last executing test programs: 2m3.956920856s ago: executing program 4 (id=7974): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xffffffffff60014a) 2m2.172946313s ago: executing program 4 (id=7985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000d0) 2m1.869423142s ago: executing program 4 (id=7987): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) 2m1.470672257s ago: executing program 4 (id=7992): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$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") mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1018, 0x0) 2m0.910540496s ago: executing program 4 (id=7997): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0x7fff, &(0x7f0000000300)=0x4) 2m0.278646944s ago: executing program 4 (id=8003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a05000000000000000000030000080900010073797a310000000030000000160a01080000000000000000030000000900020073797a320000000004000380090001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1m59.427579109s ago: executing program 32 (id=8003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a05000000000000000000030000080900010073797a310000000030000000160a01080000000000000000030000000900020073797a320000000004000380090001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1m38.766902862s ago: executing program 3 (id=8259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173683a6d6163"], 0x5c}}, 0x4005800) 1m38.407277475s ago: executing program 3 (id=8265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x470c0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffffd}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24060080}, 0x8000) 1m38.154715328s ago: executing program 3 (id=8268): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000580)={0x4, 0x1, 0x2, "ab5761e63497e00952485eed3f2e1ac8f00f024280441fab0e6841670a96b859", 0x35323645}) 1m37.805925775s ago: executing program 3 (id=8273): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680"], 0xfe, 0x148, &(0x7f0000000540)="$eJzsz79LAnEYBvDnulP7of0gAwsyoaEjkc6TamrQSBK6hMKlSaiTAqVIKMci2tpaHSShSfwXLGsxFKL+iRa3oDW+3lFck3vPZznued/34W5jraMiBMiwrB8XTk7NYtE8CO2kjeTuR6MRF7kbwKBjbu0/xIFD8VSA7iUg4icfPHZdXrx344AKIDEC5I7ypgZrd1hkfiuL2pk6DzSnrEx3ZuITzJidzShAYuynz8jlXFgQfRO/fZ8ASuVwvfay3W6lIov3szKuU+G5ScmZB80bPTld9QZkZMznOyR68/elVuR1qF5767SNrbTh6cR0fSWmRTVt2Wf/HZRN7xmw96fPjUBQyQBXEnDbm3UfJXHTrHylC6OrFfv64lwOAVKpvJ8NuKpZ//gAZBUS+uHqa4uIiIiIiIiIiIiIiIiIiP6L7wAAAP//dRlcow==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m37.424778468s ago: executing program 3 (id=8279): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 1 [ 841.342631][T16080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.351629][T16080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.363542][T16080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.372675][T16080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.796147][T25502] netlink: 'syz.5.8317': attribute type 1 has an invalid length. [ 841.887513][T15848] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 841.972233][ T36] bridge_slave_1: left allmulticast mode [ 842.011235][ T36] bridge_slave_1: left promiscuous mode [ 842.034651][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.088570][T15848] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 842.100979][T25514] loop5: detected capacity change from 0 to 64 [ 842.109984][ T36] bridge_slave_0: left allmulticast mode [ 842.130123][ T36] bridge_slave_0: left promiscuous mode [ 842.136495][T15848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.152528][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.161940][T25514] /dev/loop5: Can't open blockdev [ 842.171949][T15848] usb 1-1: Product: syz [ 842.193961][T15848] usb 1-1: Manufacturer: syz [ 842.219252][T15848] usb 1-1: SerialNumber: syz [ 842.287503][T15848] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 842.318381][ T5782] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 842.523622][T25528] loop5: detected capacity change from 0 to 256 [ 842.810860][ T24] usb 1-1: USB disconnect, device number 109 [ 843.387743][ T5782] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 843.395035][ T5782] ath9k_htc: Failed to initialize the device [ 843.418984][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 843.467237][ T5642] Bluetooth: hci0: command tx timeout [ 843.497186][ T36] team0: Port device bond0 removed [ 843.550177][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.573892][T25558] loop0: detected capacity change from 0 to 512 [ 843.585413][T25558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 843.604241][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.623795][T25558] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8340: invalid indirect mapped block 4294967295 (level 1) [ 843.649036][ T36] bond0 (unregistering): Released all slaves [ 843.662771][T25558] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 843.663355][T25558] EXT4-fs (loop0): Remounting filesystem read-only [ 843.672576][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 843.672600][ C1] EXT4-fs (loop0): initial error at time 1777769234: ext4_free_branches:1023: inode 11 [ 843.672640][ C1] EXT4-fs (loop0): last error at time 1777769234: ext4_free_branches:1023: inode 11 [ 843.741713][T25558] EXT4-fs (loop0): 2 truncates cleaned up [ 843.849660][T25558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.135836][ T5643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.402030][T25588] loop6: detected capacity change from 0 to 164 [ 844.579723][T25591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8350'. [ 844.625745][T25481] lo speed is unknown, defaulting to 1000 [ 844.890411][T25603] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 845.106650][ T5767] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 845.269155][ T5767] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 845.293325][ T5767] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 845.332314][ T5767] usb 7-1: config 0 has no interface number 0 [ 845.345206][ T5767] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.365650][ T5767] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 845.378483][ T5767] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.399301][ T5767] usb 7-1: config 0 interface 52 has no altsetting 0 [ 845.408300][ T5767] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 845.426755][ T5767] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 845.445172][ T5767] usb 7-1: Product: syz [ 845.451214][ T5767] usb 7-1: SerialNumber: syz [ 845.493765][ T5767] usb 7-1: config 0 descriptor?? [ 845.546927][ T5642] Bluetooth: hci0: command tx timeout [ 845.751903][ T5767] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input51 [ 845.845745][T25639] loop2: detected capacity change from 0 to 512 [ 845.941356][ T5767] usb 7-1: USB disconnect, device number 4 [ 846.125772][ T36] hsr_slave_0: left promiscuous mode [ 846.185998][ T36] hsr_slave_1: left promiscuous mode [ 846.210514][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.256575][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.303178][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.335975][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.439010][ T36] veth1_macvtap: left promiscuous mode [ 846.456180][ T36] veth0_macvtap: left promiscuous mode [ 846.482767][ T36] veth1_vlan: left promiscuous mode [ 846.829095][T25673] loop0: detected capacity change from 0 to 128 [ 846.908251][T25673] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 846.991780][T25684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8386'. [ 847.012534][T25673] ext4 filesystem being mounted at /1407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 847.072116][T25684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8386'. [ 847.139602][ T36] pim6reg (unregistering): left allmulticast mode [ 847.276194][ T5643] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.639369][ T5642] Bluetooth: hci0: command tx timeout [ 847.728997][ T36] team0 (unregistering): Port device team_slave_1 removed [ 847.754457][ T36] team0 (unregistering): Port device team_slave_0 removed [ 848.822736][T25481] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.856013][T25481] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.903341][T25481] bridge_slave_0: entered allmulticast mode [ 848.939835][T25481] bridge_slave_0: entered promiscuous mode [ 848.973088][T25481] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.003308][T25481] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.053030][T25481] bridge_slave_1: entered allmulticast mode [ 849.090030][T25481] bridge_slave_1: entered promiscuous mode [ 849.414356][T25481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.493109][ T36] IPVS: stop unused estimator thread 0... [ 849.497161][T25481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.708141][ T5642] Bluetooth: hci0: command tx timeout [ 849.770627][T25777] netlink: 'syz.2.8420': attribute type 30 has an invalid length. [ 849.825162][T25481] team0: Port device team_slave_0 added [ 849.877245][T25481] team0: Port device team_slave_1 added [ 850.083112][T25481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.113126][T25481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.200256][T25481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.249544][T25794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8428'. [ 850.270700][T25797] loop2: detected capacity change from 0 to 1024 [ 850.290875][T25481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.300480][T25797] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 850.332831][T25481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.463369][T25481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.817034][T25481] hsr_slave_0: entered promiscuous mode [ 850.849514][T25481] hsr_slave_1: entered promiscuous mode [ 850.876412][T25481] debugfs: 'hsr0' already exists in 'hsr' [ 850.909073][T25481] Cannot create hsr debugfs directory [ 851.181683][T25833] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8445'. [ 851.340384][T25838] netlink: 768 bytes leftover after parsing attributes in process `syz.1.8447'. [ 851.355082][T25839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.902330][T25860] loop0: detected capacity change from 0 to 2048 [ 851.962181][T25860] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 851.977043][ T801] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 852.018140][T25860] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 852.066568][T25860] UDF-fs: Scanning with blocksize 512 failed [ 852.148035][T25860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.167009][ T801] usb 7-1: Using ep0 maxpacket: 16 [ 852.196191][ T801] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 852.236072][ T801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.265306][ T801] usb 7-1: Product: syz [ 852.294130][ T801] usb 7-1: Manufacturer: syz [ 852.315283][ T801] usb 7-1: SerialNumber: syz [ 852.343618][T25481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 852.388556][ T801] usb 7-1: config 0 descriptor?? [ 852.424246][T25481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.440993][ T801] hub 7-1:0.0: bad descriptor, ignoring hub [ 852.455808][T25481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 852.479057][ T801] hub 7-1:0.0: probe with driver hub failed with error -5 [ 852.541387][T25481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.581460][T25481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 852.635199][T25481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.678602][T25481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 852.680516][T25880] loop5: detected capacity change from 0 to 4096 [ 852.725845][T25481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.755665][T25880] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 852.768541][ T986] usb 7-1: USB disconnect, device number 5 [ 852.790188][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 852.915033][T25880] ntfs3(loop5): ino=19, mi_enum_attr [ 852.945519][T25880] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 853.019911][T25880] ntfs3(loop5): failed to convert "c46c" to cp1250 [ 853.045699][T25880] ntfs3(loop5): ino=20, mi_enum_attr [ 853.201620][T25481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.300720][T25481] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.368121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.375301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.444133][T25915] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8476'. [ 853.466375][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.473570][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.022129][T25936] netlink: 'syz.2.8484': attribute type 27 has an invalid length. [ 854.077518][T25938] loop5: detected capacity change from 0 to 256 [ 854.104611][T25936] netlink: 'syz.2.8484': attribute type 3 has an invalid length. [ 854.171110][T25936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8484'. [ 854.386407][T25950] x_tables: duplicate underflow at hook 4 [ 854.573194][T25954] No such timeout policy "syz1" [ 855.200265][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 855.403261][T25993] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 855.679486][T25481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.688309][T26003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.744213][T26007] loop2: detected capacity change from 0 to 1024 [ 855.782076][T26007] EXT4-fs: Ignoring removed oldalloc option [ 855.846279][T26007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 855.894907][T26007] ext4 filesystem being mounted at /1482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.010532][T26007] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.8510: directory missing '..' [ 856.337402][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 856.404877][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8521'. [ 856.448090][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8521'. [ 856.474701][T26037] loop0: detected capacity change from 0 to 256 [ 856.816567][ T5782] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 856.926789][ T5767] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 856.971564][T25481] veth0_vlan: entered promiscuous mode [ 857.009853][T25481] veth1_vlan: entered promiscuous mode [ 857.024713][ T5782] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 857.070321][ T5782] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 857.111611][ T5767] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 857.120185][ T5782] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 