last executing test programs: 4.817397496s ago: executing program 0 (id=8994): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa10004, &(0x7f0000000640)={[{@fileset={'fileset', 0x3d, 0x6}}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uid}, {}, {@gid}, {@mode={'mode', 0x3d, 0xffff}}, {@gid_ignore}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@gid}, {@uid}], [{@subj_user={'subj_user', 0x3d, '^['}}, {@hash}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, ']/'}}, {@uid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '%*'}}]}, 0x1, 0xc4d, &(0x7f0000003440)="$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") symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 4.397564703s ago: executing program 0 (id=9001): r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.769117689s ago: executing program 2 (id=9054): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0e}, @typed={0xd, 0x1, 0x0, 0x0, @str='{,-})(]!\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be5050773bcd16684043d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c6fd73deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803a97b4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.604353773s ago: executing program 2 (id=9056): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10000) 1.603049533s ago: executing program 1 (id=9057): r0 = syz_open_dev$loop(&(0x7f0000000540), 0xdd2, 0x80) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000580)) 1.487126691s ago: executing program 3 (id=9059): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.455503778s ago: executing program 2 (id=9061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x40, 0x1, 0xffffffff, 0x24dfdbfd, {0x3}, [@nested={0xc, 0x38, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x66}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) 1.408742062s ago: executing program 1 (id=9062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4000002}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.34014696s ago: executing program 3 (id=9063): syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='gid_map\x00') close(0x3) 1.286238207s ago: executing program 1 (id=9064): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 1.269795685s ago: executing program 2 (id=9065): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x800, 0x14, 0xb28}) 1.149250743s ago: executing program 3 (id=9067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.139268313s ago: executing program 4 (id=9068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ec0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x80) 1.019789568s ago: executing program 2 (id=9069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.019541361s ago: executing program 4 (id=9070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000003c0)={0x222000180, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1, {r0}}, 0x58) 996.100214ms ago: executing program 1 (id=9071): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x187, &(0x7f00000001c0)="$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") llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 969.939955ms ago: executing program 0 (id=9072): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='+++9+AQBv=K9e\xc7+M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) 825.721931ms ago: executing program 2 (id=9073): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 776.726844ms ago: executing program 1 (id=9074): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) 766.601548ms ago: executing program 0 (id=9075): r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000003780)=""/4096, 0x1000}], 0x1, 0x163, 0x0) 759.549489ms ago: executing program 4 (id=9076): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800008, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c646973636172642c757466382c757466382c008436c347234c72f484fd178b1c8d7ea215ae342808e535131d538f9218d74dc4d659f7eda036041a1459f46a31a0a3a2b437507865405dfc9cb0023cd59b0b89739c830edf77b2"], 0x1, 0x154a, &(0x7f0000001bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 668.35395ms ago: executing program 3 (id=9077): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6ef, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) 538.187472ms ago: executing program 4 (id=9078): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') fchmod(r0, 0x40) 524.268177ms ago: executing program 0 (id=9079): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x2, 0xff, 0x1, 0x7fffffff}) 440.382816ms ago: executing program 3 (id=9080): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x51424752, 0x7, 0x100000ff, 0xc, 0xb, 0x6, 0x1, 0x1, 0x2, 0x3}}) 312.357375ms ago: executing program 0 (id=9081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 312.234792ms ago: executing program 4 (id=9082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}}, 0x0) 201.211942ms ago: executing program 4 (id=9083): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pv6bR3+kU7t3J/v2TouefM5Zzb6dNz5vScOwFU1mD6Ty1if0RMJxH9yfxiWWdkhYMLz3vw50dn00cS9fprvyeRZHn585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTV7Hh49tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb0g7/TNd9/v/2TszW+++isZ+faXsSROxsvZE5dex1YZjMHG9yRZWdR3YqsrK0lH9nOy9CVOOoue2dW+RrFu+euXvjpPRH90xMMXrz8+fqXUxgHbqp5E1IGKSsQ/VFQ+Dsjf2y9/H1wrZVQCtMP9UwsTACvjv3NhbjB6GnMDux8ksXRaJ4mIzc3MNdsTEXfvjN08d2fsZmzTPBxQbP5GRDxZFP9JI/4HoicGGvFfa4r/dFxwJvua5r+6yfqXTxWLf2ifhfjvWTX+o0X8v7Uk/t/eZP2DD5Pv9DbFf+9mLwkAAAAAAAAq6/apiHi+6O//tcX1P1Gw/qcvIk5uQf2Dy45X/v2/dm8LqgEK3D8V8VLh+t9avvp3oCNL/aexHqArOXdhavJIRPw3Ig5F1670eGSVOg5/uu/LVmWD2fq//JHWfzdbC5i1417nruZzJsZnxx/1uoGI+zcinipc/5ss9v9JQf+f/j6YXmcd+569daZV2drxD2yX+tcRBwv7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtV/2bjv/AWE8CGpP3/7tXjfyBZer+emY3XcXSus96qbLPj/+7k9cYtZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeR3k85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7/f/f92qo9xv9QnjT+JzbU/288MXpr4PtW9a+v/z/W6OsPZTnm/2DBF3mYdjfnF4RjZ1FRu9sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+DWkTsiaQ2tJiu1YaGIvoi4n+xuzZ1ZWb2uXNX3rs8kZY1Pv+/ln/Sb//CcZJ//v/AkuPRZcdHI2JvRHze0ds4Hjp7ZWqi7IsHAAAAAAAAAAAAAAAAAACAHaKvxf7/1G8dZbcO2HadZTcAKE1B/P9URjuA9tP/Q3WJf6gu8Q/VJf6husQ/VJf4h+oS/1Bd4h8AAAAAAB4rew/c/jmJiPkXexuPVHdW1lVqy4DtViu7AUBp3OIHqsvSH6gu7/GBZI3ynpYnrXXmaqbPPsLJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT38Kdkp7/uWJfCn8TmnPskS+1299Z5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//+Ekkyg==") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x8, 0x7, 0x1, 0x5}) 147.629298ms ago: executing program 3 (id=9084): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='affs\x00', 0x0, &(0x7f0000000400)='usrquota') 0s ago: executing program 1 (id=9085): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/77, 0x4d}], 0x1, 0xae93, 0x0) kernel console output (not intermixed with test programs): mon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 707.814356][T21420] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 707.976203][T21420] usb 3-1: not running at top speed; connect to a high speed hub [ 707.976265][T21420] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 707.985033][T21420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.985114][T21420] usb 3-1: Product: syz [ 707.985158][T21420] usb 3-1: Manufacturer: syz [ 707.985202][T21420] usb 3-1: SerialNumber: syz [ 708.030347][T21420] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 708.064595][T21420] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 708.098647][T21420] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 708.122447][T21420] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 708.144367][T21420] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 708.186314][T23677] loop1: detected capacity change from 0 to 4096 [ 708.251244][T23677] ntfs3(loop1): ino=9, mi_enum_attr [ 708.251303][T23677] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 708.257223][T23677] ntfs3(loop1): ino=9, mi_enum_attr [ 708.257694][T23677] ntfs3(loop1): ino=b, mi_enum_attr [ 708.258040][T23677] ntfs3(loop1): Failed to load $Extend (-22). [ 708.258087][T23677] ntfs3(loop1): Failed to initialize $Extend. [ 708.330825][T23645] loop4: detected capacity change from 0 to 32768 [ 708.440244][T23645] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 708.440292][T23645] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 708.475015][T23645] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 460 [ 708.475088][T23645] CPU: 1 UID: 0 PID: 23645 Comm: syz.4.7649 Not tainted syzkaller #0 PREEMPT(full) [ 708.475115][T23645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.475181][T23645] Call Trace: [ 708.475205][T23645] [ 708.475231][T23645] dump_stack_lvl+0xe8/0x150 [ 708.475361][T23645] gfs2_withdraw+0xc3/0x1b0 [ 708.475487][T23645] gfs2_meta_buffer+0x250/0x2e0 [ 708.475619][T23645] inode_go_instantiate+0xf4/0x12b0 [ 708.475690][T23645] ? queue_delayed_work_on+0x12f/0x1e0 [ 708.475800][T23645] ? preempt_schedule_common+0x7f/0xd0 [ 708.475904][T23645] ? preempt_schedule_thunk+0x16/0x40 [ 708.475974][T23645] ? __pfx_inode_go_instantiate+0x10/0x10 [ 708.476070][T23645] gfs2_instantiate+0x168/0x220 [ 708.476173][T23645] gfs2_glock_wait+0x1d4/0x2a0 [ 708.476253][T23645] check_journal_clean+0x151/0x360 [ 708.476329][T23645] ? __pfx_check_journal_clean+0x10/0x10 [ 708.476410][T23645] ? init_journal+0x1b2a/0x2330 [ 708.476504][T23645] ? do_raw_spin_unlock+0xf5/0x200 [ 708.476600][T23645] ? _raw_spin_unlock+0x28/0x50 [ 708.476726][T23645] ? gfs2_jdesc_find+0xab/0xc0 [ 708.476830][T23645] init_journal+0x1b2a/0x2330 [ 708.476936][T23645] ? init_inodes+0xdb/0x320 [ 708.477011][T23645] ? __asan_memcpy+0x40/0x70 [ 708.477077][T23645] ? __pfx_init_journal+0x10/0x10 [ 708.477148][T23645] ? vsnprintf+0xe42/0xef0 [ 708.477272][T23645] ? snprintf+0xe8/0x140 [ 708.477357][T23645] ? init_inodes+0xdb/0x320 [ 708.477428][T23645] ? __pfx_snprintf+0x10/0x10 [ 708.477515][T23645] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 708.477607][T23645] init_inodes+0xdb/0x320 [ 708.477681][T23645] gfs2_fill_super+0x1959/0x20d0 [ 708.477837][T23645] ? __pfx_gfs2_fill_super+0x10/0x10 [ 708.477920][T23645] ? init_locking+0xb8/0x210 [ 708.477983][T23645] ? __pfx_gfs2_fill_super+0x10/0x10 [ 708.478055][T23645] ? get_tree_bdev_flags+0x394/0x4f0 [ 708.478168][T23645] get_tree_bdev_flags+0x430/0x4f0 [ 708.478255][T23645] ? __pfx_gfs2_fill_super+0x10/0x10 [ 708.478328][T23645] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 708.478433][T23645] gfs2_get_tree+0x51/0x1e0 [ 708.478508][T23645] vfs_get_tree+0x92/0x2a0 [ 708.478591][T23645] do_new_mount+0x319/0xdc0 [ 708.478714][T23645] ? __pfx_do_new_mount+0x10/0x10 [ 708.478811][T23645] ? ns_capable+0x89/0xe0 [ 708.478894][T23645] ? path_mount+0x647/0x1050 [ 708.478996][T23645] ? user_path_at+0xd4/0x160 [ 708.479067][T23645] __se_sys_mount+0x31d/0x420 [ 708.479147][T23645] ? __pfx___se_sys_mount+0x10/0x10 [ 708.479223][T23645] ? __x64_sys_mount+0x20/0xc0 [ 708.479286][T23645] do_syscall_64+0x166/0x520 [ 708.479347][T23645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.479411][T23645] ? clear_bhb_loop+0x70/0xc0 [ 708.479499][T23645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.479569][T23645] RIP: 0033:0x7fdec979f34a [ 708.479637][T23645] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.479691][T23645] RSP: 002b:00007fdeca6e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 708.479764][T23645] RAX: ffffffffffffffda RBX: 00007fdeca6e6ee0 RCX: 00007fdec979f34a [ 708.479814][T23645] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fdeca6e6ea0 [ 708.479863][T23645] RBP: 0000200000000400 R08: 00007fdeca6e6ee0 R09: 0000000000210401 [ 708.479909][T23645] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 708.479950][T23645] R13: 00007fdeca6e6ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 708.480044][T23645] [ 708.505174][T23645] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 708.753015][T21420] usb 3-1: USB disconnect, device number 77 [ 708.936952][T21420] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 708.964515][T21420] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 709.010830][T21420] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 709.086934][T21420] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 709.100831][T21420] keyspan 3-1:1.0: device disconnected [ 710.085051][T23732] geneve4: entered promiscuous mode [ 710.123992][ T3387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.142782][T23705] loop0: detected capacity change from 0 to 32768 [ 710.146713][ T3387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.148409][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.148544][ T1018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.185290][T23705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7677 (23705) [ 710.220547][T23705] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 710.220609][T23705] BTRFS info (device loop0): using crc32c checksum algorithm [ 710.279520][T23705] BTRFS info (device loop0): setting nodatasum [ 710.287362][T23705] BTRFS info (device loop0): enabling ssd optimizations [ 710.296750][T23705] BTRFS info (device loop0): disabling tree log [ 710.303206][T23705] BTRFS info (device loop0): turning on sync discard [ 710.321046][T23705] BTRFS info (device loop0): enabling free space tree [ 710.328220][T23705] BTRFS info (device loop0): enabling auto defrag [ 710.463982][ T5619] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 710.484519][T23759] loop4: detected capacity change from 0 to 64 [ 711.156192][T23784] netlink: 'syz.0.7709': attribute type 1 has an invalid length. [ 711.156237][T23784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7709'. [ 711.276377][T23787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7711'. [ 711.340920][T23789] [U] [ 711.340969][T23789] [U] [ 711.341011][T23789] [U] [ 711.341051][T23789] [U] [ 711.341493][T23789] [U] [ 711.341602][T23789] [U] [ 711.341704][T23789] [U] [ 711.341807][T23789] [U] [ 711.359480][T23789] [U] [ 711.359602][T23789] [U] [ 711.359715][T23789] [U] [ 711.359807][T23789] [U] [ 711.368721][T23789] [U] [ 711.368851][T23789] [U] [ 711.368955][T23789] [U] [ 711.369059][T23789] [U] [ 711.369516][T23789] [U] [ 711.369624][T23789] [U] [ 711.369728][T23789] [U] [ 711.369812][T23789] [U] [ 711.370204][T23789] [U] [ 711.370311][T23789] [U] [ 711.370415][T23789] [U] [ 711.370519][T23789] [U] [ 711.383363][T23789] [U] [ 711.383480][T23789] [U] [ 711.383583][T23789] [U] [ 711.383684][T23789] [U] [ 711.384075][T23789] [U] [ 711.384189][T23789] [U] [ 711.384294][T23789] [U] [ 711.384391][T23789] [U] [ 711.519240][T23794] loop0: detected capacity change from 0 to 64 [ 711.622466][T23789] [U] [ 711.622528][T23789] [U] [ 711.622569][T23789] [U] [ 711.622612][T23789] [U] [ 711.634030][T23789] [U] [ 711.634080][T23789] [U] [ 711.634119][T23789] [U] [ 711.634158][T23789] [U] [ 711.646488][T23789] [U] [ 711.646531][T23789] [U] [ 711.646567][T23789] [U] [ 711.646602][T23789] [U] [ 