 1216.543216][T29495] loop3: detected capacity change from 0 to 32768 [ 1216.584317][T29495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.11283 (29495) [ 1216.617985][T29495] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1216.651303][T29495] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1216.673102][T29495] BTRFS info (device loop3): setting nodatasum [ 1216.702999][T29495] BTRFS info (device loop3): force zlib compression, level 3 [ 1216.756538][T29495] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1216.815820][T29495] BTRFS info (device loop3): use lzo compression, level 0 [ 1216.823048][T29495] BTRFS info (device loop3): turning on flush-on-commit [ 1216.894080][T29495] BTRFS info (device loop3): enabling auto defrag [ 1216.925664][T29495] BTRFS info (device loop3): max_inline at 4096 [ 1216.947520][T29495] BTRFS info (device loop3): using free space tree [ 1217.079286][T29536] loop2: detected capacity change from 0 to 4096 [ 1217.132818][T29557] netlink: 'syz.4.11307': attribute type 46 has an invalid length. [ 1217.177258][T29495] BTRFS info (device loop3): enabling ssd optimizations [ 1217.188558][T29536] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1217.216368][T29557] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11307'. [ 1217.235357][T29536] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1217.263789][T29536] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1217.333085][T29536] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1217.372991][T29536] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1217.469474][T29536] ntfs: volume version 3.1. [ 1217.476258][T29536] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1217.490625][ T4628] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1217.522998][T29536] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1217.618978][T29536] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1217.662943][T29536] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1217.802959][T29574] loop0: detected capacity change from 0 to 2048 [ 1217.832885][T29574] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 1217.889685][T29574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1218.028948][T29579] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1218.486388][T29596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11324'. [ 1218.682694][T29604] loop4: detected capacity change from 0 to 4096 [ 1218.760174][T29604] ntfs: volume version 3.1. [ 1219.239128][T29629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11340'. [ 1219.262975][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 1219.262987][ T26] audit: type=1326 audit(1780902805.609:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29630 comm="syz.0.11343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c2d99ce59 code=0x0 [ 1219.432328][T29639] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11345'. [ 1219.555228][T29645] netlink: 'syz.4.11348': attribute type 1 has an invalid length. [ 1219.603236][T29648] loop1: detected capacity change from 0 to 256 [ 1219.836219][T29657] loop3: detected capacity change from 0 to 1024 [ 1219.843749][T29657] EXT4-fs: Ignoring removed orlov option [ 1219.902295][T29657] EXT4-fs: inline encryption not supported [ 1219.964858][T29657] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1220.012136][T29657] EXT4-fs (loop3): invalid journal inode [ 1220.018366][T29657] EXT4-fs (loop3): can't get journal size [ 1220.058773][T29657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1220.134794][T29657] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 1220.134794][T29657] [ 1220.232664][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1220.402890][T29680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11366'. [ 1220.446805][T29685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11367'. [ 1220.608457][T29691] loop3: detected capacity change from 0 to 512 [ 1220.675625][T29691] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1220.718123][T29691] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1220.776991][T29691] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1220.829086][T29691] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.11371: attempt to clear invalid blocks 2 len 1 [ 1220.887412][T29691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.11371: invalid indirect mapped block 1819239214 (level 0) [ 1220.962706][T29691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.11371: invalid indirect mapped block 1819239214 (level 1) [ 1221.038207][T29691] EXT4-fs (loop3): 1 truncate cleaned up [ 1221.046467][T29691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1221.105280][T29712] loop0: detected capacity change from 0 to 64 [ 1221.135431][T29691] EXT4-fs error (device loop3): ext4_lookup:1855: inode #2: comm syz.3.11371: 'file1' linked to parent dir [ 1221.200910][T29691] EXT4-fs error (device loop3): ext4_lookup:1855: inode #2: comm syz.3.11371: 'file1' linked to parent dir [ 1221.364618][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1221.596911][T29727] loop0: detected capacity change from 0 to 2048 [ 1221.640743][T29727] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1221.721638][T29727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1222.393159][T29733] loop2: detected capacity change from 0 to 32768 [ 1222.424374][T29731] loop4: detected capacity change from 0 to 32768 [ 1222.443302][T29733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11389 (29733) [ 1222.463795][T29731] ERROR: (device loop4): diAllocAG: numfree > numinos [ 1222.463795][T29731] [ 1222.475548][T29731] ERROR: (device loop4): remounting filesystem as read-only [ 1222.489869][T29733] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1222.510880][T29733] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1222.530684][T29731] ialloc: diAlloc returned -5! [ 1222.541654][T29733] BTRFS info (device loop2): using free space tree [ 1222.571707][T29757] loop3: detected capacity change from 0 to 2048 [ 1222.644794][T29757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1222.828930][T29771] loop0: detected capacity change from 0 to 1024 [ 1222.922970][T29733] BTRFS info (device loop2): enabling ssd optimizations [ 1223.086490][T29784] IPv6: NLM_F_CREATE should be specified when creating new route [ 1223.134512][ T4624] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1223.788268][T29802] tmpfs: Bad value for 'mpol' [ 1223.997907][T29813] netlink: 'syz.0.11419': attribute type 5 has an invalid length. [ 1224.136958][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11421'. [ 1224.136980][T29816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.255349][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11425'. [ 1224.319488][T29824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11425'. [ 1224.375628][T29824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11425'. [ 1224.599421][T29834] loop4: detected capacity change from 0 to 2048 [ 1224.644328][T29834] NILFS (loop4): invalid segment: Inconsistency found [ 1224.680012][T29834] NILFS (loop4): trying rollback from an earlier position [ 1224.740024][T29834] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1224.771655][T29834] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 1224.872419][T29850] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11438'. [ 1224.953915][T29852] loop1: detected capacity change from 0 to 512 [ 1225.068221][T29859] loop4: detected capacity change from 0 to 736 [ 1225.078237][T29854] can0: slcan on ttyS3. [ 1225.166186][T29852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11441: bg 0: block 127: padding at end of block bitmap is not set [ 1225.247755][T29864] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1225.270507][T29852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.11441: iget: bad extra_isize 58 (inode size 256) [ 1225.285131][T29864] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1225.287369][T29853] can0 (unregistered): slcan off ttyS3. [ 1225.339568][T29852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.11441: error while reading EA inode 11 err=-117 [ 1225.393659][T29852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.11441: iget: bad extra_isize 58 (inode size 256) [ 1225.448075][T29852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.11441: error while reading EA inode 11 err=-117 [ 1225.505022][T29852] EXT4-fs (loop1): 1 orphan inode deleted [ 1225.510821][T29852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1225.739305][ T4618] EXT4-fs (loop1): unmounting filesystem. [ 1226.074166][T29889] xt_CT: No such helper "pptp" [ 1226.232893][T29904] loop0: detected capacity change from 0 to 256 [ 1226.281130][T29904] exfat: Deprecated parameter 'namecase' [ 1226.336602][T29904] exfat: Deprecated parameter 'namecase' [ 1226.351065][T29908] loop2: detected capacity change from 0 to 256 [ 1226.407970][T29904] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1226.715208][ T4705] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1226.758995][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11467'. [ 1226.801451][T29923] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.11468: corrupted in-inode xattr [ 1226.804878][ T4590] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1226.857322][T29923] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.11468: couldn't read orphan inode 15 (err -117) [ 1226.884041][T29923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1226.942833][ T4705] usb 2-1: Using ep0 maxpacket: 32 [ 1226.951143][ T4705] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1226.964879][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1227.001489][ T4705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.042117][ T4590] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1227.061378][ T4590] usb 5-1: config 0 has no interface number 0 [ 1227.063045][ T4705] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1227.076123][ T4590] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1227.111715][ T4705] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1227.133322][ T4705] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1227.146045][ T4590] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1227.166248][ T4705] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1227.177916][ T4590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.205566][ T4590] usb 5-1: Product: syz [ 1227.209804][ T4590] usb 5-1: Manufacturer: syz [ 1227.221747][ T4705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.237141][ T4590] usb 5-1: SerialNumber: syz [ 1227.249343][ T4705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.264664][ T4590] usb 5-1: config 0 descriptor?? [ 1227.278922][ T4705] usb 2-1: Product: syz [ 1227.287939][ T4705] usb 2-1: Manufacturer: syz [ 1227.297426][ T4705] usb 2-1: SerialNumber: syz [ 1227.301993][T29917] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1227.350223][ T4590] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fa:16:c4:91:9a:cb [ 1227.379857][T29942] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1227.563838][ T4705] usb 2-1: USB disconnect, device number 24 [ 1227.610400][ T5304] udevd[5304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.375823][T29982] set_capacity_and_notify: 1 callbacks suppressed [ 1228.375840][T29982] loop3: detected capacity change from 0 to 2048 [ 1228.441503][T29982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1228.923255][T30002] loop1: detected capacity change from 0 to 512 [ 1228.964953][T30005] binder: 30004:30005 ioctl c018620c 200000001180 returned -22 [ 1228.983079][T30002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1228.999816][T30002] System zones: 0-2, 18-18, 34-34 [ 1229.042453][T30002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1229.071176][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.085057][T30002] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.11497: corrupted inode contents [ 1229.104852][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.115350][T30002] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.11497: mark_inode_dirty error [ 1229.153704][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.169798][T30002] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.11497: corrupted inode contents [ 1229.230965][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.248182][T30002] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.11497: mark_inode_dirty error [ 1229.282074][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.299974][T30002] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.11497: corrupted inode contents [ 1229.374603][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.400505][T30002] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.11497: mark_inode_dirty error [ 1229.440012][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.468026][T30002] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.11497: corrupted inode contents [ 1229.519760][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.537555][T30002] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1229.572099][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.592303][T30002] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.11497: corrupted inode contents [ 1229.620298][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.637856][T30002] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.11497: mark_inode_dirty error [ 1229.666586][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.707132][T30002] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1229.727947][T30002] EXT4-fs (loop1): Remounting filesystem read-only [ 1229.749025][T30002] EXT4-fs (loop1): 1 truncate cleaned up [ 1229.771007][T26762] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1229.803087][T30002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1229.827534][T30002] ext4 filesystem being mounted at /2214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.844666][ T4705] usb 5-1: USB disconnect, device number 25 [ 1229.846636][T26762] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 1229.869412][ T4705] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1229.908695][T26762] EXT4-fs (loop1): Remounting filesystem read-only [ 1230.185987][ T4618] EXT4-fs (loop1): unmounting filesystem. [ 1230.742626][T30029] loop3: detected capacity change from 0 to 32768 [ 1230.743341][T30070] loop2: detected capacity change from 0 to 512 [ 1230.899664][T30029] XFS (loop3): Mounting V5 Filesystem [ 1230.906889][T30070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1230.946248][T30070] ext4 filesystem being mounted at /2288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.021309][T30070] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.11522: iget: bad i_size value: -5785320947702 [ 1231.036148][T30029] XFS (loop3): Ending clean mount [ 1231.275706][ T4628] XFS (loop3): Unmounting Filesystem [ 1231.283339][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1231.492202][T30105] xt_connbytes: Forcing CT accounting to be enabled [ 1231.556201][T30105] xt_NFQUEUE: number of total queues is 0 [ 1232.216203][T30138] netlink: 180 bytes leftover after parsing attributes in process `syz.0.11543'. [ 1232.239155][T30142] loop1: detected capacity change from 0 to 512 [ 1232.288317][T30142] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 1232.349385][T30142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1232.393249][T30142] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1232.429719][T30142] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.11546: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1232.462660][T30142] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.11546: couldn't read orphan inode 13 (err -117) [ 1232.486131][T30142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1232.515801][T30152] netlink: 'syz.2.11549': attribute type 1 has an invalid length. [ 1232.533353][T30142] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 1232.541806][T30152] netlink: 'syz.2.11549': attribute type 2 has an invalid length. [ 1232.645951][ T4618] EXT4-fs (loop1): unmounting filesystem. [ 1232.820211][T30159] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1233.124185][T30174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11560'. [ 1233.203326][T30147] loop4: detected capacity change from 0 to 32768 [ 1233.294015][T30147] XFS (loop4): Mounting V5 Filesystem [ 1233.302804][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1233.405475][T30147] XFS (loop4): Ending clean mount [ 1233.438931][T30147] XFS (loop4): Quotacheck needed: Please wait. [ 1233.512730][T30147] XFS (loop4): Quotacheck: Done. [ 1233.541057][ T7] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1233.550215][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1233.584169][ T4669] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1233.605152][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.635665][ T4625] XFS (loop4): Unmounting Filesystem [ 1233.644048][ T7] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1233.673436][T30167] loop0: detected capacity change from 0 to 32768 [ 1233.680080][ T7] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1233.695366][ T7] usb 3-1: Product: syz [ 1233.699609][ T7] usb 3-1: Manufacturer: syz [ 1233.731888][ T7] usb 3-1: SerialNumber: syz [ 1233.745473][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1233.745473][T30167] [ 1233.776072][ T7] usb 3-1: config 0 descriptor?? [ 1233.802652][ T4669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1233.830604][T30167] ERROR: (device loop0): remounting filesystem as read-only [ 1233.840449][T30167] xtLookup: xtSearch returned -5 [ 1233.846123][ T4669] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1233.855450][T30167] add_index: get/read_metapage failed! [ 1233.860967][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1233.860967][T30167] [ 1233.877611][ T4669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.886264][ T4669] usb 2-1: Product: syz [ 1233.896344][ T4669] usb 2-1: Manufacturer: syz [ 1233.901287][T30167] xtLookup: xtSearch returned -5 [ 1233.906329][T30167] free_index: error reading directory table [ 1233.912669][ T4669] usb 2-1: SerialNumber: syz [ 1233.938562][ T4669] usb 2-1: config 0 descriptor?? [ 1233.950298][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1233.950298][T30167] [ 1233.962142][T30167] xtLookup: xtSearch returned -5 [ 1233.976564][ T4669] powermate: probe of 2-1:0.0 failed with error -5 [ 1233.988300][T30167] free_index: error reading directory table [ 1234.025808][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1234.025808][T30167] [ 1234.093389][T30167] xtLookup: xtSearch returned -5 [ 1234.098394][T30167] free_index: error reading directory table [ 1234.141641][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1234.141641][T30167] [ 1234.173656][T30167] xtLookup: xtSearch returned -5 [ 1234.178726][T30167] free_index: error reading directory table [ 1234.206707][T30167] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1234.206707][T30167] [ 1234.222140][ T7] usb 2-1: USB disconnect, device number 25 [ 1234.240914][T30193] Process accounting paused [ 1234.252639][T30167] xtLookup: xtSearch returned -5 [ 1234.257925][T30167] free_index: error reading directory table [ 1234.292585][T22948] usb 3-1: USB disconnect, device number 25 [ 1234.555418][T30209] loop4: detected capacity change from 0 to 512 [ 1234.587098][T30209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.11569: bg 0: block 127: padding at end of block bitmap is not set [ 1234.605489][T30209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.11569: iget: bad extra_isize 58 (inode size 256) [ 1234.640039][T30209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.11569: error while reading EA inode 11 err=-117 [ 1234.658009][T30209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.11569: iget: bad extra_isize 58 (inode size 256) [ 1234.672752][T30209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.11569: error while reading EA inode 11 err=-117 [ 1234.694508][T30209] EXT4-fs (loop4): 1 orphan inode deleted [ 1234.701466][T30209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1234.795713][ T4625] EXT4-fs (loop4): unmounting filesystem. [ 1235.177635][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11578'. [ 1235.197799][T30229] gre0: Master is either lo or non-ether device [ 1235.297160][ T5304] udevd[5304]: inotify_add_watch(7, /dev/nbd4p5, 10) failed: No such file or directory [ 1235.604799][T30247] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1235.856195][T30258] loop2: detected capacity change from 0 to 512 [ 1235.872137][T30260] xt_NFQUEUE: number of total queues is 0 [ 1235.892737][T30258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1235.984619][T30258] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.11592: inode has both inline data and extents flags [ 1236.099391][T30258] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.11592: couldn't read orphan inode 15 (err -117) [ 1236.126373][T30261] loop3: detected capacity change from 0 to 4096 [ 1236.154076][T30258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1236.195769][T30261] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1236.256838][T30261] ntfs3: loop3: Failed to load $Extend. [ 1236.372270][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1236.723458][T30290] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1237.275136][T30276] loop1: detected capacity change from 0 to 40427 [ 1237.313742][T30276] F2FS-fs (loop1): invalid crc value [ 1237.357846][T30276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1237.484849][T30276] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1237.553290][T30276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1237.675621][T30323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1237.900183][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11622'. [ 1237.950420][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11622'. [ 1238.115497][T30337] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1238.409526][T30351] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1238.564444][T30348] loop4: detected capacity change from 0 to 4096 [ 1238.585507][T30348] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1238.606732][T30321] loop3: detected capacity change from 0 to 32768 [ 1238.695479][T30321] XFS (loop3): Mounting V5 Filesystem [ 1238.817327][T30360] loop2: detected capacity change from 0 to 2048 [ 1238.880648][T30360] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1238.891206][T30321] XFS (loop3): Ending clean mount [ 1238.900224][T30321] XFS (loop3): Quotacheck needed: Please wait. [ 1238.938311][T30360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1239.045081][T30321] XFS (loop3): Quotacheck: Done. [ 1239.199561][ T4628] XFS (loop3): Unmounting Filesystem [ 1239.958097][T30405] libceph: resolve '400' (ret=-3): failed [ 1239.995296][T30408] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 1240.102117][T30414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 1240.387150][T30428] loop3: detected capacity change from 0 to 16 [ 1240.416684][T30428] erofs: (device loop3): mounted with root inode @ nid 36. [ 1240.447384][T30428] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1240.503857][T30428] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1240.749069][T30444] loop0: detected capacity change from 0 to 512 [ 1240.796392][T30444] EXT4-fs: Ignoring removed oldalloc option [ 1240.815257][T30444] EXT4-fs: Ignoring removed nobh option [ 1240.849195][T30451] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 1240.866624][T30450] loop2: detected capacity change from 0 to 1024 [ 1240.893568][T30451] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 1240.902903][T30444] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.11673: ea_inode file size=7 entry size=6 [ 1240.987648][T30444] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.11673: iget: bad extra_isize 90 (inode size 256) [ 1241.005221][T30444] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.11673: error while reading EA inode 11 err=-117 [ 1241.040378][T30444] EXT4-fs (loop0): 1 orphan inode deleted [ 1241.048456][T30444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1241.120684][T30444] EXT4-fs error (device loop0): __ext4_iget:5102: inode #14: block 1886221359: comm syz.0.11673: invalid block [ 1241.311066][ T4619] EXT4-fs (loop0): unmounting filesystem. [ 1241.538473][T30473] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1241.922198][T30493] loop3: detected capacity change from 0 to 8 [ 1242.025890][T30497] netlink: 'syz.1.11695': attribute type 21 has an invalid length. [ 1242.075149][T30497] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11695'. [ 1242.123743][T30497] netlink: 'syz.1.11695': attribute type 5 has an invalid length. [ 1242.169609][T30497] netlink: 'syz.1.11695': attribute type 6 has an invalid length. [ 1242.220838][T30497] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11695'. [ 1242.385545][T30511] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1242.406769][T30513] loop1: detected capacity change from 0 to 512 [ 1242.413714][T30513] EXT4-fs: Ignoring removed nobh option [ 1242.468682][T30513] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1242.541632][T30513] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.11703: invalid indirect mapped block 4294967295 (level 1) [ 1242.647439][T30513] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.11703: invalid indirect mapped block 4294967295 (level 1) [ 1242.693781][T30513] EXT4-fs (loop1): 2 truncates cleaned up [ 1242.706815][T30513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1242.913348][ T4618] EXT4-fs (loop1): unmounting filesystem. [ 1243.069889][ T26] audit: type=1326 audit(1780902827.577:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30537 comm="syz.2.11715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1243.094076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.171198][ T26] audit: type=1326 audit(1780902827.614:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30537 comm="syz.2.11715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1243.281423][ T26] audit: type=1326 audit(1780902827.614:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30537 comm="syz.2.11715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1243.305623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.338974][T30548] loop3: detected capacity change from 0 to 256 [ 1243.377217][T30548] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1243.465441][ T26] audit: type=1326 audit(1780902827.614:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30537 comm="syz.2.11715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1243.596429][T30548] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 1243.625874][T30548] exFAT-fs (loop3): Filesystem has been set read-only [ 1243.796028][T30564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11728'. [ 1243.806837][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11728'. [ 1243.854142][T30564] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11728'. [ 1243.861408][T30566] loop3: detected capacity change from 0 to 128 [ 1243.880541][T30568] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present [ 1243.903562][T30562] loop4: detected capacity change from 0 to 4096 [ 1243.972557][T30566] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1244.076303][T30566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1244.778581][T30590] loop4: detected capacity change from 0 to 8192 [ 1245.084975][T30614] comedi comedi0: comedi_config --init_data is deprecated [ 1245.179513][T30606] loop1: detected capacity change from 0 to 8192 [ 1245.247855][T30606] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1245.298105][T30606] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1245.307705][T30606] REISERFS (device loop1): using ordered data mode [ 1245.314568][T30606] reiserfs: using flush barriers [ 1245.321401][T30606] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1245.338004][T30606] REISERFS (device loop1): checking transaction log (loop1) [ 1245.377750][T30621] tmpfs: Bad value for 'mpol' [ 1245.581177][T30606] REISERFS (device loop1): Using tea hash to sort names [ 1245.603855][T30630] erofs: (device loop0): mounted with root inode @ nid 36. [ 1245.618061][T30606] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1245.913559][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1245.922403][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.928779][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.935758][T30636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 1246.817489][T30664] set_capacity_and_notify: 1 callbacks suppressed [ 1246.817505][T30664] loop3: detected capacity change from 0 to 8192 [ 1246.925873][T30664] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1246.963724][T30664] FAT-fs (loop3): Filesystem has been set read-only [ 1247.028924][T30686] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1247.059936][T30686] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1247.238159][T30689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11788'. [ 1247.451313][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11794'. [ 1247.471722][T30703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11794'. [ 1247.481077][T30700] netlink: 'syz.0.11793': attribute type 12 has an invalid length. [ 1247.505501][T30703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11794'. [ 1247.622698][T30709] ip6t_REJECT: ECHOREPLY is not supported [ 1247.925510][T30724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11805'. [ 1247.969859][T30724] device gtp0 entered promiscuous mode [ 1248.026751][T30727] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1248.031831][T30731] loop1: detected capacity change from 0 to 64 [ 1248.035596][T30727] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1248.127963][T30727] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1248.143259][T30727] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1248.152574][T30727] device geneve3 entered promiscuous mode [ 1248.199874][T30727] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.209592][T30735] netlink: 'syz.0.11810': attribute type 2 has an invalid length. [ 1248.228111][T30735] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11810'. [ 1248.255585][T30727] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.271947][T30727] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.300645][T30739] loop1: detected capacity change from 0 to 256 [ 1248.329232][T30727] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.366416][T30739] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1248.435219][T30739] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 1248.452597][T30739] exFAT-fs (loop1): Filesystem has been set read-only [ 1248.578741][ T4669] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1248.784568][ T4669] usb 4-1: Using ep0 maxpacket: 16 [ 1248.793644][ T4669] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1248.815469][ T4669] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1248.839521][ T4669] usb 4-1: config 1 has no interface number 1 [ 1248.845666][ T4669] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1248.871494][ T4669] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.910831][ T4669] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1248.923990][ T4669] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1248.935167][T30760] loop1: detected capacity change from 0 to 1024 [ 1248.941657][ T4669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.965820][ T4669] usb 4-1: Product: syz [ 1248.996147][ T4669] usb 4-1: Manufacturer: syz [ 1249.019030][ T4669] usb 4-1: SerialNumber: syz [ 1249.037206][T30737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1249.172875][T30766] loop4: detected capacity change from 0 to 256 [ 1249.244541][T30766] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1249.274193][ T4669] aqc111: probe of 4-1:1.105 failed with error -22 [ 1249.332818][T30766] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 1249.348786][T30766] exFAT-fs (loop4): Filesystem has been set read-only [ 1249.493370][T17652] usb 4-1: USB disconnect, device number 27 [ 1250.224102][T30805] loop4: detected capacity change from 0 to 2048 [ 1250.266286][T30805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1250.717521][T30828] loop4: detected capacity change from 0 to 512 [ 1250.791822][T30828] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1250.819526][T30828] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1250.880552][T30828] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1250.929339][T30840] loop3: detected capacity change from 0 to 4096 [ 1250.938711][T30828] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1250.954392][T30828] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1250.966249][T30828] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.11856: bg 0: block 15: invalid block bitmap [ 1251.006837][T30828] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1251.041661][T30828] EXT4-fs (loop4): 1 truncate cleaned up [ 1251.047351][T30828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1251.126964][T30828] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.11856: bad symlink. [ 1251.277515][ T4625] EXT4-fs (loop4): unmounting filesystem. [ 1251.369374][T30849] delete_channel: no stack [ 1251.471090][T30858] netlink: 1033 bytes leftover after parsing attributes in process `syz.3.11869'. [ 1251.846560][T30874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11876'. [ 1251.877516][T30874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11876'. [ 1251.951578][T30878] loop2: detected capacity change from 0 to 164 [ 1251.981038][ T4669] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1252.016581][T30878] rock: directory entry would overflow storage [ 1252.032379][T30878] rock: sig=0x4f50, size=4, remaining=3 [ 1252.040849][T30878] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1252.201431][ T4669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1252.221962][ T4669] usb 1-1: not running at top speed; connect to a high speed hub [ 1252.238899][ T4669] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 1252.274673][ T4669] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.300521][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11885'. [ 1252.349170][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11885'. [ 1252.358364][ T4669] usb 1-1: config 5 has no interface number 0 [ 1252.387025][ T4669] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1252.417245][ T4669] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.439885][T30896] loop3: detected capacity change from 0 to 256 [ 1252.479227][ T4669] usb 1-1: config 5 interface 246 has no altsetting 0 [ 1252.516638][T30896] FAT-fs (loop3): Directory bread(block 64) failed [ 1252.529367][T30896] FAT-fs (loop3): Directory bread(block 65) failed [ 1252.539050][T30896] FAT-fs (loop3): Directory bread(block 66) failed [ 1252.549797][ T4669] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1252.572799][T30896] FAT-fs (loop3): Directory bread(block 67) failed [ 1252.586707][ T4669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.597494][T30896] FAT-fs (loop3): Directory bread(block 68) failed [ 1252.619502][ T4669] usb 1-1: Product: syz [ 1252.629395][T30896] FAT-fs (loop3): Directory bread(block 69) failed [ 1252.636774][ T4669] usb 1-1: Manufacturer: syz [ 1252.641426][ T4669] usb 1-1: SerialNumber: syz [ 1252.647489][T30896] FAT-fs (loop3): Directory bread(block 70) failed [ 1252.662955][T30896] FAT-fs (loop3): Directory bread(block 71) failed [ 1252.686642][T30896] FAT-fs (loop3): Directory bread(block 72) failed [ 1252.705608][T30896] FAT-fs (loop3): Directory bread(block 73) failed [ 1252.798931][T30905] comedi comedi0: pcl726: I/O port conflict (0x9,16) [ 1252.946289][ T4669] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1252.961546][T26766] usb 1-1: Failed to submit usb control message: -71 [ 1252.970225][T26766] usb 1-1: unable to send the bmi data to the device: -71 [ 1252.986206][ T4669] usb 1-1: USB disconnect, device number 17 [ 1252.993756][T26766] usb 1-1: unable to get target info from device [ 1253.000641][T26766] usb 1-1: could not get target info (-71) [ 1253.006638][T26766] usb 1-1: could not probe fw (-71) [ 1253.126372][T30916] xt_TCPMSS: Only works on TCP SYN packets [ 1253.234929][T30920] netlink: 'syz.3.11898': attribute type 1 has an invalid length. [ 1253.282200][T30922] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11899'. [ 1253.460785][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11903'. [ 1253.848107][T30947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11911'. [ 1253.871708][T30951] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11913'. [ 1254.923495][ T26] audit: type=1326 audit(1780902838.523:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.2.11938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1254.979028][ T26] audit: type=1326 audit(1780902838.523:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.2.11938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1255.056210][ T26] audit: type=1326 audit(1780902838.523:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.2.11938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1255.080452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.151654][ T26] audit: type=1326 audit(1780902838.523:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.2.11938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e239ce59 code=0x7ffc0000 [ 1255.208186][T31007] 9pnet_fd: Insufficient options for proto=fd [ 1255.777578][T31033] loop2: detected capacity change from 0 to 256 [ 1255.808209][T31033] exfat: Deprecated parameter 'utf8' [ 1255.813659][T31033] exfat: Deprecated parameter 'namecase' [ 1255.864393][T31033] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 1256.052641][T31040] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1256.080028][T31040] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1256.100664][T31040] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1256.110494][T31040] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1256.157890][T31040] device geneve3 entered promiscuous mode [ 1256.197852][T31040] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1256.227676][T31040] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1256.250978][T31046] libceph: resolve '00' (ret=-3): failed [ 1256.263004][T31040] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1256.300869][T31040] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1256.352611][T31048] loop0: detected capacity change from 0 to 256 [ 1256.389818][T31020] loop4: detected capacity change from 0 to 32768 [ 1256.427164][T31048] FAT-fs (loop0): Directory bread(block 64) failed [ 1256.439808][T31048] FAT-fs (loop0): Directory bread(block 65) failed [ 1256.466193][T31048] FAT-fs (loop0): Directory bread(block 66) failed [ 1256.487128][T31048] FAT-fs (loop0): Directory bread(block 67) failed [ 1256.529256][T31048] FAT-fs (loop0): Directory bread(block 68) failed [ 1256.551047][T31048] FAT-fs (loop0): Directory bread(block 69) failed [ 1256.594765][T31048] FAT-fs (loop0): Directory bread(block 70) failed [ 1256.617816][T31048] FAT-fs (loop0): Directory bread(block 71) failed [ 1256.649442][T31048] FAT-fs (loop0): Directory bread(block 72) failed [ 1256.680747][T31048] FAT-fs (loop0): Directory bread(block 73) failed [ 1256.715307][ T4570] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1256.932014][ T4570] usb 3-1: Using ep0 maxpacket: 32 [ 1256.938871][ T4570] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1256.984481][ T4570] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.028410][ T4570] usb 3-1: config 0 has no interface number 0 [ 1257.049787][ T4570] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.111737][ T4570] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1257.147076][ T4570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.175837][ T4570] usb 3-1: Product: syz [ 1257.188232][ T4570] usb 3-1: Manufacturer: syz [ 1257.202805][ T4570] usb 3-1: SerialNumber: syz [ 1257.240513][ T4570] usb 3-1: config 0 descriptor?? [ 1257.284610][ T4570] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1257.316291][ T4570] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 1257.468481][ T4570] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1257.484555][T17652] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1257.694889][ T4570] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 1257.703682][T17652] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1257.716142][ T4570] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1257.733997][T17652] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.755694][ T4570] usb 3-1: USB disconnect, device number 26 [ 1257.764051][ T4570] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1257.802577][T17652] usb 4-1: config 220 has no interface number 2 [ 