857.141295][T25481] veth0_macvtap: entered promiscuous mode [ 857.152295][ T5767] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 857.178114][ T5782] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 857.186908][T25481] veth1_macvtap: entered promiscuous mode [ 857.193575][ T5767] usb 6-1: Product: syz [ 857.204990][ T5767] usb 6-1: SerialNumber: syz [ 857.227540][ T5782] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 857.237649][T26061] netlink: 'syz.1.8528': attribute type 3 has an invalid length. [ 857.255141][ T5767] usb 6-1: config 0 descriptor?? [ 857.259565][ T5782] usb 3-1: Manufacturer: syz [ 857.283575][ T5782] usb 3-1: SerialNumber: syz [ 857.289360][T25481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.325438][T25481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.378726][ T3267] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.404577][ T3267] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.442788][ T3267] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.501472][ T3267] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.550034][ T5767] hso 6-1:0.0: Failed to find BULK eps [ 857.561682][ T5782] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 857.652268][ T5782] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input52 [ 857.712931][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.720017][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.727189][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.734146][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.741096][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.748758][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.756041][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.765871][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 857.772648][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 857.774388][ T801] usb 6-1: USB disconnect, device number 116 [ 857.784997][T26073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8533'. [ 857.832917][ T5782] usb 3-1: USB disconnect, device number 112 [ 857.842831][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 857.894740][T18850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.925530][T26075] netlink: 'syz.1.8534': attribute type 12 has an invalid length. [ 857.940309][T18850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.021641][T26079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8536'. [ 858.061469][T26079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8536'. [ 858.153061][ T3267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.189119][ T3267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.383496][T26091] loop2: detected capacity change from 0 to 16 [ 858.426105][T26091] erofs (device loop2): mounted with root inode @ nid 36. [ 858.495116][T26091] erofs (device loop2): not enough plain data on disk @ la 4096 of nid 89 [ 858.522922][T26091] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 858.591093][T26091] syz.2.8541: attempt to access beyond end of device [ 858.591093][T26091] loop2: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 858.633591][T26095] syz.5.8542 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 858.721849][T26091] syz.2.8541: attempt to access beyond end of device [ 858.721849][T26091] loop2: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 858.811471][T26091] erofs (device loop2): not enough plain data on disk @ la 4096 of nid 89 [ 858.850214][T26091] erofs (device loop2): not enough plain data on disk @ la 4096 of nid 89 [ 858.892858][T26091] erofs (device loop2): read error -117 @ 1 of nid 89 [ 858.928714][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 858.928734][ T30] audit: type=1800 audit(1777769249.454:2378): pid=26091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8541" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 858.983351][T26112] loop0: detected capacity change from 0 to 256 [ 858.984479][T26110] loop5: detected capacity change from 0 to 256 [ 859.118954][T26112] FAT-fs (loop0): Directory bread(block 64) failed [ 859.159507][T26110] FAT-fs (loop5): Directory bread(block 64) failed [ 859.173315][T26112] FAT-fs (loop0): Directory bread(block 65) failed [ 859.210557][T26112] FAT-fs (loop0): Directory bread(block 66) failed [ 859.233191][T26110] FAT-fs (loop5): Directory bread(block 65) failed [ 859.246018][T26112] FAT-fs (loop0): Directory bread(block 67) failed [ 859.283820][T26122] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 859.286810][T26110] FAT-fs (loop5): Directory bread(block 66) failed [ 859.299700][T26112] FAT-fs (loop0): Directory bread(block 68) failed [ 859.322398][T26112] FAT-fs (loop0): Directory bread(block 69) failed [ 859.354857][T26110] FAT-fs (loop5): Directory bread(block 67) failed [ 859.365857][T26112] FAT-fs (loop0): Directory bread(block 70) failed [ 859.407925][T26112] FAT-fs (loop0): Directory bread(block 71) failed [ 859.418193][T26110] FAT-fs (loop5): Directory bread(block 68) failed [ 859.447777][T26112] FAT-fs (loop0): Directory bread(block 72) failed [ 859.456146][T26110] FAT-fs (loop5): Directory bread(block 69) failed [ 859.484426][T26112] FAT-fs (loop0): Directory bread(block 73) failed [ 859.495949][T26110] FAT-fs (loop5): Directory bread(block 70) failed [ 859.534504][T26110] FAT-fs (loop5): Directory bread(block 71) failed [ 859.566676][T26110] FAT-fs (loop5): Directory bread(block 72) failed [ 859.596628][T26110] FAT-fs (loop5): Directory bread(block 73) failed [ 859.768749][ T30] audit: type=1800 audit(1777769250.284:2379): pid=26112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8547" name="cpu.stat" dev="loop0" ino=1048691 res=0 errno=0 [ 860.246212][T26155] loop7: detected capacity change from 0 to 256 [ 860.300938][T26155] exfat: Deprecated parameter 'utf8' [ 860.386155][T26155] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 860.470985][T26162] loop6: detected capacity change from 0 to 256 [ 860.533789][T26162] exfat: Deprecated parameter 'namecase' [ 860.572535][T26162] exfat: Deprecated parameter 'namecase' [ 860.665572][T26171] netlink: 'syz.1.8573': attribute type 13 has an invalid length. [ 860.703516][T26162] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 860.772844][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 860.800929][T26173] deleting an unspecified loop device is not supported. [ 861.231899][T26186] pimreg: entered allmulticast mode [ 861.383272][T26197] loop6: detected capacity change from 0 to 256 [ 861.517975][T26201] openvswitch: netlink: Message has 4 unknown bytes. [ 861.543552][T26201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.836570][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 861.867580][T26214] loop0: detected capacity change from 0 to 1764 [ 861.945155][T26222] loop6: detected capacity change from 0 to 256 [ 861.978878][T26222] FAT-fs (loop6): Directory bread(block 64) failed [ 861.985572][T26222] FAT-fs (loop6): Directory bread(block 65) failed [ 861.993352][T26222] FAT-fs (loop6): Directory bread(block 66) failed [ 862.001054][T26222] FAT-fs (loop6): Directory bread(block 67) failed [ 862.009572][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 862.014916][T26222] FAT-fs (loop6): Directory bread(block 68) failed [ 862.039617][ T24] usb 8-1: config 0 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 862.055089][T26222] FAT-fs (loop6): Directory bread(block 69) failed [ 862.066203][T26222] FAT-fs (loop6): Directory bread(block 70) failed [ 862.074300][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 862.089400][T26222] FAT-fs (loop6): Directory bread(block 71) failed [ 862.102692][ T24] usb 8-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 862.116856][T26222] FAT-fs (loop6): Directory bread(block 72) failed [ 862.133588][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.142076][T26222] FAT-fs (loop6): Directory bread(block 73) failed [ 862.157795][ T801] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 862.175466][ T24] usb 8-1: Product: syz [ 862.201444][ T24] usb 8-1: Manufacturer: syz [ 862.224984][ T24] usb 8-1: SerialNumber: syz [ 862.262895][ T24] usb 8-1: config 0 descriptor?? [ 862.291198][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 862.307858][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 862.360020][ T24] usb 8-1: selecting invalid altsetting 0 [ 862.387126][ T801] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 862.403826][ T24] usb 8-1: can't set first interface for hiFace device. [ 862.422474][ T801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.441715][ T24] snd-usb-hiface 8-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 862.467587][ T801] usb 2-1: Product: syz [ 862.474220][ T801] usb 2-1: Manufacturer: syz [ 862.488834][ T801] usb 2-1: SerialNumber: syz [ 862.530697][ T801] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 862.570166][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 862.667478][T15845] usb 8-1: USB disconnect, device number 2 [ 862.696172][T26240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8606'. [ 862.859613][T26244] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8608'. [ 863.071653][ T5352] usb 2-1: USB disconnect, device number 106 [ 863.225888][T26256] loop6: detected capacity change from 0 to 512 [ 863.336097][T26256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.370195][T26258] loop7: detected capacity change from 0 to 4096 [ 863.384111][T26256] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 863.626181][T26266] bond1: option fail_over_mac: invalid value (15) [ 863.662316][T26266] bond1 (unregistering): Released all slaves [ 863.692780][T26242] loop0: detected capacity change from 0 to 32768 [ 863.705888][T26242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8607 (26242) [ 863.720595][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 863.730271][ T24] ath9k_htc: Failed to initialize the device [ 863.736879][T24732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.758377][ T5352] usb 2-1: ath9k_htc: USB layer deinitialized [ 863.766522][ T30] audit: type=1326 audit(1777769254.284:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 863.826216][T26242] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 863.844482][T26242] BTRFS info (device loop0): using sha256 checksum algorithm [ 863.901245][ T30] audit: type=1326 audit(1777769254.284:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 863.949657][ T30] audit: type=1326 audit(1777769254.344:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.002876][ T30] audit: type=1326 audit(1777769254.344:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.053484][ T30] audit: type=1326 audit(1777769254.344:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.149950][ T30] audit: type=1326 audit(1777769254.344:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.176643][ T30] audit: type=1326 audit(1777769254.344:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.208596][ T30] audit: type=1326 audit(1777769254.344:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.234140][ T30] audit: type=1326 audit(1777769254.344:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.7.8618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 864.264232][T26242] BTRFS info (device loop0): enabling ssd optimizations [ 864.286588][T26242] BTRFS info (device loop0): turning on async discard [ 864.298442][T26242] BTRFS info (device loop0): enabling free space tree [ 864.488049][T26305] loop6: detected capacity change from 0 to 64 [ 864.591039][ T5643] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 864.969688][T26318] netlink: 'syz.0.8630': attribute type 4 has an invalid length. [ 864.972319][T26319] usb usb9: check_ctrlrecip: process 26319 (syz.2.8634) requesting ep 01 but needs 81 [ 865.026097][T26318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8630'. [ 865.042640][T26319] usb usb9: usbfs: process 26319 (syz.2.8634) did not claim interface 0 before use [ 865.060642][T26323] loop5: detected capacity change from 0 to 512 [ 865.088687][T26318] .`: renamed from bond0 [ 865.114345][T26323] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.8636: corrupted inode contents [ 865.152518][T26323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 865.155357][T26323] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 865.164596][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 865.164620][ C1] EXT4-fs (loop5): initial error at time 1777769255: ext4_do_update_inode:5690: inode 15 [ 865.164661][ C1] EXT4-fs (loop5): last error at time 1777769255: ext4_do_update_inode:5690: inode 15 [ 865.211512][T26323] loop5: lost filesystem error report for type 5 error -117 [ 865.213015][T26323] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.8636: corrupted inode contents [ 865.218652][ T5352] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 865.222935][T26323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 865.250105][T26323] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.8636: mark_inode_dirty error [ 865.270733][T26323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 865.278043][T26323] EXT4-fs (loop5): 1 orphan inode deleted [ 865.377374][T26323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.396826][T26329] loop1: detected capacity change from 0 to 256 [ 865.462245][T26329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 865.477073][ T5352] usb 8-1: Using ep0 maxpacket: 8 [ 865.497490][ T5352] usb 8-1: unable to get BOS descriptor or descriptor too short [ 865.533055][ T5352] usb 8-1: config 4 interface 0 has no altsetting 0 [ 865.569730][ T5352] usb 8-1: string descriptor 0 read error: -22 [ 865.590022][ T5352] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 865.633017][ T5352] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 865.719964][ T5352] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 865.748261][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.789440][ T5352] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 865.831980][ T5352] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 865.857667][ T5352] usb 8-1: media controller created [ 865.969220][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.996690][T26344] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8647'. [ 866.063164][T26348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 866.069713][T26348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 866.145656][T26348] vhci_hcd vhci_hcd.0: Device attached [ 866.185945][T26352] vhci_hcd vhci_hcd.0: port 0 already used [ 866.251609][T26349] vhci_hcd: connection closed [ 866.253984][ T323] vhci_hcd vhci_hcd.1: stop threads [ 866.276374][ T323] vhci_hcd vhci_hcd.1: release socket [ 866.310243][ T323] vhci_hcd vhci_hcd.1: disconnect device [ 866.319608][ T30] audit: type=1400 audit(1777769256.834:2389): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=26357 comm="syz.6.8652" [ 866.383944][ T5352] usb 8-1: USB disconnect, device number 3 [ 866.399552][T26363] IPv6: NLM_F_REPLACE set, but no existing node found! [ 866.570455][T26369] ipvlan1: left allmulticast mode [ 866.722417][T26377] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 866.731764][T26375] loop0: detected capacity change from 0 to 1024 [ 867.298604][T26400] netlink: 'syz.5.8670': attribute type 7 has an invalid length. [ 867.359516][T26402] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.8671'. [ 867.911890][ T5782] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 868.050053][T26433] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 868.089927][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.120418][ T5782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.162321][ T5782] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 868.205615][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.240942][ T5782] usb 1-1: Product: syz [ 868.250478][ T5782] usb 1-1: Manufacturer: syz [ 868.255816][T26441] loop6: detected capacity change from 0 to 16 [ 868.265997][ T5782] usb 1-1: SerialNumber: syz [ 868.317680][ T5782] usb 1-1: 0:1 : does not exist [ 868.360020][T26441] erofs (device loop6): mounted with root inode @ nid 36. [ 868.382242][T26447] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8692'. [ 868.631415][T26455] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8696'. [ 868.723867][T26462] loop5: detected capacity change from 0 to 16 [ 868.739608][ T5782] usb 1-1: unit 0 not found! [ 868.760498][T26462] erofs (device loop5): mounted with root inode @ nid 36. [ 868.919044][ T5782] usb 1-1: USB disconnect, device number 110 [ 869.233312][T26478] vlan0: entered promiscuous mode [ 869.315631][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.607828][ T30] audit: type=1326 audit(1777769260.134:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.8716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 869.713676][ T30] audit: type=1326 audit(1777769260.134:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.8716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 869.767898][T26501] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.828072][ T30] audit: type=1326 audit(1777769260.134:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.8716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 869.924094][ T30] audit: type=1326 audit(1777769260.134:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.8716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1939cdd9 code=0x7ffc0000 [ 869.927434][T26508] PM: Enabling pm_trace changes system date and time during resume. [ 869.927434][T26508] PM: Correct system time has to be restored manually after resume. [ 870.029757][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.160329][T26519] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8725'. [ 870.330107][T26527] loop6: detected capacity change from 0 to 64 [ 870.611772][T26535] netlink: 'syz.1.8734': attribute type 46 has an invalid length. [ 870.901505][T26547] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8739'. [ 870.948311][T26551] loop2: detected capacity change from 0 to 256 [ 870.973985][T26551] vfat: Deprecated parameter 'posix' [ 870.986637][T26551] FAT-fs: "posix" option is obsolete, not supported now [ 871.001728][T26547] ip6tnl1: entered allmulticast mode [ 871.257491][ T30] audit: type=1326 audit(1777769261.784:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.353892][ T30] audit: type=1326 audit(1777769261.784:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.408439][ T30] audit: type=1326 audit(1777769261.934:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.635099][ T30] audit: type=1326 audit(1777769261.934:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.784745][ T30] audit: type=1326 audit(1777769261.934:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.915202][ T30] audit: type=1326 audit(1777769261.934:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.1.8742" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 871.993385][T26531] loop0: detected capacity change from 0 to 32768 [ 872.002099][T26531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8732 (26531) [ 872.032861][T26531] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 872.054097][T26531] BTRFS info (device loop0): using crc32c checksum algorithm [ 872.120554][T26603] loop7: detected capacity change from 0 to 4096 [ 872.143425][T26603] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 872.165099][T26531] BTRFS info (device loop0): enabling ssd optimizations [ 872.174797][T26531] BTRFS info (device loop0): turning on flush-on-commit [ 872.200737][T26531] BTRFS info (device loop0): enabling free space tree [ 872.254084][T26531] BTRFS info (device loop0): enabling auto defrag [ 872.289168][T26531] BTRFS info (device loop0): use lzo compression, level 1 [ 872.331083][T26603] ntfs3(loop7): ino=19, mi_enum_attr [ 872.346023][T26531] BTRFS info (device loop0): max_inline set to 4096 [ 872.472947][T26603] ntfs3(loop7): failed to convert "c46c" to cp437 [ 872.487714][T26625] gretap1: entered promiscuous mode [ 872.513194][T26603] ntfs3(loop7): ino=20, mi_enum_attr [ 872.594555][ T5643] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 873.040181][T26637] vti0: entered promiscuous mode [ 873.072477][T26637] vti0: entered allmulticast mode [ 873.085816][T26646] netlink: 'syz.5.8759': attribute type 11 has an invalid length. [ 873.114431][T26550] loop6: detected capacity change from 0 to 32768 [ 873.201262][T26550] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 873.376771][ T24] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 873.393352][T26666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8762'. [ 873.544859][T26550] XFS (loop6): Ending clean mount [ 873.601569][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 873.630430][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 873.665627][ T24] usb 1-1: config 1 has an invalid interface number: 8 but max is 2 [ 873.701096][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.735059][T24732] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 873.753863][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 873.794283][ T24] usb 1-1: config 1 has no interface number 0 [ 873.814371][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 873.879174][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 873.953266][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.993753][ T24] usb 1-1: Product: syz [ 874.039089][ T24] usb 1-1: Manufacturer: syz [ 874.050449][ T24] usb 1-1: SerialNumber: syz [ 874.141348][ T24] usb 1-1: unknown sample rate [ 874.232401][ T24] usb 1-1: unknown sample rate [ 874.256183][T26685] loop5: detected capacity change from 0 to 256 [ 874.366074][T26685] FAT-fs (loop5): Directory bread(block 64) failed [ 874.401951][T26685] FAT-fs (loop5): Directory bread(block 65) failed [ 874.417468][T26691] netlink: 'syz.6.8775': attribute type 3 has an invalid length. [ 874.441819][T26692] netlink: 126632 bytes leftover after parsing attributes in process `syz.7.8774'. [ 874.455045][T26685] FAT-fs (loop5): Directory bread(block 66) failed [ 874.462311][T26694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8776'. [ 874.464382][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8775'. [ 874.480976][T26685] FAT-fs (loop5): Directory bread(block 67) failed [ 874.487996][T26692] netlink: 8192 bytes leftover after parsing attributes in process `syz.7.8774'. [ 874.502602][T26685] FAT-fs (loop5): Directory bread(block 68) failed [ 874.508662][ T24] usb 1-1: USB disconnect, device number 111 [ 874.530431][T26685] FAT-fs (loop5): Directory bread(block 69) failed [ 874.537446][T26694] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8776'. [ 874.579030][T26685] FAT-fs (loop5): Directory bread(block 70) failed [ 874.639838][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.646317][T26685] FAT-fs (loop5): Directory bread(block 71) failed [ 874.759372][T26685] FAT-fs (loop5): Directory bread(block 72) failed [ 874.793084][T26685] FAT-fs (loop5): Directory bread(block 73) failed [ 874.922832][T26703] loop6: detected capacity change from 0 to 256 [ 874.939383][T26701] bridge3: entered promiscuous mode [ 874.976864][T26701] bridge3: entered allmulticast mode [ 874.993756][T26703] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 875.889358][T26738] loop5: detected capacity change from 0 to 1024 [ 875.937506][T26738] EXT4-fs: Ignoring removed orlov option [ 875.997250][T26738] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 876.050612][T26738] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 876.100303][T26738] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 876.129509][T26738] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 876.129509][T26738] [ 876.165751][T26738] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 876.191160][T26747] blktrace: Concurrent blktraces are not allowed on nullb0 [ 876.207160][T26740] loop0: detected capacity change from 0 to 4096 [ 876.236408][T26738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 876.252845][T26740] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 876.357223][ T5782] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 876.438204][T26569] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.454463][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.471659][T26740] ntfs3(loop0): ino=19, mi_enum_attr [ 876.489785][T26740] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 876.546616][ T5782] usb 2-1: Using ep0 maxpacket: 32 [ 876.563718][T26740] ntfs3(loop0): failed to convert "c46c" to cp865 [ 876.565272][ T5782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.607884][T26740] ntfs3(loop0): ino=20, mi_enum_attr [ 876.644188][ T5782] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 876.680031][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.701117][T26753] blktrace: Concurrent blktraces are not allowed on nullb0 [ 876.723325][ T5782] usb 2-1: Product: syz [ 876.742774][ T5782] usb 2-1: Manufacturer: syz [ 876.768036][ T5782] usb 2-1: SerialNumber: syz [ 876.829959][ T5782] usb 2-1: config 0 descriptor?? [ 876.878756][ T5782] usb 2-1: No union descriptors [ 876.913135][ T5782] usb 2-1: unsupported MDLM descriptors [ 876.983476][T26755] loop2: detected capacity change from 0 to 4096 [ 877.000807][T26762] siw: device registration error -23 [ 877.018639][T26755] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 877.034562][T26765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.048034][T26765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.057991][T26765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.074720][T26765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.083076][T26765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 877.100128][T26569] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.129022][T26755] ntfs3(loop2): ino=19, mi_enum_attr [ 877.175234][T15845] usb 2-1: USB disconnect, device number 107 [ 877.188215][T26755] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 877.314361][T26755] ntfs3(loop2): failed to convert "c46c" to cp1250 [ 877.329121][T26569] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.355184][T26755] ntfs3(loop2): ino=20, mi_enum_attr [ 877.456650][T26776] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8806'. [ 877.663123][T26569] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.784371][T26787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8811'. [ 877.794617][T16080] Bluetooth: hci0: command 0x0405 tx timeout [ 878.492837][T26817] netlink: 5 bytes leftover after parsing attributes in process `syz.7.8821'. [ 878.795951][T26817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.955725][T26569] bridge_slave_1: left allmulticast mode [ 878.986193][T26569] bridge_slave_1: left promiscuous mode [ 879.025799][T26569] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.130743][T26569] bridge_slave_0: left allmulticast mode [ 879.150130][ T5642] Bluetooth: hci2: command tx timeout [ 879.181246][T26569] bridge_slave_0: left promiscuous mode [ 879.199577][T26569] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.258413][T26832] libceph: resolve '400' (ret=-3): failed [ 879.361822][T26799] loop1: detected capacity change from 0 to 32768 [ 879.389826][T26799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8815 (26799) [ 879.443085][T26799] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.461343][T26799] BTRFS info (device loop1): using sha256 checksum algorithm [ 879.543525][T26799] BTRFS info (device loop1): enabling ssd optimizations [ 879.591907][T26799] BTRFS info (device loop1): turning on async discard [ 879.643966][T26799] BTRFS info (device loop1): enabling free space tree [ 879.709751][T26799] BTRFS warning (device loop1): can't clear the incompat:0,mixed_groups,compress_zstd feature bits while mounted [ 879.883170][ T5633] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 880.194810][T26569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.199343][T26833] loop7: detected capacity change from 0 to 32768 [ 880.265325][T26569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.298242][T26833] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.331885][T26569] bond0 (unregistering): Released all slaves [ 880.608308][T26761] lo speed is unknown, defaulting to 1000 [ 880.734608][T26884] loop5: detected capacity change from 0 to 164 [ 880.768463][T26880] loop0: detected capacity change from 0 to 4096 [ 880.831595][T26880] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 880.853154][T26833] XFS (loop7): Ending clean mount [ 880.878186][T26887] xt_limit: Overflow, try lower: 268435456/134217728 [ 881.030805][T26880] ntfs3(loop0): ino=1a, mi_enum_attr [ 881.065763][T26880] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 881.134286][T25481] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 881.183351][T26880] ntfs3(loop0): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 881.226713][ T5642] Bluetooth: hci2: command tx timeout [ 881.463271][T26577] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 881.800508][T15848] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 881.978647][T15848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 881.991929][T15848] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 882.003526][T15848] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 882.012985][T26913] loop7: detected capacity change from 0 to 256 [ 