last executing test programs: 2m54.669689616s ago: executing program 1 (id=11970): syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 2m52.78695023s ago: executing program 1 (id=11991): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m50.567166144s ago: executing program 1 (id=12013): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) 2m50.277675533s ago: executing program 1 (id=12016): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000002240)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@nodiscard}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x621f, &(0x7f000000c5c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) 2m48.710045547s ago: executing program 1 (id=12042): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes '], 0xb) 2m47.339976718s ago: executing program 1 (id=12061): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 2m46.416859869s ago: executing program 32 (id=12061): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 3.355861521s ago: executing program 2 (id=14401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x4, 0x6, 0x0, 0x0, 0x2}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20068004}, 0x8000) 3.250150372s ago: executing program 4 (id=14403): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x34, 0x0, 0x0, &(0x7f0000000280)=[{0xffffffffffffff92, 0x29, 0x2, "053127d5534ce5d0fe4b210a1700000000000000000000000000d95b58dbd1c7ceac7c575def28f9e394db91db33870ffe9bc6f061c915ef4f62651720e1fa0a6efc2b55dc92dc147d89b6a3dcf5ecf8f02aaf23de4da108ba3bebb08819fba88fa725b083251b561759f4342056c5212fa0781919074e7f0e0850d1e113b0397a98cb3b704f841797ec885118990e084a7bccbe65d79a838dd6aea10850bc270395649c0fabdde77221676a90ec136ec9d757e8d7edf46d6363e2c358a7fea9ebb331"}], 0x2}}], 0x1, 0x4c8d4) 3.030427983s ago: executing program 2 (id=14407): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\b', 0x4}, {&(0x7f0000000280)="ce", 0x1}], 0x3) 2.853796801s ago: executing program 4 (id=14408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xc0}}, 0x40000) 2.709226912s ago: executing program 2 (id=14410): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.384552163s ago: executing program 4 (id=14412): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x7, &(0x7f0000000240)=[{0x14, '\x00', @st={0x4, [{0x0, @uvalue=0x3}, {0x2, @svalue=0x27}, {0x1, @uvalue=0x134c}, {0x0, @uvalue=0x7}]}, 0x13}]}) 2.205516507s ago: executing program 2 (id=14415): prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) memfd_secret(0x80000) 2.07688839s ago: executing program 4 (id=14417): r0 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xaeq\x7f\xb7[\x1a\xa9\xfd\xfa\xad\xd1G\xa2^\bP\xab\xc4\t%[z\xb2md\xc8\x85hX\xa9%\f\x1ae\xe0 \x00\x00\x00\xfb\xff\x04\x00\x00\x00G\xd9,\xe2\x82\x1eb;(\xb9\x00\x00\x00\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xa4`\xd8\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.038206975s ago: executing program 5 (id=14419): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000a40)={'netdevsim0\x00', @ifru_map={0x3, 0x4, 0xff, 0x7, 0x7, 0x4}}) 1.988142399s ago: executing program 6 (id=14420): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 1.987853587s ago: executing program 2 (id=14421): r0 = syz_open_dev$vim2m(&(0x7f0000000e00), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000e40)={0x1, @vbi={0xc, 0x9, 0x8, 0x3231564e, [0x10001, 0xe], [0x6e5c, 0x6], 0x1}}) 1.782141397s ago: executing program 5 (id=14424): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) 1.751740603s ago: executing program 4 (id=14425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42024}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 1.707750104s ago: executing program 6 (id=14426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0xffffffff}, 0x48) 1.697102781s ago: executing program 2 (id=14427): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 1.521564779s ago: executing program 5 (id=14430): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.495891332s ago: executing program 6 (id=14431): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a31847123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 1.47478481s ago: executing program 4 (id=14432): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000100)={0xfffffffffffffffe, 0x200000400000005, 0x6}) 1.446576992s ago: executing program 3 (id=14433): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x12) 1.400446685s ago: executing program 0 (id=14434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 1.213597445s ago: executing program 3 (id=14435): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) 901.541824ms ago: executing program 3 (id=14436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 893.53849ms ago: executing program 5 (id=14437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68020000000501040000000000000000020000065402010003000000000000b04d0b04000100050073797a300000000000000000000000000000000000000000000000000000000096d4fd6246bdc42b7f9e10dab6626b776b7002b182016800000000000000000069d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a01fb524173010001000200000065050000faff020000000000060000000c00010003000000f0760000060006000300000000000000000006"], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) 781.686982ms ago: executing program 6 (id=14438): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$UHID_INPUT(r0, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) 760.560252ms ago: executing program 0 (id=14439): r0 = syz_open_dev$video(&(0x7f0000000240), 0x2000000003ff, 0x40000) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) 676.881027ms ago: executing program 3 (id=14440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0x100000001, 0x4) 633.617981ms ago: executing program 5 (id=14441): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x58, 0x4855}, 0x24000052) 542.290697ms ago: executing program 6 (id=14442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000087000000850000000d000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 489.462825ms ago: executing program 0 (id=14443): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) 451.561962ms ago: executing program 3 (id=14444): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) 384.063088ms ago: executing program 5 (id=14445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x19038}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000d008}, 0x8844) 245.681625ms