1257.809045][T17652] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1257.868706][T17652] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1257.900378][T17652] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1257.945384][T17652] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1257.989452][T17652] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1258.014328][T17652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.049420][T17652] usb 4-1: Product: syz [ 1258.053709][T17652] usb 4-1: Manufacturer: syz [ 1258.094367][T17652] usb 4-1: SerialNumber: syz [ 1258.359304][T17652] usb 4-1: selecting invalid altsetting 0 [ 1258.379996][T17652] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1258.411613][T17652] usb 4-1: No valid video chain found. [ 1258.471831][T17652] usb 4-1: selecting invalid altsetting 0 [ 1258.477598][T17652] usbtest: probe of 4-1:220.1 failed with error -22 [ 1258.516791][T17652] usb 4-1: USB disconnect, device number 28 [ 1258.715738][T31120] loop1: detected capacity change from 0 to 128 [ 1258.752172][ T4570] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1258.907721][T31129] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1258.936400][T31130] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.957883][ T4570] usb 1-1: Using ep0 maxpacket: 16 [ 1258.978104][ T4570] usb 1-1: config 0 has no interfaces? [ 1258.990408][T31130] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.999739][T31130] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1259.003203][ T4570] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1259.039597][ T4570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.061835][ T4570] usb 1-1: Product: syz [ 1259.071606][ T4570] usb 1-1: Manufacturer: syz [ 1259.091605][ T4570] usb 1-1: SerialNumber: syz [ 1259.112214][T31130] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1259.123860][ T4570] r8152-cfgselector 1-1: config 0 descriptor?? [ 1259.146949][T31130] device geneve2 entered promiscuous mode [ 1259.173185][T31130] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1259.236193][T31130] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1259.250472][T31130] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1259.275045][T31130] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1259.356979][T31142] netlink: 'syz.4.12008': attribute type 75 has an invalid length. [ 1259.393666][ T4570] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1259.621138][ T4570] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 1259.709285][T31156] loop1: detected capacity change from 0 to 16 [ 1259.743571][T31156] erofs: (device loop1): mounted with root inode @ nid 36. [ 1260.090545][T31168] loop2: detected capacity change from 0 to 4096 [ 1260.171801][T31168] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1260.276040][T31168] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1260.344082][T31183] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1260.393052][T31183] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1260.462654][T31183] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1260.487610][T31183] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1260.513069][ T4624] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 1260.526258][ T4624] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 1260.529962][T31183] device geneve3 entered promiscuous mode [ 1260.551702][T31183] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1260.571678][T31183] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1260.626331][T31183] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1260.656504][T31183] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1260.680582][T31192] netlink: 'syz.4.12032': attribute type 29 has an invalid length. [ 1260.713015][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12032'. [ 1260.788598][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12029'. [ 1260.810780][T31192] netlink: 'syz.4.12032': attribute type 29 has an invalid length. [ 1260.818756][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12032'. [ 1261.977841][T31252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1262.002787][T31252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1262.011973][T31252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1262.030071][T31252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1262.040717][T31252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1262.124900][T31245] loop1: detected capacity change from 0 to 4096 [ 1262.161932][T31245] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1262.182634][T31258] loop2: detected capacity change from 0 to 256 [ 1262.285431][T31258] FAT-fs (loop2): Directory bread(block 64) failed [ 1262.310659][T31258] FAT-fs (loop2): Directory bread(block 65) failed [ 1262.337823][T31258] FAT-fs (loop2): Directory bread(block 66) failed [ 1262.366388][T31258] FAT-fs (loop2): Directory bread(block 67) failed [ 1262.396604][T31258] FAT-fs (loop2): Directory bread(block 68) failed [ 1262.418485][T31258] FAT-fs (loop2): Directory bread(block 69) failed [ 1262.468480][T31258] FAT-fs (loop2): Directory bread(block 70) failed [ 1262.475043][T31258] FAT-fs (loop2): Directory bread(block 71) failed [ 1262.511700][T31258] FAT-fs (loop2): Directory bread(block 72) failed [ 1262.519561][T31258] FAT-fs (loop2): Directory bread(block 73) failed [ 1262.844992][T31277] netlink: 'syz.4.12075': attribute type 2 has an invalid length. [ 1263.014301][T31282] loop2: detected capacity change from 0 to 1764 [ 1263.136792][T31292] loop0: detected capacity change from 0 to 128 [ 1263.150868][ T4570] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1263.187575][T31292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1263.277469][T31292] ext4 filesystem being mounted at /2388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.364950][ T4570] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1263.385370][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.410938][T17652] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1263.420290][ T4570] usb 4-1: config 0 descriptor?? [ 1263.435672][ T4619] EXT4-fs (loop0): unmounting filesystem. [ 1263.442895][ T4570] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1263.630204][T17652] usb 2-1: Using ep0 maxpacket: 32 [ 1263.637564][T17652] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1263.677375][T17652] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1263.697937][T17652] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.721729][T17652] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1263.735756][ T4669] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1263.756920][T17652] usb 2-1: string descriptor 0 read error: -22 [ 1263.781259][T17652] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1263.798943][T17652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.830006][T17652] usb 2-1: 0:2 : does not exist [ 1263.876420][ T4570] gspca_spca505: reg write: error -71 [ 1263.882773][ T4570] spca505: probe of 4-1:0.0 failed with error -5 [ 1263.926879][ T4570] usb 4-1: USB disconnect, device number 29 [ 1263.952678][ T4669] usb 5-1: Using ep0 maxpacket: 16 [ 1263.959651][ T4669] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1263.989228][ T4669] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1264.017500][ T4669] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1264.031737][ T4669] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 1264.060786][ T4669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.080898][ T4705] usb 2-1: USB disconnect, device number 26 [ 1264.091580][ T4669] usb 5-1: config 0 descriptor?? [ 1264.345545][T31318] loop0: detected capacity change from 0 to 32768 [ 1264.373120][T31318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12093 (31318) [ 1264.398788][T31318] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1264.409095][T31318] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1264.417777][T31318] BTRFS info (device loop0): using free space tree [ 1264.544381][ T26] audit: type=1326 audit(1780902847.403:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31344 comm="syz.3.12100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1264.556876][ T4705] usb 5-1: USB disconnect, device number 26 [ 1264.592714][ T26] audit: type=1326 audit(1780902847.440:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31344 comm="syz.3.12100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1264.689262][T31318] BTRFS info (device loop0): enabling ssd optimizations [ 1264.746155][ T26] audit: type=1326 audit(1780902847.440:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31344 comm="syz.3.12100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1264.800137][ T4619] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1264.813227][T31353] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12102'. [ 1264.895990][T31356] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.900444][ T5304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5304) [ 1264.951655][T31356] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1265.003428][T31356] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1265.065195][T31356] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1265.096923][T31356] device geneve2 entered promiscuous mode [ 1265.124753][T31356] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.145383][T31356] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.165967][T31356] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.185640][T31360] loop3: detected capacity change from 0 to 4096 [ 1265.192326][T31356] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1265.214753][T31360] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1265.367294][T31364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1265.400806][T31360] ntfs3: loop3: failed to convert "c46c" to iso8859-3 [ 1265.592505][T31374] xt_CONNSECMARK: invalid mode: 66 [ 1266.244302][T31399] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1266.273471][T31399] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1266.314305][T31399] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1266.323142][T31399] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1266.356480][T31376] loop2: detected capacity change from 0 to 32768 [ 1266.370346][T31399] device geneve2 entered promiscuous mode [ 