882.026974][T15848] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 882.040390][T15848] usb 2-1: config 13 has no interface number 0 [ 882.046038][T26569] hsr_slave_0: left promiscuous mode [ 882.047231][T15848] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 882.065322][T15848] usb 2-1: config 13 interface 50 has no altsetting 0 [ 882.075536][T15848] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 882.086006][T15848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.094520][T15848] usb 2-1: Product: syz [ 882.099238][T15848] usb 2-1: Manufacturer: syz [ 882.103984][T15848] usb 2-1: SerialNumber: syz [ 882.112866][T26913] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 882.128480][T26569] hsr_slave_1: left promiscuous mode [ 882.160238][T26569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.201420][T26569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.234610][T26569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.278976][T26569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.363524][T26922] loop0: detected capacity change from 0 to 64 [ 882.373116][T15848] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 882.394966][T26569] veth1_macvtap: left promiscuous mode [ 882.401150][T26567] usb 2-1: Failed to submit usb control message: -71 [ 882.406384][T26569] veth0_macvtap: left promiscuous mode [ 882.425388][T26569] veth1_vlan: left promiscuous mode [ 882.448418][T26567] usb 2-1: unable to send the bmi data to the device: -71 [ 882.492542][T15848] usb 2-1: USB disconnect, device number 108 [ 882.524098][T26567] usb 2-1: unable to get target info from device [ 882.554724][T26567] usb 2-1: could not get target info (-71) [ 882.590324][T26567] usb 2-1: could not probe fw (-71) [ 883.084774][T26941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8859'. [ 883.130599][T26941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8859'. [ 883.180554][T26947] loop7: detected capacity change from 0 to 512 [ 883.199790][T26947] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 883.237847][T26947] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.8862: inode has both inline data and extents flags [ 883.284293][T26947] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 883.284791][T26947] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.8862: couldn't read orphan inode 15 (err -117) [ 883.294013][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 883.294037][ C1] EXT4-fs (loop7): initial error at time 1777769273: ext4_orphan_get:1397: inode 15 [ 883.294076][ C1] EXT4-fs (loop7): last error at time 1777769273: ext4_orphan_get:1397: inode 15 [ 883.316602][ T5642] Bluetooth: hci2: command tx timeout [ 883.338587][T26947] loop7: lost filesystem error report for type 5 error -117 [ 883.362806][T26947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.365294][T26955] netlink: zone id is out of range [ 883.394661][T26955] netlink: zone id is out of range [ 883.401909][T26955] netlink: zone id is out of range [ 883.407952][T26955] netlink: zone id is out of range [ 883.649767][T25481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.773097][T26569] team0 (unregistering): Port device team_slave_1 removed [ 883.880931][T26569] team0 (unregistering): Port device team_slave_0 removed [ 883.935463][T26967] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8870'. [ 884.184521][T26959] loop0: detected capacity change from 0 to 32768 [ 884.210914][T26959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8867 (26959) [ 884.244606][T26971] netlink: 'syz.7.8873': attribute type 4 has an invalid length. [ 884.257287][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8873'. [ 884.277160][T26959] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 884.286104][T26971] .`: renamed from bond0 (while UP) [ 884.303386][T26959] BTRFS info (device loop0): using sha256 checksum algorithm [ 884.432745][T26959] BTRFS info (device loop0): rebuilding free space tree [ 884.687594][T26959] BTRFS info (device loop0): enabling ssd optimizations [ 884.698075][T26959] BTRFS info (device loop0): using spread ssd allocation scheme [ 884.729492][T26959] BTRFS info (device loop0): turning on async discard [ 884.750980][T26959] BTRFS info (device loop0): enabling free space tree [ 884.773732][T26959] BTRFS info (device loop0): force clearing of disk cache [ 884.918194][T27003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 884.925489][T27003] IPv6: NLM_F_CREATE should be set when creating new route [ 884.932816][T27003] IPv6: NLM_F_CREATE should be set when creating new route [ 885.084139][ T5643] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 885.337367][ T24] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 885.388161][T16080] Bluetooth: hci2: command tx timeout [ 885.541307][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 885.582057][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.652846][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 885.655267][T27029] netlink: 'syz.2.8887': attribute type 1 has an invalid length. [ 885.701032][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 885.757593][T27029] netlink: 'syz.2.8887': attribute type 2 has an invalid length. [ 885.773322][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 885.846073][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 885.863030][T26761] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.886112][T26761] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.893390][ T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 885.920538][T26761] bridge_slave_0: entered allmulticast mode [ 885.935833][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.961936][T26761] bridge_slave_0: entered promiscuous mode [ 885.990765][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.012421][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 886.032207][T26761] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.045052][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 886.078906][T26761] bridge_slave_1: entered allmulticast mode [ 886.090257][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 886.132931][T26761] bridge_slave_1: entered promiscuous mode [ 886.142722][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 886.165919][ T24] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 886.352701][ T24] usb 6-1: USB disconnect, device number 117 [ 886.701914][T26761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.749267][T26761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.764941][T27066] loop7: detected capacity change from 0 to 64 [ 886.869512][T27017] loop1: detected capacity change from 0 to 32768 [ 886.903680][T27017] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8886 (27017) [ 886.955225][T26761] team0: Port device team_slave_0 added [ 886.992692][T27017] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 887.005345][T26761] team0: Port device team_slave_1 added [ 887.041837][T27017] BTRFS info (device loop1): using blake2b checksum algorithm [ 887.166175][T27017] BTRFS info (device loop1): setting nodatasum [ 887.228477][T27017] BTRFS info (device loop1): enabling ssd optimizations [ 887.278018][T26761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.308989][T27017] BTRFS info (device loop1): turning on async discard [ 887.324963][T27017] BTRFS info (device loop1): enabling free space tree [ 887.325269][T26761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.381596][T27093] loop7: detected capacity change from 0 to 2048 [ 887.457769][T26761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.481689][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 887.496634][T27093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.561534][T26761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.611197][T26761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.750849][T26761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.773177][T27108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.814125][ T5633] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 887.908914][T25481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.195063][T26761] hsr_slave_0: entered promiscuous mode [ 888.239429][T26761] hsr_slave_1: entered promiscuous mode [ 888.283572][T26761] debugfs: 'hsr0' already exists in 'hsr' [ 888.312746][T26761] Cannot create hsr debugfs directory [ 888.539381][T27132] loop7: detected capacity change from 0 to 1024 [ 889.273841][T27149] loop7: detected capacity change from 0 to 4096 [ 889.330739][T27149] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 889.525658][T27149] ntfs3(loop7): ino=18, mi_enum_attr [ 889.543889][T27149] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 889.734335][T27168] loop1: detected capacity change from 0 to 736 [ 889.802757][T27170] loop2: detected capacity change from 0 to 1024 [ 890.319464][T26761] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 890.385747][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.423695][T26761] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 890.507457][T27192] loop1: detected capacity change from 0 to 1024 [ 890.532350][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.550274][T26761] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 890.564499][T27192] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 890.665555][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.711803][T26761] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 890.876858][T26761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.904712][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 891.221661][T27217] hsr0 speed is unknown, defaulting to 1000 [ 891.301313][T27217] hsr0 speed is unknown, defaulting to 1000 [ 891.369153][T26761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.403849][T27217] hsr0 speed is unknown, defaulting to 1000 [ 891.417781][T27217] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 891.469256][T26761] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.481744][T27217] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 891.507432][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.514613][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.572268][T27217] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 891.600570][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.607776][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.690904][T27217] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 891.885751][T27189] loop5: detected capacity change from 0 to 32768 [ 891.892671][T27238] loop1: detected capacity change from 0 to 512 [ 891.903235][T27217] hsr0 speed is unknown, defaulting to 1000 [ 891.923318][T27189] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 891.969063][T27238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.970561][T27217] hsr0 speed is unknown, defaulting to 1000 [ 892.011720][T27217] hsr0 speed is unknown, defaulting to 1000 [ 892.209386][T27189] XFS (loop5): Ending clean mount [ 892.282343][T27238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.8948: bg 0: bad block bitmap checksum [ 892.323770][T27238] __quota_error: 11 callbacks suppressed [ 892.323791][T27238] Quota error (device loop1): write_blk: dquota write failed [ 892.368227][T27238] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 892.393957][T27257] bond0: option miimon: invalid value (18446744073709551607) [ 892.405653][T27238] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8948: Failed to acquire dquot type 1 [ 892.419512][T27257] bond0: option miimon: allowed values 0 - 2147483647 [ 892.434573][ T5636] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 892.448040][T27257] bond0 (unregistering): Released all slaves [ 892.574530][T27217] hsr0 speed is unknown, defaulting to 1000 [ 892.586134][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 892.610539][T27217] hsr0 speed is unknown, defaulting to 1000 [ 892.660428][T27217] hsr0 speed is unknown, defaulting to 1000 [ 892.669948][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.085145][T27282] vivid-001: disconnect [ 893.130214][T27278] vivid-001: reconnect [ 893.238031][T27286] loop1: detected capacity change from 0 to 64 [ 893.466620][ T5767] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 893.680193][ T5767] usb 6-1: unable to get BOS descriptor or descriptor too short [ 893.724515][ T5767] usb 6-1: not running at top speed; connect to a high speed hub [ 893.765696][ T5767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.816538][ T5767] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.860308][ T5767] usb 6-1: string descriptor 0 read error: -22 [ 893.883110][ T5767] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 893.895461][T27267] loop2: detected capacity change from 0 to 32768 [ 893.923803][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.980283][T27267] JBD2: Ignoring recovery information on journal [ 894.104279][T27310] vxcan3: entered promiscuous mode [ 894.137007][T27310] vxcan3: entered allmulticast mode [ 894.175560][T27267] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 894.228445][T26761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.520518][ T5767] usb 6-1: USB disconnect, device number 118 [ 894.583258][T27294] loop0: detected capacity change from 0 to 32768 [ 894.591009][T27323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8968'. [ 894.622118][T27294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8961 (27294) [ 894.680580][T27294] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 894.722141][T27294] BTRFS info (device loop0): using sha256 checksum algorithm [ 894.895034][T27342] trusted_key: encrypted_key: keylen parameter is missing [ 894.915643][T27294] BTRFS info (device loop0): rebuilding free space tree [ 894.980163][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 895.026591][T27294] BTRFS info (device loop0): disabling free space tree [ 895.056637][T27294] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 895.085394][T27294] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 895.141307][ T5635] ocfs2: Unmounting device (7,2) on (node local) [ 895.240404][T27294] BTRFS info (device loop0): setting nodatasum [ 895.300350][T27294] BTRFS info (device loop0): setting nodatacow [ 895.326843][T27294] BTRFS info (device loop0): turning off barriers [ 895.370274][T27294] BTRFS info (device loop0): force clearing of disk cache [ 895.520471][T26761] veth0_vlan: entered promiscuous mode [ 895.583737][T26761] veth1_vlan: entered promiscuous mode [ 895.762221][T26761] veth0_macvtap: entered promiscuous mode [ 895.824842][T26761] veth1_macvtap: entered promiscuous mode [ 895.919644][T27364] loop5: detected capacity change from 0 to 512 [ 