ago: executing program 3 (id=14446): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xffc9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a40102030109021b000142d8000a0904"], &(0x7f0000000140)={0x21, 0x0, 0x0, 0x0}) 212.082454ms ago: executing program 0 (id=14447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@generic="f3dc"]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 211.14866ms ago: executing program 6 (id=14448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x20, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) 107.837446ms ago: executing program 0 (id=14449): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=14450): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x60000003, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): 63.254403][ T2756] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1163.293976][ T2756] BTRFS info (device loop2): using sha256 checksum algorithm [ 1163.511747][ T2756] BTRFS info (device loop2): enabling ssd optimizations [ 1163.534266][ T2756] BTRFS info (device loop2): turning on async discard [ 1163.573616][ T2756] BTRFS info (device loop2): enabling free space tree [ 1163.759952][ T2817] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1164.342022][ T5621] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1164.480758][ T2853] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12749'. [ 1164.491074][ T2853] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12749'. [ 1164.515671][ T5759] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1164.523420][ T2853] netlink: 'syz.6.12749': attribute type 5 has an invalid length. [ 1164.557487][ T2853] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12749'. [ 1164.575234][ T2856] loop5: detected capacity change from 0 to 256 [ 1164.706006][ T5759] usb 5-1: Using ep0 maxpacket: 8 [ 1164.733187][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1164.791030][ T5759] usb 5-1: string descriptor 0 read error: -22 [ 1164.821490][ T5759] usb 5-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 1164.856353][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.956239][ T5759] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1165.061622][ T2872] loop3: detected capacity change from 0 to 256 [ 1165.319001][ T1010] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1165.343849][ T5759] usb 5-1: USB disconnect, device number 14 [ 1165.487350][ T1010] usb 7-1: Using ep0 maxpacket: 32 [ 1165.522937][ T1010] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1165.526967][ T2887] loop3: detected capacity change from 0 to 1024 [ 1165.552791][ T1010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.585872][ T1010] usb 7-1: config 0 descriptor?? [ 1165.657188][ T1010] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1165.955983][ T2898] loop3: detected capacity change from 0 to 512 [ 1165.993939][ T1010] gspca_nw80x: reg_r err -71 [ 1166.043751][ T1010] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 1166.052748][ T2898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.076830][ T1010] usb 7-1: USB disconnect, device number 4 [ 1166.124526][ T2898] ext4 filesystem being mounted at /2150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.155318][ T2898] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.12764: corrupted xattr block 33: overlapping e_value [ 1166.170048][ T2898] EXT4-fs (loop3): Remounting filesystem read-only [ 1166.235551][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.250939][ T2913] loop2: detected capacity change from 0 to 512 [ 1166.336917][ T2913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.377511][ T2913] ext4 filesystem being mounted at /2114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.467245][ T2926] netlink: zone id is out of range [ 1166.636888][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.233606][ T2964] netlink: 'syz.4.12794': attribute type 30 has an invalid length. [ 1167.293072][ T2963] loop5: detected capacity change from 0 to 2048 [ 1167.341099][ T2963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.841900][ T2989] loop4: detected capacity change from 0 to 256 [ 1168.852638][ T3029] netlink: 'syz.5.12826': attribute type 21 has an invalid length. [ 1168.868997][ T2984] loop3: detected capacity change from 0 to 32768 [ 1168.881249][ T3029] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12826'. [ 1168.904711][ T2984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12803 (2984) [ 1168.929639][ T3029] netlink: 'syz.5.12826': attribute type 4 has an invalid length. [ 1168.961832][ T3029] netlink: 'syz.5.12826': attribute type 3 has an invalid length. [ 1168.975288][ T2984] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1169.002073][ T3029] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12826'. [ 1169.013598][ T2984] BTRFS info (device loop3): using sha256 checksum algorithm [ 1169.150993][ T2984] BTRFS info (device loop3): enabling ssd optimizations [ 1169.164110][ T2984] BTRFS info (device loop3): turning on async discard [ 1169.182140][ T2984] BTRFS info (device loop3): enabling free space tree [ 1169.301005][ T3052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12831'. [ 1169.372901][ T31] audit: type=1326 audit(2000000606.501:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.381281][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12835'. [ 1169.483406][ T5620] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1169.483568][ T3052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1169.550289][ T31] audit: type=1326 audit(2000000606.501:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.602600][ T31] audit: type=1326 audit(2000000606.543:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.651738][ T31] audit: type=1326 audit(2000000606.543:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.677737][ T31] audit: type=1326 audit(2000000606.543:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.703523][ T31] audit: type=1326 audit(2000000606.543:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.746752][ T31] audit: type=1326 audit(2000000606.543:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1169.838602][ T31] audit: type=1326 audit(2000000606.543:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1170.004138][ T31] audit: type=1326 audit(2000000606.554:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.12833" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1170.532559][ T3090] loop5: detected capacity change from 0 to 2048 [ 1170.553921][ T3092] netlink: 'syz.0.12850': attribute type 32 has an invalid length. [ 1170.623968][ T3090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1170.648514][ T3097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12852'. [ 1170.905883][ T3102] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12854'. [ 1171.362232][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12858'. [ 1171.542744][ T3126] binder: 3125:3126 ioctl 40046210 9999999999999999 returned -14 [ 1171.712787][ T3130] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1171.724724][ T3134] openvswitch: netlink: Actions may not be safe on all matching packets [ 1171.885618][ T3136] loop6: detected capacity change from 0 to 512 [ 1171.962303][ T3136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.026965][ T3136] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.116612][ T3151] loop4: detected capacity change from 0 to 256 [ 1172.126417][ T1010] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1172.150929][ T3136] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.12871: invalid size [ 1172.288303][ T5759] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1172.317845][ T1010] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1172.348782][ T1010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.380777][ T837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.383525][ T1010] usb 1-1: Product: syz [ 1172.427707][ T1010] usb 1-1: Manufacturer: syz [ 1172.449201][ T1010] usb 1-1: SerialNumber: syz [ 1172.478938][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 1172.488107][ T1010] usb 1-1: config 0 descriptor?? [ 1172.508986][ T5759] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1172.532104][ T1010] ch341 1-1:0.0: ch341-uart converter detected [ 1172.553913][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1172.584053][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1172.618702][ T5759] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1172.657603][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.695033][ T5759] usb 3-1: config 0 descriptor?? [ 1172.732940][ T5759] pxrc 3-1:0.0: Could not find endpoint [ 1172.758195][ T5759] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1172.804945][ T3173] loop6: detected capacity change from 0 to 64 [ 1172.877605][ T3175] nbd: must specify at least one socket [ 1172.918479][ T1010] usb 1-1: failed to send control message: -71 [ 1172.940423][ T1010] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1172.960411][ T5355] usb 3-1: USB disconnect, device number 28 [ 1172.997556][ T1010] usb 1-1: USB disconnect, device number 10 [ 1173.043450][ T1010] ch341 1-1:0.0: device disconnected [ 1173.147780][ T3181] loop6: detected capacity change from 0 to 1764 [ 1173.324913][ T3188] loop4: detected capacity change from 0 to 2048 [ 1173.351374][ T3188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1173.474414][ T3188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.608740][ T3188] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1173.787220][ T3221] loop3: detected capacity change from 0 to 64 [ 1173.817364][ T3216] loop6: detected capacity change from 0 to 256 [ 1173.872297][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.904835][ T3216] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1174.012588][ T5355] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1174.134588][ T3216] exFAT-fs (loop6): error, in sector 160, dentry 12 should be unused, but 0x85 [ 1174.144925][ T3216] exFAT-fs (loop6): Filesystem has been set read-only [ 1174.189396][ T3232] xt_TCPMSS: Only works on TCP SYN packets [ 1174.211927][ T5355] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1174.242168][ T5355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.285478][ T5355] usb 6-1: config 0 descriptor?? [ 1174.316045][ T3237] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12912'. [ 1174.594107][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1174.670895][ T3251] loop6: detected capacity change from 0 to 256 [ 1174.725843][ T5355] ath6kl: Failed to read usb control message: -71 [ 1174.751947][ T5355] ath6kl: Unable to read the bmi data from the device: -71 [ 1174.762640][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1174.773376][ T3255] Cannot find del_set index 4 as target [ 1174.780709][ T5759] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1174.782789][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1174.799963][ T5355] ath6kl: Unable to recv target info: -71 [ 1174.835180][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.851102][ T5355] ath6kl: Failed to init ath6kl core: -71 [ 1174.861297][ T24] usb 3-1: Product: syz [ 1174.868865][ T5355] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1174.881052][ T24] usb 3-1: Manufacturer: syz [ 1174.890408][ T24] usb 3-1: SerialNumber: syz [ 1174.912595][ T5355] usb 6-1: USB disconnect, device number 123 [ 1174.965698][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 1174.979884][ T5759] usb 4-1: config 1 interface 0 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 32 [ 1174.990684][ T5759] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1175.010536][ T5759] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1175.034809][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.053579][ T5759] usb 4-1: Product: syz [ 1175.063201][ T5759] usb 4-1: Manufacturer: syz [ 1175.078682][ T5759] usb 4-1: SerialNumber: syz [ 1175.106012][ T3245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1175.147997][ T24] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1175.258147][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1175.332684][ T24] usb 3-1: USB disconnect, device number 29 [ 1175.344172][ T5759] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 250 proto 1 vid 0x0525 pid 0xA4A8 [ 1175.391089][ T5759] usb 4-1: USB disconnect, device number 20 [ 1175.414800][ T5759] usblp0: removed [ 1175.453503][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.498931][ T1010] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1175.672013][ T1010] usb 7-1: Using ep0 maxpacket: 32 [ 1175.714577][ T1010] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1175.757446][ T1010] usb 7-1: config 0 has no interface number 0 [ 1175.792254][ T1010] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1175.806212][ T1010] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1175.844776][ T1010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.887493][ T1010] usb 7-1: Product: syz [ 1175.907750][ T1010] usb 7-1: Manufacturer: syz [ 1175.929346][ T1010] usb 7-1: SerialNumber: syz [ 1175.967743][ T1010] usb 7-1: config 0 descriptor?? [ 1176.208465][ T1010] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1176.233902][ T1010] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1176.269657][ T3297] xt_policy: output policy not valid in PREROUTING and INPUT [ 1176.281190][ T1010] usb 7-1: USB disconnect, device number 5 [ 1176.432130][ T5774] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1176.626089][ T5774] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1176.653317][ T5774] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1176.691216][ T5774] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.713655][ T5774] usb 3-1: config 220 has no interface number 2 [ 1176.731549][ T5774] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1176.788587][ T5774] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1176.811409][ T5774] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1176.844112][ T5774] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1176.881862][ T5774] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1176.902529][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.934677][ T5774] usb 3-1: Product: syz [ 1176.950708][ T5774] usb 3-1: Manufacturer: syz [ 1176.970262][ T5774] usb 3-1: SerialNumber: syz [ 1177.051443][ T3328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1177.171449][ T3329] loop5: detected capacity change from 0 to 2048 [ 1177.199732][ T3329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1177.234641][ T5774] usb 3-1: selecting invalid altsetting 0 [ 1177.273024][ T3335] netlink: 'syz.4.12960': attribute type 11 has an invalid length. [ 1177.281279][ T5774] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1177.305388][ T5774] uvcvideo 3-1:220.0: No valid video chain found. [ 1177.332448][ T3335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12960'. [ 1177.343036][ T3337] loop0: detected capacity change from 0 to 64 [ 1177.360502][ T5774] usb 3-1: selecting invalid altsetting 0 [ 1177.372664][ T5774] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1177.450947][ T5774] usb 3-1: USB disconnect, device number 30 [ 1177.536162][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12963'. [ 1177.579354][ T3343] netlink: 148 bytes leftover after parsing attributes in process `syz.5.12963'. [ 1177.800791][ T3350] unsupported nlmsg_type 40 [ 1177.926979][ T3352] loop6: detected capacity change from 0 to 2048 [ 1177.964866][ T3352] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1178.055920][ T3352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1178.351637][ T3360] loop5: detected capacity change from 0 to 4096 [ 1178.385965][ T3360] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1178.416273][ T3370] netlink: 'syz.3.12976': attribute type 3 has an invalid length. [ 1178.459748][ T3370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.520560][ T3360] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1180.449831][ T3447] loop6: detected capacity change from 0 to 4096 [ 1180.469227][ T3447] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1180.623513][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1180.761102][ T3464] loop2: detected capacity change from 0 to 2048 [ 1180.788608][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1180.807510][ T3464] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1180.832697][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1180.858841][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.874368][ T3464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1180.903438][ T24] usb 1-1: config 0 has no interface number 0 [ 1180.934675][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1180.969131][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.006513][ T24] usb 1-1: Product: syz [ 1181.020549][ T24] usb 1-1: Manufacturer: syz [ 1181.026916][ T24] usb 1-1: SerialNumber: syz [ 1181.064372][ T24] usb 1-1: config 0 descriptor?? [ 1181.111076][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1181.134412][ T3480] x_tables: unsorted underflow at hook 1 [ 1181.304271][ T24] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1181.330810][ T24] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 1181.544921][ T24] usb 1-1: USB disconnect, device number 11 [ 1181.590154][ T3499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13041'. [ 1181.599636][ T3499] netlink: 260 bytes leftover after parsing attributes in process `syz.4.13041'. [ 1181.605776][ T3496] bond2: option miimon: invalid value (18446744073709551607) [ 1181.654467][ T3496] bond2: option miimon: allowed values 0 - 2147483647 [ 1181.677178][ T3496] bond2 (unregistering): Released all slaves [ 1182.784330][ T3552] tc_dump_action: action bad kind [ 1183.124159][ T3567] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.13074' sets config #-1 [ 1183.494685][ T5863] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1183.662327][ T5759] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1183.666639][ T5863] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1183.699759][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.719043][ T5863] usb 3-1: Product: syz [ 1183.724941][ T5863] usb 3-1: Manufacturer: syz [ 1183.734614][ T5863] usb 3-1: SerialNumber: syz [ 1183.748698][ T5863] usb 3-1: config 0 descriptor?? [ 1183.750604][ T1010] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1183.762499][ T5863] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1183.823842][ T5759] usb 7-1: Using ep0 maxpacket: 32 [ 1183.832393][ T5759] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1183.891672][ T5759] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1183.926273][ T5759] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1183.944367][ T5759] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1183.961727][ T1010] usb 5-1: Using ep0 maxpacket: 32 [ 1183.982401][ T1010] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1183.992305][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.027930][ T5759] usb 7-1: Product: syz [ 1184.032724][ T1010] usb 5-1: config 5 has an invalid interface number: 