last executing test programs: 9m25.445876999s ago: executing program 3 (id=75): setresuid(0xffffffffffffffff, 0x0, 0xee01) 9m25.283132788s ago: executing program 3 (id=78): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200001302000000040000000000000000000000000000800000000000000000000000005f00c7f665"], 0x0, 0x42}, 0x28) 9m25.165031911s ago: executing program 3 (id=81): syz_usb_connect(0x2, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x56, 0x62, 0x69, 0x8, 0x5f9, 0xffff, 0xe6f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0xd, 0x20, 0xb, "", [{{0x9, 0x4, 0x68, 0x9, 0x1, 0x31, 0x94, 0xdc, 0x5, [], [{{0x9, 0x5, 0x1f, 0x2, 0x20, 0xf, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 9m23.731171374s ago: executing program 3 (id=104): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000001000850000007a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) 9m23.671850149s ago: executing program 3 (id=106): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1e0000000000000000010000f8ffffff44"], 0x48) 9m19.794363025s ago: executing program 3 (id=137): migrate_pages(0x0, 0x0, &(0x7f0000000000)=0xff, 0x0) 9m19.382256705s ago: executing program 32 (id=137): migrate_pages(0x0, 0x0, &(0x7f0000000000)=0xff, 0x0) 2.867176757s ago: executing program 4 (id=7333): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf2508"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) 2.728622168s ago: executing program 4 (id=7336): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="021301070e0000002bb47000fcdbdf250400040006000000020000000002000000000000000000000000000000000000030002"], 0x70}}, 0x40) 2.603737345s ago: executing program 4 (id=7339): syz_mount_image$ocfs2(&(0x7f0000004540), &(0x7f0000004580)='./file0\x00', 0x0, &(0x7f00000045c0)={[{@heartbeat_none}]}, 0x1, 0x451d, &(0x7f0000004600)="$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") syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030b40f61302c696f636861727365743d6b6f69382d752c6769643d89c5dc667a29fb343dce73a593b64536feaaa87c28ae88690ad068162480e5cda959e43d14a044922dbb0a6a411edbf4e95752ca5580e25aac8fe132f57ce3c30e8888223c33e32f5112b19b33bb404ef8a8f6a1302b350b5203e36ab50cdd674803d89dd44c36236c8b7f8e22d3b9a8873e77a79189999a06179271eef7389a41328cb82d48462270238cd5b34e0e7b4a1b97e58fd052e60b632e0690184bd6e2c7ca57e670cbd0ec42a55e7e", @ANYRESHEX=0x0, @ANYBLOB=',codepage=iso8859-1,\x00'], 0x9, 0x344, &(0x7f0000000980)="$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") 2.319755815s ago: executing program 1 (id=7345): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 2.319559143s ago: executing program 2 (id=7346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x1, 0x70bd29, 0x80000004, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.143364559s ago: executing program 1 (id=7348): syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) 2.087627s ago: executing program 2 (id=7349): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) 1.919356872s ago: executing program 2 (id=7352): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94) 1.600453415s ago: executing program 2 (id=7356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000020400008500000018000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800005eb7030000f4e60000850000007b00000095"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 1.507858573s ago: executing program 4 (id=7357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 1.387744122s ago: executing program 0 (id=7359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.16071308s ago: executing program 0 (id=7361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac08}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) 1.082626282s ago: executing program 5 (id=7362): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r0, 0x40049409, r0) 938.327701ms ago: executing program 5 (id=7363): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xc, &(0x7f0000001980)=ANY=[@ANYBLOB="6461783d6e657665722c63616368655f73747261746567793d64697361626c65642c63616368655f73747261746567793d7265616461686561642c61636c2c757365725f78617474722c63616368655f73747261746567793d64697361626c65642c00547b83cb08d660ef166f38bd557b5c8c67014aac67f2ab79a132c1b9d1c41ec61d6e2cb8b79b26446f39ce9bc0e213fd1a719346"], 0x3, 0x1c2, &(0x7f00000009c0)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) 839.662322ms ago: executing program 0 (id=7364): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x6, @raw_data="dea892b0f4b5675fb613195c15aa35b3ab493286eff600100000ff6ed436893192a5f38767c65368a67812d42855c6be874c90377c100f8c8f0f9d5043af23cd7d8263eeb18c3a8abec6f3a85b45cd44c3cd424a0b2513b8a03bb3dfe249e68563c86428979fd29f670500b72194959957348f42437b3d2f3b347f601f316d306a08c29fdae87c9c95603031c15d77c616b059d48b86a4378c4ee19ce5731554ba298d672ee4f5d230d983ac00"}) 671.51808ms ago: executing program 1 (id=7365): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102, 0x482}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 662.250208ms ago: executing program 1 (id=7366): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 654.386175ms ago: executing program 5 (id=7367): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000004c40)=ANY=[@ANYBLOB="7c23000078000106000000000000000007"], 0x237c}], 0x1}, 0x0) 533.885693ms ago: executing program 0 (id=7368): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x9, 0x0, 0x0, 0x0) 395.239588ms ago: executing program 2 (id=7369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044080}, 0x810) 395.031801ms ago: executing program 1 (id=7370): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x0, 0x6, 0x3007, 0x1}) 334.13932ms ago: executing program 0 (id=7371): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d30000020010680"], 0x184}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) 298.663196ms ago: executing program 5 (id=7372): r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 254.755471ms ago: executing program 4 (id=7373): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0) 186.150373ms ago: executing program 5 (id=7374): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 183.132969ms ago: executing program 1 (id=7375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xec}}, 0x0) 143.774275ms ago: executing program 2 (id=7376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, 0x0) 117.155572ms ago: executing program 0 (id=7377): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @multicast1, 0x4e22, 0x3, 'lc\x00', 0x0, 0x9, 0x15}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) 116.050346ms ago: executing program 4 (id=7378): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1f, &(0x7f0000000680), 0x0, 0x48d, &(0x7f00000001c0)="$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") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 0s ago: executing program 5 (id=7379): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) kernel console output (not intermixed with test programs): .974757][ T5681] ? rcu_is_watching+0x15/0xb0 [ 575.974783][ T5681] __submit_merged_write_cond+0x3c9/0x4e0 [ 575.974812][ T5681] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 575.974855][ T5681] f2fs_write_data_pages+0x2a27/0x36f0 [ 575.974907][ T5681] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 575.974951][ T5681] ? rcu_is_watching+0x15/0xb0 [ 575.974992][ T5681] ? __pfx_clockevents_program_event+0x10/0x10 [ 575.975028][ T5681] ? __pfx___schedule+0x10/0x10 [ 575.975046][ T5681] ? irqentry_exit+0x218/0x8f0 [ 575.975079][ T5681] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.975107][ T5681] ? preempt_schedule_common+0x82/0xd0 [ 575.975134][ T5681] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 575.975158][ T5681] do_writepages+0x338/0x560 [ 575.975190][ T5681] ? do_raw_spin_unlock+0xf5/0x210 [ 575.975215][ T5681] filemap_fdatawrite+0x1e9/0x2f0 [ 575.975241][ T5681] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 575.975306][ T5681] ? do_raw_spin_unlock+0xf5/0x210 [ 575.975332][ T5681] f2fs_sync_dirty_inodes+0x30e/0x830 [ 575.975412][ T5681] f2fs_write_checkpoint+0xa3d/0x2710 [ 575.975433][ T5681] ? __lock_acquire+0x6df/0x2e50 [ 575.975488][ T5681] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 575.975567][ T5681] kill_f2fs_super+0x2dd/0x700 [ 575.975599][ T5681] ? __pfx_kill_f2fs_super+0x10/0x10 [ 575.975634][ T5681] ? call_rcu+0x64b/0x8b0 [ 575.975652][ T5681] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.975687][ T5681] deactivate_locked_super+0xbc/0x110 [ 575.975714][ T5681] cleanup_mnt+0x3d3/0x460 [ 575.975737][ T5681] task_work_run+0x1d9/0x270 [ 575.975760][ T5681] ? __pfx_task_work_run+0x10/0x10 [ 575.975788][ T5681] exit_to_user_mode_loop+0x1fa/0x730 [ 575.975811][ T5681] ? rcu_is_watching+0x15/0xb0 [ 575.975834][ T5681] do_syscall_64+0x328/0x510 [ 575.975855][ T5681] ? trace_irq_disable+0x3b/0x140 [ 575.975871][ T5681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.975889][ T5681] ? clear_bhb_loop+0x40/0x90 [ 575.975909][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.975933][ T5681] RIP: 0033:0x7f7b51f9f317 [ 575.975952][ T5681] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 575.975967][ T5681] RSP: 002b:00007ffc90604888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 575.975989][ T5681] RAX: 0000000000000000 RBX: 00007f7b52034474 RCX: 00007f7b51f9f317 [ 575.976001][ T5681] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc90604940 [ 575.976013][ T5681] RBP: 00007ffc90604940 R08: 00007ffc90605940 R09: 00000000ffffffff [ 575.976025][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc906059d0 [ 575.976037][ T5681] R13: 00007f7b52034474 R14: 00000000000851f0 R15: 00007ffc90605a10 [ 575.976068][ T5681] [ 576.090576][ T5681] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 576.649760][ T5783] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 576.736371][T19830] loop0: detected capacity change from 0 to 256 [ 576.744050][T19830] exfat: Deprecated parameter 'namecase' [ 576.751159][T19830] exfat: Deprecated parameter 'namecase' [ 576.806012][T19830] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb6478927, utbl_chksum : 0xe619d30d) [ 576.823080][ T5783] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 576.824220][ T5783] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 576.824283][ T5783] usb 3-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 576.824303][ T5783] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 576.827177][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.827206][ T5783] usb 3-1: Product: syz [ 576.827219][ T5783] usb 3-1: Manufacturer: syz [ 576.827233][ T5783] usb 3-1: SerialNumber: syz [ 576.848971][ T5783] usb-storage 3-1:1.0: USB Mass Storage device detected [ 576.861662][ T5783] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 576.908416][ T5783] scsi host1: usb-storage 3-1:1.0 [ 577.126226][ T5783] usb 3-1: USB disconnect, device number 120 [ 577.190986][T19849] kernel read not supported for file /!selinuxw (pid: 19849 comm: syz.0.6078) [ 577.275585][T19854] loop5: detected capacity change from 0 to 64 [ 577.349340][T19854] hfs: cannot create new inode: folder count exceeds limit [ 577.508903][T19863] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 577.615297][T19869] program syz.5.6088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.636328][T19868] loop4: detected capacity change from 0 to 1024 [ 577.649143][T19868] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 577.699285][T19868] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.6091: lblock 1 mapped to illegal pblock 1 (length 1) [ 577.699349][T19868] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.713730][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 577.713757][ C0] EXT4-fs (loop4): initial error at time 1786099986: ext4_map_blocks:832: inode 3: block 1 [ 577.713789][ C0] EXT4-fs (loop4): last error at time 1786099986: ext4_map_blocks:832: inode 3: block 1 [ 577.715922][T19868] EXT4-fs (loop4): Remounting filesystem read-only [ 577.715947][T19868] __quota_error: 6 callbacks suppressed [ 577.715960][T19868] Quota error (device loop4): write_blk: dquota write failed [ 577.715997][T19868] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 577.716160][T19868] EXT4-fs (loop4): 1 orphan inode deleted [ 577.717946][T19868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.831687][T19876] netlink: zone id is out of range [ 577.839053][T19868] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 577.929020][T19879] loop2: detected capacity change from 0 to 4096 [ 577.955236][T19879] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 577.968752][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.072702][T19879] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 578.073306][T19879] ntfs3(loop2): Failed to load $Extend (-22). [ 578.073329][T19879] ntfs3(loop2): Failed to initialize $Extend. [ 578.073773][T19879] ntfs3(loop2): ino=5, mi_enum_attr [ 578.118945][T19879] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 578.557615][T19904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6105'. [ 578.867437][T19919] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 578.875894][T19919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 579.055327][T19931] No such timeout policy "syz1" [ 579.085936][T19933] usb usb1: usbfs: process 19933 (syz.0.6117) did not claim interface 6 before use [ 579.247350][T19939] loop4: detected capacity change from 0 to 512 [ 579.307999][T19939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6121: bg 0: block 169: padding at end of block bitmap is not set [ 579.308089][T19939] loop4: lost filesystem error report for type 5 error -117 [ 579.308762][T19939] Quota error (device loop4): write_blk: dquota write failed [ 579.308887][T19939] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 579.308926][T19939] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.6121: Failed to acquire dquot type 0 [ 579.308945][T19939] loop4: lost filesystem error report for type 5 error -117 [ 579.316639][T19939] EXT4-fs (loop4): 1 truncate cleaned up [ 579.318368][T19939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.318477][T19939] ext4 filesystem being mounted at /1204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.362142][T19939] Quota error (device loop4): write_blk: dquota write failed [ 579.362269][T19939] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 579.362310][T19939] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.6121: Failed to acquire dquot type 0 [ 579.627732][T19957] loop5: detected capacity change from 0 to 256 [ 579.635411][T19957] exfat: Deprecated parameter 'utf8' [ 579.641006][T19957] exfat: Deprecated parameter 'namecase' [ 579.650022][T19957] exfat: Deprecated parameter 'namecase' [ 579.673757][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.719219][T19957] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 579.810452][T19959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6128'. [ 580.357457][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6141'. [ 580.368528][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6141'. [ 580.377998][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6141'. [ 580.531743][T19987] xfrm0: entered allmulticast mode [ 580.549582][T19989] netlink: 2476 bytes leftover after parsing attributes in process `syz.0.6143'. [ 580.570039][T19987] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 580.619855][T19966] loop4: detected capacity change from 0 to 32768 [ 581.005506][T19979] loop5: detected capacity change from 0 to 32768 [ 581.021515][T20001] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 581.162978][ T5876] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 581.174883][T20003] bond2: option updelay: invalid value (18446744071562067968) [ 581.174939][T20003] bond2: option updelay: allowed values 0 - 2147483647 [ 581.266245][T20003] bond2 (unregistering): Released all slaves [ 581.335886][ T5876] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 581.336990][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.337015][ T5876] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 581.337034][ T5876] usb 2-1: config 1 has no interface number 0 [ 581.337082][ T5876] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 581.339366][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.339391][ T5876] usb 2-1: Product: syz [ 581.339405][ T5876] usb 2-1: Manufacturer: syz [ 581.339418][ T5876] usb 2-1: SerialNumber: syz [ 581.356992][T19979] ialloc: diAlloc returned -5! [ 581.653983][ T5876] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 581.854183][ T5876] usb 2-1: USB disconnect, device number 103 [ 581.972484][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.989903][T20022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6162'. [ 581.989941][T20022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6162'. [ 582.030573][T20022] geneve2: entered promiscuous mode [ 582.161185][T20033] loop0: detected capacity change from 0 to 512 [ 582.172407][T20033] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.6163: inode #2147418112: comm syz.0.6163: iget: illegal inode # [ 582.187853][T20033] loop0: lost filesystem error report for type 5 error -117 [ 582.189489][T20033] EXT4-fs (loop0): no journal found [ 582.202299][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 582.202322][ C0] EXT4-fs (loop0): initial error at time 1786099990: ext4_get_journal_inode:5927 [ 582.202346][ C0] EXT4-fs (loop0): last error at time 1786099990: ext4_get_journal_inode:5927 [ 582.227673][T20033] EXT4-fs (loop0): can't get journal size [ 582.246677][T20033] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 582.247192][T20033] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 582.253287][T20033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.414944][ T5876] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 582.435168][ T5680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.474401][T20044] loop1: detected capacity change from 0 to 256 [ 582.583709][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 582.584542][ T5876] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 582.587533][ T5876] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.587559][ T5876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 582.593298][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.593323][ T5876] usb 6-1: Product: syz [ 582.593336][ T5876] usb 6-1: Manufacturer: syz [ 582.593348][ T5876] usb 6-1: SerialNumber: syz [ 582.598799][ T5876] usb 6-1: config 0 descriptor?? [ 582.622186][ T5876] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 582.638992][ T5847] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 582.806779][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 582.812952][ T5847] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 582.828715][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.837703][ T5847] usb 5-1: Product: syz [ 582.842163][ T5847] usb 5-1: Manufacturer: syz [ 582.846888][ T5847] usb 5-1: SerialNumber: syz [ 582.855103][ T5847] usb 5-1: config 0 descriptor?? [ 582.861438][ T5876] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 582.861685][ T5876] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 582.869522][ T5876] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 583.082827][ T5847] usb 5-1: ignoring: not an USB2CAN converter [ 583.087238][ T25] usb 6-1: USB disconnect, device number 116 [ 583.249682][T20035] loop2: detected capacity change from 0 to 32768 [ 583.288268][T20035] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 583.304381][ T5847] usb 5-1: USB disconnect, device number 123 [ 583.378909][T20035] XFS (loop2): Ending clean mount [ 583.439417][ T5682] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 583.727861][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6188'. [ 584.153325][T20102] netlink: 'syz.0.6195': attribute type 1 has an invalid length. [ 584.161603][T20102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6195'. [ 584.588321][ T5783] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 584.662077][T20118] netlink: 'syz.0.6203': attribute type 1 has an invalid length. [ 584.744578][ T5783] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 584.745595][ T5783] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 584.745618][ T5783] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 584.745633][ T5783] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 584.745650][ T5783] usb 5-1: config 220 has no interface number 2 [ 584.745704][ T5783] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 584.745726][ T5783] usb 5-1: config 220 interface 0 has no altsetting 0 [ 584.745741][ T5783] usb 5-1: config 220 interface 76 has no altsetting 0 [ 584.745757][ T5783] usb 5-1: config 220 interface 1 has no altsetting 0 [ 584.747983][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.748004][ T5783] usb 5-1: Product: syz [ 584.748017][ T5783] usb 5-1: Manufacturer: syz [ 584.748030][ T5783] usb 5-1: SerialNumber: syz [ 584.990580][ T5783] usb 5-1: selecting invalid altsetting 0 [ 585.012131][ T5783] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 585.012198][ T5783] uvcvideo 5-1:220.0: No valid video chain found. [ 585.045228][ T5783] usb 5-1: selecting invalid altsetting 0 [ 585.045304][ T5783] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 585.098889][ T5783] usb 5-1: USB disconnect, device number 124 [ 585.392063][T20133] trusted_key: encrypted_key: insufficient parameters specified [ 585.502106][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6211'. [ 585.584195][ T5681] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 585.584256][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 585.584274][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.584284][ T5681] Call Trace: [ 585.584291][ T5681] [ 585.584297][ T5681] dump_stack_lvl+0xe8/0x150 [ 585.584324][ T5681] dump_header+0xd3/0x4b0 [ 585.584357][ T5681] oom_kill_process+0x3ab/0x9e0 [ 585.584386][ T5681] out_of_memory+0x1064/0x1480 [ 585.584408][ T5681] ? try_charge_memcg+0xbff/0x15a0 [ 585.584444][ T5681] ? __pfx_out_of_memory+0x10/0x10 [ 585.584463][ T5681] ? do_raw_spin_unlock+0xf5/0x210 [ 585.584490][ T5681] try_charge_memcg+0xca9/0x15a0 [ 585.584530][ T5681] ? __pfx_try_charge_memcg+0x10/0x10 [ 585.584571][ T5681] ? charge_memcg+0x20/0x2b0 [ 585.584596][ T5681] charge_memcg+0x19c/0x2b0 [ 585.584618][ T5681] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 585.584640][ T5681] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 585.584664][ T5681] swap_cache_alloc_folio+0x4de/0x990 [ 585.584696][ T5681] swap_cache_read_folio+0x44/0x120 [ 585.584717][ T5681] swap_cluster_readahead+0x392/0x630 [ 585.584741][ T5681] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 585.584782][ T5681] swapin_readahead+0x1a3/0xc50 [ 585.584812][ T5681] ? __pfx_swapin_readahead+0x10/0x10 [ 585.584834][ T5681] ? swap_table_get+0x1e/0x260 [ 585.584858][ T5681] ? swap_table_get+0x1e/0x260 [ 585.584878][ T5681] ? swap_table_get+0x1e/0x260 [ 585.584902][ T5681] ? swap_table_get+0x216/0x260 [ 585.584927][ T5681] ? swap_cache_get_folio+0x2e7/0x2f0 [ 585.584957][ T5681] do_swap_page+0x41d/0x4cd0 [ 585.584985][ T5681] ? lock_acquire+0x115/0x350 [ 585.585019][ T5681] ? do_swap_page+0x120/0x4cd0 [ 585.585042][ T5681] ? __pfx_do_swap_page+0x10/0x10 [ 585.585062][ T5681] ? __pte_offset_map+0x1ae/0x240 [ 585.585088][ T5681] ? pte_offset_map_rw_nolock+0xea/0x160 [ 585.585114][ T5681] handle_mm_fault+0x1332/0x3720 [ 585.585149][ T5681] ? handle_mm_fault+0xf4/0x3720 [ 585.585181][ T5681] ? __pfx_handle_mm_fault+0x10/0x10 [ 585.585202][ T5681] ? lock_vma_under_rcu+0x45a/0x500 [ 585.585245][ T5681] do_user_addr_fault+0xa4d/0x1340 [ 585.585317][ T5681] ? trace_page_fault_user+0x84/0x1e0 [ 585.585349][ T5681] exc_page_fault+0x6a/0xc0 [ 585.585372][ T5681] asm_exc_page_fault+0x26/0x30 [ 585.585390][ T5681] RIP: 0033:0x7f7b51f5e90e [ 585.585409][ T5681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.585424][ T5681] RSP: 002b:00007ffc906058f8 EFLAGS: 00010246 [ 585.585441][ T5681] RAX: 0000000000000000 RBX: 0000555579d18500 RCX: 00007f7b51f5e90e [ 585.585453][ T5681] RDX: 00007ffc90605950 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.585465][ T5681] RBP: 00007ffc906059bc R08: 0000000000000000 R09: 0000000000000000 [ 585.585477][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 585.585487][ T5681] R13: 00000000000927c0 R14: 0000000000086fec R15: 00007ffc90605a10 [ 585.585517][ T5681] [ 585.620038][ T5681] memory: usage 307200kB, limit 307200kB, failcnt 507 [ 585.620059][ T5681] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 585.620071][ T5681] kmem: usage 306940kB, limit 9007199254740988kB, failcnt 0 [ 585.620082][ T5681] Memory cgroup stats for /syz1: [ 585.620197][ T5681] cache 0 [ 585.620205][ T5681] rss 0 [ 585.620211][ T5681] rss_huge 0 [ 585.620217][ T5681] shmem 0 [ 585.620223][ T5681] mapped_file 0 [ 585.620229][ T5681] dirty 0 [ 585.620235][ T5681] writeback 0 [ 585.620241][ T5681] workingset_refault_anon 12 [ 585.620248][ T5681] workingset_refault_file 13 [ 585.620255][ T5681] swap 200704 [ 585.620260][ T5681] swapcached 393216 [ 585.620267][ T5681] pgpgin 252597 [ 585.620273][ T5681] pgpgout 252532 [ 585.620279][ T5681] pgfault 352990 [ 585.620284][ T5681] pgmajfault 9 [ 585.620290][ T5681] inactive_anon 0 [ 585.620295][ T5681] active_anon 0 [ 585.620300][ T5681] inactive_file 139264 [ 585.620305][ T5681] active_file 110592 [ 585.620311][ T5681] unevictable 0 [ 585.620316][ T5681] hierarchical_memory_limit 314572800 [ 585.620322][ T5681] hierarchical_memsw_limit 9223372036854771712 [ 585.620337][ T5681] total_cache 0 [ 585.620342][ T5681] total_rss 0 [ 585.620348][ T5681] total_rss_huge 0 [ 585.620354][ T5681] total_shmem 0 [ 585.620360][ T5681] total_mapped_file 0 [ 585.620365][ T5681] total_dirty 0 [ 585.620370][ T5681] total_writeback 0 [ 585.620376][ T5681] total_workingset_refault_anon 12 [ 585.620382][ T5681] total_workingset_refault_file 13 [ 585.620388][ T5681] total_swap 200704 [ 585.620394][ T5681] total_swapcached 393216 [ 585.620400][ T5681] total_pgpgin 252597 [ 585.620406][ T5681] total_pgpgout 252532 [ 585.620412][ T5681] total_pgfault 352990 [ 585.620418][ T5681] total_pgmajfault 9 [ 585.620424][ T5681] total_inactive_anon 0 [ 585.620430][ T5681] total_active_anon 0 [ 585.620437][ T5681] total_inactive_file 139264 [ 585.620442][ T5681] total_active_file 110592 [ 585.620449][ T5681] total_unevictable 0 [ 585.620455][ T5681] anon_cost 0 [ 585.620462][ T5681] file_cost 0 [ 585.620469][ T5681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6194,pid=20097,uid=0 [ 585.620560][ T5681] Memory cgroup out of memory: Killed process 20097 (syz.1.6194) total-vm:102252kB, anon-rss:1252kB, file-rss:22032kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 585.962257][T20146] comedi comedi2: rti800: I/O base address not correctly aligned [ 586.294208][T20149] loop2: detected capacity change from 0 to 256 [ 586.463506][T20149] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 586.630450][T20153] loop5: detected capacity change from 0 to 4096 [ 586.650031][T20153] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 586.694282][T20153] ntfs3(loop5): ino=0, mi_enum_attr [ 586.703030][T20153] ntfs3(loop5): Failed to load $MFT. [ 587.392494][ T5803] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 587.554288][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 587.556618][ T5803] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 587.557617][ T5803] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 587.557637][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.557655][ T5803] usb 5-1: config 0 has no interface number 0 [ 587.557690][ T5803] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.560117][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.560139][ T5803] usb 5-1: Product: syz [ 587.560152][ T5803] usb 5-1: Manufacturer: syz [ 587.560165][ T5803] usb 5-1: SerialNumber: syz [ 587.611868][ T5803] usb 5-1: config 0 descriptor?? [ 587.641156][ T5803] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 587.641272][ T5803] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 587.732687][T20156] loop0: detected capacity change from 0 to 32768 [ 587.756615][ T5783] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 587.827852][T20156] dmapctl: leaf value 127 too large at index 344 [ 587.855713][T20156] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 587.855713][T20156] [ 587.875474][ T5803] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 587.883724][T20156] ERROR: (device loop0): remounting filesystem as read-only [ 587.931757][ T5783] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 587.946710][ T5783] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 587.965639][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.965682][ T5783] usb 3-1: Product: syz [ 587.965711][ T5783] usb 3-1: Manufacturer: syz [ 587.965729][ T5783] usb 3-1: SerialNumber: syz [ 588.085479][ T5803] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 588.095695][ T5803] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 588.114927][ T5803] usb 5-1: USB disconnect, device number 125 [ 588.115823][ T5803] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 588.239365][ T5783] snd-ua101 3-1:1.1: sample format descriptor not found [ 588.259763][ T5783] snd-ua101 3-1:1.0: invalid num_altsetting [ 588.282511][ T5783] usb 3-1: USB disconnect, device number 121 [ 588.629588][T20202] tmpfs: Bad value for 'mpol' [ 588.853182][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6244'. [ 588.864799][ T5683] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 589.021157][T20219] loop2: detected capacity change from 0 to 128 [ 589.221863][T20227] netlink: 'syz.0.6253': attribute type 1 has an invalid length. [ 589.225652][T20222] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.256119][ T5876] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 589.424558][ T5876] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 589.437540][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.437585][ T5876] usb 6-1: Product: syz [ 589.437619][ T5876] usb 6-1: Manufacturer: syz [ 589.437635][ T5876] usb 6-1: SerialNumber: syz [ 589.474603][ T5876] r8152-cfgselector 6-1: Unknown version 0x0000 [ 589.474647][ T5876] r8152-cfgselector 6-1: config 0 descriptor?? [ 589.686472][T20237] loop4: detected capacity change from 0 to 1024 [ 589.708490][T20237] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 589.708596][T20237] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 589.709172][T20237] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.6259: iget: special inode unallocated [ 589.709197][T20237] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 589.711073][T20237] EXT4-fs (loop4): Remounting filesystem read-only [ 589.711160][T20237] EXT4-fs (loop4): no journal found [ 589.711173][T20237] EXT4-fs (loop4): can't get journal size [ 589.711990][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 589.712007][ C0] EXT4-fs (loop4): initial error at time 1786099997: ext4_get_journal_inode:5927: inode 32 [ 589.712034][ C0] EXT4-fs (loop4): last error at time 1786099997: ext4_get_journal_inode:5927: inode 32 [ 589.716237][T20239] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 589.735712][T20237] EXT4-fs (loop4): filesystem is read-only [ 589.761721][T20237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 589.904633][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 589.977182][T20248] bridge0: port 3(batadv0) entered blocking state [ 589.980206][ T190] r8152-cfgselector 6-1: USB disconnect, device number 117 [ 589.994725][T20248] bridge0: port 3(batadv0) entered disabled state [ 590.001601][T20248] batadv0: entered allmulticast mode [ 590.026630][T20225] loop1: detected capacity change from 0 to 40427 [ 590.027218][T20248] batadv0: entered promiscuous mode [ 590.050832][T20225] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 590.059447][T20225] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 590.068676][T20248] bridge0: port 3(batadv0) entered blocking state [ 590.068801][T20248] bridge0: port 3(batadv0) entered forwarding state [ 590.132560][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.436790][T20225] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 590.504289][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 590.504336][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 590.537566][T20225] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 590.537622][T20225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 591.177996][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6281'. [ 591.187347][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6281'. [ 591.294638][ T190] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 591.454420][ T190] usb 5-1: Using ep0 maxpacket: 16 [ 591.455267][ T190] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.456244][ T190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.456265][ T190] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.458326][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.458346][ T190] usb 5-1: Product: syz [ 591.458359][ T190] usb 5-1: Manufacturer: syz [ 591.458371][ T190] usb 5-1: SerialNumber: syz [ 591.472660][ T190] usb 5-1: 0:2 : does not exist [ 591.715734][ T190] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 591.884052][ T190] usb 5-1: USB disconnect, device number 126 [ 591.911355][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6288'. [ 591.956345][T20302] loop1: detected capacity change from 0 to 4096 [ 591.988178][T20302] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 592.115027][T20302] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 592.244711][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.418744][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6296'. [ 593.035159][T20354] loop5: detected capacity change from 0 to 1764 [ 593.571176][ T5876] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 593.734345][ T5876] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 593.749713][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 593.762891][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.771288][ T5876] usb 6-1: Product: syz [ 593.777106][ T5876] usb 6-1: Manufacturer: syz [ 593.781845][ T5876] usb 6-1: SerialNumber: syz [ 593.823506][ T5876] usb 6-1: config 0 descriptor?? [ 593.855957][ T5876] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 593.918528][T20397] netlink: 352 bytes leftover after parsing attributes in process `syz.2.6332'. [ 594.066832][ T5876] usb 6-1: USB disconnect, device number 118 [ 594.745541][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.853061][T20440] loop5: detected capacity change from 0 to 512 [ 594.904189][T20440] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 594.918920][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 594.918944][ C1] EXT4-fs (loop5): initial error at time 1786100002: mb_free_blocks:2049: inode 11: block 64 [ 594.918974][ C1] EXT4-fs (loop5): last error at time 1786100002: mb_free_blocks:2049: inode 11: block 64 [ 594.949075][T20440] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.6350: corrupted inode contents [ 594.961389][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.962426][T20440] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #11: comm syz.5.6350: mark_inode_dirty error [ 594.984979][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.996843][T20440] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6350: invalid indirect mapped block 1 (level 1) [ 594.996908][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.997631][T20440] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.6350: corrupted inode contents [ 594.997658][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.997985][T20440] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 594.998004][T20440] loop5: lost filesystem error report for type 5 error -117 [ 594.998293][T20440] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.6350: corrupted inode contents [ 594.998316][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.998735][T20440] EXT4-fs error (device loop5): ext4_truncate:4721: inode #11: comm syz.5.6350: mark_inode_dirty error [ 594.998758][T20440] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 594.999062][T20440] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 594.999079][T20440] loop5: lost filesystem error report for type 5 error -117 [ 595.000805][T20440] EXT4-fs (loop5): 1 truncate cleaned up [ 595.019097][T20440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.100754][T20440] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.6350: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 595.206437][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6356'. [ 595.206492][T20448] lo: entered allmulticast mode [ 595.268808][ T6094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.749329][T20474] bridge0: port 1(batadv0) entered blocking state [ 595.763644][T20474] bridge0: port 1(batadv0) entered disabled state [ 595.780695][T20474] batadv0: entered allmulticast mode [ 595.793151][T20474] batadv0: entered promiscuous mode [ 595.956753][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 595.956801][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 596.054320][T20486] loop4: detected capacity change from 0 to 512 [ 596.104259][T20486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.117502][T20486] ext4 filesystem being mounted at /1250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.128225][T20487] netlink: 'syz.1.6373': attribute type 2 has an invalid length. [ 596.335344][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.342025][T20499] loop5: detected capacity change from 0 to 512 [ 596.348033][T20499] EXT4-fs: Ignoring removed i_version option [ 596.354993][T20499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 596.377782][T20499] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.6379: invalid block [ 596.405304][T20499] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 596.435666][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 596.435705][ C0] EXT4-fs (loop5): initial error at time 1786100004: ext4_get_branch:178: inode 11: block 4294967295 [ 596.435750][ C0] EXT4-fs (loop5): last error at time 1786100004: ext4_get_branch:178: inode 11: block 4294967295 [ 596.522904][T20507] loop1: detected capacity change from 0 to 16 [ 596.524659][T20499] EXT4-fs error (device loop5) in ext4_process_orphan:346: IO failure [ 596.524682][T20499] loop5: lost filesystem error report for type 5 error -5 [ 596.560815][T20499] EXT4-fs (loop5): 2 truncates cleaned up [ 596.572008][T20499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.592011][T20507] erofs (device loop1): mounted with root inode @ nid 36. [ 596.639420][T20507] erofs (device loop1): invalid h_shared_count 255 @ nid 86 [ 596.788882][ T6094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.823187][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6386'. [ 596.902397][T20521] Invalid source name [ 597.070682][T20530] loop1: detected capacity change from 0 to 16 [ 597.079111][T20530] erofs (device loop1): mounted with root inode @ nid 36. [ 597.096244][T20530] syz.1.6389: attempt to access beyond end of device [ 597.096244][T20530] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 597.133024][T20530] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 597.243792][T20530] erofs (device loop1): read error -117 @ 0 of nid 89 [ 597.244062][ T31] audit: type=1800 audit(1786100004.797:117): pid=20530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6389" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 597.584504][ T190] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 597.742861][ T190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 597.743377][ T190] usb 5-1: not running at top speed; connect to a high speed hub [ 597.743406][ T190] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.747543][ T190] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 155, changing to 4 [ 597.749746][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.749768][ T190] usb 5-1: Product: syz [ 597.749781][ T190] usb 5-1: Manufacturer: syz [ 597.749794][ T190] usb 5-1: SerialNumber: syz [ 597.907224][T20554] bond0: option updelay: invalid value (18446744071562067968) [ 597.907275][T20554] bond0: option updelay: allowed values 0 - 2147483647 [ 597.946148][T20554] bond0 (unregistering): Released all slaves [ 598.011343][ T190] usb 5-1: found format II with max.bitrate = 5, frame size=2379 [ 598.017054][ T190] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 598.017690][ T190] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 598.186239][ T190] usb 5-1: USB disconnect, device number 127 [ 598.287630][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.124129][T20603] bond2: option updelay: invalid value (18446744071562067968) [ 599.135210][T20603] bond2: option updelay: allowed values 0 - 2147483647 [ 599.155949][T20603] bond2 (unregistering): Released all slaves [ 599.231865][T20568] loop2: detected capacity change from 0 to 32768 [ 599.235106][T20568] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6404 (20568) [ 599.315906][T20617] loop5: detected capacity change from 0 to 128 [ 599.316248][T20568] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.316274][T20568] BTRFS info (device loop2): using sha256 checksum algorithm [ 599.370775][T20617] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.383557][T20617] ext4 filesystem being mounted at /1277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.432394][T20617] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.6421: No space for directory leaf checksum. Please run e2fsck -D. [ 599.432452][T20617] EXT4-fs error (device loop5): __ext4_find_entry:1628: inode #2: comm syz.5.6421: checksumming directory block 0 [ 599.523030][T20568] BTRFS info (device loop2): enabling ssd optimizations [ 599.531212][T20568] BTRFS info (device loop2): turning on async discard [ 599.540185][T20568] BTRFS info (device loop2): enabling free space tree [ 599.695210][ T6094] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.822052][ T5682] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 600.252723][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6433'. [ 600.252831][T20660] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 600.990664][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6446'. [ 601.044990][T20694] loop5: detected capacity change from 0 to 256 [ 601.151076][T20696] loop0: detected capacity change from 0 to 512 [ 601.152068][T20696] EXT4-fs: Ignoring removed bh option [ 601.197692][T20696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.210924][T20696] ext4 filesystem being mounted at /1331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.365692][ T31] audit: type=1107 audit(1786100008.576:118): pid=20699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 601.396684][ T5680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.865073][T20724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.352592][T20747] loop2: detected capacity change from 0 to 256 [ 602.511145][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6477'. [ 602.688175][T20759] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 603.169940][ T25] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 603.293797][T20788] loop2: detected capacity change from 0 to 4096 [ 