895.947287][T26761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.957747][T27364] EXT4-fs: Ignoring removed nobh option [ 895.976251][T27364] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 896.003701][T26761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.016026][ T5643] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 896.030404][T27364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 896.073781][T26587] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.086694][T27364] EXT4-fs (loop5): orphan cleanup on readonly fs [ 896.112900][T26587] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.129842][T26587] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.139842][T26587] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.148691][T27364] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.8977: attempt to clear invalid blocks 1024 len 1 [ 896.163945][T27364] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 896.164430][T27364] EXT4-fs (loop5): Remounting filesystem read-only [ 896.173705][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 896.173728][ C0] EXT4-fs (loop5): initial error at time 1777769286: ext4_clear_blocks:876: inode 11 [ 896.173768][ C0] EXT4-fs (loop5): last error at time 1777769286: ext4_clear_blocks:876: inode 11 [ 896.215912][T27364] EXT4-fs (loop5): 1 truncate cleaned up [ 896.225022][T27364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 896.324407][T27375] loop1: detected capacity change from 0 to 256 [ 896.450302][T27375] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 896.538804][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 896.676895][T26587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.719873][T26587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.875960][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.904473][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.138951][ T801] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 897.174865][T27397] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8990'. [ 897.208521][T27397] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8990'. [ 897.336602][ T801] usb 2-1: Using ep0 maxpacket: 8 [ 897.364935][ T801] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 897.385098][T27404] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 897.405466][ T801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.451804][ T801] pvrusb2: Hardware description: Terratec Grabster AV400 [ 897.493306][ T801] pvrusb2: ********** [ 897.516671][ T801] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 897.579584][ T801] pvrusb2: Important functionality might not be entirely working. [ 897.619828][ T801] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 897.641000][T27412] loop2: detected capacity change from 0 to 512 [ 897.663090][ T801] pvrusb2: ********** [ 897.681617][ T2356] pvrusb2: Invalid write control endpoint [ 897.734858][T27412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.779702][T27412] ext4 filesystem being mounted at /1585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.783809][T27422] xt_TCPMSS: Only works on TCP SYN packets [ 897.910029][T15849] usb 2-1: USB disconnect, device number 109 [ 897.996032][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.018061][ T2356] pvrusb2: Invalid write control endpoint [ 898.026093][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 898.030755][T27427] loop8: detected capacity change from 0 to 1024 [ 898.045523][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 898.092282][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 898.108912][ T2356] pvrusb2: Device being rendered inoperable [ 898.155724][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 898.200160][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 898.252002][ T2356] pvrusb2: Attached sub-driver cx25840 [ 898.269075][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 898.310109][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 898.415241][T27442] loop2: detected capacity change from 0 to 512 [ 898.457904][T27442] EXT4-fs: Ignoring removed i_version option [ 898.543644][T27442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.594398][T27442] ext4 filesystem being mounted at /1587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.803881][T27456] loop1: detected capacity change from 0 to 4096 [ 898.859308][T27456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.015621][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.294132][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.622705][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9029'. [ 899.680015][T27488] loop2: detected capacity change from 0 to 512 [ 899.691812][T27489] loop7: detected capacity change from 0 to 512 [ 899.741082][T27489] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 899.797555][T27488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.824993][T27488] ext4 filesystem being mounted at /1589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 899.863534][T27489] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 899.964213][T27499] loop0: detected capacity change from 0 to 512 [ 899.981745][T27489] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9030: bg 0: block 248: padding at end of block bitmap is not set [ 900.005941][T27499] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 900.053988][T27489] loop7: lost filesystem error report for type 5 error -117 [ 900.056465][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 900.071276][ C0] EXT4-fs (loop7): last error at time 1777769290: ext4_validate_block_bitmap:441 [ 900.088290][T27499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 900.091029][T27489] Quota error (device loop7): write_blk: dquota write failed [ 900.120565][T27499] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 900.135061][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.144571][T27489] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 900.144633][T27489] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.9030: Failed to acquire dquot type 1 [ 900.144661][T27489] loop7: lost filesystem error report for type 5 error -28 [ 900.157458][T27499] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 900.210539][T27489] EXT4-fs (loop7): 1 truncate cleaned up [ 900.287084][T27489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 900.313470][T27499] EXT4-fs (loop0): 1 truncate cleaned up [ 900.354188][T27499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 900.408296][T27499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.480974][T27506] loop5: detected capacity change from 0 to 4096 [ 900.513345][T27506] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 900.578661][T27506] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 900.590385][T26587] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 900.618481][T27506] ntfs3(loop5): ino=19, mi_enum_attr [ 900.626058][T25481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 900.627303][T26587] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 1 [ 900.701010][T27512] netlink: 352 bytes leftover after parsing attributes in process `syz.1.9041'. [ 900.714576][T26587] loop7: lost filesystem error report for type 5 error -117 [ 900.981909][T27520] binder: 27519:27520 ioctl c0306201 200000000600 returned -14 [ 901.255227][T27532] loop0: detected capacity change from 0 to 256 [ 901.402842][T27532] FAT-fs (loop0): Directory bread(block 64) failed [ 901.434498][T27532] FAT-fs (loop0): Directory bread(block 65) failed [ 901.474630][T27532] FAT-fs (loop0): Directory bread(block 66) failed [ 901.508408][T27532] FAT-fs (loop0): Directory bread(block 67) failed [ 901.538362][T27532] FAT-fs (loop0): Directory bread(block 68) failed [ 901.566571][T27532] FAT-fs (loop0): Directory bread(block 69) failed [ 901.578776][T27532] FAT-fs (loop0): Directory bread(block 70) failed [ 901.637133][T27532] FAT-fs (loop0): Directory bread(block 71) failed [ 901.695645][T27532] FAT-fs (loop0): Directory bread(block 72) failed [ 901.735327][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9057'. [ 901.745864][T27532] FAT-fs (loop0): Directory bread(block 73) failed [ 901.806004][T27552] netlink: 1088 bytes leftover after parsing attributes in process `syz.2.9058'. [ 902.412151][T27527] loop5: detected capacity change from 0 to 32768 [ 902.485446][T27527] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 902.658089][T27527] XFS (loop5): Ending clean mount [ 902.861130][ T5636] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 902.890825][T27596] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 902.912578][T27588] loop2: detected capacity change from 0 to 4096 [ 902.964972][T27588] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 903.014381][T27588] ntfs3(loop2): Failed to load $Extend (-22). [ 903.047921][T27588] ntfs3(loop2): Failed to initialize $Extend. [ 903.668424][T27616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9085'. [ 903.753941][T27562] loop7: detected capacity change from 0 to 32768 [ 903.830503][T27562] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 904.091337][T27562] XFS (loop7): Ending clean mount [ 904.141275][T27562] XFS (loop7): Quotacheck needed: Please wait. [ 904.349714][T27562] XFS (loop7): Quotacheck: Done. [ 904.535360][T25481] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 904.573343][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9099'. [ 904.720845][T27656] bridge1: entered promiscuous mode [ 904.746926][T27656] bridge1: entered allmulticast mode [ 905.257728][T27677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9114'. [ 905.272967][T27682] syz.2.9113 (27682): /proc/27676/oom_adj is deprecated, please use /proc/27676/oom_score_adj instead. [ 905.335931][T27677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9114'. [ 905.346664][ T5352] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 905.535983][ T5352] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 905.566355][ T5352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.597053][ T5352] usb 9-1: Product: syz [ 905.605679][ T5352] usb 9-1: Manufacturer: syz [ 905.623436][ T5352] usb 9-1: SerialNumber: syz [ 905.644171][T27695] loop0: detected capacity change from 0 to 256 [ 905.671350][ T5352] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 905.715615][T15849] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 905.784423][T27698] netlink: 388 bytes leftover after parsing attributes in process `syz.7.9122'. [ 905.813820][ T30] audit: type=1326 audit(1777769296.334:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 905.938857][T27695] FAT-fs (loop0): Directory bread(block 64) failed [ 905.954958][T27695] FAT-fs (loop0): Directory bread(block 65) failed [ 905.973196][ T30] audit: type=1326 audit(1777769296.334:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.037883][T27695] FAT-fs (loop0): Directory bread(block 66) failed [ 906.088945][T27695] FAT-fs (loop0): Directory bread(block 67) failed [ 906.113883][ T30] audit: type=1326 audit(1777769296.364:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.138535][T27695] FAT-fs (loop0): Directory bread(block 68) failed [ 906.172270][T27695] FAT-fs (loop0): Directory bread(block 69) failed [ 906.214238][T27695] FAT-fs (loop0): Directory bread(block 70) failed [ 906.265693][T27695] FAT-fs (loop0): Directory bread(block 71) failed [ 906.311165][T27695] FAT-fs (loop0): Directory bread(block 72) failed [ 906.328352][ T801] usb 9-1: USB disconnect, device number 2 [ 906.347590][ T30] audit: type=1326 audit(1777769296.364:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.405202][T27695] FAT-fs (loop0): Directory bread(block 73) failed [ 906.418565][ T30] audit: type=1326 audit(1777769296.364:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.529389][ T30] audit: type=1326 audit(1777769296.364:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.553049][T27720] loop1: detected capacity change from 0 to 128 [ 906.579558][ T30] audit: type=1326 audit(1777769296.374:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.590673][T27722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.611171][ T30] audit: type=1326 audit(1777769296.374:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.649991][T27720] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 906.718979][T27725] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9133'. [ 906.730094][ T30] audit: type=1326 audit(1777769296.374:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.2.9125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb17e59cdd9 code=0x7ffc0000 [ 906.735696][T27720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 906.827052][T15849] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 906.843363][T15849] ath9k_htc: Failed to initialize the device [ 906.889164][ T801] usb 9-1: ath9k_htc: USB layer deinitialized [ 907.028154][T27734] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 907.071757][T27736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9137'. [ 907.384711][T27749] loop2: detected capacity change from 0 to 256 [ 907.421328][T27749] exfat: Deprecated parameter 'utf8' [ 907.470097][T27749] exfat: Deprecated parameter 'namecase' [ 907.501448][T27749] exfat: Deprecated parameter 'namecase' [ 907.519208][T15849] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 907.557319][T27749] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 907.715037][T15849] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 907.732022][T27765] netlink: zone id is out of range [ 907.758552][T15849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.784440][T27765] netlink: get zone limit has 4 unknown bytes [ 907.789738][T15849] usb 1-1: Product: syz [ 907.826554][ T5352] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 907.840643][T15849] usb 1-1: Manufacturer: syz [ 907.871723][T15849] usb 1-1: SerialNumber: syz [ 907.909503][T15849] usb 1-1: config 0 descriptor?? [ 907.945822][T15849] ch341 1-1:0.0: ch341-uart converter detected [ 908.013627][ T5352] usb 8-1: unable to get BOS descriptor or descriptor too short [ 908.055105][ T5352] usb 8-1: not running at top speed; connect to a high speed hub [ 908.095112][ T5352] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 908.142948][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9153'. [ 908.153691][ T5352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.194136][ T5352] usb 8-1: Product: syz [ 908.213146][ T5352] usb 8-1: Manufacturer: syz [ 908.229631][ T5352] usb 8-1: SerialNumber: syz [ 908.273793][ T5352] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 908.364801][T15849] usb 1-1: failed to send control message: -71 [ 908.390871][T15849] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 