225 but max is 0 [ 1184.047168][ T5759] usb 7-1: Manufacturer: syz [ 1184.056617][ T1010] usb 5-1: config 5 has no interface number 0 [ 1184.066153][ T5759] usb 7-1: SerialNumber: syz [ 1184.089963][ T1010] usb 5-1: config 5 interface 225 has no altsetting 0 [ 1184.102430][ T3606] loop3: detected capacity change from 0 to 128 [ 1184.103174][ T5759] usb 7-1: config 0 descriptor?? [ 1184.124305][ T1010] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=ce.f6 [ 1184.148145][ T1010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.163533][ T5863] gspca_sunplus: reg_w_riv err -71 [ 1184.170385][ T1010] usb 5-1: Product: syz [ 1184.175577][ T1010] usb 5-1: Manufacturer: syz [ 1184.194873][ T5863] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1184.214772][ T1010] usb 5-1: SerialNumber: syz [ 1184.242325][ T5863] usb 3-1: USB disconnect, device number 31 [ 1184.463020][ T1010] ldusb 5-1:5.225: Interrupt in endpoint not found [ 1184.527053][ T1010] usb 5-1: USB disconnect, device number 15 [ 1184.553713][ T5759] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 1184.585056][ T5759] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1184.637341][ T5759] usb 7-1: USB disconnect, device number 6 [ 1184.732694][ T3622] loop3: detected capacity change from 0 to 256 [ 1184.975218][ T3632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13105'. [ 1184.987667][ T3635] loop0: detected capacity change from 0 to 8 [ 1185.076574][ T3637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13108'. [ 1185.428455][ T3649] loop2: detected capacity change from 0 to 1764 [ 1185.498887][ T3649] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1185.756019][ T3667] netlink: 92 bytes leftover after parsing attributes in process `syz.5.13123'. [ 1185.882815][ T3669] loop0: detected capacity change from 0 to 2048 [ 1185.938977][ T3669] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1185.994895][ T3669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1186.566660][ T3700] IPv6: NLM_F_CREATE should be specified when creating new route [ 1186.844782][ T3714] loop0: detected capacity change from 0 to 512 [ 1186.867440][ T3714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1186.923139][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.980030][ T3721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13148'. [ 1187.013495][ T3714] ext4 filesystem being mounted at /2176/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.138505][ T3725] loop3: detected capacity change from 0 to 2048 [ 1187.222732][ T3733] overlayfs: conflicting options: nfs_export=on,index=off [ 1187.235986][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.302559][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.324719][ T3741] program syz.4.13159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1187.368653][ T3725] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1187.586099][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.588137][ T3748] loop0: detected capacity change from 0 to 2048 [ 1187.688707][ T3748] udf: Bad value for 'volume' [ 1187.759697][ T3748] gfs2: Unexpected value for 'discard' [ 1187.948400][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1188.112478][ T24] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 1188.157569][ T24] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1188.168272][ T1010] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1188.170211][ T24] usb 5-1: config 0 has no interface number 0 [ 1188.196870][ T24] usb 5-1: too many endpoints for config 0 interface 120 altsetting 101: 116, using maximum allowed: 30 [ 1188.212357][ T24] usb 5-1: config 0 interface 120 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 1188.322078][ T24] usb 5-1: config 0 interface 120 has no altsetting 0 [ 1188.353017][ T1010] usb 3-1: Using ep0 maxpacket: 32 [ 1188.354967][ T24] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1188.385885][ T1010] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1188.395894][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.432921][ T24] usb 5-1: config 0 descriptor?? [ 1188.446521][ T1010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1188.446535][ T24] ftdi_sio 5-1:0.120: FTDI USB Serial Device converter detected [ 1188.449728][ T24] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1188.496619][ T1010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1188.548475][ T1010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1188.596167][ T1010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1188.636257][ T1010] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1188.653553][ T1010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.667929][ T1010] usb 3-1: Product: syz [ 1188.691356][ T1010] usb 3-1: Manufacturer: syz [ 1188.696016][ T1010] usb 3-1: SerialNumber: syz [ 1188.721018][ T1010] usb 3-1: config 0 descriptor?? [ 1188.727517][ T24] usb 5-1: USB disconnect, device number 16 [ 1188.775357][ T24] ftdi_sio 5-1:0.120: device disconnected [ 1189.135068][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.146463][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.158772][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.169367][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.188640][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.210674][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.255247][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.266760][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.282031][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.308481][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.338832][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.370471][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.388024][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.401281][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.441598][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.464018][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.478096][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.501114][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.532782][ T1010] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.563066][ T1010] input input78: Timeout waiting for response from device. [ 1189.608215][ T1010] usb 3-1: USB disconnect, device number 32 [ 1189.644355][ T3813] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13193'. [ 