1266.388078][T31399] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1266.454820][T31399] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1266.483674][T31399] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1266.511598][T31399] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1266.810185][T31415] bridge0: port 3(batadv0) entered blocking state [ 1266.823630][T31415] bridge0: port 3(batadv0) entered disabled state [ 1266.831109][T31415] device batadv0 entered promiscuous mode [ 1266.883692][T31383] Process accounting resumed [ 1266.961947][T31419] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1267.004571][ T26] audit: type=1326 audit(1780902849.673:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.094365][ T26] audit: type=1326 audit(1780902849.701:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.095704][T26766] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1267.118526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.134719][T26766] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1267.159413][ T26] audit: type=1326 audit(1780902849.701:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.205182][T31425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12138'. [ 1267.235889][ T26] audit: type=1326 audit(1780902849.701:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.303941][ T26] audit: type=1326 audit(1780902849.701:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.430316][ T26] audit: type=1326 audit(1780902849.701:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.502201][T31440] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1267.538625][ T26] audit: type=1326 audit(1780902849.701:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.3.12137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1267.582108][T31440] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1267.590928][T31440] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1267.645073][T31440] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1267.671867][T31440] device geneve3 entered promiscuous mode [ 1267.740591][T31440] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1267.776923][T31440] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1267.831224][T31440] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1267.840360][T31440] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1268.086801][T31464] loop2: detected capacity change from 0 to 64 [ 1268.134605][ T4705] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1268.367276][ T4705] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1268.396095][ T4705] usb 4-1: config 179 has no interface number 0 [ 1268.415952][ T4705] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1268.428074][ T4705] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1268.439298][ T4705] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1268.459702][ T4705] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1268.488321][ T4705] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1268.522521][ T4705] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1268.537432][ T4705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.565156][T31453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1268.602261][T31453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1268.915946][ T4705] usb 4-1: USB disconnect, device number 30 [ 1268.922045][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1268.922093][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1269.402346][ T4570] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1269.615764][ T4570] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1269.634486][ T4570] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1269.665509][ T4570] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.691400][T31530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12187'. [ 1269.698073][ T4570] usb 1-1: config 220 has no interface number 2 [ 1269.719929][ T4570] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1269.720316][T31528] loop3: detected capacity change from 0 to 1024 [ 1269.746608][ T4570] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1269.757298][ T4570] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1269.764632][ T4570] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1269.774947][ T4570] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1269.784443][ T4570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.792732][ T4570] usb 1-1: Product: syz [ 1269.797018][ T4570] usb 1-1: Manufacturer: syz [ 1269.818863][ T4570] usb 1-1: SerialNumber: syz [ 1269.867446][T31528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1269.894415][T31528] EXT4-fs: Ignoring sb option on remount [ 1269.922330][T31528] EXT4-fs: Cannot specify journal on remount [ 1270.032290][ T4628] EXT4-fs (loop3): unmounting filesystem. [ 1270.061185][ T4570] usb 1-1: selecting invalid altsetting 0 [ 1270.085160][ T4570] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1270.102729][ T4570] usb 1-1: No valid video chain found. [ 1270.153470][ T4570] usb 1-1: selecting invalid altsetting 0 [ 1270.178202][ T4570] usbtest: probe of 1-1:220.1 failed with error -22 [ 1270.215560][ T4570] usb 1-1: USB disconnect, device number 19 [ 1270.335370][T31553] kAFS: unable to lookup cell '/,' [ 1270.677624][T31567] loop4: detected capacity change from 0 to 1024 [ 1270.864052][T31573] loop0: detected capacity change from 0 to 2048 [ 1270.906785][T31573] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1270.924758][T31577] bridge0: port 3(batadv0) entered blocking state [ 1270.948470][T31577] bridge0: port 3(batadv0) entered disabled state [ 1270.980240][T31578] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1271.019681][T31577] device batadv0 entered promiscuous mode [ 1271.246887][T26768] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1271.256547][T26768] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1271.574007][T31606] netlink: 798 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1271.838965][T31616] CIFS: VFS: Malformed UNC in devname [ 1271.897993][T31619] overlayfs: conflicting options: nfs_export=on,index=off [ 1271.934619][T31620] loop0: detected capacity change from 0 to 1764 [ 1272.043004][T31625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12233'. [ 1272.138783][ T4619] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1272.151717][ T4619] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1272.508119][T31636] loop0: detected capacity change from 0 to 4096 [ 1272.538826][T31636] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1272.587743][T31647] loop2: detected capacity change from 0 to 164 [ 1272.674326][T31636] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1272.740665][T31636] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 1273.099832][T31667] netlink: 'syz.1.12253': attribute type 25 has an invalid length. [ 1273.162772][T31667] netlink: 'syz.1.12253': attribute type 1 has an invalid length. [ 1273.172748][T31667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.395610][T31683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12260'. [ 1273.409089][T31683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12260'. [ 1273.529977][ T4590] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1273.549282][T31688] loop2: detected capacity change from 0 to 2048 [ 1273.588927][T31688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1273.745243][ T4590] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1273.763820][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.779128][ T4590] usb 4-1: Product: syz [ 1273.790075][ T4590] usb 4-1: Manufacturer: syz [ 1273.797447][ T4590] usb 4-1: SerialNumber: syz [ 1273.840107][ T4590] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1273.897803][ T4590] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1273.936680][ T4669] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1274.027071][T31708] netlink: 'syz.0.12271': attribute type 21 has an invalid length. [ 1274.057218][T31708] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12271'. [ 1274.158458][ T4669] usb 5-1: Using ep0 maxpacket: 16 [ 1274.172207][ T4669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.212891][ T4669] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1274.241939][ T4669] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1274.259956][T31714] netlink: 'syz.0.12275': attribute type 1 has an invalid length. [ 1274.282109][ T4669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.303569][T31714] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.12275'. [ 1274.315378][ T4669] usb 5-1: Product: syz [ 1274.319572][ T4669] usb 5-1: Manufacturer: syz [ 1274.340024][ T4669] usb 5-1: SerialNumber: syz [ 1274.355032][T22954] usb 4-1: USB disconnect, device number 31 [ 1274.382016][ T4669] r8152-cfgselector 5-1: config 0 descriptor?? [ 1274.410144][T31716] loop1: detected capacity change from 0 to 4096 [ 1274.435704][T31716] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1274.556670][T31716] ntfs3: loop1: ino=5, "/" directory corrupted [ 1274.616915][ T4669] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1274.834050][T17652] usb 5-1: USB disconnect, device number 27 [ 1275.021978][T31740] overlayfs: workdir and upperdir must be separate subtrees [ 1275.035992][ T4590] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1275.043295][ T4590] ath9k_htc: Failed to initialize the device [ 1275.055233][T22954] usb 4-1: ath9k_htc: USB layer deinitialized [ 1275.466362][T31752] loop0: detected capacity change from 0 to 4096 [ 1275.508761][T31752] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1275.579315][T31752] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1275.630904][T31752] ntfs3: loop0: ino=0, attr_set_size [ 1275.804236][T31738] loop3: detected capacity change from 0 to 32768 [ 1276.448357][T31790] qrtr: Invalid version 0 [ 1276.644227][T31799] loop4: detected capacity change from 0 to 256 [ 1276.677576][T31799] exfat: Deprecated parameter 'utf8' [ 1276.695291][T31799] exfat: Deprecated parameter 'utf8' [ 1276.710098][T31799] exfat: Deprecated parameter 'utf8' [ 1276.754880][T31799] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1276.920044][T31810] netlink: 'syz.0.12322': attribute type 1 has an invalid length. [ 1276.953912][T31812] netlink: 'syz.3.12323': attribute