908.448790][T15849] usb 1-1: USB disconnect, device number 112 [ 908.482038][T27759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.514075][T15849] ch341 1-1:0.0: device disconnected [ 908.532589][T27759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.721550][ T5352] usb 8-1: USB disconnect, device number 4 [ 908.766609][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 908.883684][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.930043][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 908.972038][ T24] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 909.008181][ T24] usb 3-1: config 0 has no interface number 0 [ 909.022113][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 909.039845][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 909.053892][ T24] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 909.103323][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 909.135806][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 909.172619][ T24] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.173543][T27780] loop8: detected capacity change from 0 to 32768 [ 909.215595][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 909.227419][T27780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.9154 (27780) [ 909.256004][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 115 [ 909.296113][ T24] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.326117][T27780] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 909.337076][T15849] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 909.353583][ T24] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 909.371890][T27780] BTRFS info (device loop8): using sha256 checksum algorithm [ 909.381024][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.415369][T27811] loop7: detected capacity change from 0 to 256 [ 909.418537][ T24] usb 3-1: Product: syz [ 909.458997][ T24] usb 3-1: Manufacturer: syz [ 909.493272][ T24] usb 3-1: SerialNumber: syz [ 909.507031][T15849] usb 2-1: Using ep0 maxpacket: 8 [ 909.523706][T15849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 909.533288][T15849] usb 2-1: config 8 has an invalid interface number: 42 but max is 0 [ 909.547952][T15849] usb 2-1: config 8 has no interface number 0 [ 909.554534][T15849] usb 2-1: config 8 interface 42 has no altsetting 0 [ 909.563982][T27780] BTRFS info (device loop8): enabling ssd optimizations [ 909.564983][T15849] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 909.580315][T15849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.583568][ T24] usb 3-1: config 0 descriptor?? [ 909.593460][T15849] usb 2-1: Product: syz [ 909.608699][T27811] FAT-fs (loop7): Directory bread(block 64) failed [ 909.613678][T15849] usb 2-1: Manufacturer: syz [ 909.621379][T15849] usb 2-1: SerialNumber: syz [ 909.625839][T27788] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 909.645740][T27780] BTRFS info (device loop8): turning on async discard [ 909.652917][T27788] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 909.660645][T27811] FAT-fs (loop7): Directory bread(block 65) failed [ 909.683931][ T24] usb 3-1: will this work? Response EP is not usually 3 [ 909.696865][T27811] FAT-fs (loop7): Directory bread(block 66) failed [ 909.708701][T27780] BTRFS info (device loop8): enabling free space tree [ 909.722254][ T24] usb 3-1: will this work? Image data EP is not usually 2 [ 909.736837][T27811] FAT-fs (loop7): Directory bread(block 67) failed [ 909.759357][T27811] FAT-fs (loop7): Directory bread(block 68) failed [ 909.771029][ T24] scsi host1: microtekX6 [ 909.815696][T27811] FAT-fs (loop7): Directory bread(block 69) failed [ 909.865877][T27811] FAT-fs (loop7): Directory bread(block 70) failed [ 909.873367][T27811] FAT-fs (loop7): Directory bread(block 71) failed [ 909.881108][T27811] FAT-fs (loop7): Directory bread(block 72) failed [ 909.909203][T15849] empeg 2-1:8.42: empeg converter detected [ 909.916256][T27811] FAT-fs (loop7): Directory bread(block 73) failed [ 909.956207][T15849] usb 2-1: active config #8 != 1 ?? [ 910.013378][T15849] usb 2-1: USB disconnect, device number 110 [ 910.022647][ T801] usb 3-1: USB disconnect, device number 113 [ 910.079739][T26761] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 910.093936][T27838] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9170'. [ 910.132407][T27838] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9170'. [ 910.610352][T27851] tmpfs: Bad value for 'mpol' [ 911.004558][T27861] bond5: entered allmulticast mode [ 911.010275][T27861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 911.058899][T27865] loop8: detected capacity change from 0 to 512 [ 911.123536][T27865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 911.239316][T27871] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.266939][T27865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.296701][T27865] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 911.313852][T27881] loop2: detected capacity change from 0 to 2048 [ 911.348339][T27884] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 911.446183][T27886] xt_TCPMSS: Only works on TCP SYN packets [ 911.513718][T27881] NILFS (loop2): error -2 truncating bmap (ino=16) [ 911.571268][T27891] loop5: detected capacity change from 0 to 64 [ 911.600620][T27865] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.9180: corrupted xattr block 33: invalid ea_ino [ 911.729199][T27884] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 911.783425][T27884] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 911.844857][T26761] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.879876][T27884] Remounting filesystem read-only [ 912.001548][ T5635] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 912.095724][T27911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.302818][T27917] overlay: Bad value for 'workdir' [ 912.322441][ T30] audit: type=1326 audit(1777769302.844:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.384387][T27910] loop8: detected capacity change from 0 to 4096 [ 912.432030][T27910] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 912.438289][ T30] audit: type=1326 audit(1777769302.844:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.655168][ T30] audit: type=1326 audit(1777769302.884:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.719975][T27910] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 912.724966][T27924] loop5: detected capacity change from 0 to 512 [ 912.798893][ T30] audit: type=1326 audit(1777769302.884:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.842380][T27924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.874012][ T30] audit: type=1326 audit(1777769302.884:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.899003][ T30] audit: type=1326 audit(1777769302.884:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.925981][ T30] audit: type=1326 audit(1777769302.884:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.951044][ T30] audit: type=1326 audit(1777769302.884:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.5.9200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bedd9cdd9 code=0x7ffc0000 [ 912.990293][T27924] ext4 filesystem being mounted at /1572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.153135][T27941] netlink: 252 bytes leftover after parsing attributes in process `syz.1.9209'. [ 913.205077][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.740001][T27964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9219'. [ 913.878686][ T30] audit: type=1326 audit(1777769304.404:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27968 comm="syz.1.9222" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 913.945596][ T30] audit: type=1326 audit(1777769304.404:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27968 comm="syz.1.9222" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 913.966540][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 914.177772][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 914.186025][T27974] loop0: detected capacity change from 0 to 4096 [ 914.208845][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 914.258474][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.313931][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.377308][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 914.418503][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 914.459313][T27988] loop2: detected capacity change from 0 to 512 [ 914.469337][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 914.509593][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.574773][T27988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.599728][ T24] usb 8-1: config 0 descriptor?? [ 914.643265][T27963] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 914.709662][T27988] ext4 filesystem being mounted at /1625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.890275][T28001] loop1: detected capacity change from 0 to 1764 [ 915.057774][T28001] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 915.093969][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.189872][T26069] usb 8-1: USB disconnect, device number 5 [ 915.206888][ T5642] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 915.634250][T28029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9247'. [ 915.739116][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9248'. [ 915.773251][T28033] netlink: 'syz.8.9248': attribute type 2 has an invalid length. [ 915.978317][T28037] loop2: detected capacity change from 0 to 764 [ 916.950039][T28043] loop7: detected capacity change from 0 to 32768 [ 916.982095][T28043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9253 (28043) [ 917.031627][T28043] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 917.060135][T28043] BTRFS info (device loop7): using sha256 checksum algorithm [ 917.106568][T26069] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 917.221791][T28043] BTRFS info (device loop7): enabling ssd optimizations [ 917.271439][T28043] BTRFS info (device loop7): turning on async discard [ 917.277241][T26069] usb 3-1: Using ep0 maxpacket: 16 [ 917.279056][T28043] BTRFS info (device loop7): enabling free space tree [ 917.322021][T26069] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 917.366190][T26069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.393847][T28104] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9277'. [ 917.410159][T26069] usb 3-1: Product: syz [ 917.422954][T26069] usb 3-1: Manufacturer: syz [ 917.429075][T26069] usb 3-1: SerialNumber: syz [ 917.448493][T26069] usb 3-1: config 0 descriptor?? [ 917.472329][T26069] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 917.590375][T28104] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9277'. [ 917.672716][T25481] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 917.869809][T26069] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 917.885279][T26069] visor 3-1:0.0: probe with driver visor failed with error -71 [ 917.950306][T26069] usb 3-1: USB disconnect, device number 114 [ 918.108256][T28081] loop1: detected capacity change from 0 to 32768 [ 918.182855][T28081] jfs_strtoUCS: char2uni returned -22. [ 918.213342][T28081] charset = euc-jp, char = 0xd4 [ 918.395600][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9286'. [ 919.026564][ T5887] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 919.206506][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 919.234643][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 919.267613][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 919.286772][T28147] loop2: detected capacity change from 0 to 4096 [ 919.311316][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 919.359239][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 919.436248][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 919.488141][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 919.547905][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 919.607516][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.659699][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 919.723971][ T5887] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 919.754935][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.789320][ T5887] usb 1-1: Product: syz [ 919.814829][ T5887] usb 1-1: Manufacturer: syz [ 919.841633][ T5887] usb 1-1: SerialNumber: syz [ 919.873830][ T5887] usb 1-1: config 0 descriptor?? [ 919.904360][T28137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 919.942279][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.317550][ T5887] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 920.378171][ T5887] usb 1-1: USB disconnect, device number 113 [ 920.407284][T28193] netlink: 'syz.8.9320': attribute type 58 has an invalid length. [ 920.424312][T28192] loop2: detected capacity change from 0 to 512 [ 920.434509][T28193] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9320'. [ 920.471892][T28192] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 920.495967][T28192] EXT4-fs (loop2): orphan cleanup on readonly fs [ 920.548748][T28192] __quota_error: 3 callbacks suppressed [ 920.548767][T28192] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 920.567832][T28192] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 920.572479][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.582714][T28192] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 920.621703][T28192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9319: bg 0: block 64: padding at end of block bitmap is not set [ 920.636375][T28192] loop2: lost filesystem error report for type 5 error -117 [ 920.636474][ C1] EXT4-fs (loop2): initial error at time 1777769311: ext4_validate_block_bitmap:441 [ 920.653318][ C1] EXT4-fs (loop2): last error at time 1777769311: ext4_validate_block_bitmap:441 [ 920.674715][T28192] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 920.707530][T28192] loop2: lost filesystem error report for type 5 error -117 [ 920.708624][T28192] EXT4-fs (loop2): 1 truncate cleaned up [ 920.764819][T28192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 920.967861][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.013065][T28204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9323'. [ 921.030172][T28205] netlink: 6060 bytes leftover after parsing attributes in process `syz.8.9325'. [ 921.141611][T28202] loop5: detected capacity change from 0 to 4096 [ 921.181698][T28202] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 921.212387][T28175] loop7: detected capacity change from 0 to 32768 [ 921.264275][T28175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9311 (28175) [ 921.278409][T28202] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 