711.658449][T23789] [U] [ 711.658509][T23789] [U] [ 711.658552][T23789] [U] [ 711.658594][T23789] [U] [ 711.670273][T23789] [U] [ 711.670322][T23789] [U] [ 711.670363][T23789] [U] [ 711.670404][T23789] [U] [ 711.703900][T23789] [U] [ 711.703943][T23789] [U] [ 711.703984][T23789] [U] [ 711.704016][T23789] [U] [ 711.704201][T23789] [U] [ 711.704239][T23789] [U] [ 711.704275][T23789] [U] [ 711.704311][T23789] [U] [ 711.704456][T23789] [U] [ 711.704495][T23789] [U] [ 711.704531][T23789] [U] [ 711.704568][T23789] [U] [ 711.704709][T23789] [U] [ 711.704740][T23789] [U] [ 711.704775][T23789] [U] [ 711.704810][T23789] [U] [ 711.714485][T23789] [U] [ 711.714586][T23789] [U] [ 711.714716][T23789] [U] [ 711.714819][T23789] [U] [ 711.727511][T23789] [U] [ 711.727634][T23789] [U] [ 711.727739][T23789] [U] [ 711.727840][T23789] [U] [ 711.728131][T23789] [U] [ 711.728169][T23789] [U] [ 711.728207][T23789] [U] [ 711.728251][T23789] [U] [ 711.745656][T23789] [U] [ 711.745782][T23789] [U] [ 711.745888][T23789] [U] [ 711.746003][T23789] [U] [ 711.746465][T23789] [U] [ 711.746578][T23789] [U] [ 711.746682][T23789] [U] [ 711.746786][T23789] [U] [ 711.807946][T23789] [U] [ 711.807996][T23789] [U] [ 711.808038][T23789] [U] [ 711.808076][T23789] [U] [ 711.819659][T23789] [U] [ 711.819707][T23789] [U] [ 711.819743][T23789] [U] [ 711.819780][T23789] [U] [ 711.830930][T23789] [U] [ 711.830979][T23789] [U] [ 711.831021][T23789] [U] [ 711.831063][T23789] [U] [ 711.842257][T23789] [U] [ 711.842303][T23789] [U] [ 711.842341][T23789] [U] [ 711.842380][T23789] [U] [ 711.853458][T23789] [U] [ 711.853502][T23789] [U] [ 711.853539][T23789] [U] [ 711.853576][T23789] [U] [ 711.864762][T23789] [U] [ 711.864809][T23789] [U] [ 711.864849][T23789] [U] [ 711.864888][T23789] [U] [ 711.880663][T23789] [U] [ 711.880712][T23789] [U] [ 711.880751][T23789] [U] [ 711.880789][T23789] [U] [ 711.892932][T23789] [U] [ 711.892980][T23789] [U] [ 711.893020][T23789] [U] [ 711.893059][T23789] [U] [ 711.904470][T23789] [U] [ 711.904518][T23789] [U] [ 711.904557][T23789] [U] [ 711.904594][T23789] [U] [ 711.917372][T23789] [U] [ 711.917429][T23789] [U] [ 711.917471][T23789] [U] [ 711.957432][T23786] [U] [ 712.120564][T23809] tmpfs: Bad value for 'mpol' [ 712.752094][T23838] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.132969][T23856] loop1: detected capacity change from 0 to 512 [ 713.148047][T23856] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 713.157525][T23856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 713.175998][T23856] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 713.193808][T23856] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 713.202184][T23856] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #16: comm syz.1.7744: corrupted xattr block 31: invalid header [ 713.231384][T23856] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 713.233542][T23856] EXT4-fs (loop1): Remounting filesystem read-only [ 713.243174][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 713.243201][ C0] EXT4-fs (loop1): initial error at time 2000000263: ext4_xattr_delete_inode:2933: inode 16 [ 713.243238][ C0] EXT4-fs (loop1): last error at time 2000000263: ext4_xattr_delete_inode:2933: inode 16 [ 713.303566][T23856] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 713.303691][T23856] EXT4-fs (loop1): 1 orphan inode deleted [ 713.329274][T23856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 713.378485][ T1018] IPVS: starting estimator thread 0... [ 713.388953][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.512503][T23862] IPVS: using max 29 ests per chain, 69600 per kthread [ 713.566287][ T5716] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 713.726232][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 713.728120][ T5716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 713.731136][ T5716] usb 4-1: config 6 has an invalid interface number: 132 but max is 0 [ 713.731210][ T5716] usb 4-1: config 6 has no interface number 0 [ 713.731323][ T5716] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 713.731410][ T5716] usb 4-1: config 6 interface 132 altsetting 6 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 713.731503][ T5716] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.731568][ T5716] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0x8D has invalid wMaxPacketSize 0 [ 713.731592][ T5716] usb 4-1: config 6 interface 132 has no altsetting 0 [ 713.746413][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.746510][ T5716] usb 4-1: Product: syz [ 713.746573][ T5716] usb 4-1: Manufacturer: syz [ 713.746830][ T5716] usb 4-1: SerialNumber: syz [ 713.909812][T23880] loop4: detected capacity change from 0 to 256 [ 713.943717][T23885] usb usb1: usbfs: process 23885 (syz.0.7758) did not claim interface 6 before use [ 714.109542][ T5716] usbtest 4-1:6.132: couldn't get endpoints, -22 [ 714.109698][ T5716] usbtest 4-1:6.132: probe with driver usbtest failed with error -22 [ 714.174602][ T5716] usb 4-1: USB disconnect, device number 66 [ 714.565652][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'. [ 714.634397][T23913] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7770'. [ 714.668596][T23916] loop2: detected capacity change from 0 to 1024 [ 714.677253][T23916] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 714.730550][T23916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.881909][T23925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7774'. [ 714.897284][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.926148][T23928] netlink: 'syz.1.7775': attribute type 1 has an invalid length. [ 714.934354][T23928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7775'. [ 714.947541][ T31] audit: type=1326 audit(2000000264.939:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.7776" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6526d9e0d9 code=0x0 [ 715.178651][T23935] loop0: detected capacity change from 0 to 512 [ 715.190209][T23935] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 715.280205][T23935] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 715.305882][T23935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.7779: bg 0: block 248: padding at end of block bitmap is not set [ 715.324219][T23935] loop0: lost filesystem error report for type 5 error -117 [ 715.327388][T23935] Quota error (device loop0): write_blk: dquota write failed [ 715.334947][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 715.334968][ C0] EXT4-fs (loop0): last error at time 2000000265: ext4_validate_block_bitmap:445 [ 715.359086][T23935] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 715.369350][T23935] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.7779: Failed to acquire dquot type 1 [ 715.378073][T23935] loop0: lost filesystem error report for type 5 error -28 [ 715.390268][T23935] EXT4-fs (loop0): 1 truncate cleaned up [ 715.407040][T23935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 715.444694][T23935] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.7779: deleted inode referenced: 12 [ 715.467816][T23941] loop2: detected capacity change from 0 to 2048 [ 715.500235][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 715.516687][T23941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.614231][T23943] loop4: detected capacity change from 0 to 64 [ 716.135474][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7792'. [ 716.135525][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7792'. [ 716.160622][ T31] audit: type=1326 audit(2000000266.062:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.2.7791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dad9e0d9 code=0x7ffc0000 [ 716.165565][ T31] audit: type=1326 audit(2000000266.062:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.2.7791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dad9e0d9 code=0x7ffc0000 [ 716.180492][ T31] audit: type=1326 audit(2000000266.062:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.2.7791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc9dad9e0d9 code=0x7ffc0000 [ 716.181263][ T31] audit: type=1326 audit(2000000266.062:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.2.7791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dad9e0d9 code=0x7ffc0000 [ 716.183721][ T31] audit: type=1326 audit(2000000266.062:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.2.7791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dad9e0d9 code=0x7ffc0000 [ 716.442836][T23970] loop4: detected capacity change from 0 to 256 [ 716.457647][T23970] exfat: Deprecated parameter 'namecase' [ 716.482870][T23970] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 716.827583][T23986] loop4: detected capacity change from 0 to 64 [ 716.831201][T23986] MINIX-fs: mounting file system with errors, running fsck is recommended [ 716.960581][T23986] syz.4.7802: attempt to access beyond end of device [ 716.960581][T23986] loop4: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 716.960646][T23986] Buffer I/O error on dev loop4, logical block 4096, async page read [ 717.036363][T23986] syz.4.7802: attempt to access beyond end of device [ 717.036363][T23986] loop4: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 717.058999][T23986] Buffer I/O error on dev loop4, logical block 4096, async page read [ 717.070797][ T31] audit: type=1800 audit(2000000266.922:398): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7802" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 717.103641][T23992] loop1: detected capacity change from 0 to 16 [ 717.184053][T23992] erofs (device loop1): mounted with root inode @ nid 36. [ 717.217157][T23992] syz.1.7806: attempt to access beyond end of device [ 717.217157][T23992] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 717.280240][T23992] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 717.280311][T23992] erofs (device loop1): read error -117 @ 0 of nid 89 [ 717.280918][ T31] audit: type=1800 audit(2000000267.119:399): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7806" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 717.519944][T24010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7814'. [ 717.815078][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7822'. [ 718.100379][ T5716] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 718.159099][T24038] loop2: detected capacity change from 0 to 1024 [ 718.170843][T24038] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 718.192245][T24038] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 718.193122][T24038] EXT4-fs (loop2): orphan cleanup on readonly fs [ 718.210250][T24038] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.7829: Invalid inode table block 0 in block_group 0 [ 718.210316][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.226888][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 718.226941][ C1] EXT4-fs (loop2): initial error at time 2000000267: __ext4_get_inode_loc:4916 [ 718.226986][ C1] EXT4-fs (loop2): last error at time 2000000267: __ext4_get_inode_loc:4916 [ 718.238433][T24038] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 718.238513][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.239513][T24038] EXT4-fs error (device loop2): ext4_quota_write:7458: inode #3: comm syz.2.7829: mark_inode_dirty error [ 718.239605][T24038] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 718.242459][T24038] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.7829: Failed to acquire dquot type 0 [ 718.242557][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.245315][T24038] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.7829: Invalid inode table block 0 in block_group 0 [ 718.245418][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.248132][T24038] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 718.248209][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.254087][T24038] EXT4-fs error (device loop2): ext4_ext_truncate:4565: inode #15: comm syz.2.7829: mark_inode_dirty error [ 718.254171][T24038] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 718.255045][T24038] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.7829: Invalid inode table block 0 in block_group 0 [ 718.255128][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.258036][T24038] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 718.258099][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.262426][T24038] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 718.262491][T24038] loop2: lost filesystem error report for type 5 error -117 [ 718.266375][T24038] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.7829: Invalid inode table block 0 in block_group 0 [ 718.267018][T24038] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 718.268831][T24038] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.7829: mark_inode_dirty error [ 718.268928][T24038] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 718.271409][T24038] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 718.274284][T24038] EXT4-fs (loop2): 1 truncate cleaned up [ 718.297467][T24038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.326303][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 718.336323][ T5716] usb 2-1: not running at top speed; connect to a high speed hub [ 718.336377][ T5716] usb 2-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.c6 [ 718.347875][ T5716] usb 2-1: config 13 has an invalid interface number: 102 but max is 0 [ 718.347957][ T5716] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 718.348021][ T5716] usb 2-1: config 13 has no interface number 0 [ 718.368573][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.368663][ T5716] usb 2-1: Product: syz [ 718.368709][ T5716] usb 2-1: Manufacturer: syz [ 718.368752][ T5716] usb 2-1: SerialNumber: syz [ 718.654240][T24047] loop3: detected capacity change from 0 to 64 [ 718.694106][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.814421][ T5716] cdc_phonet 2-1:13.102: probe with driver cdc_phonet failed with error -22 [ 718.848178][ T5716] usb 2-1: USB disconnect, device number 68 [ 719.091927][T24061] gre0: entered promiscuous mode [ 719.097685][T24061] gre0: entered allmulticast mode [ 719.288908][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.316264][T24120] kAFS: unable to lookup cell 'syze¤@Ës0' [ 720.574674][T24130] loop1: detected capacity change from 0 to 512 [ 720.714326][T24130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.714456][T24130] ext4 filesystem being mounted at /1514/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.834633][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.847875][T24146] netlink: 'syz.2.7876': attribute type 49 has an invalid length. [ 720.937317][T24150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7878'. [ 721.142895][T24158] loop0: detected capacity change from 0 to 1024 [ 721.226425][T24158] hfsplus: xattr search failed [ 721.490780][T24179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7893'. [ 