type 21 has an invalid length. [ 1276.961958][T31812] IPv6: NLM_F_CREATE should be specified when creating new route [ 1276.974230][T31810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12322'. [ 1277.075390][T31816] netlink: 'syz.4.12325': attribute type 3 has an invalid length. [ 1277.180107][T31818] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12327'. [ 1277.220392][T31822] netlink: 'syz.2.12326': attribute type 19 has an invalid length. [ 1277.256621][T31824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12328'. [ 1278.280069][T31875] loop1: detected capacity change from 0 to 128 [ 1278.344503][ T5304] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1279.397414][T31934] loop2: detected capacity change from 0 to 8 [ 1279.615885][T31944] loop3: detected capacity change from 0 to 16 [ 1279.682513][T31944] erofs: (device loop3): mounted with root inode @ nid 36. [ 1279.769344][T31944] syz.3.12388: attempt to access beyond end of device [ 1279.769344][T31944] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1279.856183][T31955] MTD: Couldn't look up './bus': -15 [ 1280.126839][T31966] xt_cluster: node mask cannot exceed total number of nodes [ 1280.284461][T31972] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12402'. [ 1280.661433][T31990] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.12410'. [ 1281.021230][T32002] loop1: detected capacity change from 0 to 4096 [ 1281.087206][T32002] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1281.125189][T32002] ntfs3: loop1: Failed to load $Extend. [ 1281.315108][T31980] loop2: detected capacity change from 0 to 32768 [ 1281.474781][T31980] XFS (loop2): Mounting V5 Filesystem [ 1281.518311][T32027] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1281.598472][T31980] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1281.649047][T31980] XFS (loop2): Starting recovery (logdev: internal) [ 1281.751227][T31980] XFS (loop2): Ending recovery (logdev: internal) [ 1281.802243][ T4669] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 1281.850587][ T4669] XFS (loop2): Unmount and run xfs_repair [ 1281.856505][ T4669] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1281.895934][ T4669] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1281.917790][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1281.917803][ T26] audit: type=1326 audit(1780902863.444:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1281.935448][ T4669] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 1281.990553][ T4669] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1282.016728][ T4669] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 1282.021567][ T26] audit: type=1326 audit(1780902863.472:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.041964][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12435'. [ 1282.064260][ T4669] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1282.073864][ T4669] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1282.097350][ T4669] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1282.119343][ T4669] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1282.128332][ T26] audit: type=1326 audit(1780902863.472:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.128370][ T26] audit: type=1326 audit(1780902863.500:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.128402][ T26] audit: type=1326 audit(1780902863.500:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.128435][ T26] audit: type=1326 audit(1780902863.500:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.128468][ T26] audit: type=1326 audit(1780902863.500:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.128500][ T26] audit: type=1326 audit(1780902863.500:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32043 comm="syz.3.12433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f790199ce59 code=0x7ffc0000 [ 1282.312989][T31980] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 1282.392372][ T4624] XFS (loop2): Unmounting Filesystem [ 1282.518827][T32059] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1282.530735][T32059] overlayfs: missing 'lowerdir' [ 1282.775137][T32064] loop3: detected capacity change from 0 to 4096 [ 1282.836961][T32064] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1282.927446][T32064] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1282.998669][T32064] ntfs3: loop3: ino=0, attr_set_size [ 1283.308009][ T4669] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1283.522714][ T4669] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1283.551834][ T4669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.577274][ T4669] usb 2-1: Product: syz [ 1283.581582][ T4669] usb 2-1: Manufacturer: syz [ 1283.587414][ T4669] usb 2-1: SerialNumber: syz [ 1283.597722][T32100] loop2: detected capacity change from 0 to 1024 [ 1283.629764][ T4669] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1283.664684][T32100] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1283.685056][T32100] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1283.702445][ T4669] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1283.753712][T32100] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1283.779695][T32100] EXT4-fs (loop2): 1 truncate cleaned up [ 1283.790125][T32100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1283.926309][ C0] usb 2-1: ath9k_htc: invalid pkt_len (ffef) [ 1283.936129][T32111] loop4: detected capacity change from 0 to 1024 [ 1283.970830][T32113] netlink: 'syz.0.12467': attribute type 3 has an invalid length. [ 1283.983840][ T4624] EXT4-fs (loop2): unmounting filesystem. [ 1284.038078][T32113] netlink: 46 bytes leftover after parsing attributes in process `syz.0.12467'. [ 1284.069720][T32111] hfsplus: cannot replace xattr [ 1284.143790][T17652] usb 2-1: USB disconnect, device number 27 [ 1284.487273][T32130] overlayfs: conflicting options: nfs_export=on,index=off [ 1284.629128][T32137] xt_bpf: check failed: parse error [ 1284.683705][T32141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1284.785803][T32143] tmpfs: Bad value for 'mpol' [ 1284.916764][ T4669] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1284.923919][ T4669] ath9k_htc: Failed to initialize the device [ 1284.954092][T17652] usb 2-1: ath9k_htc: USB layer deinitialized [ 1285.042305][T32153] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12485'. [ 1286.354141][T32174] loop2: detected capacity change from 0 to 32768 [ 1286.454124][T32174] XFS (loop2): Mounting V5 Filesystem [ 1286.526821][T32220] loop1: detected capacity change from 0 to 4096 [ 1286.538227][T32174] XFS (loop2): Ending clean mount [ 1286.549499][T32220] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1286.584233][T32220] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1286.659966][T32220] ntfs3: loop1: ino=0, attr_set_size [ 1286.694240][ T4624] XFS (loop2): Unmounting Filesystem [ 1286.715266][ T4669] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1286.921073][ T4669] usb 4-1: Using ep0 maxpacket: 32 [ 1286.937764][ T4669] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1286.964337][ T4669] usb 4-1: config 0 has no interface number 0 [ 1286.970459][ T4669] usb 4-1: config 0 interface 132 has no altsetting 0 [ 1287.017686][ T4669] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1287.038298][ T4669] usb 4-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1287.083510][ T4669] usb 4-1: Product: syz [ 1287.087829][ T4669] usb 4-1: Manufacturer: syz [ 1287.092445][ T4669] usb 4-1: SerialNumber: syz [ 1287.105336][T17652] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1287.159863][ T4669] usb 4-1: config 0 descriptor?? [ 1287.167623][ T4669] ftdi_sio 4-1:0.132: FTDI USB Serial Device converter detected [ 1287.187418][ T4669] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 1287.311208][T17652] usb 5-1: Using ep0 maxpacket: 32 [ 1287.326435][T17652] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1287.360316][T17652] usb 5-1: config 0 has no interface number 0 [ 1287.378551][T17652] usb 5-1: config 0 interface 132 has no altsetting 0 [ 1287.406662][T17652] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1287.415759][ T4669] usb 4-1: USB disconnect, device number 32 [ 1287.417096][ T4669] ftdi_sio 4-1:0.132: device disconnected [ 1287.464836][T17652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.484273][T17652] usb 5-1: Product: syz [ 1287.501593][T17652] usb 5-1: Manufacturer: syz [ 1287.515709][T17652] usb 5-1: SerialNumber: syz [ 1287.544799][T17652] usb 5-1: config 0 descriptor?? [ 1287.562592][T32258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12534'. [ 1287.582601][T32258] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12534'. [ 1287.781618][T17652] cdc_subset: probe of 5-1:0.132 failed with error -71 [ 1287.810344][T17652] usb 5-1: USB disconnect, device number 28 [ 1288.433929][T32294] loop1: detected capacity change from 0 to 128 [ 1288.469073][T32294] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1288.515524][T32294] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1288.918987][T32313] nft_compat: unsupported protocol 5 [ 1289.133375][T32326] loop1: detected capacity change from 0 to 512 [ 1289.205377][T32326] ================================================================== [ 1289.213583][T32326] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e40 [ 1289.220739][T32326] Read of size 8 at addr ffff8880722e8c70 by task syz.1.12570/32326 [ 1289.228824][T32326] [ 1289.231212][T32326] CPU: 1 PID: 32326 Comm: syz.1.12570 Not tainted syzkaller #0 [ 1289.238778][T32326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1289.248856][T32326] Call Trace: [ 1289.252208][T32326] [ 1289.255209][T32326] dump_stack_lvl+0x188/0x24e [ 1289.259952][T32326] ? __lock_acquire+0x7d10/0x7d10 [ 1289.265088][T32326] ? show_regs_print_info+0x12/0x12 [ 1289.270300][T32326] ? load_image+0x400/0x400 [ 1289.274825][T32326] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1289.280347][T32326] ? __virt_addr_valid+0x188/0x540 [ 1289.285513][T32326] ? __virt_addr_valid+0x465/0x540 [ 1289.290641][T32326] ? __ext4_iget+0x2bb/0x3e40 [ 1289.295337][T32326] print_report+0xa8/0x210 [ 1289.299767][T32326] kasan_report+0x10b/0x140 [ 1289.304313][T32326] ? __ext4_iget+0x2bb/0x3e40 [ 1289.309008][T32326] __ext4_iget+0x2bb/0x3e40 [ 