921.318466][T28202] ntfs3(loop5): Failed to load $Extend (-22). [ 921.332066][T28202] ntfs3(loop5): Failed to initialize $Extend. [ 921.377651][T28175] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 921.395265][T28217] netlink: 'syz.2.9331': attribute type 49 has an invalid length. [ 921.422782][T28175] BTRFS info (device loop7): using sha256 checksum algorithm [ 921.591255][ T30] audit: type=1326 audit(1777769312.114:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 921.672548][T28175] BTRFS info (device loop7): rebuilding free space tree [ 921.733910][ T30] audit: type=1326 audit(1777769312.134:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 921.810095][T28175] BTRFS info (device loop7): enabling ssd optimizations [ 921.820831][T28217] ip6gretap0: entered promiscuous mode [ 921.841796][T28217] ip6gretap0: entered allmulticast mode [ 921.847484][T28175] BTRFS info (device loop7): using spread ssd allocation scheme [ 921.878283][ T30] audit: type=1326 audit(1777769312.144:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 921.903231][T28175] BTRFS info (device loop7): enabling free space tree [ 921.926535][T28175] BTRFS info (device loop7): force clearing of disk cache [ 921.946372][T28175] BTRFS info (device loop7): enabling auto defrag [ 921.985610][T28175] BTRFS info (device loop7): max_inline set to 0 [ 921.998222][ T30] audit: type=1326 audit(1777769312.144:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 922.127990][T28229] bond0: option min_links: invalid value (18446744073709551612) [ 922.167220][ T30] audit: type=1326 audit(1777769312.144:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 922.194491][T28229] bond0: option min_links: allowed values 0 - 2147483647 [ 922.230954][T28229] bond0 (unregistering): Released all slaves [ 922.259662][ T30] audit: type=1326 audit(1777769312.144:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 922.299508][T25481] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 922.315427][T28255] netlink: 'syz.2.9342': attribute type 1 has an invalid length. [ 922.335760][ T30] audit: type=1326 audit(1777769312.144:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 922.370460][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9342'. [ 922.425687][ T30] audit: type=1326 audit(1777769312.144:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.1.9332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb40539cdd9 code=0x7ffc0000 [ 923.014077][T28274] loop0: detected capacity change from 0 to 2048 [ 923.067413][T28274] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 923.141866][T28280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.186797][T28281] loop1: detected capacity change from 0 to 64 [ 923.194240][T28284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 923.305216][T28274] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 923.308955][T28281] syz.1.9354: attempt to access beyond end of device [ 923.308955][T28281] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 923.363253][T28274] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 923.410479][T28281] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 923.448564][T28281] syz.1.9354: attempt to access beyond end of device [ 923.448564][T28281] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 923.464675][T28274] Remounting filesystem read-only [ 923.510050][T28274] NILFS (loop0): error -5 truncating bmap (ino=16) [ 923.549689][T28281] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 923.752301][ T5643] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 924.854003][T28293] loop5: detected capacity change from 0 to 32768 [ 924.911578][T28293] JBD2: Ignoring recovery information on journal [ 925.156106][T28293] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 925.239878][T28351] SET target dimension over the limit! [ 925.698880][ T5636] ocfs2: Unmounting device (7,5) on (node local) [ 925.814730][T28369] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 926.161663][T28338] loop2: detected capacity change from 0 to 32768 [ 926.269939][T28381] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9395'. [ 926.712024][T28398] geneve1: entered promiscuous mode [ 926.891354][T28408] ubi: mtd0 is already attached to ubi16 [ 927.168969][T28420] loop7: detected capacity change from 0 to 128 [ 927.829519][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 927.899731][T28452] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9428'. [ 928.017220][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 928.052905][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 928.089993][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 928.136068][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 928.181130][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.226738][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 928.256626][ T24] usb 9-1: SerialNumber: syz [ 928.285722][T28439] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 928.299912][T28439] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 928.356678][T28471] loop1: detected capacity change from 0 to 64 [ 928.357378][T28472] loop0: detected capacity change from 0 to 256 [ 928.398086][T28472] exfat: Deprecated parameter 'utf8' [ 928.424470][T28472] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 928.530433][T28475] loop5: detected capacity change from 0 to 1764 [ 928.580270][ T24] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 928.594559][T28475] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 928.631336][ T24] usb 9-1: USB disconnect, device number 3 [ 928.917633][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9444'. [ 929.262463][T28504] loop7: detected capacity change from 0 to 512 [ 929.325298][T28504] EXT4-fs: inline encryption not supported [ 929.368819][T28504] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 929.419354][T28504] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 929.506259][T28504] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9453: bg 0: block 248: padding at end of block bitmap is not set [ 929.521780][T28504] loop7: lost filesystem error report for type 5 error -117 [ 929.525395][T28504] Quota error (device loop7): write_blk: dquota write failed [ 929.532804][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 929.532828][ C1] EXT4-fs (loop7): last error at time 1777769320: ext4_validate_block_bitmap:441 [ 929.557013][T28504] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 929.567556][T28504] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.9453: Failed to acquire dquot type 1 [ 929.581708][T28504] loop7: lost filesystem error report for type 5 error -28 [ 929.589255][T28504] EXT4-fs (loop7): 1 truncate cleaned up [ 929.631940][T28504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 929.635992][T28519] loop8: detected capacity change from 0 to 2048 [ 929.757746][T28519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.784960][T28504] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.9453: deleted inode referenced: 12 [ 930.048119][T25481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 930.650093][T28562] ALSA: mixer_oss: invalid OSS volume '' [ 931.091877][T28580] loop1: detected capacity change from 0 to 512 [ 931.116796][T28586] loop0: detected capacity change from 0 to 24 [ 931.163439][T28580] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 931.207767][T28580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 931.227379][T28593] loop8: detected capacity change from 0 to 512 [ 931.234672][T28593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.253253][T28593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 931.279185][T28580] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 931.297633][T28595] loop2: detected capacity change from 0 to 8 [ 931.305058][T28597] loop7: detected capacity change from 0 to 512 [ 931.317928][T28593] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 931.328422][T28580] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 931.344116][T28580] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 931.345290][T28597] EXT4-fs (loop7): orphan cleanup on readonly fs [ 931.372245][T28580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9488: bg 0: block 64: padding at end of block bitmap is not set [ 931.398569][T28600] loop5: detected capacity change from 0 to 1024 [ 931.405210][T28597] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 931.405217][T28580] loop1: lost filesystem error report for type 5 error -117 [ 931.408036][T28597] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 931.426446][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 931.444768][ C0] EXT4-fs (loop1): initial error at time 1777769321: ext4_validate_block_bitmap:441 [ 931.446450][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 931.454183][ C0] EXT4-fs (loop1): last error at time 1777769321: ext4_validate_block_bitmap:441 [ 931.460618][ C1] EXT4-fs (loop7): initial error at time 1777769321: ext4_mb_generate_buddy:1317 [ 931.472386][T28580] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 931.478850][ C1] EXT4-fs (loop7): last error at time 1777769321: ext4_mb_generate_buddy:1317 [ 931.498261][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.522664][T28580] loop1: lost filesystem error report for type 5 error -117 [ 931.526230][T28593] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.9495: Allocating blocks 41-42 which overlap fs metadata [ 931.554280][T28580] EXT4-fs (loop1): 1 truncate cleaned up [ 931.598699][T28605] xt_l2tp: invalid flags combination: c [ 931.635408][T28580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 931.686894][T28593] loop8: lost filesystem error report for type 5 error -117 [ 931.688921][T28593] EXT4-fs (loop8): Remounting filesystem read-only [ 931.692006][T28597] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.9496: attempt to clear invalid blocks 2 len 1 [ 931.706448][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 931.721989][ C0] EXT4-fs (loop8): initial error at time 1777769322: ext4_mb_mark_diskspace_used:4222 [ 931.731596][ C0] EXT4-fs (loop8): last error at time 1777769322: ext4_mb_mark_diskspace_used:4222 [ 931.754309][T28593] Quota error (device loop8): write_blk: dquota write failed [ 931.783167][T28593] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 931.796985][T28597] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 931.799073][T28597] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9496: invalid indirect mapped block 1819239214 (level 0) [ 931.889919][T28593] Quota error (device loop8): write_blk: dquota write failed [ 931.905352][T28608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9499'. [ 931.925449][T28593] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 931.979523][T28597] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 931.980003][T28597] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9496: invalid indirect mapped block 1819239214 (level 1) [ 931.981176][T28593] EXT4-fs (loop8): 1 truncate cleaned up [ 932.001191][T28597] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 932.018664][T28593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.026311][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.065369][T28597] EXT4-fs (loop7): 1 truncate cleaned up [ 932.090256][T28597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 932.183247][T28613] loop0: detected capacity change from 0 to 164 [ 932.271262][T28597] EXT4-fs error (device loop7): ext4_lookup:1782: inode #2: comm syz.7.9496: 'file1' linked to parent dir [ 932.308268][T28613] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 932.333596][T26761] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.504717][T25481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.538176][T28624] Unknown options in mask b7f2 [ 932.836830][ T24] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 932.898361][T28640] loop7: detected capacity change from 0 to 256 [ 932.929785][T28634] loop2: detected capacity change from 0 to 4096 [ 932.957023][T28634] EXT4-fs (loop2): Test dummy encryption mode enabled [ 932.967988][T28640] FAT-fs (loop7): Directory bread(block 64) failed [ 932.992181][T28634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.009665][T28640] FAT-fs (loop7): Directory bread(block 65) failed [ 933.010132][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 933.025343][ T24] usb 2-1: config 0 has no interface number 0 [ 933.032090][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 933.044268][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 933.054844][T28640] FAT-fs (loop7): Directory bread(block 66) failed [ 933.062820][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 933.072344][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 933.077572][T15849] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 933.080855][T28640] FAT-fs (loop7): Directory bread(block 67) failed [ 933.095417][ T24] usb 2-1: Product: syz [ 933.099660][ T24] usb 2-1: SerialNumber: syz [ 933.106138][T28640] FAT-fs (loop7): Directory bread(block 68) failed [ 933.112716][T28640] FAT-fs (loop7): Directory bread(block 69) failed [ 933.120359][ T24] usb 2-1: config 0 descriptor?? [ 933.125631][T28640] FAT-fs (loop7): Directory bread(block 70) failed [ 933.135906][ T24] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 933.142573][T28640] FAT-fs (loop7): Directory bread(block 71) failed [ 933.152305][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input55 [ 933.162356][T28640] FAT-fs (loop7): Directory bread(block 72) failed [ 933.173473][T28640] FAT-fs (loop7): Directory bread(block 73) failed [ 933.230105][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.313946][T15849] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 933.335959][T15849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.389418][T15849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 933.434130][T15849] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 933.442454][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 933.472305][T28648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.488382][T15849] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 933.530869][T15849] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 933.568297][T15849] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 933.587675][ T5887] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 933.609146][T15849] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 933.636500][T15849] usb 6-1: Product: syz [ 933.646320][T15849] usb 6-1: Manufacturer: syz [ 933.673479][ T801] usb 2-1: USB disconnect, device number 111 [ 933.681810][T15849] cdc_wdm 6-1:1.0: skipping