721.490837][T24179] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7893'. [ 721.490860][T24179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7893'. [ 721.490912][T24179] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7893'. [ 721.949470][T24195] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7902'. [ 722.213256][T24200] loop4: detected capacity change from 0 to 4096 [ 722.230201][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7909'. [ 722.288250][T24200] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 722.467500][T24200] ntfs3(loop4): Failed to load $Extend (-22). [ 722.467553][T24200] ntfs3(loop4): Failed to initialize $Extend. [ 722.489220][T24221] loop1: detected capacity change from 0 to 512 [ 722.547685][T24221] EXT4-fs (loop1): 1 orphan inode deleted [ 722.571089][ T1018] __quota_error: 7 callbacks suppressed [ 722.571153][ T1018] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 722.571251][ T1018] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 1 [ 722.571279][ T1018] fserror_report: 3 callbacks suppressed [ 722.571293][ T1018] loop1: lost filesystem error report for type 5 error -117 [ 722.609360][T24221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.632569][T24221] ext4 filesystem being mounted at /1525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.834362][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.510519][T24262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.762155][T24270] loop3: detected capacity change from 0 to 4096 [ 723.796447][T24270] EXT4-fs (loop3): Test dummy encryption mode enabled [ 723.852320][T24270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.952993][T24283] loop0: detected capacity change from 0 to 128 [ 723.955873][T24283] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 723.967601][T24283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.192813][ T5716] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 724.365687][ T5716] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 724.376551][ T5716] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 724.376596][ T5716] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 724.376673][ T5716] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 48, changing to 7 [ 724.376707][ T5716] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 9583, setting to 1024 [ 724.376740][ T5716] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 724.376773][ T5716] usb 4-1: config 220 interface 0 has no altsetting 0 [ 724.376797][ T5716] usb 4-1: config 220 interface 1 has no altsetting 0 [ 724.451183][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.451227][ T5716] usb 4-1: Product: syz [ 724.451301][ T5716] usb 4-1: Manufacturer: syz [ 724.451322][ T5716] usb 4-1: SerialNumber: syz [ 724.660942][T24313] binder: 24311:24313 ioctl c00c620f 0 returned -14 [ 724.730112][ T5716] usb 4-1: selecting invalid altsetting 0 [ 724.767424][ T5716] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 724.777104][ T5716] usb 4-1: selecting invalid altsetting 0 [ 724.777143][ T5716] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 724.804665][ T5716] usb 4-1: USB disconnect, device number 67 [ 724.954538][T24322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.343643][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.359561][T24337] loop4: detected capacity change from 0 to 2048 [ 725.408470][T24340] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 725.450886][T24337] syz.4.7970: attempt to access beyond end of device [ 725.450886][T24337] loop4: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048 [ 725.450952][T24337] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 725.511645][T24339] veth3: entered promiscuous mode [ 725.519076][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 725.680320][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 725.683386][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 725.683477][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 725.683521][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 725.683572][ T10] usb 2-1: config 220 has no interface number 2 [ 725.683723][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 725.683789][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 725.683845][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 725.683927][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 725.694200][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.694288][ T10] usb 2-1: Product: syz [ 725.694339][ T10] usb 2-1: Manufacturer: syz [ 725.694382][ T10] usb 2-1: SerialNumber: syz [ 725.969083][ T10] usb 2-1: selecting invalid altsetting 0 [ 725.975624][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 725.975698][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 726.002369][T24357] xt_nfacct: accounting object `syz0' does not exist [ 726.040115][ T10] usb 2-1: selecting invalid altsetting 0 [ 726.040176][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 726.064407][ T10] usb 2-1: USB disconnect, device number 69 [ 726.324260][T24369] sctp: [Deprecated]: syz.3.7987 (pid 24369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.324260][T24369] Use struct sctp_sack_info instead [ 726.360868][T24372] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 726.427477][T24373] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 726.427542][T24373] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 726.427578][T24373] overlayfs: missing 'lowerdir' [ 726.549239][T24381] loop4: detected capacity change from 0 to 64 [ 726.747528][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 726.907985][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 726.908766][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 726.912158][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.912230][ T10] usb 4-1: config 0 has no interface number 0 [ 726.912338][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 726.912417][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 726.925650][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.925723][ T10] usb 4-1: Product: syz [ 726.925773][ T10] usb 4-1: Manufacturer: syz [ 726.925822][ T10] usb 4-1: SerialNumber: syz [ 726.954407][ T10] usb 4-1: config 0 descriptor?? [ 727.229198][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 727.229261][ T10] cx231xx 4-1:0.1: Not found matching IAD interface [ 727.247484][ T10] usb 4-1: USB disconnect, device number 68 [ 727.389256][ T5629] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 727.474930][ T5716] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 727.551642][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 727.559260][ T5629] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 727.573711][ T5629] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 727.573758][ T5629] usb 2-1: config 0 has no interface number 0 [ 727.573816][ T5629] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 727.604188][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.604237][ T5629] usb 2-1: Product: syz [ 727.604271][ T5629] usb 2-1: Manufacturer: syz [ 727.604293][ T5629] usb 2-1: SerialNumber: syz [ 727.633370][ T5629] usb 2-1: config 0 descriptor?? [ 727.639646][T24402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 727.647026][ T5716] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 727.650079][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 727.650177][ T5716] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 727.650265][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 727.650329][ T5716] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 727.650440][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.663198][ T5716] usb 3-1: config 0 descriptor?? [ 727.911956][ T5716] hdpvr 3-1:0.0: firmware version 0xd9 dated ÚL–W@ô‚Ôõ'^£ñR"Î5ËçèÝD¤ÙBUN§Æ=rp]’ÑEÈ/ [ 727.912024][ T5716] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 727.932374][T24402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 727.935924][T24423] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 728.042419][T24426] loop4: detected capacity change from 0 to 256 [ 728.043744][T24426] exfat: Deprecated parameter 'utf8' [ 728.044102][T24426] exfat: Deprecated parameter 'namecase' [ 728.044282][T24426] exfat: Deprecated parameter 'namecase' [ 728.044462][T24426] exfat: Deprecated parameter 'utf8' [ 728.071943][T24426] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 728.089438][T24426] exfat: Deprecated parameter 'utf8' [ 728.091983][T24426] exfat: Deprecated parameter 'namecase' [ 728.092177][T24426] exfat: Deprecated parameter 'namecase' [ 728.092355][T24426] exfat: Deprecated parameter 'utf8' [ 728.129122][ T5716] hdpvr 3-1:0.0: device init failed [ 728.129359][ T5716] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 728.160355][ T5716] usb 3-1: USB disconnect, device number 78 [ 728.186222][ T5629] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 728.186479][ T5629] asix 2-1:0.188: probe with driver asix failed with error -71 [ 728.219022][ T5629] usb 2-1: USB disconnect, device number 70 [ 728.482800][T24438] loop0: detected capacity change from 0 to 512 [ 728.534063][T24438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.534274][T24438] ext4 filesystem being mounted at /1629/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.571587][T24443] loop4: detected capacity change from 0 to 16 [ 728.584184][T24443] erofs (device loop4): mounted with root inode @ nid 36. [ 728.618785][T24443] erofs (device loop4): invalid h_shared_count 255 @ nid 86 [ 728.640054][T24438] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 199 vs 206 free clusters [ 728.662667][T24438] Quota error (device loop0): write_blk: dquota write failed [ 728.673911][T24438] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 728.685107][T24438] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.8018: Failed to acquire dquot type 1 [ 728.751705][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.076450][T24449] loop2: detected capacity change from 0 to 4096 [ 729.094272][T24449] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 729.176415][T24449] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 729.176601][T24449] ntfs3(loop2): Failed to load $Extend (-22). [ 729.176678][T24449] ntfs3(loop2): Failed to initialize $Extend. [ 729.244870][ T38] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 729.284147][T24449] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 729.284212][T24449] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 729.284252][T24449] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 729.284384][ T1018] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 729.505064][T24468] loop2: detected capacity change from 0 to 2048 [ 729.579837][T24471] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.757914][ T31] audit: type=1800 audit(2000000278.755:405): pid=24468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8031" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 729.877396][T24483] netlink: 'syz.3.8038': attribute type 2 has an invalid length. [ 729.956306][T24485] loop3: detected capacity change from 0 to 256 [ 730.287090][ T5716] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 730.473138][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.480166][ T5716] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 730.480306][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 730.480403][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 730.480475][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 730.480544][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 40873, setting to 64 [ 730.480615][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.490751][ T5716] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.490827][ T5716] usb 4-1: Manufacturer: syz [ 730.519920][ T5716] usb 4-1: config 0 descriptor?? [ 730.554187][T21420] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 730.740506][T21420] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 730.744583][T21420] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.744719][T21420] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 730.753618][T21420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.753701][T21420] usb 2-1: Product: syz [ 730.753815][T21420] usb 2-1: Manufacturer: syz [ 730.753854][T21420] usb 2-1: SerialNumber: syz [ 730.802358][T21420] usb-storage 2-1:1.0: USB Mass Storage device detected [ 730.812397][ T5629] usb 4-1: USB disconnect, device number 69 [ 730.822071][T21420] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 731.021079][T21420] usb 2-1: USB disconnect, device number 71 [ 731.050712][T24522] CIFS: Attempting to mount //::1/share [ 731.071450][T24522] CIFS: VFS: Error connecting to socket. Aborting operation. [ 731.079215][T24522] CIFS: VFS: cifs_mount failed w/return code = -22 [ 731.238189][T24530] loop4: detected capacity change from 0 to 16 [ 731.249441][T24530] erofs (device loop4): dirblkbits 255 isn't supported [ 731.546803][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8066'. [ 731.561826][T24542] ip6gretap1: entered allmulticast mode [ 731.590838][T21420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 731.632486][ T5716] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 731.729433][T21420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 731.743927][T24550] overlayfs: conflicting options: userxattr,redirect_dir=on [ 731.794183][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 731.797927][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.798054][ T5716] usb 5-1: New USB device found, idVendor=04cb, idProduct=013b, bcdDevice=cd.df [ 731.800846][ T5716] usb 5-1: config 8 has an invalid interface number: 29 but max is 0 [ 731.800918][ T5716] usb 5-1: config 8 has no interface number 0 [ 731.801007][ T5716] usb 5-1: config 8 interface 29 has no altsetting 0 [ 731.817558][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.817646][ T5716] usb 5-1: Product: syz [ 731.817689][ T5716] usb 5-1: Manufacturer: syz [ 731.817731][ T5716] usb 5-1: SerialNumber: syz [ 731.877098][T24553] netlink: 'syz.3.8070': attribute type 20 has an invalid length. [ 731.877242][T24553] IPv6: NLM_F_CREATE should be specified when creating new route [ 732.006876][T24559] netlink: 'syz.3.8074': attribute type 2 has an invalid length. [ 732.015092][T24559] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8074'. [ 732.134002][ T5716] gspca_main: finepix-2.14.0 probing 04cb:013b [ 732.172753][ T5716] usb 5-1: USB disconnect, device number 71 [ 732.470548][T24578] netlink: 272 bytes leftover after parsing attributes in process `syz.1.8083'. [ 732.544491][ T5629] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 732.555465][ T1018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.637492][T24583] loop2: detected capacity change from 0 to 1024 [ 732.716371][ T5629] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 732.731225][ T5629] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 