603.305302][T20788] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 603.331424][ T25] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 603.342551][ T25] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 603.342592][ T25] usb 6-1: config 34 has no interface number 0 [ 603.342642][ T25] usb 6-1: config 34 interface 167 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 603.342681][ T25] usb 6-1: config 34 interface 167 has no altsetting 0 [ 603.379788][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.379832][ T25] usb 6-1: Product: syz [ 603.379868][ T25] usb 6-1: Manufacturer: syz [ 603.379883][ T25] usb 6-1: SerialNumber: syz [ 603.426513][T20772] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 603.443535][T20788] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 603.478025][T20788] ntfs3(loop2): ino=1e, mi_enum_attr [ 603.478079][T20788] ntfs3(loop2): ino=1e, mi_enum_attr [ 603.747240][ T25] usb 6-1: USB disconnect, device number 119 [ 603.963856][ T190] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 603.971547][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6507'. [ 604.124421][ T190] usb 2-1: Using ep0 maxpacket: 8 [ 604.125691][T20821] loop0: detected capacity change from 0 to 1024 [ 604.128146][ T190] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 604.131459][T20821] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 604.134071][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.134095][ T190] usb 2-1: Product: syz [ 604.134109][ T190] usb 2-1: Manufacturer: syz [ 604.134122][ T190] usb 2-1: SerialNumber: syz [ 604.137018][ T190] usb 2-1: config 0 descriptor?? [ 604.145847][ T190] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 604.146388][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 604.152166][T20824] loop2: detected capacity change from 0 to 736 [ 604.159954][T20821] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.6510: lblock 2 mapped to illegal pblock 2 (length 1) [ 604.159994][T20821] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 604.160180][T20821] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 604.160217][T20821] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.6510: lblock 0 mapped to illegal pblock 48 (length 1) [ 604.160242][T20821] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 604.160407][T20821] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 604.160424][T20821] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.6510: Failed to acquire dquot type 0 [ 604.160442][T20821] loop0: lost filesystem error report for type 5 error -117 [ 604.160724][T20821] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 604.160825][T20821] loop0: lost filesystem error report for type 5 error -117 [ 604.161024][T20821] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.6510: mark_inode_dirty error [ 604.161046][T20821] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 604.161233][T20821] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 604.161311][T20821] EXT4-fs (loop0): 1 orphan inode deleted [ 604.176251][ T50] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 604.176287][ T50] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 604.179854][ T50] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 604.179902][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 604.179920][ T50] loop0: lost filesystem error report for type 5 error -117 [ 604.276441][T20821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.301312][T20824] rock: directory entry would overflow storage [ 604.301328][T20824] rock: sig=0x3b10, size=4, remaining=3 [ 604.461591][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.466523][ T190] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 604.466585][ T190] usb 2-1: media controller created [ 604.528454][ T5680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.549765][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.561928][ T50] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 604.561989][ T50] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 604.564070][ T50] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 604.564112][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 604.564131][ T50] loop0: lost filesystem error report for type 5 error -117 [ 604.566529][ T5680] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 604.566561][ T5680] loop0: lost filesystem error report for type 5 error -117 [ 604.660366][ T190] dvb-usb: bulk message failed: -22 (1/0) [ 604.691853][ T5680] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 604.691901][ T5680] loop0: lost filesystem error report for type 5 error -117 [ 604.701734][ T5680] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 604.701782][ T5680] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 604.717575][ T5680] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 604.717611][ T5680] loop0: lost filesystem error report for type 5 error -117 [ 604.862033][ T190] DVB: Unable to find symbol mt352_attach() [ 604.862060][ T190] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 604.948118][T20844] loop2: detected capacity change from 0 to 2048 [ 604.984924][T20844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 604.986729][T20840] bond1: option updelay: invalid value (18446744071562067968) [ 604.986754][T20840] bond1: option updelay: allowed values 0 - 2147483647 [ 605.024082][T20840] bond1 (unregistering): Released all slaves [ 605.058665][T20844] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:168: inode #12: comm syz.2.6521: inline data xattr refers to an external xattr inode [ 605.078635][T20844] EXT4-fs (loop2): Remounting filesystem read-only [ 605.130715][ T190] rc_core: IR keymap rc-dvico-portable not found [ 605.130756][ T190] Registered IR keymap rc-empty [ 605.132076][ T190] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 605.148532][ T190] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47 [ 605.171752][ T190] dvb-usb: schedule remote query interval to 100 msecs. [ 605.171797][ T190] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 605.181126][ T190] usb 2-1: USB disconnect, device number 104 [ 605.199149][ T5682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 605.455606][T20859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 605.583689][ T190] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 605.793717][T20874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.793752][T20874] IPv6: NLM_F_CREATE should be set when creating new route [ 605.793808][T20874] IPv6: NLM_F_CREATE should be set when creating new route [ 605.799869][ T5847] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 605.964752][ T5847] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 605.967932][ T5847] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 605.967958][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.967975][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 605.968014][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.968037][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.971863][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 605.971889][ T5847] usb 3-1: Product: syz [ 605.971902][ T5847] usb 3-1: Manufacturer: syz [ 605.990763][ T5847] cdc_wdm 3-1:1.0: skipping garbage [ 605.990787][ T5847] cdc_wdm 3-1:1.0: skipping garbage [ 606.050882][ T5847] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 606.050906][ T5847] cdc_wdm 3-1:1.0: Unknown control protocol [ 606.214677][T20865] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 606.225651][ T25] usb 3-1: USB disconnect, device number 122 [ 606.393111][T20854] loop4: detected capacity change from 0 to 32768 [ 606.440430][T20854] JBD2: Ignoring recovery information on journal [ 606.499261][T20894] loop5: detected capacity change from 0 to 256 [ 606.505842][T20894] FAT-fs (loop5): bogus logical sector size 128 [ 606.505865][T20894] FAT-fs (loop5): Can't find a valid FAT filesystem [ 606.513202][T20894] FAT-fs (loop5): unable to read boot sector [ 606.539318][T20892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6540'. [ 606.539394][T20892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6540'. [ 606.577058][T20854] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 606.587168][T20891] loop0: detected capacity change from 0 to 1024 [ 606.777235][ T31] audit: type=1326 audit(1786100013.712:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20900 comm="syz.1.6543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 606.813888][ T31] audit: type=1326 audit(1786100013.740:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20900 comm="syz.1.6543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 606.877742][ T31] audit: type=1326 audit(1786100013.806:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20900 comm="syz.1.6543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 606.880129][ T31] audit: type=1326 audit(1786100013.806:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20900 comm="syz.1.6543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 606.880173][ T31] audit: type=1326 audit(1786100013.806:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20900 comm="syz.1.6543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 607.095516][T20909] xt_TCPMSS: Only works on TCP SYN packets [ 607.165686][T20854] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 607.235445][T20854] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 607.235505][T20854] OCFS2: Returning error to the calling process. [ 607.235535][T20854] (syz.4.6523,20854,0):ocfs2_search_chain:1935 ERROR: status = -5 [ 607.235674][T20854] (syz.4.6523,20854,0):ocfs2_search_chain:2058 ERROR: status = -5 [ 607.235725][T20854] (syz.4.6523,20854,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5 [ 607.235747][T20854] (syz.4.6523,20854,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5 [ 607.235790][T20854] (syz.4.6523,20854,0):ocfs2_claim_new_inode:2439 ERROR: status = -5 [ 607.235811][T20854] (syz.4.6523,20854,0):ocfs2_claim_new_inode:2454 ERROR: status = -5 [ 607.235828][T20854] (syz.4.6523,20854,0):ocfs2_mknod_locked:649 ERROR: status = -5 [ 607.235847][T20854] (syz.4.6523,20854,0):ocfs2_mknod:394 ERROR: status = -5 [ 607.236608][T20854] (syz.4.6523,20854,0):ocfs2_mknod:513 ERROR: status = -5 [ 607.236629][T20854] (syz.4.6523,20854,0):ocfs2_mkdir:669 ERROR: status = -5 [ 607.547356][ T5688] ocfs2: Unmounting device (7,4) on (node local) [ 607.723607][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 607.740175][T20921] loop1: detected capacity change from 0 to 4096 [ 607.804694][T20940] loop0: detected capacity change from 0 to 512 [ 607.812782][T20940] EXT4-fs: Ignoring removed orlov option [ 607.823695][T20940] EXT4-fs (loop0): Test dummy encryption mode enabled [ 607.831036][T20940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 607.848046][T20940] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.6565: bad orphan inode 16 [ 607.858524][T20940] loop0: lost filesystem error report for type 5 error -117 [ 607.858998][T20940] ext4_test_bit(bit=15, block=4) = 0 [ 607.866556][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 607.866579][ C1] EXT4-fs (loop0): initial error at time 1786100014: ext4_orphan_get:1425 [ 607.866598][ C1] EXT4-fs (loop0): last error at time 1786100014: ext4_orphan_get:1425 [ 607.889299][ T31] audit: type=1326 audit(1786100014.751:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20941 comm="syz.2.6564" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 607.898624][T20940] EXT4-fs (loop0): 1 orphan inode deleted [ 607.928087][T20940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.946628][T20921] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 608.005754][T20921] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 608.093847][T20940] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 608.094144][T20940] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.6565: reserved inode found cleared - inode=9 [ 608.208631][T20943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 608.230868][T20951] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6568'. [ 608.269354][ T5680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.278793][T20955] loop2: detected capacity change from 0 to 512 [ 608.360553][T20956] loop4: detected capacity change from 0 to 512 [ 608.373344][T20956] EXT4-fs: Ignoring removed nobh option [ 608.458138][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6573'. [ 608.467773][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6573'. [ 608.467795][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6573'. [ 608.467810][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6573'. [ 608.467821][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6573'. [ 608.502097][T20956] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.6557: corrupted inode contents [ 608.502129][T20956] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 608.503748][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 608.503768][ C0] EXT4-fs (loop4): initial error at time 1786100015: ext4_do_update_inode:5801: inode 3 [ 608.503794][ C0] EXT4-fs (loop4): last error at time 1786100015: ext4_do_update_inode:5801: inode 3 [ 608.507026][T20956] EXT4-fs (loop4): Remounting filesystem read-only [ 608.511434][T20956] EXT4-fs (loop4): 1 truncate cleaned up [ 608.519811][T20956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.532374][T20956] ext4 filesystem being mounted at /1285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.563249][T20956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.576185][T20955] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000103) [ 608.576210][T20955] FAT-fs (loop2): Filesystem has been set read-only [ 608.672797][T20967] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present [ 608.904487][T20971] loop2: detected capacity change from 0 to 4096 [ 608.932300][T20971] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 609.068333][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6581'. [ 609.068383][T20985] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 609.160716][T20971] ntfs3(loop2): ino=19, mi_enum_attr [ 609.160780][T20971] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 609.173202][T20971] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 609.317724][T20997] loop4: detected capacity change from 0 to 256 [ 609.503585][T20997] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 609.503635][T20997] FAT-fs (loop4): Filesystem has been set read-only [ 