garbage [ 933.703810][T15849] cdc_wdm 6-1:1.0: skipping garbage [ 933.731117][ T801] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 933.739979][T15849] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 933.746204][T15849] cdc_wdm 6-1:1.0: Unknown control protocol [ 933.779510][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 933.808861][ T5887] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 933.830616][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 933.850914][ T5887] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 933.872817][T28636] loop0: detected capacity change from 0 to 32768 [ 933.877573][ T5887] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 933.904061][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.937521][ T5887] usb 9-1: Product: syz [ 933.937678][T28636] JBD2: Ignoring recovery information on journal [ 933.970820][ T5887] usb 9-1: Manufacturer: syz [ 933.973801][T28638] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 933.996796][ T5746] usb 6-1: USB disconnect, device number 119 [ 933.999503][ T5887] usb 9-1: SerialNumber: syz [ 934.009597][T28636] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 934.059423][ T5887] usb 9-1: config 0 descriptor?? [ 934.089579][ T5887] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 934.253436][ T5643] ocfs2: Unmounting device (7,0) on (node local) [ 934.400726][ T5887] ums-isd200 9-1:0.0: probe with driver ums-isd200 failed with error -22 [ 934.560726][ T5746] usb 9-1: USB disconnect, device number 4 [ 934.697979][T28670] netlink: 'syz.1.9528': attribute type 2 has an invalid length. [ 935.097891][T28687] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 935.673801][T28674] (syz.5.9530,28674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 935.739325][T28674] (syz.5.9530,28674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 935.806070][T28713] EXT4-fs: Ignoring removed orlov option [ 935.837236][T28674] JBD2: Ignoring recovery information on journal [ 935.876590][T28713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.009999][T28674] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 936.192203][T28674] [ 936.194569][T28674] ====================================================== [ 936.201587][T28674] WARNING: possible circular locking dependency detected [ 936.208606][T28674] syzkaller #0 Not tainted [ 936.213012][T28674] ------------------------------------------------------ [ 936.220280][T28674] syz.5.9530/28674 is trying to acquire lock: [ 936.226327][T28674] ffff8880459aeba0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.239736][T28674] [ 936.239736][T28674] but task is already holding lock: [ 936.247085][T28674] ffff8880459a86e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 936.256583][T28674] [ 936.256583][T28674] which lock already depends on the new lock. [ 936.256583][T28674] [ 936.266965][T28674] [ 936.266965][T28674] the existing dependency chain (in reverse order) is: [ 936.275957][T28674] [ 936.275957][T28674] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 936.283771][T28674] down_read+0x47/0x2e0 [ 936.288447][T28674] ocfs2_init_acl+0x2fd/0x7e0 [ 936.293640][T28674] ocfs2_mknod+0x1679/0x2260 [ 936.298740][T28674] ocfs2_mkdir+0x181/0x460 [ 936.303667][T28674] vfs_mkdir+0x413/0x630 [ 936.308429][T28674] filename_mkdirat+0x285/0x510 [ 936.313799][T28674] __se_sys_mkdirat+0x35/0x150 [ 936.319079][T28674] do_syscall_64+0x15f/0xf80 [ 936.324184][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.330583][T28674] [ 936.330583][T28674] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 936.339097][T28674] down_read+0x47/0x2e0 [ 936.343771][T28674] ocfs2_start_trans+0x3ab/0x700 [ 936.349224][T28674] ocfs2_shutdown_local_alloc+0x1f5/0xa40 [ 936.355457][T28674] ocfs2_dismount_volume+0x1ec/0x8d0 [ 936.361249][T28674] generic_shutdown_super+0x13d/0x2d0 [ 936.367136][T28674] kill_block_super+0x44/0x90 [ 936.372347][T28674] deactivate_locked_super+0xbc/0x130 [ 936.378233][T28674] cleanup_mnt+0x437/0x4d0 [ 936.383174][T28674] task_work_run+0x1d9/0x270 [ 936.388369][T28674] exit_to_user_mode_loop+0xed/0x480 [ 936.394200][T28674] do_syscall_64+0x33e/0xf80 [ 936.399304][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.405705][T28674] [ 936.405705][T28674] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 936.413182][T28674] ocfs2_start_trans+0x2ac/0x700 [ 936.418637][T28674] ocfs2_extend_allocation+0x77b/0x1880 [ 936.424690][T28674] ocfs2_extend_no_holes+0x209/0x4c0 [ 936.430478][T28674] ocfs2_acquire_dquot+0x6c8/0xb40 [ 936.436104][T28674] dqget+0x73c/0xc50 [ 936.440521][T28674] ocfs2_setattr+0x1045/0x1ca0 [ 936.445788][T28674] notify_change+0xc1a/0xf40 [ 936.450884][T28674] chown_common+0x466/0x6b0 [ 936.455893][T28674] do_fchownat+0x14c/0x250 [ 936.460818][T28674] __x64_sys_lchown+0x85/0xa0 [ 936.466003][T28674] do_syscall_64+0x15f/0xf80 [ 936.471108][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.477525][T28674] [ 936.477525][T28674] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 936.488125][T28674] down_write+0x96/0x200 [ 936.492885][T28674] ocfs2_reserve_local_alloc_bits+0x11f/0x2660 [ 936.499640][T28674] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 936.506488][T28674] ocfs2_mknod+0x111f/0x2260 [ 936.511589][T28674] ocfs2_create+0x195/0x460 [ 936.516603][T28674] path_openat+0x1395/0x3860 [ 936.521711][T28674] do_file_open+0x23e/0x4a0 [ 936.526726][T28674] do_sys_openat2+0x113/0x200 [ 936.531912][T28674] __x64_sys_open+0x11e/0x150 [ 936.537184][T28674] do_syscall_64+0x15f/0xf80 [ 936.542295][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.548695][T28674] [ 936.548695][T28674] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 936.559376][T28674] __lock_acquire+0x15a5/0x2cf0 [ 936.564741][T28674] lock_acquire+0x106/0x350 [ 936.569749][T28674] down_write+0x96/0x200 [ 936.574510][T28674] ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.580918][T28674] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 936.587789][T28674] ocfs2_init_xattr_set_ctxt+0x2f5/0x760 [ 936.593945][T28674] ocfs2_xattr_set+0xc42/0x13e0 [ 936.599314][T28674] __vfs_setxattr+0x43c/0x480 [ 936.604507][T28674] __vfs_setxattr_noperm+0x12d/0x660 [ 936.610305][T28674] vfs_setxattr+0x163/0x360 [ 936.615321][T28674] filename_setxattr+0x296/0x630 [ 936.620855][T28674] path_setxattrat+0x3eb/0x440 [ 936.626136][T28674] __x64_sys_setxattr+0xbc/0xe0 [ 936.631499][T28674] do_syscall_64+0x15f/0xf80 [ 936.636606][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.643012][T28674] [ 936.643012][T28674] other info that might help us debug this: [ 936.643012][T28674] [ 936.653221][T28674] Chain exists of: [ 936.653221][T28674] &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 936.653221][T28674] [ 936.670342][T28674] Possible unsafe locking scenario: [ 936.670342][T28674] [ 936.677769][T28674] CPU0 CPU1 [ 936.683112][T28674] ---- ---- [ 936.688455][T28674] lock(&oi->ip_xattr_sem); [ 936.693034][T28674] lock(&journal->j_trans_barrier); [ 936.700828][T28674] lock(&oi->ip_xattr_sem); [ 936.707931][T28674] lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]); [ 936.715463][T28674] [ 936.715463][T28674] *** DEADLOCK *** [ 936.715463][T28674] [ 936.723584][T28674] 3 locks held by syz.5.9530/28674: [ 936.728760][T28674] #0: ffff888077360410 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 936.738010][T28674] #1: ffff8880459a89a0 (&type->i_mutex_dir_key#25){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360 [ 936.748295][T28674] #2: ffff8880459a86e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 936.758227][T28674] [ 936.758227][T28674] stack backtrace: [ 936.764101][T28674] CPU: 1 UID: 0 PID: 28674 Comm: syz.5.9530 Not tainted syzkaller #0 PREEMPT(full) [ 936.764126][T28674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 936.764140][T28674] Call Trace: [ 936.764151][T28674] [ 936.764161][T28674] dump_stack_lvl+0xe8/0x150 [ 936.764187][T28674] print_circular_bug+0x2e1/0x300 [ 936.764220][T28674] check_noncircular+0x12e/0x150 [ 936.764253][T28674] __lock_acquire+0x15a5/0x2cf0 [ 936.764278][T28674] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.764313][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764343][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764369][T28674] ? _raw_spin_unlock+0x28/0x50 [ 936.764391][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764425][T28674] ? ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.764454][T28674] lock_acquire+0x106/0x350 [ 936.764477][T28674] ? ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.764508][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764537][T28674] down_write+0x96/0x200 [ 936.764568][T28674] ? ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.764596][T28674] ? __pfx_down_write+0x10/0x10 [ 936.764626][T28674] ? add_lock_to_list+0xc7/0x100 [ 936.764656][T28674] ? __lock_acquire+0x146e/0x2cf0 [ 936.764682][T28674] ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 936.764720][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764746][T28674] ? do_raw_spin_lock+0x12b/0x2f0 [ 936.764779][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764810][T28674] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 936.764837][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764863][T28674] ? lockdep_hardirqs_on+0x7a/0x110 [ 936.764891][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764916][T28674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 936.764942][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.764968][T28674] ? stack_depot_save_flags+0x3f3/0x810 [ 936.764999][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.765025][T28674] ? kasan_save_track+0x4f/0x80 [ 936.765054][T28674] ? kasan_save_track+0x3e/0x80 [ 936.765082][T28674] ? __kasan_kmalloc+0x93/0xb0 [ 936.765112][T28674] ? __kmalloc_cache_noprof+0x31c/0x660 [ 936.765143][T28674] ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0 [ 936.765171][T28674] ? ocfs2_init_xattr_set_ctxt+0x2f5/0x760 [ 936.765202][T28674] ? ocfs2_xattr_set+0xc42/0x13e0 [ 936.765233][T28674] ? __vfs_setxattr+0x43c/0x480 [ 936.765257][T28674] ? __vfs_setxattr_noperm+0x12d/0x660 [ 936.765283][T28674] ? vfs_setxattr+0x163/0x360 [ 936.765307][T28674] ? filename_setxattr+0x296/0x630 [ 936.765333][T28674] ? path_setxattrat+0x3eb/0x440 [ 936.765365][T28674] ? __x64_sys_setxattr+0xbc/0xe0 [ 936.765392][T28674] ? do_syscall_64+0x15f/0xf80 [ 936.765423][T28674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.765467][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.765493][T28674] ? __kasan_kmalloc+0x93/0xb0 [ 936.765524][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.765550][T28674] ? __kmalloc_cache_noprof+0x31c/0x660 [ 936.765581][T28674] ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0 [ 936.765609][T28674] ? __kmalloc_cache_noprof+0x15b/0x660 [ 936.765642][T28674] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 936.765674][T28674] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 936.765704][T28674] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 936.765736][T28674] ocfs2_init_xattr_set_ctxt+0x2f5/0x760 [ 936.765772][T28674] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 936.765805][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.765833][T28674] ? ocfs2_xattr_set+0xc08/0x13e0 [ 936.765865][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.765891][T28674] ? up_write+0x1ab/0x410 [ 936.765920][T28674] ? __kmalloc_cache_noprof+0x15b/0x660 [ 936.765953][T28674] ocfs2_xattr_set+0xc42/0x13e0 [ 936.765984][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766009][T28674] ? __lock_acquire+0x6b5/0x2cf0 [ 936.766045][T28674] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 936.766076][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766107][T28674] ? try_to_unlazy+0x6ad/0xc50 [ 936.766134][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766159][T28674] ? look_up_lock_class+0x57/0x110 [ 936.766188][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766214][T28674] ? register_lock_class+0x31/0x2e0 [ 936.766239][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766268][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766293][T28674] ? __asan_memset+0x22/0x50 [ 936.766319][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766345][T28674] ? terminate_walk+0x3d7/0x510 [ 936.766374][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766399][T28674] ? evm_protected_xattr_common+0x170/0x190 [ 936.766445][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766470][T28674] ? evm_protect_xattr+0x748/0xac0 [ 936.766492][T28674] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 936.766524][T28674] ? __pfx_evm_protect_xattr+0x10/0x10 [ 936.766547][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766577][T28674] ? __pfx_ocfs2_xattr_security_set+0x10/0x10 [ 936.766610][T28674] __vfs_setxattr+0x43c/0x480 [ 936.766643][T28674] __vfs_setxattr_noperm+0x12d/0x660 [ 936.766674][T28674] vfs_setxattr+0x163/0x360 [ 936.766703][T28674] ? __pfx_vfs_setxattr+0x10/0x10 [ 936.766728][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766757][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766785][T28674] filename_setxattr+0x296/0x630 [ 936.766813][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766844][T28674] ? __pfx_filename_setxattr+0x10/0x10 [ 936.766873][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.766899][T28674] ? do_getname+0x151/0x250 [ 936.766923][T28674] path_setxattrat+0x3eb/0x440 [ 936.766962][T28674] ? __pfx_path_setxattrat+0x10/0x10 [ 936.766995][T28674] ? do_futex+0x333/0x420 [ 936.767036][T28674] ? rcu_is_watching+0x15/0xb0 [ 936.767062][T28674] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.767091][T28674] __x64_sys_setxattr+0xbc/0xe0 [ 936.767120][T28674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.767144][T28674] do_syscall_64+0x15f/0xf80 [ 936.767176][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.767199][T28674] RIP: 0033:0x7f1bedd9cdd9 [ 936.767219][T28674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.767238][T28674] RSP: 002b:00007f1beecac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 936.767260][T28674] RAX: ffffffffffffffda RBX: 00007f1bee015fa0 RCX: 00007f1bedd9cdd9 [ 936.767277][T28674] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 936.767293][T28674] RBP: 00007f1bede32d69 R08: 0000000000000000 R09: 0000000000000000 [ 936.767308][T28674] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 936.767322][T28674] R13: 00007f1bee016038 R14: 00007f1bee015fa0 R15: 00007ffd405ac1c8 [ 936.767347][T28674] [ 937.445097][ T5643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.658480][ T5636] ocfs2: Unmounting device (7,5) on (node local)