732.731271][ T5629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.731308][ T5629] usb 4-1: config 0 has no interface number 0 [ 732.731357][ T5629] usb 4-1: config 0 interface 126 has no altsetting 0 [ 732.766650][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.766697][ T5629] usb 4-1: Product: syz [ 732.766742][ T5629] usb 4-1: Manufacturer: syz [ 732.766763][ T5629] usb 4-1: SerialNumber: syz [ 732.810068][ T5629] usb 4-1: config 0 descriptor?? [ 732.830149][ T5629] zaurus 4-1:0.126: More than one union descriptor, skipping ... [ 732.838277][ T5629] zaurus 4-1:0.126: skipping garbage [ 732.846462][ T5629] usb 4-1: No union descriptors [ 733.071119][T21420] usb 4-1: USB disconnect, device number 70 [ 733.654129][ T38] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 733.664894][ T38] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 733.774153][T24606] loop4: detected capacity change from 0 to 32768 [ 733.788759][T24606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8096 (24606) [ 733.841682][T24606] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 733.853042][T24606] BTRFS info (device loop4): using crc32c checksum algorithm [ 734.015840][T24606] BTRFS info (device loop4): enabling ssd optimizations [ 734.024808][T24606] BTRFS info (device loop4): turning on async discard [ 734.031918][T24606] BTRFS info (device loop4): enabling free space tree [ 734.115033][T21420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 734.178153][ T5622] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 734.197473][T24595] loop0: detected capacity change from 0 to 32768 [ 734.216854][T24595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8092 (24595) [ 734.259960][T24595] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 734.260020][T24595] BTRFS info (device loop0): using sha256 checksum algorithm [ 734.468880][T24595] BTRFS info (device loop0): enabling ssd optimizations [ 734.468929][T24595] BTRFS info (device loop0): turning on async discard [ 734.468974][T24595] BTRFS info (device loop0): enabling free space tree [ 734.563082][ T5619] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 734.629133][T24666] ªªªªªª: renamed from veth1_vlan [ 735.430648][T24692] loop4: detected capacity change from 0 to 1024 [ 735.596530][T24699] loop3: detected capacity change from 0 to 128 [ 735.618246][T24699] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 735.632986][T24699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.770290][T21420] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 735.942376][T21420] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 735.943605][T21420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.040239][T21420] usb 2-1: config 0 descriptor?? [ 736.068789][T21420] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 736.456234][T24712] bond2 (unregistering): Released all slaves [ 736.508868][T21420] gp8psk: usb out operation failed. [ 736.536597][T21420] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 736.547603][T21420] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 736.562536][T21420] usb 2-1: USB disconnect, device number 72 [ 736.783790][T24724] loop3: detected capacity change from 0 to 1764 [ 737.316203][T24752] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 737.601932][T24762] loop3: detected capacity change from 0 to 1024 [ 737.616167][T24762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 737.637877][T24770] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8163'. [ 737.647319][T24770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.661346][T24762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.725105][T24772] loop1: detected capacity change from 0 to 512 [ 737.770262][T24772] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 737.770623][T24772] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 737.770739][T24772] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.8162: Failed to acquire dquot type 1 [ 737.770814][T24772] loop1: lost filesystem error report for type 5 error -117 [ 737.780171][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 737.780242][ C0] EXT4-fs (loop1): last error at time 2000000286: ext4_acquire_dquot:7069 [ 737.781372][T24772] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 737.781747][T24772] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 737.781850][T24772] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.8162: Failed to acquire dquot type 1 [ 737.781921][T24772] loop1: lost filesystem error report for type 5 error -117 [ 737.861630][T24772] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.8162: bg 0: block 248: padding at end of block bitmap is not set [ 737.861701][T24772] loop1: lost filesystem error report for type 5 error -117 [ 737.872867][T24772] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 737.872949][T24772] loop1: lost filesystem error report for type 5 error -117 [ 737.883692][T24772] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 737.883864][T24772] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 737.883902][T24772] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.8162: Failed to acquire dquot type 1 [ 737.883928][T24772] loop1: lost filesystem error report for type 5 error -117 [ 737.989607][T24772] EXT4-fs (loop1): 1 orphan inode deleted [ 738.007338][T24772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.026326][T24772] ext4 filesystem being mounted at /1573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.040522][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.107627][T24772] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.8162: deleted inode referenced: 12 [ 738.180136][T24782] fuse: Bad value for 'fd' [ 738.245742][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.357582][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 738.731537][T24806] loop1: detected capacity change from 0 to 1024 [ 738.755781][T24806] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 738.776295][T24806] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 738.790488][T24806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.918765][T24811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8181'. [ 739.067799][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.223337][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8186'. [ 739.478236][T24832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.715913][ T5629] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 739.744935][T24839] bond2: option fail_over_mac: invalid value (4) [ 739.755985][T24839] bond2 (unregistering): Released all slaves [ 739.876243][ T5629] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 739.886873][ T5629] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 739.886923][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 739.886973][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.964614][ T5629] usb 5-1: config 0 descriptor?? [ 740.181814][T24842] loop1: detected capacity change from 0 to 32768 [ 740.196562][T24842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8196 (24842) [ 740.212086][ T5629] ath6kl: Failed to submit usb control message: -71 [ 740.212142][ T5629] ath6kl: unable to send the bmi data to the device: -71 [ 740.212169][ T5629] ath6kl: Unable to send get target info: -71 [ 740.255285][ T5629] ath6kl: Failed to init ath6kl core: -71 [ 740.265183][ T5629] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 740.281626][ T5629] usb 5-1: USB disconnect, device number 72 [ 740.301848][T24842] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 740.301907][T24842] BTRFS info (device loop1): using sha256 checksum algorithm [ 740.402038][T24842] BTRFS info (device loop1): enabling ssd optimizations [ 740.413755][T24842] BTRFS info (device loop1): turning on async discard [ 740.421156][T24842] BTRFS info (device loop1): enabling free space tree [ 740.566297][ T5620] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.158391][T21420] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 741.159749][T24894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8213'. [ 741.159981][T24894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8213'. [ 741.160008][T24894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.303222][T24899] syz.4.8216 (24899): /proc/24897/oom_adj is deprecated, please use /proc/24897/oom_score_adj instead. [ 741.340847][T21420] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 741.344150][T21420] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.344282][T21420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 741.344345][T21420] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 741.344416][T21420] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.344524][T21420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.400952][T21420] usb 4-1: config 0 descriptor?? [ 741.464577][T21420] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 741.464723][T21420] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 741.659545][T21420] usb 4-1: USB disconnect, device number 71 [ 742.108634][T24927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.354875][T24938] loop2: detected capacity change from 0 to 512 [ 742.381522][T24938] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 742.430823][T24938] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.8235: bg 0: block 4: invalid block bitmap [ 742.430900][T24938] loop2: lost filesystem error report for type 5 error -117 [ 742.432716][T24938] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 742.432787][T24938] loop2: lost filesystem error report for type 5 error -117 [ 742.438949][T24938] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8235: invalid indirect mapped block 1 (level 1) [ 742.439136][T24938] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 742.441257][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 742.441318][ C0] EXT4-fs (loop2): initial error at time 2000000290: ext4_validate_block_bitmap:436 [ 742.441388][ C0] EXT4-fs (loop2): last error at time 2000000290: ext4_free_branches:1023: inode 11 [ 742.523575][T24938] EXT4-fs (loop2): 1 truncate cleaned up [ 742.546578][T24938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.674993][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.862470][T24956] loop0: detected capacity change from 0 to 512 [ 742.868654][T24955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8241'. [ 742.954953][T24956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 742.955185][T24956] ext4 filesystem being mounted at /1668/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.986878][T24960] netlink: 400 bytes leftover after parsing attributes in process `syz.1.8246'. [ 743.049475][T24956] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 743.049802][T24956] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 743.049935][T24956] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.8243: Failed to acquire dquot type 0 [ 743.199283][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 743.440768][T24981] CIFS mount error: No usable UNC path provided in device string! [ 743.440768][T24981] [ 743.440820][T24981] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 743.724201][T24998] netlink: 'syz.3.8261': attribute type 9 has an invalid length. [ 743.796932][T25001] loop2: detected capacity change from 0 to 256 [ 743.824838][ T31] audit: type=1800 audit(2000000291.944:406): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8264" name="file0" dev="loop2" ino=1048679 res=0 errno=0 [ 744.190815][T25012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8269'. [ 744.244458][T24994] loop1: detected capacity change from 0 to 32768 [ 744.252953][T24994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8257 (24994) [ 744.273819][T24994] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 744.284849][T24994] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 744.393130][T25029] bridge0: port 3(bond0) entered blocking state [ 744.408363][T25029] bridge0: port 3(bond0) entered disabled state [ 744.414933][T25029] bond0: entered allmulticast mode [ 744.420271][T25029] : entered allmulticast mode [ 744.425301][T25029] bond_slave_1: entered allmulticast mode [ 744.433831][T25029] bond0: entered promiscuous mode [ 744.439022][T25029] : entered promiscuous mode [ 744.444352][T25029] bond_slave_1: entered promiscuous mode [ 744.456067][T24994] BTRFS info (device loop1): enabling ssd optimizations [ 744.456121][T24994] BTRFS info (device loop1): turning on flush-on-commit [ 744.456158][T24994] BTRFS info (device loop1): turning on async discard [ 744.456182][T24994] BTRFS info (device loop1): enabling free space tree [ 744.456204][T24994] BTRFS info (device loop1): force zlib compression, level 3 [ 744.456279][T24994] BTRFS info (device loop1): max_inline set to 0 [ 744.620176][T25037] loop3: detected capacity change from 0 to 1024 [ 744.684282][ T5620] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 745.535028][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8284'. [ 746.022626][ T5629] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 746.183865][ T5629] usb 4-1: Using ep0 maxpacket: 32 [ 746.188736][ T5629] usb 4-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 746.203759][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.203821][ T5629] usb 4-1: Product: syz [ 746.203856][ T5629] usb 4-1: Manufacturer: syz [ 746.203873][ T5629] usb 4-1: SerialNumber: syz [ 746.467703][T25081] loop2: detected capacity change from 0 to 4096 [ 746.532892][ T5629] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 746.561263][ T5629] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 746.564418][T25081] NILFS (loop2): the device already has a read-only mount. [ 746.626879][T25075] loop4: detected capacity change from 0 to 32768 [ 746.677651][T25075] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 746.880322][T25075] XFS (loop4): Ending clean mount [ 746.903107][ T5629] usb 4-1: USB disconnect, device number 72 [ 747.080036][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 747.123247][ T5622] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.261296][T25107] loop1: detected capacity change from 0 to 512 [ 747.317472][T25107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.341915][T25107] ext4 filesystem being mounted at /1607/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.383139][T25107] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.8306: corrupted xattr block 33: invalid header [ 747.470328][T25117] loop3: detected capacity change from 0 to 512 [ 747.562936][T25117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 747.575923][T25117] ext4 filesystem being mounted at /1644/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.647162][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.703288][T25117] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 747.703475][T25117] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 