609.619233][T21008] loop2: detected capacity change from 0 to 16 [ 609.645692][T21008] erofs (device loop2): mounted with root inode @ nid 36. [ 609.655697][T21007] loop5: detected capacity change from 0 to 4096 [ 609.727087][T21007] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 609.775613][T21014] binder: Bad value for 'max' [ 610.050961][T21022] netlink: 'syz.1.6601': attribute type 1 has an invalid length. [ 610.059083][T21022] netlink: 'syz.1.6601': attribute type 3 has an invalid length. [ 610.066946][T21022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6601'. [ 610.233868][T21028] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 610.253899][T21031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.007581][T21061] EXT4-fs: Ignoring removed i_version option [ 611.034401][T21063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6621'. [ 611.050112][T21061] EXT4-fs (loop5): 1 orphan inode deleted [ 611.063018][T21061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.294359][ T6094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.898639][T21098] set_capacity_and_notify: 2 callbacks suppressed [ 611.906088][T21098] loop0: detected capacity change from 0 to 512 [ 611.925472][T21098] EXT4-fs: Ignoring removed oldalloc option [ 611.964194][T21098] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.6633: error while reading EA inode 32 err=-116 [ 611.964245][T21098] loop0: lost filesystem error report for type 5 error -117 [ 611.977090][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 611.977117][ C0] EXT4-fs (loop0): initial error at time 1786100019: ext4_xattr_inode_iget:442 [ 611.977141][ C0] EXT4-fs (loop0): last error at time 1786100019: ext4_xattr_inode_iget:442 [ 611.986627][T21098] EXT4-fs (loop0): Remounting filesystem read-only [ 611.986740][T21098] EXT4-fs (loop0): 1 orphan inode deleted [ 612.034367][T21098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.051077][T21098] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.115333][T21111] netlink: 'syz.4.6637': attribute type 3 has an invalid length. [ 612.130430][T21113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6640'. [ 612.210299][T21119] loop2: detected capacity change from 0 to 256 [ 612.247599][T21121] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 612.255616][T21121] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 612.266718][T21121] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 612.275113][T21121] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 613.490126][T21181] loop2: detected capacity change from 0 to 1024 [ 613.573509][T21186] netlink: 'syz.0.6666': attribute type 8 has an invalid length. [ 613.757496][T21196] netlink: 'syz.2.6669': attribute type 22 has an invalid length. [ 613.977433][T21206] loop4: detected capacity change from 0 to 256 [ 613.990123][T21207] binder: 21205:21207 ioctl c0306201 200000000080 returned -14 [ 614.344801][T21222] tmpfs: Bad value for 'nr_inodes' [ 614.448538][ T190] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.789105][T21240] comedi: No check for data length of config insn id 48781 is implemented [ 614.789142][T21240] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 614.789257][T21240] comedi: Assuming n=15 is correct [ 615.046480][ T5351] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.142593][ T190] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 615.198571][T21255] loop2: detected capacity change from 0 to 2048 [ 615.216231][T21255] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 615.244380][T21255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.284941][T21255] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 615.313459][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 615.319379][ T190] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 615.330054][ T190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.344551][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.352501][T21259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.361617][ T190] usb 5-1: Product: syz [ 615.365930][ T190] usb 5-1: Manufacturer: syz [ 615.370710][ T190] usb 5-1: SerialNumber: syz [ 615.378251][ T190] usb 5-1: config 0 descriptor?? [ 615.386710][ T190] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 615.503811][T21265] loop2: detected capacity change from 0 to 16 [ 615.531447][T21265] erofs (device loop2): mounted with root inode @ nid 36. [ 615.548474][T21265] syz.2.6704: attempt to access beyond end of device [ 615.548474][T21265] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 615.567678][T21265] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 615.588508][T21265] erofs (device loop2): read error -117 @ 0 of nid 89 [ 615.588828][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 615.588844][ T31] audit: type=1800 audit(1786100022.950:129): pid=21265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6704" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 615.817245][T21279] __nla_validate_parse: 1 callbacks suppressed [ 615.823614][T21279] netlink: 392 bytes leftover after parsing attributes in process `syz.1.6707'. [ 615.860003][ T190] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 615.867054][ T190] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 615.881484][ T190] usb 5-1: USB disconnect, device number 2 [ 616.044489][ T5803] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 616.211524][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 616.217815][ T5803] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 616.228925][ T5803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.228996][ T5803] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 616.229023][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 616.229049][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 616.229073][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 616.229097][ T5803] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.302685][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.302726][ T5803] usb 6-1: Product: syz [ 616.302762][ T5803] usb 6-1: Manufacturer: syz [ 616.302777][ T5803] usb 6-1: SerialNumber: syz [ 616.328354][ T5803] usb 6-1: config 0 descriptor?? [ 616.337716][T21273] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.355939][T21296] ip_tables: iptables: counters copy to user failed while replacing table [ 616.495218][T21300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.951542][T21319] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6727'. [ 616.970485][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6727'. [ 616.970538][T21319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6727'. [ 617.127874][T21332] loop0: detected capacity change from 0 to 24 [ 617.521200][T21348] netlink: 'syz.4.6742': attribute type 10 has an invalid length. [ 617.557594][T21348] team0: Device veth1_vlan failed to register rx_handler [ 617.652514][T21330] loop1: detected capacity change from 0 to 32768 [ 617.686054][T21330] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 617.819768][ T5803] rc_core: IR keymap rc-snapstream-firefly not found [ 617.820503][ T5803] Registered IR keymap rc-empty [ 617.853187][ T5803] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 617.873355][ T5803] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 617.923892][T21330] XFS (loop1): Ending clean mount [ 617.930020][ T5803] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input49 [ 617.954913][ T5803] usb 6-1: USB disconnect, device number 120 [ 617.961030][ C0] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 617.965169][T21363] loop2: detected capacity change from 0 to 8192 [ 617.990026][T21363] loop2: p1[EZD] p3 p4 [ 617.990797][T21363] loop2: partition table partially beyond EOD, truncated [ 618.009071][T21363] loop2: p3 start 150994944 is beyond EOD, truncated [ 618.009136][T21363] loop2: p4 size 50331648 extends beyond EOD, truncated [ 618.098387][ T4970] ati_remote 6-1:0.0: ati_remote_open: usb_submit_urb failed! [ 618.134003][ T5681] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 618.695387][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 618.698642][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 618.845399][T21389] loop4: detected capacity change from 0 to 512 [ 618.912937][T21389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.926545][T21389] ext4 filesystem being mounted at /1325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.045859][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.247865][ T5803] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 619.343184][T21404] loop4: detected capacity change from 0 to 1024 [ 619.407934][T21404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.408008][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 619.408702][ T5803] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 619.409674][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.409705][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.411138][ T31] audit: type=1326 audit(1786100026.523:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.411792][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.411812][ T5803] usb 1-1: Product: syz [ 619.411825][ T5803] usb 1-1: Manufacturer: syz [ 619.411837][ T5803] usb 1-1: SerialNumber: syz [ 619.414716][ T5803] usb 1-1: config 0 descriptor?? [ 619.422733][ T31] audit: type=1326 audit(1786100026.542:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.433064][ T5803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 619.461780][ T31] audit: type=1326 audit(1786100026.579:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.461826][ T31] audit: type=1326 audit(1786100026.579:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.468800][ T31] audit: type=1326 audit(1786100026.579:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.468846][ T31] audit: type=1326 audit(1786100026.579:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.468880][ T31] audit: type=1326 audit(1786100026.579:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.478674][ T31] audit: type=1326 audit(1786100026.588:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.478719][ T31] audit: type=1326 audit(1786100026.588:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21407 comm="syz.2.6764" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 619.698775][ T5803] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 619.698998][ T5803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 619.715507][T21383] loop5: detected capacity change from 0 to 65536 [ 619.719484][ T5803] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 619.770106][T21383] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 619.788475][T21404] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz.4.6763: directory missing '..' [ 619.822784][T21383] XFS (loop5): Ending clean mount [ 619.892299][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.937704][ T6094] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 619.955729][ T5803] usb 1-1: USB disconnect, device number 115 [ 620.187240][T21402] loop1: detected capacity change from 0 to 32768 [ 620.982240][T21453] loop4: detected capacity change from 0 to 64 [ 621.118531][ T5876] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 621.292498][ T5876] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 621.303075][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.313003][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 202, setting to 64 [ 621.313081][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.335920][ T5876] usb 6-1: config 0 descriptor?? [ 621.491050][T21474] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 621.504862][T21474] bond0 (unregistering): Released all slaves [ 621.554588][T21478] loop2: detected capacity change from 0 to 256 [ 621.565726][ T5876] ath6kl: Failed to submit usb control message: -71 [ 621.565808][ T5876] ath6kl: unable to send the bmi data to the device: -71 [ 621.565826][ T5876] ath6kl: Unable to send get target info: -71 [ 621.566664][ T5876] ath6kl: Failed to init ath6kl core: -71 [ 621.567998][ T5876] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 621.610798][ T5876] usb 6-1: USB disconnect, device number 121 [ 621.628029][T21478] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 621.651867][ T5351] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 621.681164][ T4690] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 621.816030][ T5351] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 621.817671][ T5351] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 621.817700][ T5351] usb 1-1: config 1 interface 0 has no altsetting 0 [ 621.820241][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.820263][ T5351] usb 1-1: Product: syz [ 621.820276][ T5351] usb 1-1: Manufacturer: syz [ 621.820288][ T5351] usb 1-1: SerialNumber: syz [ 621.823840][T21468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 622.051624][T21482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.062834][ T5351] usblp0: Disabling reads from problematic bidirectional printer [ 622.072088][ T5351] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 6 proto 2 vid 0x03F0 pid 0x0004 [ 622.083699][ T5351] usb 1-1: USB disconnect, device number 116 [ 622.098244][T21482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.099577][ T5351] usblp0: removed [ 622.422828][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.423772][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.423857][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.423892][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.637081][T21498] erspan0: entered promiscuous mode [ 622.637126][T21498] erspan0: entered allmulticast mode [ 622.703813][T21500] netlink: 'syz.1.6804': attribute type 1 has an invalid length. [ 622.718073][T21502] ubi8: attaching mtd0 [ 622.738891][T21502] ubi8: scanning is finished [ 622.752453][T21502] ubi8: empty MTD device detected [ 622.758153][T21502] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 623.147207][T21519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6813'. [ 623.165745][T21520] loop0: detected capacity change from 0 to 256 [ 623.216347][T21520] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 623.316402][T21502] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 623.432627][T21522] ip6erspan0: entered allmulticast mode [ 623.949174][T21492] infiniband syz2: set active [ 623.949214][T21492] infiniband syz2: added team_slave_1 [ 624.055716][T21492] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 