1189.721521][ T3813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1189.931779][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.065354][ T3828] loop4: detected capacity change from 0 to 1024 [ 1190.707806][ T3854] loop3: detected capacity change from 0 to 4096 [ 1190.745257][ T3854] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1190.871415][ T3854] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1191.246756][ T3881] netlink: 'syz.2.13224': attribute type 2 has an invalid length. [ 1191.312559][ T3883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.367558][ T3885] netlink: 'syz.0.13227': attribute type 1 has an invalid length. [ 1191.534333][ T31] audit: type=1326 audit(2000000885.763:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.2.13231" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8f19ce59 code=0x7ffc0000 [ 1191.641669][ T31] audit: type=1326 audit(2000000885.763:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.2.13231" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8f19ce59 code=0x7ffc0000 [ 1191.763858][ T31] audit: type=1326 audit(2000000885.795:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.2.13231" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fee8f19ce59 code=0x7ffc0000 [ 1191.772738][ T3892] loop6: detected capacity change from 0 to 4096 [ 1191.833023][ T3903] netlink: 'syz.2.13236': attribute type 1 has an invalid length. [ 1191.876092][ T31] audit: type=1326 audit(2000000885.795:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.2.13231" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8f19ce59 code=0x7ffc0000 [ 1191.995480][ T31] audit: type=1326 audit(2000000885.795:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3891 comm="syz.2.13231" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8f19ce59 code=0x7ffc0000 [ 1192.000094][ T3892] ntfs3(loop6): ino=19, mi_enum_attr [ 1192.044572][ T3892] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1192.273079][ T5863] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1192.440790][ T5863] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1192.473215][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.501810][ T5774] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1192.505431][ T5863] usb 1-1: Product: syz [ 1192.534777][ T5863] usb 1-1: Manufacturer: syz [ 1192.548980][ T5863] usb 1-1: SerialNumber: syz [ 1192.571309][ T5863] usb 1-1: config 0 descriptor?? [ 1192.613402][ T5863] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1192.672432][ T5774] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.708509][ T5774] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1192.745872][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.812389][ T5774] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1192.993516][ T5863] gspca_m5602: Failed to find a sensor [ 1193.010928][ T5863] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1193.040619][ T5863] usb 1-1: USB disconnect, device number 12 [ 1193.382682][ T3959] loop3: detected capacity change from 0 to 2048 [ 1193.452024][ T3966] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1193.505449][ T3960] bond6: option min_links: invalid value (18446744073709551608) [ 1193.555565][ T3960] bond6: option min_links: allowed values 0 - 2147483647 [ 1193.611889][ T3960] bond6 (unregistering): Released all slaves [ 1193.752935][ T3972] loop2: detected capacity change from 0 to 1764 [ 1193.822175][ T3972] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1194.010662][ T5774] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1194.032343][ T5774] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1194.053294][ T5774] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 1194.080670][ T5774] usb 6-1: USB disconnect, device number 124 [ 1194.094721][ T3982] kAFS: unable to lookup cell '.,' [ 1194.156887][ T3987] sctp: [Deprecated]: syz.2.13275 (pid 3987) Use of int in maxseg socket option. [ 1194.156887][ T3987] Use struct sctp_assoc_value instead [ 1194.485231][ T3990] loop0: detected capacity change from 0 to 4096 [ 1194.537977][ T4001] xt_l2tp: wrong L2TP version: 0 [ 1194.554415][ T4002] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1195.166742][ T31] audit: type=1400 audit(2000000889.574:2180): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4024 comm="syz.2.13296" [ 1195.220314][ T4029] loop4: detected capacity change from 0 to 256 [ 1195.775407][ T4050] loop3: detected capacity change from 0 to 1024 [ 1195.817536][ T4050] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1196.005437][ T4062] 9p: Unknown access argument 18446744073709551615: -34 [ 1196.542989][ T4076] bond1: entered promiscuous mode [ 1196.557976][ T4076] bond1: entered allmulticast mode [ 1196.568066][ T4076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1196.728437][ T4064] loop0: detected capacity change from 0 to 32768 [ 1196.793435][ T4064] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt [ 1196.793435][ T4064] [ 1196.876730][ T4085] loop3: detected capacity change from 0 to 4096 [ 1196.903439][ T4064] ERROR: (device loop0): remounting filesystem as read-only [ 1196.936251][ T4085] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1196.990244][ T4085] ntfs3(loop3): Failed to load $Extend (-22). [ 1197.010354][ T4085] ntfs3(loop3): Failed to initialize $Extend. [ 1197.084041][ T5863] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1197.128562][ T4097] loop5: detected capacity change from 0 to 1024 [ 1197.178485][ T4099] binder: 4098:4099 ioctl c0306201 2000000009c0 returned -14 [ 1197.215935][ T4097] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 1197.275302][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 1197.311885][ T5863] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1197.360896][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 1197.428912][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 29, changing to 8 [ 1197.478309][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1974, setting to 1024 [ 1197.529082][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.603068][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1197.648008][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.682969][ T5863] usb 3-1: Product: syz [ 1197.697404][ T5863] usb 3-1: Manufacturer: syz [ 1197.718852][ T5863] usb 3-1: SerialNumber: syz [ 1197.754838][ T5863] usb 3-1: config 0 descriptor?? [ 