747.703563][T25117] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8309: Failed to acquire dquot type 0 [ 747.857771][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 748.021846][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 748.269330][T25140] loop4: detected capacity change from 0 to 1024 [ 748.355705][T25126] loop1: detected capacity change from 0 to 32768 [ 748.366091][T25126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8313 (25126) [ 748.417052][T25126] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 748.427434][T25126] BTRFS info (device loop1): using sha256 checksum algorithm [ 748.549319][T25126] BTRFS info (device loop1): rebuilding free space tree [ 748.600986][T25126] BTRFS info (device loop1): enabling ssd optimizations [ 748.609331][T25126] BTRFS info (device loop1): using spread ssd allocation scheme [ 748.619615][T25126] BTRFS info (device loop1): turning on async discard [ 748.626715][T25126] BTRFS info (device loop1): enabling free space tree [ 748.633795][T25126] BTRFS info (device loop1): force clearing of disk cache [ 748.723885][ T5620] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 749.589242][T25196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8339'. [ 749.589295][T25196] netlink: 'syz.3.8339': attribute type 2 has an invalid length. [ 749.683031][ T5716] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 749.849840][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 749.854386][ T5716] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 749.857172][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.857322][ T5716] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 749.857392][ T5716] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.857531][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 749.882314][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.882441][ T5716] usb 3-1: Product: syz [ 749.882485][ T5716] usb 3-1: Manufacturer: syz [ 749.882529][ T5716] usb 3-1: SerialNumber: syz [ 749.926739][ T5716] usb 3-1: config 0 descriptor?? [ 750.076536][T25216] loop3: detected capacity change from 0 to 64 [ 750.347248][T25222] netlink: 'syz.3.8351': attribute type 7 has an invalid length. [ 750.437053][ T5716] usb 3-1: USB disconnect, device number 79 [ 750.774887][ T31] audit: type=1326 audit(2000000298.445:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.775531][ T31] audit: type=1326 audit(2000000298.445:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.793031][ T31] audit: type=1326 audit(2000000298.445:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.794813][ T31] audit: type=1326 audit(2000000298.445:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.797511][ T31] audit: type=1326 audit(2000000298.445:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.798088][ T31] audit: type=1326 audit(2000000298.445:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.798630][ T31] audit: type=1326 audit(2000000298.445:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.799770][ T31] audit: type=1326 audit(2000000298.445:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 750.814301][ T31] audit: type=1326 audit(2000000298.473:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25241 comm="syz.1.8363" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 751.130703][T25252] loop0: detected capacity change from 0 to 512 [ 751.151550][T25252] EXT4-fs (loop0): orphan cleanup on readonly fs [ 751.159021][T25252] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 751.162242][T25251] CIFS: Attempting to mount //127.0.0.1/test [ 751.167548][T25252] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 751.172636][T25252] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.8365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856) [ 751.174460][T25252] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 751.186143][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 751.186218][ C1] EXT4-fs (loop0): last error at time 2000000298: ext4_ext_check_inode:521: inode 13 [ 751.208262][T25252] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.8365: couldn't read orphan inode 13 (err -117) [ 751.208358][T25252] loop0: lost filesystem error report for type 5 error -117 [ 751.219942][T25251] CIFS: VFS: Error connecting to socket. Aborting operation. [ 751.220065][T25251] CIFS: VFS: cifs_mount failed w/return code = -101 [ 751.249416][T25252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 751.298894][T25255] .¿: renamed from vlan0 [ 751.317910][T25252] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 751.320122][T25252] EXT4-fs warning (device loop0): read_mmp_block:110: Error -117 while reading MMP block 8 [ 751.480799][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.569564][T25265] loop3: detected capacity change from 0 to 512 [ 751.623648][T25265] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 751.624024][T25265] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8371: Failed to acquire dquot type 1 [ 751.624096][T25265] loop3: lost filesystem error report for type 5 error -117 [ 751.635036][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 751.635063][ C1] EXT4-fs (loop3): last error at time 2000000299: ext4_acquire_dquot:7069 [ 751.678813][T25265] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8371: Failed to acquire dquot type 1 [ 751.678886][T25265] loop3: lost filesystem error report for type 5 error -117 [ 751.688744][T25265] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.8371: bg 0: block 248: padding at end of block bitmap is not set [ 751.688844][T25265] loop3: lost filesystem error report for type 5 error -117 [ 751.716467][T25265] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 751.737463][T25265] loop3: lost filesystem error report for type 5 error -117 [ 751.738555][T25265] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8371: Failed to acquire dquot type 1 [ 751.738613][T25265] loop3: lost filesystem error report for type 5 error -117 [ 751.754862][T25265] EXT4-fs (loop3): 1 orphan inode deleted [ 751.776082][T25265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.776308][T25265] ext4 filesystem being mounted at /1663/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.835906][T25265] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.8371: deleted inode referenced: 12 [ 752.214327][T25283] loop2: detected capacity change from 0 to 4096 [ 752.233094][T25283] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 752.375368][T25283] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 752.491273][T25283] ntfs3(loop2): ino=5, "/" indx_read_ra [ 752.751336][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.316956][T25305] loop2: detected capacity change from 0 to 4096 [ 753.330946][T25305] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 753.369214][T25289] loop4: detected capacity change from 0 to 32768 [ 753.410608][T25305] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 753.454586][T25305] ntfs3(loop2): ino=1e, mi_enum_attr [ 753.493388][T25289] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 753.493388][T25289] [ 753.508596][T25289] ERROR: (device loop4): remounting filesystem as read-only [ 753.526962][T25289] ialloc: diAlloc returned -5! [ 753.657468][T25315] loop1: detected capacity change from 0 to 256 [ 753.826225][T25319] loop0: detected capacity change from 0 to 1024 [ 753.844395][T25319] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 754.069591][T25313] loop3: detected capacity change from 0 to 32768 [ 754.070575][T25313] xfs: Deprecated parameter 'noattr2' [ 754.070617][T25313] XFS: noattr2 mount option is deprecated. [ 754.101348][T25313] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 754.114470][T25313] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 754.288246][ T5627] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 754.546316][T25345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8405'. [ 754.546380][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8405'. [ 754.792936][ T5629] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 754.963991][ T5629] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 754.975764][ T5629] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 754.984697][ T5629] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 754.995582][ T5629] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 755.005659][ T5629] usb 5-1: config 150 has no interface number 0 [ 755.012345][ T5629] usb 5-1: config 150 interface 204 has no altsetting 0 [ 755.024515][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.024558][ T5629] usb 5-1: Product: syz [ 755.024599][ T5629] usb 5-1: Manufacturer: syz [ 755.024619][ T5629] usb 5-1: SerialNumber: syz [ 755.075320][T25362] loop1: detected capacity change from 0 to 128 [ 755.108137][T25362] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 755.123365][T25362] hpfs: filesystem error: improperly stopped [ 755.129881][T25362] hpfs: You really don't want any checks? You are crazy... [ 755.137962][T25362] hpfs: hpfs_map_sector(): read error [ 755.146466][T25362] hpfs: code page support is disabled [ 755.152905][T25362] hpfs: hpfs_map_4sectors(): unaligned read [ 755.153138][T25362] hpfs: hpfs_map_4sectors(): unaligned read [ 755.153185][T25362] hpfs: filesystem error: unable to find root dir [ 755.229413][T25366] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 755.548007][ T5716] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 755.630057][T25386] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 755.717688][ T5716] usb 3-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 755.730849][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.730975][ T5716] usb 3-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.731146][ T5716] usb 3-1: config 1 interface 0 has no altsetting 0 [ 755.741787][ T5716] usb 3-1: string descriptor 0 read error: -22 [ 755.742049][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 755.797205][T25390] loop0: detected capacity change from 0 to 164 [ 755.820016][T25390] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 756.044600][ T5716] usb 3-1: USB disconnect, device number 80 [ 756.143510][T25404] tmpfs: Bad value for 'mpol' [ 756.913621][T25434] loop3: detected capacity change from 0 to 512 [ 756.914445][T25436] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8450'. [ 756.938679][T25434] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 757.039591][T25420] loop1: detected capacity change from 0 to 32768 [ 757.053466][T25420] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8442 (25420) [ 757.121973][T25434] __quota_error: 5 callbacks suppressed [ 757.122044][T25434] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 757.122149][T25434] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 757.122175][T25434] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8448: Failed to acquire dquot type 1 [ 757.122205][T25434] loop3: lost filesystem error report for type 5 error -117 [ 757.124049][T25434] EXT4-fs (loop3): 1 truncate cleaned up [ 757.185957][T25420] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 757.197238][T25420] BTRFS info (device loop1): using sha256 checksum algorithm [ 757.199701][T25434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 757.235357][T25434] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 757.235569][T25434] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 757.235625][T25434] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8448: Failed to acquire dquot type 1 [ 757.410632][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 757.447491][T25420] BTRFS info (device loop1): enabling ssd optimizations [ 757.447545][T25420] BTRFS info (device loop1): turning on async discard [ 757.447564][T25420] BTRFS info (device loop1): enabling free space tree [ 757.647776][ T5620] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 757.834498][T21420] usb 5-1: USB disconnect, device number 73 [ 758.050219][T25480] loop1: detected capacity change from 0 to 64 [ 758.072612][T25471] loop2: detected capacity change from 0 to 4096 [ 758.139506][T25481] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 758.167097][ T5629] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 758.338752][ T5629] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 758.351186][ T5629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.351233][ T5629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.373203][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 758.373233][ T5629] usb 4-1: SerialNumber: syz [ 758.648031][ T5629] usb 4-1: 0:2 : does not exist [ 758.742462][ T5629] usb 4-1: USB disconnect, device number 73 [ 758.895811][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.332934][T25522] XFS (nullb0): Invalid superblock magic number [ 759.402106][T25529] loop3: detected capacity change from 0 to 2048 [ 759.410755][T25529] udf: Bad value for 'volume' [ 759.420085][T25529] ext4: Unexpected value for 'discard' [ 759.498684][T25531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8484'. [ 759.555628][T25533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8486'. [ 759.768890][T25540] bond2 (unregistering): Released all slaves [ 760.016602][T21420] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 760.182762][T21420] usb 5-1: not running at top speed; connect to a high speed hub [ 760.182820][T21420] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 760.199640][T21420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.199723][T21420] usb 5-1: Product: syz [ 760.199759][T21420] usb 5-1: Manufacturer: syz [ 760.199800][T21420] usb 5-1: SerialNumber: syz [ 760.238251][T21420] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 760.280552][T21420] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 760.370212][T21420] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 760.385410][T21420] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 760.413074][T21420] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 760.425845][T25556] loop3: detected capacity change from 0 to 1024 [ 760.453087][T25558] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 760.487115][T25556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.502674][ C1] usb 5-1: malformed indat packet [ 760.555410][T25556] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 449: comm syz.3.8495: Attempting to read directory block (449) that is past i_size (460032) [ 760.614400][T25548] loop1: detected capacity change from 0 to 32768 [ 760.721813][T21420] usb 5-1: USB disconnect, device number 74 [ 760.772075][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.828579][T25548] JBD2: Ignoring recovery information on journal [ 760.837844][T21420] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 760.856057][T21420] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 760.885087][T21420] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 760.982102][T21420] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 