1289.313539][T32326] ? apply_workqueue_attrs+0x180/0x180 [ 1289.319079][T32326] ? ext4_get_projid+0x140/0x140 [ 1289.324031][T32326] ? mb_cache_create+0x42f/0x530 [ 1289.329029][T32326] ext4_fill_super+0x6124/0x78c0 [ 1289.334030][T32326] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1289.340294][T32326] ? set_blocksize+0x1d0/0x470 [ 1289.345110][T32326] ? sb_set_blocksize+0xa5/0xe0 [ 1289.349973][T32326] get_tree_bdev+0x3f1/0x610 [ 1289.354597][T32326] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1289.360863][T32326] vfs_get_tree+0x88/0x270 [ 1289.365304][T32326] do_new_mount+0x24a/0xa40 [ 1289.369832][T32326] __se_sys_mount+0x2e3/0x3d0 [ 1289.374520][T32326] ? __x64_sys_mount+0xc0/0xc0 [ 1289.379296][T32326] ? lockdep_hardirqs_on+0x94/0x140 [ 1289.384502][T32326] ? __x64_sys_mount+0x1c/0xc0 [ 1289.389272][T32326] do_syscall_64+0x4c/0xa0 [ 1289.393702][T32326] ? clear_bhb_loop+0x60/0xb0 [ 1289.398409][T32326] ? clear_bhb_loop+0x60/0xb0 [ 1289.403111][T32326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.409040][T32326] RIP: 0033:0x7fed8759e0ca [ 1289.413502][T32326] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.433151][T32326] RSP: 002b:00007fed88403e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1289.441613][T32326] RAX: ffffffffffffffda RBX: 00007fed88403ee0 RCX: 00007fed8759e0ca [ 1289.449593][T32326] RDX: 00002000000004c0 RSI: 0000200000000500 RDI: 00007fed88403ea0 [ 1289.457586][T32326] RBP: 00002000000004c0 R08: 00007fed88403ee0 R09: 0000000000000000 [ 1289.465582][T32326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000500 [ 1289.473577][T32326] R13: 00007fed88403ea0 R14: 00000000000004c4 R15: 0000200000000d00 [ 1289.481566][T32326] [ 1289.484592][T32326] [ 1289.486920][T32326] Allocated by task 5646: [ 1289.491297][T32326] kasan_set_track+0x4b/0x70 [ 1289.495904][T32326] __kasan_slab_alloc+0x6b/0x80 [ 1289.500777][T32326] slab_post_alloc_hook+0x4b/0x480 [ 1289.505892][T32326] kmem_cache_alloc_lru+0x11a/0x2e0 [ 1289.511111][T32326] reiserfs_alloc_inode+0x26/0xc0 [ 1289.516174][T32326] iget5_locked+0x9e/0x260 [ 1289.520603][T32326] reiserfs_fill_super+0x11d3/0x23b0 [ 1289.525926][T32326] mount_bdev+0x287/0x3c0 [ 1289.530265][T32326] legacy_get_tree+0xe6/0x180 [ 1289.535021][T32326] vfs_get_tree+0x88/0x270 [ 1289.539449][T32326] do_new_mount+0x24a/0xa40 [ 1289.543981][T32326] __se_sys_mount+0x2e3/0x3d0 [ 1289.548683][T32326] do_syscall_64+0x4c/0xa0 [ 1289.553109][T32326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.559044][T32326] [ 1289.561378][T32326] Last potentially related work creation: [ 1289.567132][T32326] kasan_save_stack+0x3a/0x60 [ 1289.571838][T32326] __kasan_record_aux_stack+0xb2/0xc0 [ 1289.577215][T32326] call_rcu+0x14f/0x990 [ 1289.581435][T32326] evict+0x834/0x8d0 [ 1289.585336][T32326] reiserfs_fill_super+0x1475/0x23b0 [ 1289.590640][T32326] mount_bdev+0x287/0x3c0 [ 1289.594979][T32326] legacy_get_tree+0xe6/0x180 [ 1289.599674][T32326] vfs_get_tree+0x88/0x270 [ 1289.604104][T32326] do_new_mount+0x24a/0xa40 [ 1289.608613][T32326] __se_sys_mount+0x2e3/0x3d0 [ 1289.613303][T32326] do_syscall_64+0x4c/0xa0 [ 1289.617728][T32326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.623634][T32326] [ 1289.625964][T32326] The buggy address belongs to the object at ffff8880722e86a0 [ 1289.625964][T32326] which belongs to the cache reiser_inode_cache of size 1568 [ 1289.640727][T32326] The buggy address is located 1488 bytes inside of [ 1289.640727][T32326] 1568-byte region [ffff8880722e86a0, ffff8880722e8cc0) [ 1289.654178][T32326] [ 1289.656506][T32326] The buggy address belongs to the physical page: [ 1289.662961][T32326] page:ffffea0001c8ba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880722ef740 pfn:0x722e8 [ 1289.674416][T32326] head:ffffea0001c8ba00 order:3 compound_mapcount:0 compound_pincount:0 [ 1289.682745][T32326] memcg:ffff88805214f801 [ 1289.686987][T32326] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1289.694979][T32326] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888144ed9a00 [ 1289.703569][T32326] raw: ffff8880722ef740 000000008013000d 00000001ffffffff ffff88805214f801 [ 1289.712154][T32326] page dumped because: kasan: bad access detected [ 1289.718574][T32326] page_owner tracks the page as allocated [ 1289.724298][T32326] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5502, tgid 5501 (syz.3.670), ts 133093824760, free_ts 88427667680 [ 1289.748656][T32326] post_alloc_hook+0x173/0x1a0 [ 1289.753445][T32326] get_page_from_freelist+0x1a1e/0x1ab0 [ 1289.759002][T32326] __alloc_pages+0x1ec/0x4f0 [ 1289.763605][T32326] alloc_slab_page+0x5d/0x160 [ 1289.768302][T32326] new_slab+0x87/0x2c0 [ 1289.772376][T32326] ___slab_alloc+0xbc6/0x1240 [ 1289.777086][T32326] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 1289.782305][T32326] reiserfs_alloc_inode+0x26/0xc0 [ 1289.787337][T32326] iget5_locked+0x9e/0x260 [ 1289.791811][T32326] reiserfs_fill_super+0x11d3/0x23b0 [ 1289.797127][T32326] mount_bdev+0x287/0x3c0 [ 1289.801464][T32326] legacy_get_tree+0xe6/0x180 [ 1289.806151][T32326] vfs_get_tree+0x88/0x270 [ 1289.810571][T32326] do_new_mount+0x24a/0xa40 [ 1289.815094][T32326] __se_sys_mount+0x2e3/0x3d0 [ 1289.819795][T32326] do_syscall_64+0x4c/0xa0 [ 1289.824224][T32326] page last free stack trace: [ 1289.828918][T32326] free_unref_page_prepare+0x8b4/0x9a0 [ 1289.834423][T32326] free_unref_page+0x2e/0x3f0 [ 1289.839119][T32326] qlist_free_all+0x76/0xe0 [ 1289.843686][T32326] kasan_quarantine_reduce+0x144/0x160 [ 1289.849176][T32326] __kasan_slab_alloc+0x1e/0x80 [ 1289.854040][T32326] slab_post_alloc_hook+0x4b/0x480 [ 1289.859173][T32326] kmem_cache_alloc_node+0x14d/0x320 [ 1289.864460][T32326] __alloc_skb+0xfc/0x7e0 [ 1289.868828][T32326] alloc_skb_with_frags+0xa7/0x710 [ 1289.873953][T32326] sock_alloc_send_pskb+0x87f/0x9a0 [ 1289.879168][T32326] unix_dgram_sendmsg+0x539/0x16e0 [ 1289.884292][T32326] __sys_sendto+0x497/0x650 [ 1289.888801][T32326] __x64_sys_sendto+0xda/0xf0 [ 1289.893478][T32326] do_syscall_64+0x4c/0xa0 [ 1289.897898][T32326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.903803][T32326] [ 1289.906132][T32326] Memory state around the buggy address: [ 1289.911767][T32326] ffff8880722e8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.919831][T32326] ffff8880722e8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.927910][T32326] >ffff8880722e8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.935969][T32326] ^ [ 1289.943683][T32326] ffff8880722e8c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1289.951749][T32326] ffff8880722e8d00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1289.959816][T32326] ================================================================== [ 1290.063091][T17652] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1290.159698][T32326] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1290.166947][T32326] CPU: 0 PID: 32326 Comm: syz.1.12570 Not tainted syzkaller #0 [ 1290.174561][T32326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1290.184635][T32326] Call Trace: [ 1290.187932][T32326] [ 1290.190886][T32326] dump_stack_lvl+0x188/0x24e [ 1290.195612][T32326] ? memcpy+0x3c/0x60 [ 1290.199621][T32326] ? show_regs_print_info+0x12/0x12 [ 1290.204846][T32326] ? load_image+0x400/0x400 [ 1290.209386][T32326] panic+0x2e5/0x730 [ 1290.213309][T32326] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1290.219557][T32326] ? bpf_jit_dump+0xd0/0xd0 [ 1290.224089][T32326] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1290.230106][T32326] ? _raw_spin_unlock+0x40/0x40 [ 1290.234986][T32326] check_panic_on_warn+0x80/0xa0 [ 1290.239974][T32326] ? __ext4_iget+0x2bb/0x3e40 [ 1290.244675][T32326] end_report+0x66/0x110 [ 1290.248980][T32326] kasan_report+0x118/0x140 [ 1290.253561][T32326] ? __ext4_iget+0x2bb/0x3e40 [ 1290.258289][T32326] __ext4_iget+0x2bb/0x3e40 [ 1290.262838][T32326] ? apply_workqueue_attrs+0x180/0x180 [ 1290.268326][T32326] ? ext4_get_projid+0x140/0x140 [ 1290.268886][T17652] usb 5-1: Using ep0 maxpacket: 8 [ 1290.273283][T17652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1290.273345][T17652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1290.273405][T17652] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1290.273463][T17652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1290.273516][T17652] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1290.273582][T17652] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1290.273622][T17652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.277819][T17652] usb 5-1: config 0 descriptor?? [ 1290.280154][T32322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1290.358600][T32326] ? mb_cache_create+0x42f/0x530 [ 1290.363581][T32326] ext4_fill_super+0x6124/0x78c0 [ 1290.368567][T32326] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1290.374853][T32326] ? set_blocksize+0x1d0/0x470 [ 1290.379646][T32326] ? sb_set_blocksize+0xa5/0xe0 [ 1290.384528][T32326] get_tree_bdev+0x3f1/0x610 [ 1290.389146][T32326] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1290.395411][T32326] vfs_get_tree+0x88/0x270 [ 1290.399873][T32326] do_new_mount+0x24a/0xa40 [ 1290.404404][T32326] __se_sys_mount+0x2e3/0x3d0 [ 1290.409096][T32326] ? __x64_sys_mount+0xc0/0xc0 [ 1290.413916][T32326] ? lockdep_hardirqs_on+0x94/0x140 [ 1290.419134][T32326] ? __x64_sys_mount+0x1c/0xc0 [ 1290.423921][T32326] do_syscall_64+0x4c/0xa0 [ 1290.428348][T32326] ? clear_bhb_loop+0x60/0xb0 [ 1290.433096][T32326] ? clear_bhb_loop+0x60/0xb0 [ 1290.437797][T32326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1290.443717][T32326] RIP: 0033:0x7fed8759e0ca [ 1290.448153][T32326] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.467774][T32326] RSP: 002b:00007fed88403e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1290.476218][T32326] RAX: ffffffffffffffda RBX: 00007fed88403ee0 RCX: 00007fed8759e0ca [ 1290.484235][T32326] RDX: 00002000000004c0 RSI: 0000200000000500 RDI: 00007fed88403ea0 [ 1290.492243][T32326] RBP: 00002000000004c0 R08: 00007fed88403ee0 R09: 0000000000000000 [ 1290.500235][T32326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000500 [ 1290.508232][T32326] R13: 00007fed88403ea0 R14: 00000000000004c4 R15: 0000200000000d00 [ 1290.516237][T32326] [ 1290.519850][T32326] Kernel Offset: disabled [ 1290.524214][T32326] Rebooting in 86400 seconds..