624.063796][T21492] infiniband syz2: Couldn't open port 1 [ 624.080427][T21492] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 624.095781][T21492] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 624.114149][T21492] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 624.147351][ T31] audit: type=1326 audit(1786100030.957:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.160280][ T59] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 624.172458][T21544] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 624.196379][ T31] audit: type=1326 audit(1786100031.003:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.223693][ T31] audit: type=1326 audit(1786100031.003:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.251150][ T31] audit: type=1326 audit(1786100031.013:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.272304][ T31] audit: type=1326 audit(1786100031.013:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.272344][ T31] audit: type=1326 audit(1786100031.013:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.272401][ T31] audit: type=1326 audit(1786100031.022:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.272436][ T31] audit: type=1326 audit(1786100031.022:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21559 comm="syz.2.6833" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2be99e0d9 code=0x7ffc0000 [ 624.497901][T21492] RDS/IB: syz2: added [ 624.498530][T21492] smc: adding ib device syz2 with port count 1 [ 624.509523][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6838'. [ 624.509551][T21569] openvswitch: netlink: Missing key (keys=40, expected=80) [ 624.532865][T21492] smc: ib device syz2 port 1 has no pnetid [ 624.853039][T21581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 624.912642][T21585] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6847'. [ 625.017947][T21592] netlink: 'syz.1.6849': attribute type 11 has an invalid length. [ 625.620182][ T25] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 625.790246][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 625.796276][ T25] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 625.808278][ T25] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 625.816610][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.826938][ T25] usb 2-1: config 0 has no interface number 0 [ 625.834578][ T25] usb 2-1: config 0 interface 52 has no altsetting 0 [ 625.841449][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.855362][ T25] usb 2-1: config 0 descriptor?? [ 625.872043][T21608] loop2: detected capacity change from 0 to 32768 [ 625.914319][T21608] [ 625.914319][T21608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 625.914319][T21608] [ 626.045057][T21608] freecnt=0, but freelist=3 in dtroot [ 626.045057][T21608] [ 626.045094][T21608] ERROR: (device loop2): copy_from_dinode: Corrupt dtroot [ 626.045094][T21608] [ 626.045930][T21608] ERROR: (device loop2): remounting filesystem as read-only [ 626.046077][T21608] jfs_lookup: iget failed on inum 32 [ 626.141800][T21622] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 626.141848][T21622] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 626.315313][ T25] usb 2-1: USB disconnect, device number 105 [ 626.386229][T21631] usb usb7: usbfs: process 21631 (syz.0.6866) did not claim interface 0 before use [ 626.749805][T21644] loop0: detected capacity change from 0 to 1024 [ 626.758915][T21644] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 626.861144][T21644] hfsplus: size 25, res 24, name_len 12 [ 627.065346][ T31] audit: type=1326 audit(1786100033.697:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21658 comm="syz.0.6881" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 627.067331][ T31] audit: type=1326 audit(1786100033.697:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21658 comm="syz.0.6881" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 627.163099][T21661] netlink: 'syz.1.6883': attribute type 3 has an invalid length. [ 627.205042][T21665] overlayfs: missing 'lowerdir' [ 627.332436][T21674] loop1: detected capacity change from 0 to 256 [ 627.408638][T21667] bond2: entered allmulticast mode [ 627.631790][T21688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 627.631831][T21688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6895'. [ 627.899744][T21701] netlink: 'syz.2.6902': attribute type 9 has an invalid length. [ 628.037668][T21710] loop5: detected capacity change from 0 to 8 [ 628.065514][T21710] SQUASHFS error: zlib decompression failed, data probably corrupt [ 628.081139][T21710] SQUASHFS error: Failed to read block 0x51c: -5 [ 628.087590][T21710] SQUASHFS error: Unable to read metadata cache entry [51a] [ 628.094987][T21710] SQUASHFS error: Unable to read inode 0x320024 [ 628.230059][T21715] loop0: detected capacity change from 0 to 512 [ 628.507779][T21731] loop5: detected capacity change from 0 to 512 [ 628.517063][T21731] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 628.517102][T21731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 628.517328][T21731] EXT4-fs (loop5): orphan cleanup on readonly fs [ 628.541636][T21731] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.6918: iget: bad i_size value: 12154761577498 [ 628.541685][T21731] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 628.554456][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 628.554481][ C0] EXT4-fs (loop5): initial error at time 1786100035: ext4_orphan_get:1399: inode 13 [ 628.554516][ C0] EXT4-fs (loop5): last error at time 1786100035: ext4_orphan_get:1399: inode 13 [ 628.595883][T21731] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6918: couldn't read orphan inode 13 (err -117) [ 628.595930][T21731] loop5: lost filesystem error report for type 5 error -117 [ 628.615966][T21731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 628.658303][T21731] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.6918: dx entry: limit 65535 != root limit 120 [ 628.658347][T21731] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6918: Corrupt directory, running e2fsck is recommended [ 628.757508][ T6094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.951030][T21743] binder: 21742:21743 ioctl c0306201 2000000001c0 returned -22 [ 629.225487][T21734] loop2: detected capacity change from 0 to 32768 [ 629.284986][T21734] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 629.342406][T21734] XFS (loop2): Ending clean mount [ 629.619434][ T5682] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 629.959336][ T5351] usb 6-1: new low-speed USB device number 122 using dummy_hcd [ 630.126975][ T5351] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 630.130216][ T5351] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 630.130260][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 630.130283][ T5351] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.130304][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 630.130324][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 630.133029][ T5351] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 630.133069][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 630.133092][ T5351] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.133113][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 630.133134][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 630.134225][ T5351] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 630.134264][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 630.134286][ T5351] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.134307][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 630.134329][ T5351] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 630.138476][ T5351] usb 6-1: string descriptor 0 read error: -22 [ 630.138597][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.161004][T21788] netlink: zone id is out of range [ 630.161017][T21788] netlink: zone id is out of range [ 630.161025][T21788] netlink: zone id is out of range [ 630.161033][T21788] netlink: zone id is out of range [ 630.161040][T21788] netlink: zone id is out of range [ 630.161048][T21788] netlink: zone id is out of range [ 630.169884][ T5351] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 630.416058][ T5351] usb 6-1: USB disconnect, device number 122 [ 630.559295][T21806] tipc: Trying to set illegal importance in message [ 630.649882][T21812] loop0: detected capacity change from 0 to 256 [ 631.193801][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6962'. [ 631.204142][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6962'. [ 631.479218][T21841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 631.720573][T21851] loop0: detected capacity change from 0 to 8 [ 631.766368][ T5351] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 631.928326][ T5351] usb 2-1: Using ep0 maxpacket: 8 [ 631.929132][ T5351] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 631.930147][ T5351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 631.930179][ T5351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.930198][ T5351] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.930218][ T5351] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 631.930250][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.938379][ T5351] usb 2-1: config 0 descriptor?? [ 631.939271][T21844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.451618][T21872] overlayfs: cannot append lower layer [ 632.534913][ T5876] usb 2-1: USB disconnect, device number 106 [ 632.544205][ T5683] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 632.629916][T21854] loop5: detected capacity change from 0 to 32768 [ 632.660705][T21854] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 632.746718][T21854] XFS (loop5): Ending clean mount [ 632.839297][ T6094] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.476367][T21921] PKCS8: Unsupported PKCS#8 version [ 633.552317][ T5876] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 633.733870][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 633.734723][ T5876] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 633.738086][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.738109][ T5876] usb 1-1: Product: syz [ 633.738122][ T5876] usb 1-1: Manufacturer: syz [ 633.738134][ T5876] usb 1-1: SerialNumber: syz [ 633.748206][ T5876] usb 1-1: config 0 descriptor?? [ 633.763043][ T5876] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 633.763087][ T5876] dvb-usb: bulk message failed: -22 (2/0) [ 633.800479][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.805256][ T5876] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 633.805304][ T5876] usb 1-1: media controller created [ 633.814838][T21937] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 633.815298][T21937] CIFS: Attempting to mount //127.0.0.1/share [ 633.864985][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.981925][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 634.076699][ T5876] DVB: Unable to find symbol mt352_attach() [ 634.076737][ T5876] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 634.229367][T21941] loop1: detected capacity change from 0 to 32768 [ 634.230063][ T5876] rc_core: IR keymap rc-dvico-portable not found [ 634.230077][ T5876] Registered IR keymap rc-empty [ 634.231192][ T5876] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 634.241933][ T5876] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input50 [ 634.274215][ T5876] dvb-usb: schedule remote query interval to 100 msecs. [ 634.274246][ T5876] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 634.288579][ T5876] usb 1-1: USB disconnect, device number 117 [ 634.461066][ T5876] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 634.576530][T21962] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 634.644061][T21967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.679636][T21937] CIFS: VFS: Error connecting to socket. Aborting operation. [ 634.690971][T21937] CIFS: VFS: cifs_mount failed w/return code = -4 [ 635.176321][T21990] loop4: detected capacity change from 0 to 16 [ 635.211702][T21990] erofs (device loop4): mounted with root inode @ nid 36. [ 635.317357][T21998] loop0: detected capacity change from 0 to 256 [ 635.381465][T21998] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 635.424903][T22004] netlink: 'syz.1.7042': attribute type 3 has an invalid length. [ 635.438875][T21998] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 635.843468][T22020] loop1: detected capacity change from 0 to 2048 [ 635.890837][T22020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.031047][T22035] loop2: detected capacity change from 0 to 512 [ 636.041996][T22035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 636.068814][T22035] EXT4-fs (loop2): 1 truncate cleaned up [ 636.092109][T22035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.119813][ T5681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.139273][ T5803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 636.297480][ T5682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.300329][ T5803] usb 5-1: Using ep0 maxpacket: 8 [ 636.300976][ T5803] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 636.303603][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 636.303631][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.303650][ T5803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.303670][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 636.303692][ T5803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.303724][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.307467][ T5803] usb 5-1: config 0 descriptor?? [ 636.309128][T22026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 636.426277][T22048] tmpfs: Bad value for 'mpol' [ 636.633105][T22056] loop0: detected capacity change from 0 to 512 [ 636.694397][T22056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.694533][T22056] ext4 filesystem being mounted at /1455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.750187][T22054] loop2: detected capacity change from 0 to 8192 [ 636.787902][ T1219] usb 5-1: USB disconnect, device number 3 [ 636.792037][ T5683] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 636.879308][T22062] netlink: 'syz.5.7067': attribute type 4 has an invalid length. [ 637.019807][ T5680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.407119][T22086] tmpfs: User quota inode hardlimit too large. [ 637.408614][T22082] loop1: detected capacity