760.993514][T21420] keyspan 5-1:1.0: device disconnected [ 761.012788][T25548] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 761.118471][T25576] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 761.441751][T25584] netlink: 'syz.3.8508': attribute type 3 has an invalid length. [ 761.450148][T25584] netlink: 'syz.3.8508': attribute type 3 has an invalid length. [ 761.472187][T25548] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 761.472275][T25548] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 761.472329][T25548] OCFS2: Returning error to the calling process. [ 761.472372][T25548] (syz.1.8492,25548,1):ocfs2_search_chain:1935 ERROR: status = -5 [ 761.472464][T25548] (syz.1.8492,25548,1):ocfs2_search_chain:2058 ERROR: status = -5 [ 761.472536][T25548] (syz.1.8492,25548,1):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5 [ 761.472613][T25548] (syz.1.8492,25548,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5 [ 761.472676][T25548] (syz.1.8492,25548,1):ocfs2_claim_new_inode:2439 ERROR: status = -5 [ 761.472740][T25548] (syz.1.8492,25548,1):ocfs2_claim_new_inode:2454 ERROR: status = -5 [ 761.472795][T25548] (syz.1.8492,25548,1):ocfs2_mknod_locked:649 ERROR: status = -5 [ 761.472866][T25548] (syz.1.8492,25548,1):ocfs2_mknod:394 ERROR: status = -5 [ 761.477635][T25548] (syz.1.8492,25548,1):ocfs2_mknod:513 ERROR: status = -5 [ 761.477720][T25548] (syz.1.8492,25548,1):ocfs2_mkdir:669 ERROR: status = -5 [ 761.635703][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8511'. [ 761.796735][ T5620] ocfs2: Unmounting device (7,1) on (node local) [ 761.909552][T25601] xt_cgroup: path and classid specified [ 762.127960][T25607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8521'. [ 762.468275][T25622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8527'. [ 763.019659][T25648] ieee802154 phy0 wpan0: encryption failed: -90 [ 763.135986][T25655] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 763.254129][T25660] netlink: 'syz.4.8545': attribute type 1 has an invalid length. [ 763.262063][T25660] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8545'. [ 763.483053][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8550'. [ 763.851296][T25658] loop1: detected capacity change from 0 to 32768 [ 763.912182][T25658] JBD2: Ignoring recovery information on journal [ 764.061407][T25658] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 764.382741][ T5620] ocfs2: Unmounting device (7,1) on (node local) [ 764.434974][T25670] loop2: detected capacity change from 0 to 32768 [ 764.481985][T25670] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 764.637450][T25670] XFS (loop2): Ending clean mount [ 764.656701][T25707] sock: sock_timestamping_bind_phc: sock not bind to device [ 764.734624][T25696] bond2 (unregistering): Released all slaves [ 764.782056][ T5621] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 765.112207][T25719] netlink: 'syz.4.8571': attribute type 7 has an invalid length. [ 765.112256][T25719] netlink: 'syz.4.8571': attribute type 5 has an invalid length. [ 765.112271][T25719] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8571'. [ 765.705814][T25733] loop2: detected capacity change from 0 to 4096 [ 765.826341][T25743] netlink: 'syz.3.8582': attribute type 4 has an invalid length. [ 765.834651][T25743] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8582'. [ 765.887405][T25733] ntfs3(loop2): mft corrupted [ 766.131622][T21420] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 766.242073][T25728] loop1: detected capacity change from 0 to 32768 [ 766.267971][T25728] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 766.314245][T21420] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 766.327497][T21420] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 766.337412][T21420] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 766.348597][T21420] usb 5-1: config 171 has no interface number 0 [ 766.355352][T21420] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 766.365962][T21420] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 766.382377][T21420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.382438][T21420] usb 5-1: Product: syz [ 766.382460][T21420] usb 5-1: Manufacturer: syz [ 766.382481][T21420] usb 5-1: SerialNumber: syz [ 766.412857][T25745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 766.442253][T25728] XFS (loop1): Ending clean mount [ 766.645292][ T5620] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 766.659585][T25745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.662449][T25745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.685316][T21420] ath6kl: Failed to submit usb control message: -71 [ 766.685389][T21420] ath6kl: unable to send the bmi data to the device: -71 [ 766.685427][T21420] ath6kl: Unable to send get target info: -71 [ 766.708396][T21420] ath6kl: Failed to init ath6kl core: -71 [ 766.715518][T21420] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 766.733564][T21420] usb 5-1: USB disconnect, device number 75 [ 767.489684][T25801] loop4: detected capacity change from 0 to 1024 [ 767.526494][T25801] hfsplus: bad catalog file entry [ 767.564453][ T5629] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 767.591767][ T1018] hfsplus: bad catalog file entry [ 767.724618][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 767.727758][ T5629] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 767.733436][ T5629] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 767.733512][ T5629] usb 3-1: config 252 has no interface number 0 [ 767.789005][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.789141][ T5629] usb 3-1: Product: syz [ 767.789159][ T5629] usb 3-1: Manufacturer: syz [ 767.789213][ T5629] usb 3-1: SerialNumber: syz [ 767.863549][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 767.918739][ T5629] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 768.055420][ T5629] usb 3-1: USB disconnect, device number 81 [ 768.059434][ T3387] usb 3-1: Failed to submit usb control message: -71 [ 768.059546][ T3387] usb 3-1: unable to send the bmi data to the device: -71 [ 768.059597][ T3387] usb 3-1: unable to get target info from device [ 768.059715][ T3387] usb 3-1: could not get target info (-71) [ 768.059837][ T3387] usb 3-1: could not probe fw (-71) [ 768.718072][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8627'. [ 769.167183][T25874] ipt_ECN: cannot use operation on non-tcp rule [ 769.173958][ T5716] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 769.336472][T25881] geneve3: entered promiscuous mode [ 769.341933][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 769.348723][ T5716] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 769.359358][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.372413][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.372454][ T5716] usb 5-1: Product: syz [ 769.372485][ T5716] usb 5-1: Manufacturer: syz [ 769.372504][ T5716] usb 5-1: SerialNumber: syz [ 769.411882][ T5716] usb 5-1: config 0 descriptor?? [ 769.422675][ T5716] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 769.506854][ T31] audit: type=1326 audit(2000000315.965:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.509067][ T31] audit: type=1326 audit(2000000315.965:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.549507][ T31] audit: type=1326 audit(2000000316.003:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.573725][ T31] audit: type=1326 audit(2000000316.031:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.586823][ T31] audit: type=1326 audit(2000000316.031:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.586905][ T31] audit: type=1326 audit(2000000316.031:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.586953][ T31] audit: type=1326 audit(2000000316.040:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.589646][ T31] audit: type=1326 audit(2000000316.040:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.589702][ T31] audit: type=1326 audit(2000000316.040:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.1.8644" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 769.592274][T25886] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 769.640430][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.640589][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.640686][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.640773][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.911275][ T5716] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 769.911390][ T5716] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 769.934688][ T5716] usb 5-1: USB disconnect, device number 76 [ 769.952044][T25892] loop1: detected capacity change from 0 to 1024 [ 769.969628][T25894] netlink: 'syz.3.8648': attribute type 1 has an invalid length. [ 770.021694][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8649'. [ 770.494925][T25912] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 770.767557][T25900] loop2: detected capacity change from 0 to 32768 [ 770.786151][T25918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8661'. [ 770.809952][T25900] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.080829][T25900] XFS (loop2): Ending clean mount [ 771.283456][ T5621] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.310576][T25910] loop3: detected capacity change from 0 to 32768 [ 771.350579][T25910] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 771.421812][T25910] JBD2: Ignoring recovery information on journal [ 771.570707][T25910] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 771.639038][T25938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 771.841951][T25941] netlink: 340 bytes leftover after parsing attributes in process `syz.1.8668'. [ 771.878451][T25930] loop0: detected capacity change from 0 to 32768 [ 771.965406][T25930] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 772.085520][T25930] XFS (loop0): Ending clean mount [ 772.287550][T25958] loop4: detected capacity change from 0 to 256 [ 772.299685][ T5619] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 772.365484][T25958] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 772.414616][T25958] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 773.078922][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 773.317783][T25978] loop1: detected capacity change from 0 to 4096 [ 773.328698][T25978] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 773.328750][T25978] ntfs3(loop1): RAW NTFS volume: Filesystem size 16384.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 773.328779][T25978] ntfs3(loop1): NTFS 16384.00 Gb is too big to use 32 bits per cluster. [ 773.340624][T25978] ntfs3(loop1): try to read out of volume at offset 0x1ffe00 [ 773.471224][T25968] loop2: detected capacity change from 0 to 32768 [ 773.484240][T25968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8677 (25968) [ 773.518473][T25968] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 773.518538][T25968] BTRFS info (device loop2): using sha256 checksum algorithm [ 773.630313][T26004] loop0: detected capacity change from 0 to 512 [ 773.680125][T26004] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 773.680168][T26004] EXT4-fs (loop0): blocks per group (42) and clusters per group (32768) inconsistent [ 773.702253][T25968] BTRFS info (device loop2): enabling ssd optimizations [ 773.702310][T25968] BTRFS info (device loop2): turning on async discard [ 773.702348][T25968] BTRFS info (device loop2): enabling free space tree [ 773.983814][ T5621] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 774.577822][ T5716] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 774.610255][T26018] loop4: detected capacity change from 0 to 32768 [ 774.657066][T26018] [ 774.657066][T26018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 774.657066][T26018] [ 774.673853][T26018] ERROR: (device loop4): diWrite: ixpxd invalid [ 774.673853][T26018] [ 774.679072][T26018] ERROR: (device loop4): remounting filesystem as read-only [ 774.679146][T26018] ERROR: (device loop4): txCommit: [ 774.679146][T26018] [ 774.716749][T21420] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 774.742279][T26033] ipvlan0: left promiscuous mode [ 774.752669][ T5716] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 774.770769][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 774.770832][ T5716] usb 3-1: Product: syz [ 774.770867][ T5716] usb 3-1: SerialNumber: syz [ 774.801284][ T5716] usb 3-1: config 0 descriptor?? [ 774.921845][T21420] usb 4-1: Using ep0 maxpacket: 8 [ 774.924526][T21420] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 774.935051][T21420] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.935224][T21420] usb 4-1: config 0 interface 0 has no altsetting 0 [ 774.956936][T21420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.956993][T21420] usb 4-1: Product: syz [ 774.957113][T21420] usb 4-1: Manufacturer: syz [ 774.957188][T21420] usb 4-1: SerialNumber: syz [ 775.033957][T21420] usb 4-1: config 0 descriptor?? [ 775.054422][ T5716] hso 3-1:0.0: Failed to find BULK eps [ 775.093441][T21420] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 775.286040][ T5629] usb 3-1: USB disconnect, device number 82 [ 775.306233][T21420] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 775.306837][T21420] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 775.324920][T21420] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 775.526932][ T5629] usb 4-1: USB disconnect, device number 74 [ 775.628028][T26058] netlink: 'syz.1.8713': attribute type 102 has an invalid length. [ 776.070800][T26078] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 776.144166][T26080] loop2: detected capacity change from 0 to 736 [ 776.482350][T26096] loop4: detected capacity change from 0 to 64 [ 776.823015][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 776.837657][T26110] loop1: detected capacity change from 0 to 1024 [ 776.994716][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 777.000807][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 777.011313][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 777.021969][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.032311][ T10] usb 3-1: config 1 has no interface number 0 [ 777.038656][ T10] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 777.048736][ T10] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.062429][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 777.072797][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 777.072856][ T10] usb 3-1: Product: syz [ 777.072877][ T10] usb 3-1: Manufacturer: syz [ 777.072896][ T10] usb 3-1: SerialNumber: syz [ 777.334278][ T10] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 777.573397][ T10] usb 3-1: USB disconnect, device number 83 [ 777.660410][T26121] loop0: detected capacity change from 0 to 32768 [ 777.672431][T26121] [ 777.672431][T26121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 777.672431][T26121] [ 