1197.773040][ T4090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.846143][ T4120] netlink: 'syz.4.13342': attribute type 21 has an invalid length. [ 1197.900163][ T4124] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13345'. [ 1198.059119][ T5863] rc_core: IR keymap rc-xbox-dvd not found [ 1198.089839][ T5863] Registered IR keymap rc-empty [ 1198.111699][ T5863] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1198.144260][ T4135] loop3: detected capacity change from 0 to 128 [ 1198.162499][ T5863] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input79 [ 1198.256339][ T4135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1198.269639][ T4135] ext4 filesystem being mounted at /2249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.322383][ T5863] usb 3-1: USB disconnect, device number 33 [ 1198.322474][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1198.335661][ T4130] bond1: option updelay: invalid value (18446744073709551609) [ 1198.397591][ T4130] bond1: option updelay: allowed values 0 - 2147483647 [ 1198.459932][ T4130] bond1 (unregistering): Released all slaves [ 1198.510654][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.874445][ T4155] loop4: detected capacity change from 0 to 2048 [ 1198.910863][ T4155] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1198.955981][ T4155] NILFS (loop4): mounting unchecked fs [ 1199.008236][ T4155] NILFS (loop4): recovery complete [ 1199.035080][ T4164] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1199.052699][ T4162] loop6: detected capacity change from 0 to 256 [ 1199.070014][ T4162] exfat: Deprecated parameter 'namecase' [ 1199.091263][ T4162] exfat: Deprecated parameter 'namecase' [ 1199.120150][ T4162] exfat: Deprecated parameter 'namecase' [ 1199.259446][ T4162] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1199.416070][ T4166] loop0: detected capacity change from 0 to 4096 [ 1199.468836][ T4166] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1199.563729][ T4166] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1199.885395][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13372'. [ 1199.900633][ T4183] overlayfs: missing 'workdir' [ 1200.231811][ T4147] loop3: detected capacity change from 0 to 32768 [ 1200.297000][ T4147] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.317694][ T4199] loop4: detected capacity change from 0 to 512 [ 1200.432106][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.486588][ T4199] ext4 filesystem being mounted at /2188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.572830][ T4147] XFS (loop3): Ending clean mount [ 1200.747685][ T5620] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.885042][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.985219][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1201.021658][ T4218] loop2: detected capacity change from 0 to 4096 [ 1201.056970][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1201.090820][ T4218] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1201.159462][ T4229] loop4: detected capacity change from 0 to 512 [ 1201.171240][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1201.303659][ T4218] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1201.320982][ T4229] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1201.341360][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1201.347855][ C0] EXT4-fs (loop4): initial error at time 2000000896: mb_free_blocks:2049: inode 11: block 64 [ 1201.358216][ C0] EXT4-fs (loop4): last error at time 2000000896: mb_free_blocks:2049: inode 11: block 64 [ 1201.411753][ T4229] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.13387: corrupted inode contents [ 1201.494614][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1201.497298][ T4229] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #11: comm syz.4.13387: mark_inode_dirty error [ 1201.551515][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1201.552129][ T4229] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.13387: invalid indirect mapped block 1 (level 1) [ 1201.627897][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1201.628372][ T4229] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.13387: corrupted inode contents [ 1201.685123][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1201.691921][ T4229] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1201.833512][ T4229] loop4: lost filesystem error report for type 5 error -117 [ 1201.873688][ T4229] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.13387: corrupted inode contents [ 1201.975829][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1202.025100][ T4229] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.13387: mark_inode_dirty error [ 1202.077718][ T4229] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1202.115464][ T4229] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1202.179791][ T4229] loop4: lost filesystem error report for type 5 error -117 [ 1202.181225][ T4229] EXT4-fs (loop4): 1 truncate cleaned up [ 1202.241410][ T4229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.435590][ T4229] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.13387: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1202.629670][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.707786][ T4270] loop2: detected capacity change from 0 to 4096 [ 1202.712615][ T4270] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1202.745610][ T4270] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1203.012830][ T31] audit: type=1326 audit(2000000897.815:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.0.13414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1203.099690][ T4286] loop4: detected capacity change from 0 to 736 [ 1203.120925][ T31] audit: type=1326 audit(2000000897.815:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.0.13414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1203.232858][ T31] audit: type=1326 audit(2000000897.826:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.0.13414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1203.339251][ T31] audit: type=1326 audit(2000000897.826:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.0.13414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1203.386066][ T4296] sctp: [Deprecated]: syz.3.13420 (pid 4296) Use of int in max_burst socket option deprecated. [ 1203.386066][ T4296] Use struct sctp_assoc_value