change from 0 to 2048 [ 637.456265][T22082] loop1: p1 p4 [ 637.456265][T22082] p1: [ 637.456311][T22082] loop1: partition table partially beyond EOD, truncated [ 637.469490][T22082] loop1: p4 start 184549376 is beyond EOD, truncated [ 637.606711][T22095] netlink: 'syz.4.7081': attribute type 2 has an invalid length. [ 637.606749][T22095] netlink: 'syz.4.7081': attribute type 5 has an invalid length. [ 637.606791][T22095] netlink: 'syz.4.7081': attribute type 2 has an invalid length. [ 637.606807][T22095] netlink: 'syz.4.7081': attribute type 5 has an invalid length. [ 637.721003][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 637.736888][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 637.920453][T22110] loop1: detected capacity change from 0 to 128 [ 637.939422][T22110] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.945250][T22110] ext4 filesystem being mounted at /1400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 638.105618][ T5681] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.393478][T22134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7102'. [ 638.393521][T22134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7102'. [ 638.501733][ T9] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 638.656149][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 638.656198][ T31] audit: type=1326 audit(1786100044.529:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.1.7108" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 638.661119][ T31] audit: type=1326 audit(1786100044.529:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.1.7108" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 638.663018][ T9] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 638.663990][ T9] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 638.664012][ T9] usb 3-1: config 8 has no interface number 0 [ 638.664048][ T9] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 638.665990][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.666011][ T9] usb 3-1: Product: syz [ 638.666024][ T9] usb 3-1: Manufacturer: syz [ 638.666036][ T9] usb 3-1: SerialNumber: syz [ 638.678296][ T31] audit: type=1326 audit(1786100044.557:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.1.7108" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 638.678336][ T31] audit: type=1326 audit(1786100044.557:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.1.7108" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 638.678370][ T31] audit: type=1326 audit(1786100044.557:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22146 comm="syz.1.7108" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b51f9e0d9 code=0x7ffc0000 [ 638.856991][T22149] loop0: detected capacity change from 0 to 1024 [ 638.876157][T22149] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 638.876276][T22149] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 638.907317][T22149] JBD2: no valid journal superblock found [ 638.930941][T22149] EXT4-fs (loop0): Could not load journal inode [ 638.971333][ T9] usb 3-1: USB disconnect, device number 123 [ 639.066469][T22157] kAFS: unable to lookup cell 'syze¤@Ës0' [ 639.130322][T22159] loop4: detected capacity change from 0 to 512 [ 639.147576][T22159] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 639.167130][T22159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 639.167354][T22159] EXT4-fs (loop4): orphan cleanup on readonly fs [ 639.167369][T22159] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.7117: bad orphan inode 3 [ 639.167389][T22159] loop4: lost filesystem error report for type 5 error -117 [ 639.170682][T22159] EXT4-fs (loop4): Remounting filesystem read-only [ 639.190946][T22159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 639.219149][T22159] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.7117: dx entry: limit 0 != root limit 125 [ 639.219202][T22159] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.7117: Corrupt directory, running e2fsck is recommended [ 639.394079][ T5688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 639.484683][T22174] hfs: cannot create new inode: folder count exceeds limit [ 640.341811][T22220] loop2: p1 < > p2 p3 < > p4 < p5 > [ 640.341865][T22220] loop2: partition table partially beyond EOD, truncated [ 640.342035][T22220] loop2: p1 start 3405774849 is beyond EOD, truncated [ 640.344670][T22220] loop2: p3 start 4225 is beyond EOD, truncated [ 640.404330][ T25] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 640.520600][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 640.535605][ T5665] udevd[5665]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 640.551231][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 640.576962][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 640.583088][ T25] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 640.598155][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.598192][ T25] usb 6-1: config 0 has no interface number 0 [ 640.616288][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.616326][ T25] usb 6-1: Product: syz [ 640.616356][ T25] usb 6-1: Manufacturer: syz [ 640.616371][ T25] usb 6-1: SerialNumber: syz [ 640.642132][ T25] usb 6-1: config 0 descriptor?? [ 640.651938][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 640.754049][T22237] set_capacity_and_notify: 2 callbacks suppressed [ 640.754110][T22237] loop2: detected capacity change from 0 to 2048 [ 640.785402][T22237] loop2: p1 < > p4 [ 640.791709][T22237] loop2: p4 size 8388608 extends beyond EOD, truncated [ 640.826779][ T5351] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 640.883171][ T25] gspca_spca1528: reg_w err -71 [ 640.906956][ T25] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 640.914719][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 640.932320][ T25] usb 6-1: USB disconnect, device number 123 [ 640.940855][ T5665] udevd[5665]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 640.983481][ T5351] usb 5-1: Using ep0 maxpacket: 8 [ 640.985076][ T5351] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 640.989928][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.989949][ T5351] usb 5-1: Product: syz [ 640.989961][ T5351] usb 5-1: Manufacturer: syz [ 640.989981][ T5351] usb 5-1: SerialNumber: syz [ 641.000267][ T5351] usb 5-1: config 0 descriptor?? [ 641.022152][ T5351] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 641.022196][ T5351] dvb-usb: bulk message failed: -22 (2/0) [ 641.043515][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 641.054895][ T5351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 641.059540][ T5351] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 641.059590][ T5351] usb 5-1: media controller created [ 641.062500][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 641.146450][ T5351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.242704][T22238] loop1: detected capacity change from 0 to 32768 [ 641.259941][ T5351] dvb-usb: bulk message failed: -22 (1/0) [ 641.308185][ T5351] DVB: Unable to find symbol mt352_attach() [ 641.308222][ T5351] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 641.420081][ T5351] rc_core: IR keymap rc-dvico-portable not found [ 641.420115][ T5351] Registered IR keymap rc-empty [ 641.422343][ T5351] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 641.424363][ T5351] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input51 [ 641.437641][ T5351] dvb-usb: schedule remote query interval to 100 msecs. [ 641.437662][ T5351] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 641.551409][ T5351] dvb-usb: bulk message failed: -22 (1/0) [ 641.614534][ T5351] usb 5-1: USB disconnect, device number 4 [ 641.684678][T22260] loop5: detected capacity change from 0 to 2048 [ 641.755148][T22260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.803827][T22260] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 641.878169][ T5351] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 641.919037][T22269] loop0: detected capacity change from 0 to 64 [ 641.950206][ T6094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.205428][ T31] audit: type=1326 audit(1786100047.850:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22274 comm="syz.0.7169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 642.243677][ T31] audit: type=1326 audit(1786100047.897:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22274 comm="syz.0.7169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 642.273601][ T31] audit: type=1326 audit(1786100047.915:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22274 comm="syz.0.7169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 642.273664][ T31] audit: type=1326 audit(1786100047.915:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22274 comm="syz.0.7169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 642.273706][ T31] audit: type=1326 audit(1786100047.915:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22274 comm="syz.0.7169" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 642.706166][T22293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7177'. [ 643.062424][T22303] loop0: detected capacity change from 0 to 2048 [ 643.102291][T22303] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 643.105231][T22303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.690258][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7190'. [ 643.690298][T22321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7190'. [ 644.183455][T22329] loop0: detected capacity change from 0 to 32768 [ 644.192230][T22329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7194 (22329) [ 644.230616][T22329] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 644.230672][T22329] BTRFS info (device loop0): using sha256 checksum algorithm [ 644.307462][T22329] BTRFS info (device loop0): enabling ssd optimizations [ 644.307511][T22329] BTRFS info (device loop0): turning on async discard [ 644.307526][T22329] BTRFS info (device loop0): enabling free space tree [ 644.527788][ T5680] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 644.824840][T22346] autofs4:pid:22346:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 645.360406][T22364] fuse: Bad value for 'fd' [ 645.671058][T22381] loop4: detected capacity change from 0 to 64 [ 645.761477][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 645.835905][T22391] loop1: detected capacity change from 0 to 512 [ 645.903826][T22391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 645.911369][T22391] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 645.911953][T22391] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 645.922470][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 645.926124][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 645.939623][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.939646][ T9] usb 3-1: Product: syz [ 645.939658][ T9] usb 3-1: Manufacturer: syz [ 645.939671][ T9] usb 3-1: SerialNumber: syz [ 645.976737][T22391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.983733][ T9] usb 3-1: config 0 descriptor?? [ 645.993486][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 645.993530][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 646.053653][T22391] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 646.098225][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 646.100382][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 646.100438][ T9] usb 3-1: media controller created [ 646.123336][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7218'. [ 646.216449][ T5681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.243917][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.346362][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 646.501666][ T9] DVB: Unable to find symbol mt352_attach() [ 646.501704][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 646.702221][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 646.703709][ T9] rc_core: IR keymap rc-dvico-portable not found [ 646.703724][ T9] Registered IR keymap rc-empty [ 646.704975][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 646.707068][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input52 [ 646.711387][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 646.711426][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 646.715755][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 646.715774][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 646.717925][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 646.728023][ T9] usb 3-1: USB disconnect, device number 124 [ 646.933930][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 647.047557][T22433] loop0: detected capacity change from 0 to 2048 [ 647.062968][T22433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.150724][T22440] loop1: detected capacity change from 0 to 256 [ 647.154535][T22430] loop5: detected capacity change from 0 to 32768 [ 647.166943][T22430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7237 (22430) [ 647.227913][T22440] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 647.251027][T22430] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.251078][T22430] BTRFS info (device loop5): using sha256 checksum algorithm [ 647.363509][T22460] overlayfs: missing 'lowerdir' [ 647.384453][T22430] BTRFS info (device loop5): enabling ssd optimizations [ 647.384501][T22430] BTRFS info (device loop5): turning on async discard [ 647.384516][T22430] BTRFS info (device loop5): enabling free space tree [ 647.499078][T22465] trusted_key: encrypted_key: insufficient parameters specified [ 647.659787][T22474] loop2: detected capacity change from 0 to 128 [ 647.670076][T22474] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 647.684887][T22474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.802248][ T25] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 647.857352][ T6094] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.976188][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 647.988560][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.999429][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 648.022813][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 648.022867][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.022917][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.281180][ T25] gud 2-1:1.0: probe with driver gud failed with error -22 [ 648.542483][ T1219] usb 2-1: USB disconnect, device number 107 [ 648.750155][T22491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.810764][T22491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.127886][ T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.127946][ T59] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.127995][ T59] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.138702][ T59] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.305286][T22525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7273'. [ 649.305332][T22525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7273'. [ 649.500526][T22537] loop4: detected capacity change from 0 to 256 [ 649.516595][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7280'. [ 649.705363][T22547] netlink: 'syz.0.7283': attribute type 2 has an invalid length. [ 650.038895][T22562] loop2: detected capacity change from 0 to 512 [ 650.082656][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 650.129854][T22569] loop1: detected capacity change from 0 to 512 [ 650.180909][T22562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.181026][T22562] ext4 filesystem being mounted at /1426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.444427][T22562] EXT4-fs error (device loop2): ext4_xattr_block_find:1870: inode #12: comm syz.2.7291: corrupted xattr block 6: invalid header [ 650.478238][T22562] EXT4-fs (loop2): Remounting filesystem read-only [ 650.544590][T22583] netlink: 'syz.5.7299': attribute type 1 has an invalid length. [ 650.544651][T22583] netlink: 'syz.5.7299': attribute type 2 has an invalid length. [ 650.678326][ T5682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.684801][ T4690] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 650.684826][ T4690] Quota error (device loop2): write_blk: dquota write failed [ 650.684838][ T4690] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 650.718802][T22592] loop1: detected capacity change from 0 to 512 [ 650.726080][T22592] EXT4-fs: Ignoring removed mblk_io_submit option [ 650.752147][T22592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 650.752411][T22592] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.7306: Invalid inode bitmap blk 4 in block_group 0 [ 650.752459][T22592] loop1: lost filesystem error report for type 5 error -117 [ 650.752770][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 650.752791][ C1] EXT4-fs (loop1): initial error at time 1786100055: ext4_read_inode_bitmap:141 [ 650.752818][ C1] EXT4-fs (loop1): last error at time 1786100055: ext4_read_inode_bitmap:141 [ 650.789200][T22592] EXT4-fs (loop1): Remounting filesystem read-only [ 650.797767][ T5783] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 650.833299][T22592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.933550][ T5681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.995003][ T5783] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 651.006905][ T5783] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 651.006951][ T5783] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.006975][ T5783] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.007012][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.060382][ T5783] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.068441][ T5783] usb 5-1: invalid MIDI out EP 0 [ 651.360374][ T5783] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 651.380965][ T5783] usb 5-1: USB disconnect, device number 5 [ 651.512331][ T5876] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 651.685211][ T5876] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 651.695627][ T5876] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 651.695699][ T5876] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.695736][ T5876] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.726826][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.726862][ T5876] usb 6-1: Product: syz [ 651.726890][ T5876] usb 6-1: Manufacturer: syz [ 651.726906][ T5876] usb 6-1: SerialNumber: syz [ 651.784404][ T5876] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 651.825504][T22624] loop2: detected capacity change from 0 to 8192 [ 651.839712][T22624] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 651.997169][ T5876] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 652.154894][ T5876] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 652.233816][ T5783] usb 6-1: USB disconnect, device number 124 [ 652.247413][ T31] audit: type=1326 audit(1786100057.241:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.0.7328" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 652.247509][ T31] audit: type=1326 audit(1786100057.241:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.0.7328" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 652.279421][ T31] audit: type=1326 audit(1786100057.269:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.0.7328" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 652.279466][ T31] audit: type=1326 audit(1786100057.269:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.0.7328" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 652.279499][ T31] audit: type=1326 audit(1786100057.269:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.0.7328" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20c99e0d9 code=0x7ffc0000 [ 652.391537][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.507806][T22644] loop4: detected capacity change from 0 to 64 [ 653.244664][T22678] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 653.568204][T22662] loop4: detected capacity change from 0 to 32768 [ 653.614133][T22662] JBD2: Ignoring recovery information on journal [ 653.682505][ T5783] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 653.726784][T22662] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 653.854953][ T5783] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 653.865281][ T5783] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 653.865319][ T5783] usb 2-1: config 8 has no interface number 0 [ 653.865372][ T5783] usb 2-1: config 8 interface 177 has no altsetting 0 [ 653.865406][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.910001][ T5783] ir_toy 2-1:8.177: required endpoints not found [ 653.975626][ T5688] ocfs2: Unmounting device (7,4) on (node local) [ 654.123420][ T5783] usb 2-1: USB disconnect, device number 108 [ 654.600969][T22714] loop5: detected capacity change from 0 to 16 [ 654.614066][T22714] erofs (device loop5): mounted with root inode @ nid 36. [ 654.659382][T22714] syz.5.7363: attempt to access beyond end of device [ 654.659382][T22714] loop5: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 654.669063][T22714] syz.5.7363: attempt to access beyond end of device [ 654.669063][T22714] loop5: rw=0, sector=46, nr_sectors = 1 limit=16 [ 654.669554][T22714] erofs (device loop5): read error -5 @ 0 of nid 36 [ 655.080306][T22728] netlink: 9060 bytes leftover after parsing attributes in process `syz.5.7367'. [ 655.414644][T22749] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 655.433757][T22750] loop4: detected capacity change from 0 to 512 [ 655.450566][T22750] EXT4-fs (loop4): orphan cleanup on readonly fs [ 655.451109][T22750] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.7378: corrupted inode cont ** replaying previous printk message ** [ 655.451109][T22750] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.7378: corrupted inode contents [ 655.451134][T22750] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 655.451547][T22750] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 655.451565][T22750] loop4: lost filesystem error report for type 5 error -117 [ 655.453564][T22750] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.7378: corrupted inode contents [ 655.453591][T22750] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 655.453919][T22750] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.7378: mark_inode_dirty error [ 655.453941][T22750] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 655.454278][T22750] EXT4-fs (loop4): 1 orphan inode deleted [ 655.462064][T22750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 655.468558][ T5803] ------------[ cut here ]------------ [ 655.468570][ T5803] sb_rdonly(sb) [ 655.468583][ T5803] WARNING: fs/ext4/ext4_jbd2.c:83 at ext4_journal_check_start+0x24f/0x2b0, CPU#0: kworker/0:5/5803 [ 655.591412][ T5803] Modules linked in: [ 655.597652][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 655.607119][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.617400][ T5803] Workqueue: events ext4_ea_inode_work [ 655.623409][ T5803] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 655.630014][ T5803] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 76 56 09 cc e8 c6 b4 3f ff 41 bf fb ff ff ff eb e0 e8 b9 b4 3f ff eb d3 e8 b2 b4 3f ff 90 <0f> 0b 90 eb c8 e8 a7 b4 3f ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 655.649704][ T5803] RSP: 0000:ffffc90004bc7878 EFLAGS: 00010293 [ 655.655855][ T5803] RAX: ffffffff8287cf6e RBX: ffff8880670e6000 RCX: ffff88802744ddc0 [ 655.663927][ T5803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 655.672351][ T5803] RBP: 0000000000000001 R08: ffff88803dc5440f R09: 1ffff11007b8a881 [ 655.680427][ T5803] R10: dffffc0000000000 R11: ffffed1007b8a882 R12: dffffc0000000000 [ 655.688843][ T5803] R13: 1ffff1100ce1cccf R14: ffff8880670e6678 R15: 0000000000000001 [ 655.697175][ T5803] FS: 0000000000000000(0000) GS:ffff888124f12000(0000) knlGS:0000000000000000 [ 655.706395][ T5803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.713019][ T5803] CR2: 0000001b3011dff8 CR3: 000000000e948000 CR4: 00000000003526f0 [ 655.721051][ T5803] Call Trace: [ 655.724435][ T5803] [ 655.727383][ T5803] __ext4_journal_start_sb+0x14b/0x780 [ 655.732866][ T5803] ext4_evict_inode+0x749/0xfe0 [ 655.737932][ T5803] ? __pfx_ext4_evict_inode+0x10/0x10 [ 655.743321][ T5803] evict+0x624/0xb50 [ 655.747289][ T5803] ? __pfx_evict+0x10/0x10 [ 655.751720][ T5803] ? do_raw_spin_unlock+0xf5/0x210 [ 655.756914][ T5803] ? _raw_spin_unlock+0x28/0x50 [ 655.761778][ T5803] ? iput+0xb84/0xf00 [ 655.765774][ T5803] ? process_scheduled_works+0x97e/0x1630 [ 655.771565][ T5803] ext4_ea_inode_work+0x5c/0x90 [ 655.776425][ T5803] process_scheduled_works+0xc4e/0x1630 [ 655.782107][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.788263][ T5803] ? assign_work+0x3cf/0x5d0 [ 655.792871][ T5803] worker_thread+0xa47/0xfb0 [ 655.797485][ T5803] ? __kthread_parkme+0x71/0x1f0 [ 655.802512][ T5803] kthread+0x388/0x470 [ 655.806589][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 655.811758][ T5803] ? __pfx_kthread+0x10/0x10 [ 655.816359][ T5803] ret_from_fork+0x514/0xb70 [ 655.821047][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 655.826171][ T5803] ? __switch_to+0xc89/0x1420 [ 655.830929][ T5803] ? __pfx_kthread+0x10/0x10 [ 655.835625][ T5803] ret_from_fork_asm+0x1a/0x30 [ 655.840416][ T5803] [ 655.843531][ T5803] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.850813][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 655.860169][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.870216][ T5803] Workqueue: events ext4_ea_inode_work [ 655.875680][ T5803] Call Trace: [ 655.878950][ T5803] [ 655.881871][ T5803] vpanic+0x56c/0xa60 [ 655.885855][ T5803] ? __pfx__printk+0x10/0x10 [ 655.890442][ T5803] ? __pfx_vpanic+0x10/0x10 [ 655.894940][ T5803] ? is_bpf_text_address+0x292/0x2b0 [ 655.900229][ T5803] ? is_bpf_text_address+0x26/0x2b0 [ 655.905436][ T5803] panic+0xc5/0xd0 [ 655.909165][ T5803] ? __pfx_panic+0x10/0x10 [ 655.913583][ T5803] ? ret_from_fork_asm+0x1a/0x30 [ 655.918512][ T5803] __warn+0x315/0x4c0 [ 655.922481][ T5803] ? ext4_journal_check_start+0x24f/0x2b0 [ 655.928199][ T5803] ? ext4_journal_check_start+0x24f/0x2b0 [ 655.933910][ T5803] __report_bug+0x276/0x570 [ 655.938485][ T5803] ? ext4_journal_check_start+0x24f/0x2b0 [ 655.944199][ T5803] ? __pfx___report_bug+0x10/0x10 [ 655.949217][ T5803] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 655.955369][ T5803] ? __lock_acquire+0x6df/0x2e50 [ 655.960317][ T5803] ? ext4_journal_check_start+0x24f/0x2b0 [ 655.966032][ T5803] report_bug+0x16a/0x220 [ 655.970356][ T5803] ? ext4_journal_check_start+0x24f/0x2b0 [ 655.976065][ T5803] ? ext4_journal_check_start+0x251/0x2b0 [ 655.981776][ T5803] handle_bug+0x9c/0x200 [ 655.986013][ T5803] exc_invalid_op+0x1a/0x50 [ 655.990504][ T5803] asm_exc_invalid_op+0x1a/0x20 [ 655.995339][ T5803] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 656.001658][ T5803] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 76 56 09 cc e8 c6 b4 3f ff 41 bf fb ff ff ff eb e0 e8 b9 b4 3f ff eb d3 e8 b2 b4 3f ff 90 <0f> 0b 90 eb c8 e8 a7 b4 3f ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 656.021245][ T5803] RSP: 0000:ffffc90004bc7878 EFLAGS: 00010293 [ 656.027303][ T5803] RAX: ffffffff8287cf6e RBX: ffff8880670e6000 RCX: ffff88802744ddc0 [ 656.035259][ T5803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 656.043217][ T5803] RBP: 0000000000000001 R08: ffff88803dc5440f R09: 1ffff11007b8a881 [ 656.051172][ T5803] R10: dffffc0000000000 R11: ffffed1007b8a882 R12: dffffc0000000000 [ 656.059127][ T5803] R13: 1ffff1100ce1cccf R14: ffff8880670e6678 R15: 0000000000000001 [ 656.067098][ T5803] ? ext4_journal_check_start+0x24e/0x2b0 [ 656.072832][ T5803] ? ext4_journal_check_start+0x24e/0x2b0 [ 656.078551][ T5803] __ext4_journal_start_sb+0x14b/0x780 [ 656.084016][ T5803] ext4_evict_inode+0x749/0xfe0 [ 656.088879][ T5803] ? __pfx_ext4_evict_inode+0x10/0x10 [ 656.094238][ T5803] evict+0x624/0xb50 [ 656.098144][ T5803] ? __pfx_evict+0x10/0x10 [ 656.102561][ T5803] ? do_raw_spin_unlock+0xf5/0x210 [ 656.107675][ T5803] ? _raw_spin_unlock+0x28/0x50 [ 656.112516][ T5803] ? iput+0xb84/0xf00 [ 656.116500][ T5803] ? process_scheduled_works+0x97e/0x1630 [ 656.122208][ T5803] ext4_ea_inode_work+0x5c/0x90 [ 656.127052][ T5803] process_scheduled_works+0xc4e/0x1630 [ 656.132613][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.138583][ T5803] ? assign_work+0x3cf/0x5d0 [ 656.143163][ T5803] worker_thread+0xa47/0xfb0 [ 656.147747][ T5803] ? __kthread_parkme+0x71/0x1f0 [ 656.152679][ T5803] kthread+0x388/0x470 [ 656.156728][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 656.161819][ T5803] ? __pfx_kthread+0x10/0x10 [ 656.166396][ T5803] ret_from_fork+0x514/0xb70 [ 656.170983][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 656.176082][ T5803] ? __switch_to+0xc89/0x1420 [ 656.180754][ T5803] ? __pfx_kthread+0x10/0x10 [ 656.185329][ T5803] ret_from_fork_asm+0x1a/0x30 [ 656.190099][ T5803] [ 656.193370][ T5803] Kernel Offset: disabled [ 656.197681][ T5803] Rebooting in 86400 seconds..