777.706399][T26121] JFS: metapage_get_blocks failed [ 777.739184][T26121] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 777.739184][T26121] [ 777.741077][T26121] ERROR: (device loop0): diWrite: ixpxd invalid [ 777.741077][T26121] [ 777.741180][T26121] ERROR: (device loop0): txCommit: [ 777.741180][T26121] [ 777.854344][ T5619] [ 777.854344][ T5619] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 777.854344][ T5619] [ 777.856613][ T5619] [ 777.856613][ T5619] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 777.856613][ T5619] [ 778.020920][ T5716] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 778.194013][T26152] loop3: detected capacity change from 0 to 512 [ 778.194684][ T5716] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 778.198250][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.198438][ T5716] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.198503][ T5716] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 778.221051][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.221080][ T5716] usb 5-1: Product: syz [ 778.221097][ T5716] usb 5-1: Manufacturer: syz [ 778.221126][ T5716] usb 5-1: SerialNumber: syz [ 778.333888][T26152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 778.334231][T26152] ext4 filesystem being mounted at /1754/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.428835][T26152] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 778.455261][T26152] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 778.466454][T26152] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8757: Failed to acquire dquot type 0 [ 778.531368][ C1] usb 5-1: received EP1 urb->status = -2 [ 778.532134][ T5716] usb 5-1: unable to init card! (ret=-90) [ 778.538052][ T5716] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -90 [ 778.652976][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 778.774051][ T5629] usb 5-1: USB disconnect, device number 77 [ 778.879755][T26164] loop0: detected capacity change from 0 to 32768 [ 778.892537][T26164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8764 (26164) [ 778.922484][T26164] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 778.933427][T26164] BTRFS info (device loop0): using sha256 checksum algorithm [ 779.037410][T26164] BTRFS info (device loop0): enabling ssd optimizations [ 779.046134][T26164] BTRFS info (device loop0): turning on async discard [ 779.053091][T26164] BTRFS info (device loop0): enabling free space tree [ 779.137150][ T5619] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 779.399470][ T5629] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 779.564313][ T5629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 779.564383][ T5629] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 779.583086][ T5629] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 779.583132][ T5629] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 779.583178][ T5629] usb 3-1: config 63 has no interface number 0 [ 779.583215][ T5629] usb 3-1: config 63 interface 66 has no altsetting 0 [ 779.617707][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.617755][ T5629] usb 3-1: Product: syz [ 779.617802][ T5629] usb 3-1: Manufacturer: syz [ 779.617823][ T5629] usb 3-1: SerialNumber: syz [ 779.904099][ T5629] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 779.912492][ T5629] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 779.923487][ T5629] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 779.934019][ T5629] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 779.944847][ T5629] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 779.957882][ T5629] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 779.968396][ T5629] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 779.976657][ T5629] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 779.996989][ T5629] usb 3-1: USB disconnect, device number 84 [ 780.150348][T26211] loop0: detected capacity change from 0 to 2048 [ 780.158675][T26211] EXT4-fs: Ignoring removed nobh option [ 780.193057][T26211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.207743][T26211] ext4 filesystem being mounted at /1758/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.305022][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.868978][T26232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8786'. [ 780.882359][T26213] loop1: detected capacity change from 0 to 32768 [ 780.892404][T26213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8780 (26213) [ 780.956726][T26213] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 780.956779][T26213] BTRFS info (device loop1): using sha256 checksum algorithm [ 781.081164][T26213] BTRFS info (device loop1): enabling ssd optimizations [ 781.091013][T26213] BTRFS info (device loop1): turning on async discard [ 781.098574][T26213] BTRFS info (device loop1): enabling free space tree [ 781.108684][T26232] bond0: option resend_igmp: invalid value (511) [ 781.108742][T26232] bond0: option resend_igmp: allowed values 0 - 255 [ 781.134902][T26232] bond0 (unregistering): Released all slaves [ 781.454098][T26260] sctp: [Deprecated]: syz.0.8794 (pid 26260) Use of int in maxseg socket option. [ 781.454098][T26260] Use struct sctp_assoc_value instead [ 781.537699][ T5620] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 782.056161][T26283] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8803'. [ 782.082292][ T5629] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 782.246215][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 782.247808][ T5629] usb 2-1: not running at top speed; connect to a high speed hub [ 782.247938][ T5629] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 782.254650][ T5629] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 79, changing to 4 [ 782.254735][ T5629] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 782.286480][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 782.295178][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.295253][ T5629] usb 2-1: Product: syz [ 782.295297][ T5629] usb 2-1: Manufacturer: syz [ 782.295348][ T5629] usb 2-1: SerialNumber: syz [ 782.326579][T26287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8807'. [ 782.428182][T26292] netlink: 'syz.4.8810': attribute type 1 has an invalid length. [ 782.428232][T26292] netlink: 'syz.4.8810': attribute type 2 has an invalid length. [ 782.436167][T26293] loop3: detected capacity change from 0 to 64 [ 782.445799][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 782.459540][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 782.470774][ T10] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 782.493839][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.493891][ T10] usb 3-1: Product: syz [ 782.493909][ T10] usb 3-1: Manufacturer: syz [ 782.493945][ T10] usb 3-1: SerialNumber: syz [ 782.540841][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 782.540900][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 782.579098][T26293] hfs: unable to load codepage "macromrn" [ 782.873971][ T5629] usb 2-1: us122l: couldn't allocate write buffer [ 782.875024][ T5629] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 782.906999][ T5629] usb 2-1: USB disconnect, device number 73 [ 783.029404][ T10] r8152-cfgselector 3-1: USB disconnect, device number 85 [ 783.079057][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.175896][T26318] loop3: detected capacity change from 0 to 64 [ 783.672311][T26334] loop3: detected capacity change from 0 to 8192 [ 783.684441][T26334] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 784.167216][T26351] bond2: Removing last arp target with arp_interval on [ 784.357919][T26359] loop3: detected capacity change from 0 to 1024 [ 784.373306][T26362] loop2: detected capacity change from 0 to 16 [ 784.388101][T26362] erofs (device loop2): mounted with root inode @ nid 36. [ 784.971783][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.095976][T26380] loop3: detected capacity change from 0 to 16 [ 785.116697][T26380] erofs (device loop3): mounted with root inode @ nid 36. [ 785.134173][T26380] erofs (device loop3): not enough plain data on disk @ la 2816 of nid 89 [ 785.148731][T26380] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 785.156416][T26380] erofs (device loop3): not enough plain data on disk @ la 2816 of nid 89 [ 785.166856][T26380] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 785.188985][T26380] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 785.189054][T26380] erofs (device loop3): readahead error at folio 0 @ nid 89 [ 785.189525][T26380] syz.3.8851: attempt to access beyond end of device [ 785.189525][T26380] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 785.190016][T26380] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 785.200961][T26380] erofs (device loop3): read error -117 @ 0 of nid 89 [ 785.201528][ T31] audit: type=1800 audit(2000000330.642:425): pid=26380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8851" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 785.784123][T26409] loop2: detected capacity change from 0 to 512 [ 785.866459][T26409] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 785.879498][T26409] EXT4-fs (loop2): 1 truncate cleaned up [ 785.886593][T26409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.938226][T26409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 786.029838][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.218630][T26424] loop0: detected capacity change from 0 to 512 [ 786.247834][T26424] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 786.257017][T26424] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 786.257155][T26424] System zones: 0-1, 15-15, 18-18, 34-34 [ 786.257454][T26424] EXT4-fs (loop0): orphan cleanup on readonly fs [ 786.257551][T26424] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 786.257650][T26424] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 786.257686][T26424] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 786.310683][T26424] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.8873: bad orphan inode 16 [ 786.310733][T26424] loop0: lost filesystem error report for type 5 error -117 [ 786.320936][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 786.320965][ C1] EXT4-fs (loop0): initial error at time 2000000331: ext4_orphan_get:1429 [ 786.320994][ C1] EXT4-fs (loop0): last error at time 2000000331: ext4_orphan_get:1429 [ 786.350054][T26424] ext4_test_bit(bit=15, block=18) = 1 [ 786.350116][T26424] is_bad_inode(inode)=0 [ 786.350147][T26424] NEXT_ORPHAN(inode)=0 [ 786.350170][T26424] max_ino=32 [ 786.350192][T26424] i_nlink=2 [ 786.406429][T26424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 786.424053][T26424] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 786.501963][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.720288][T26444] loop4: detected capacity change from 0 to 2048 [ 786.774095][T26444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.044471][T26457] loop0: detected capacity change from 0 to 256 [ 787.081022][T26457] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 787.149432][T26457] exFAT-fs (loop0): error, data size is invalid(16781312) [ 787.149481][T26457] exFAT-fs (loop0): Filesystem has been set read-only [ 787.265712][T26466] siw: device registration error -23 [ 787.297102][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.000284][T26492] netlink: 'syz.2.8903': attribute type 15 has an invalid length. [ 788.000333][T26492] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8903'. [ 788.164064][ T31] audit: type=1326 audit(2000000333.410:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26494 comm="syz.4.8908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 788.190453][ T31] audit: type=1326 audit(2000000333.410:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26494 comm="syz.4.8908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 788.230305][ T31] audit: type=1326 audit(2000000333.485:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26494 comm="syz.4.8908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 788.230389][ T31] audit: type=1326 audit(2000000333.485:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26494 comm="syz.4.8908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 788.230493][ T31] audit: type=1326 audit(2000000333.485:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26494 comm="syz.4.8908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 788.381814][T26502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8909'. [ 788.549197][T26512] loop1: detected capacity change from 0 to 8 [ 788.793257][T26478] loop3: detected capacity change from 0 to 32768 [ 788.835662][T26478] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 788.888969][T26478] XFS (loop3): Ending clean mount [ 788.979528][ T5627] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 789.187039][T26544] loop0: detected capacity change from 0 to 8 [ 789.262192][T26546] loop1: detected capacity change from 0 to 256 [ 789.312765][T26548] loop4: detected capacity change from 0 to 512 [ 789.320444][T26548] EXT4-fs: Ignoring removed oldalloc option [ 789.393850][T26548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.401664][T26548] ext4 filesystem being mounted at /1812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.433502][T26546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 789.620971][T26557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8932'. [ 789.683863][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.922000][T26565] loop0: detected capacity change from 0 to 1024 [ 790.195169][T26574] loop1: detected capacity change from 0 to 64 [ 790.364794][T26577] loop4: detected capacity change from 0 to 1024 [ 790.418854][T26577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.674327][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.906327][T26597] loop1: detected capacity change from 0 to 256 [ 790.938035][T26560] loop3: detected capacity change from 0 to 32768 [ 790.980212][T26560] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 791.053631][T26560] XFS (loop3): Ending clean mount [ 791.155170][ T5627] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 791.671047][T26593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8948 (26593) [ 791.754844][T26593] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 791.754903][T26593] BTRFS info (device loop0): using sha256 checksum algorithm [ 791.796915][T26591] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 791.980132][T26591] XFS (loop2): Ending clean mount [ 791.989896][T26593] BTRFS info (device loop0): rebuilding free space tree [ 792.134455][T26593] BTRFS info (device loop0): enabling ssd optimizations [ 792.141682][T26593] BTRFS info (device loop0): using spread ssd allocation scheme [ 792.149617][T26593] BTRFS info (device loop0): turning on async discard [ 792.158007][T26593] BTRFS info (device loop0): enabling free space tree [ 792.165866][T26593] BTRFS info (device loop0): force clearing of disk cache [ 792.271350][ T5621] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 792.381636][T26650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8960'. [ 792.696912][T26656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 792.732095][ T5619] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 793.450064][T26667] xt_hashlimit: max too large, truncated to 1048576 [ 793.458470][T26667] xt_hashlimit: overflow, try lower: 0/0 [ 793.847914][T26669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8969 (26669) [ 793.878520][T26669] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 793.889129][T26669] BTRFS info (device loop4): using sha256 checksum algorithm [ 794.048776][T26669] BTRFS info (device loop4): enabling ssd optimizations [ 794.048822][T26669] BTRFS info (device loop4): turning on async discard [ 794.048858][T26669] BTRFS info (device loop4): enabling free space tree [ 794.101528][T26669] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 794.177793][ T5622] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 794.589032][T26688] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8971'. [ 795.004845][T26702] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8978'. [ 795.032581][T26702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8978'. [ 795.195387][ T31] audit: type=1326 audit(2000000339.986:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.195886][ T31] audit: type=1326 audit(2000000339.996:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.210017][ T31] audit: type=1326 audit(2000000339.996:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.210857][ T31] audit: type=1326 audit(2000000339.996:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.211533][ T31] audit: type=1326 audit(2000000339.996:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.212443][ T31] audit: type=1326 audit(2000000339.996:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.213900][ T31] audit: type=1326 audit(2000000339.996:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.215326][ T31] audit: type=1326 audit(2000000339.996:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.215947][ T31] audit: type=1326 audit(2000000339.996:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.4.8980" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdec979e0d9 code=0x7ffc0000 [ 795.660748][T26716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8985'. [ 796.224020][T26716] bond2: option miimon: invalid value (18446744073709551615) [ 796.224060][T26716] bond2: option miimon: allowed values 0 - 2147483647 [ 796.243713][T26716] bond2 (unregistering): Released all slaves [ 796.309469][T26726] tmpfs: Bad value for 'mpol' [ 796.497112][T26733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8993'. [ 796.497165][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8993'. [ 796.730629][T26740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8995'. [ 796.746915][T26736] set_capacity_and_notify: 3 callbacks suppressed [ 796.746973][T26736] loop0: detected capacity change from 0 to 2048 [ 796.785870][T26736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.518846][T26766] ip6gretap0: entered allmulticast mode [ 797.660481][T26773] loop2: detected capacity change from 0 to 512 [ 797.697357][T26773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.711420][T26773] ext4 filesystem being mounted at /1817/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 797.845039][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.417009][T26806] ipvlan1: left promiscuous mode [ 798.648209][T26817] loop2: detected capacity change from 0 to 64 [ 798.712279][T26821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9034'. [ 798.976160][ T31] audit: type=1326 audit(2000000343.522:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.1.9040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10f9e0d9 code=0x7ffc0000 [ 799.143345][T26841] loop1: detected capacity change from 0 to 512 [ 799.153312][T26843] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 799.688639][T26864] netlink: 'syz.2.9054': attribute type 11 has an invalid length. [ 799.688707][T26864] netlink: 'syz.2.9054': attribute type 11 has an invalid length. [ 799.688724][T26864] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9054'. [ 800.190865][T26887] netlink: 'syz.1.9064': attribute type 10 has an invalid length. [ 800.465662][T26898] loop1: detected capacity change from 0 to 8 [ 800.710620][T26907] loop4: detected capacity change from 0 to 256 [ 800.722349][T26907] exfat: Deprecated parameter 'utf8' [ 800.722463][T26907] exfat: Deprecated parameter 'utf8' [ 800.722484][T26907] exfat: Deprecated parameter 'utf8' [ 800.750264][T26907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7bade8ae, utbl_chksum : 0xe619d30d) [ 800.929581][T21420] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 801.096750][T21420] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 801.108037][T21420] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 801.108121][T21420] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 801.108195][T21420] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 801.108274][T21420] usb 3-1: config 1 interface 0 has no altsetting 0 [ 801.108394][T21420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.175054][T21420] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 801.313007][T26908] loop1: detected capacity change from 0 to 32768 [ 801.328532][T26908] [ 801.328532][T26908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.328532][T26908] [ 801.367451][ T1362] [ 801.367451][ T1362] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.367451][ T1362] [ 801.367508][ T1362] [ 801.367508][ T1362] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.367508][ T1362] [ 801.396980][T26926] loop4: detected capacity change from 0 to 1024 [ 801.407168][ T5620] [ 801.407168][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.407168][ T5620] [ 801.418822][ T5620] [ 801.418822][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.418822][ T5620] [ 801.433440][T26926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 801.433548][T26926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 801.477259][ T120] ================================================================== [ 801.477279][ T120] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 801.477321][ T120] Read of size 1 at addr ffff8880366750d8 by task jfsCommit/120 [ 801.477339][ T120] [ 801.477351][ T120] CPU: 1 UID: 0 PID: 120 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 801.477374][ T120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 801.477388][ T120] Call Trace: [ 801.477397][ T120] [ 801.477406][ T120] dump_stack_lvl+0xe8/0x150 [ 801.477440][ T120] print_address_description+0x55/0x1e0 [ 801.477470][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 801.477500][ T120] print_report+0x58/0x70 [ 801.477530][ T120] kasan_report+0x117/0x150 [ 801.477563][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 801.477599][ T120] __kasan_check_byte+0x2a/0x40 [ 801.477630][ T120] lock_acquire+0x7d/0x350 [ 801.477655][ T120] ? __pfx___mutex_trylock_common+0x10/0x10 [ 801.477685][ T120] ? rcu_is_watching+0x16/0xb0 [ 801.477713][ T120] _raw_spin_lock_irqsave+0x40/0x60 [ 801.477745][ T120] ? __mutex_lock+0x3c6/0x1550 [ 801.477768][ T120] __mutex_lock+0x3c6/0x1550 [ 801.477791][ T120] ? lock_acquire+0x115/0x350 [ 801.477817][ T120] ? jfs_syncpt+0x25/0x90 [ 801.477854][ T120] ? __pfx___mutex_lock+0x10/0x10 [ 801.477895][ T120] jfs_syncpt+0x25/0x90 [ 801.477928][ T120] txEnd+0x2e5/0x530 [ 801.477952][ T120] jfs_lazycommit+0x5d6/0xac0 [ 801.477978][ T120] ? __pfx_jfs_lazycommit+0x10/0x10 [ 801.478003][ T120] ? __pfx_default_wake_function+0x10/0x10 [ 801.478034][ T120] ? __kthread_parkme+0x71/0x1f0 [ 801.478066][ T120] ? __kthread_parkme+0x199/0x1f0 [ 801.478102][ T120] kthread+0x38b/0x480 [ 801.478124][ T120] ? __pfx_jfs_lazycommit+0x10/0x10 [ 801.478147][ T120] ? __pfx_kthread+0x10/0x10 [ 801.478169][ T120] ret_from_fork+0x514/0xb70 [ 801.478206][ T120] ? __pfx_ret_from_fork+0x10/0x10 [ 801.478239][ T120] ? __switch_to+0xc89/0x1420 [ 801.478271][ T120] ? __pfx_kthread+0x10/0x10 [ 801.478293][ T120] ret_from_fork_asm+0x1a/0x30 [ 801.478335][ T120] [ 801.478343][ T120] [ 801.478350][ T120] Allocated by task 26908: [ 801.478361][ T120] kasan_save_track+0x3e/0x80 [ 801.478388][ T120] __kasan_kmalloc+0x93/0xb0 [ 801.478416][ T120] __kmalloc_cache_noprof+0x321/0x600 [ 801.478441][ T120] lmLogOpen+0x2d1/0xf90 [ 801.478471][ T120] jfs_mount_rw+0xf3/0x670 [ 801.478502][ T120] jfs_fill_super+0x769/0xda0 [ 801.478525][ T120] get_tree_bdev_flags+0x430/0x4f0 [ 801.478549][ T120] vfs_get_tree+0x92/0x2a0 [ 801.478572][ T120] do_new_mount+0x319/0xdc0 [ 801.478603][ T120] __se_sys_mount+0x31d/0x420 [ 801.478622][ T120] do_syscall_64+0x166/0x520 [ 801.478642][ T120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.478664][ T120] [ 801.478670][ T120] Freed by task 5620: [ 801.478681][ T120] kasan_save_track+0x3e/0x80 [ 801.478706][ T120] kasan_save_free_info+0x40/0x50 [ 801.478727][ T120] __kasan_slab_free+0x5c/0x80 [ 801.478754][ T120] kfree+0x1c5/0x650 [ 801.478773][ T120] lmLogClose+0x296/0x530 [ 801.478791][ T120] jfs_umount+0x2da/0x3b0 [ 801.478820][ T120] jfs_put_super+0x8c/0x190 [ 801.478845][ T120] generic_shutdown_super+0x13d/0x2d0 [ 801.478872][ T120] kill_block_super+0x44/0xa0 [ 801.478896][ T120] deactivate_locked_super+0xbc/0x110 [ 801.478928][ T120] cleanup_mnt+0x3d3/0x460 [ 801.478951][ T120] task_work_run+0x1d9/0x270 [ 801.478970][ T120] exit_to_user_mode_loop+0x204/0x770 [ 801.478990][ T120] do_syscall_64+0x328/0x520 [ 801.479010][ T120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.479032][ T120] [ 801.479038][ T120] The buggy address belongs to the object at ffff888036675000 [ 801.479038][ T120] which belongs to the cache kmalloc-1k of size 1024 [ 801.479057][ T120] The buggy address is located 216 bytes inside of [ 801.479057][ T120] freed 1024-byte region [ffff888036675000, ffff888036675400) [ 801.479080][ T120] [ 801.479086][ T120] The buggy address belongs to the physical page: [ 801.479098][ T120] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36670 [ 801.479120][ T120] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 801.479139][ T120] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 801.479159][ T120] page_type: f5(slab) [ 801.479179][ T120] raw: 00fff00000000040 ffff88801b005dc0 dead000000000100 dead000000000122 [ 801.479198][ T120] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 801.479219][ T120] head: 00fff00000000040 ffff88801b005dc0 dead000000000100 dead000000000122 [ 801.479238][ T120] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 801.479257][ T120] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 801.479276][ T120] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 801.479288][ T120] page dumped because: kasan: bad access detected [ 801.479299][ T120] page_owner tracks the page as allocated [ 801.479308][ T120] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28398255479 [ 801.479342][ T120] post_alloc_hook+0x1f9/0x250 [ 801.479364][ T120] get_page_from_freelist+0x2209/0x2280 [ 801.479391][ T120] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 801.479419][ T120] allocate_slab+0x7d/0x620 [ 801.479450][ T120] refill_objects+0x2d5/0x350 [ 801.479467][ T120] __pcs_replace_empty_main+0x2c8/0x6c0 [ 801.479498][ T120] __kvmalloc_node_noprof+0x63c/0x820 [ 801.479525][ T120] ext4_init_orphan_info+0x364/0xda0 [ 801.479592][ T120] ext4_fill_super+0x5afd/0x6610 [ 801.479616][ T120] get_tree_bdev_flags+0x430/0x4f0 [ 801.479639][ T120] vfs_get_tree+0x92/0x2a0 [ 801.479661][ T120] do_new_mount+0x319/0xdc0 [ 801.479692][ T120] init_mount+0xc3/0x110 [ 801.479845][ T120] do_mount_root+0xf2/0x280 [ 801.479936][ T120] mount_root_generic+0x1ef/0x4c0 [ 801.479966][ T120] prepare_namespace+0x66/0xc0 [ 801.479996][ T120] page_owner free stack trace missing [ 801.480005][ T120] [ 801.480010][ T120] Memory state around the buggy address: [ 801.480023][ T120] ffff888036674f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 801.480038][ T120] ffff888036675000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 801.480054][ T120] >ffff888036675080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 801.480065][ T120] ^ [ 801.480079][ T120] ffff888036675100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 801.480093][ T120] ffff888036675180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 801.480105][ T120] ================================================================== [ 801.480129][ T120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 802.132956][ T120] CPU: 1 UID: 0 PID: 120 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 802.142090][ T120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.152163][ T120] Call Trace: [ 802.155464][ T120] [ 802.158413][ T120] vpanic+0x56d/0xa60 [ 802.162423][ T120] ? __pfx_vpanic+0x10/0x10 [ 802.166960][ T120] panic+0xc5/0xd0 [ 802.170710][ T120] ? __pfx_panic+0x10/0x10 [ 802.175160][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.180560][ T120] ? rcu_is_watching+0x16/0xb0 [ 802.185356][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.190759][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.196159][ T120] check_panic_on_warn+0x89/0xb0 [ 802.201117][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.206518][ T120] end_report+0x73/0x170 [ 802.210799][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.216192][ T120] kasan_report+0x128/0x150 [ 802.220727][ T120] ? _raw_spin_lock_irqsave+0x40/0x60 [ 802.226158][ T120] __kasan_check_byte+0x2a/0x40 [ 802.231040][ T120] lock_acquire+0x7d/0x350 [ 802.235485][ T120] ? __pfx___mutex_trylock_common+0x10/0x10 [ 802.241403][ T120] ? rcu_is_watching+0x16/0xb0 [ 802.246196][ T120] _raw_spin_lock_irqsave+0x40/0x60 [ 802.251420][ T120] ? __mutex_lock+0x3c6/0x1550 [ 802.256238][ T120] __mutex_lock+0x3c6/0x1550 [ 802.260859][ T120] ? lock_acquire+0x115/0x350 [ 802.265584][ T120] ? jfs_syncpt+0x25/0x90 [ 802.269943][ T120] ? __pfx___mutex_lock+0x10/0x10 [ 802.275025][ T120] jfs_syncpt+0x25/0x90 [ 802.279236][ T120] txEnd+0x2e5/0x530 [ 802.283151][ T120] jfs_lazycommit+0x5d6/0xac0 [ 802.287857][ T120] ? __pfx_jfs_lazycommit+0x10/0x10 [ 802.293076][ T120] ? __pfx_default_wake_function+0x10/0x10 [ 802.298910][ T120] ? __kthread_parkme+0x71/0x1f0 [ 802.303893][ T120] ? __kthread_parkme+0x199/0x1f0 [ 802.308944][ T120] kthread+0x38b/0x480 [ 802.313027][ T120] ? __pfx_jfs_lazycommit+0x10/0x10 [ 802.318238][ T120] ? __pfx_kthread+0x10/0x10 [ 802.322848][ T120] ret_from_fork+0x514/0xb70 [ 802.327485][ T120] ? __pfx_ret_from_fork+0x10/0x10 [ 802.332622][ T120] ? __switch_to+0xc89/0x1420 [ 802.337326][ T120] ? __pfx_kthread+0x10/0x10 [ 802.341943][ T120] ret_from_fork_asm+0x1a/0x30 [ 802.346750][ T120] [ 802.350387][ T120] Kernel Offset: disabled [ 802.354737][ T120] Rebooting in 86400 seconds..