instead [ 1203.409814][ T31] audit: type=1326 audit(2000000897.826:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4283 comm="syz.0.13414" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1203.747127][ T4312] loop0: detected capacity change from 0 to 16 [ 1203.812315][ T4312] erofs (device loop0): mounted with root inode @ nid 36. [ 1203.885035][ T4312] erofs (device loop0): read error -117 @ 0 of nid 36 [ 1203.944080][ T4321] team0: entered promiscuous mode [ 1203.969274][ T4321] team_slave_0: entered promiscuous mode [ 1203.987540][ T4321] team_slave_1: entered promiscuous mode [ 1204.194156][ T5774] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1204.243575][ T4333] loop3: detected capacity change from 0 to 2048 [ 1204.277694][ T4333] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1204.310730][ T4336] netlink: 15672 bytes leftover after parsing attributes in process `syz.6.13439'. [ 1204.367013][ T4333] syz.3.13438: attempt to access beyond end of device [ 1204.367013][ T4333] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1204.382692][ T4342] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1204.391393][ T5774] usb 6-1: Using ep0 maxpacket: 16 [ 1204.427406][ T5774] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 1204.456270][ T5774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.477763][ T4333] syz.3.13438: attempt to access beyond end of device [ 1204.477763][ T4333] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 1204.500103][ T5774] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1204.521344][ T5774] usb 6-1: config 0 has no interface number 0 [ 1204.550192][ T5774] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 1204.577977][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.610942][ T5774] usb 6-1: Product: syz [ 1204.620037][ T4333] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 1204.636140][ T5774] usb 6-1: Manufacturer: syz [ 1204.646699][ T5774] usb 6-1: SerialNumber: syz [ 1204.662697][ T4350] loop0: detected capacity change from 0 to 256 [ 1204.670829][ T5774] usb 6-1: config 0 descriptor?? [ 1204.693486][ T5774] flexcop_usb: set interface failed. [ 1204.714281][ T5774] b2c2_flexcop_usb 6-1:0.63: probe with driver b2c2_flexcop_usb failed with error -22 [ 1204.948303][ T5774] usb 6-1: USB disconnect, device number 125 [ 1205.076963][ T4358] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1205.179162][ T4366] loop4: detected capacity change from 0 to 512 [ 1205.209839][ T4366] EXT4-fs: Ignoring removed oldalloc option [ 1205.242732][ T4366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1205.287367][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.368644][ T4366] ext4 filesystem being mounted at /2198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.624625][ T31] audit: type=1326 audit(2000000900.555:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.5.13460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1205.663246][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.704476][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.751656][ T31] audit: type=1326 audit(2000000900.586:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.5.13460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1205.780092][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.827349][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.849077][ T31] audit: type=1326 audit(2000000900.607:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.5.13460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1205.884369][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.908320][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.917555][ T31] audit: type=1326 audit(2000000900.607:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.5.13460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1205.953166][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.955911][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13466'. [ 1205.969567][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1205.991888][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.997748][ T31] audit: type=1326 audit(2000000900.607:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.5.13460" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1206.030593][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1206.039023][ T4382] netlink: 'syz.0.13459': attribute type 3 has an invalid length. [ 1206.183206][ T4396] loop3: detected capacity change from 0 to 1024 [ 1206.753687][ T5759] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1206.926107][ T5759] usb 4-1: Using ep0 maxpacket: 16 [ 1206.953614][ T5759] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1206.980195][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.996430][ T4432] loop2: detected capacity change from 0 to 512 [ 1207.014902][ T5759] usb 4-1: Product: syz [ 1207.024121][ T5759] usb 4-1: Manufacturer: syz [ 1207.034110][ T5759] usb 4-1: SerialNumber: syz [ 1207.055605][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1207.068060][ T5759] usb 4-1: config 0 descriptor?? [ 1207.093110][ T5759] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1207.111980][ T4432] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.13485: Unimplemented hash flags: 0x0001 [ 1207.130363][ T4432] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.13485: Corrupt directory, running e2fsck is recommended [ 1207.350783][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.361099][ T4445] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13491'. [ 1207.418752][ T24] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1207.494622][ T5759] gspca_spca508: reg_read err -71 [ 1207.508072][ T4447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1207.522700][ T5759] gspca_spca508: reg_read err -71 [ 1207.555322][ T5759] gspca_spca508: reg_read err -71 [ 1207.579211][ T5759] gspca_spca508: reg_read err -71 [ 1207.590781][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1207.595138][ T5759] gspca_spca508: reg write: error -71 [ 1207.604200][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1207.607825][ T5759] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1207.627994][ T24] usb 6-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1207.629027][ T5759] usb 4-1: USB disconnect, device number 21 [ 1207.648918][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.666296][ T24] usb 6-1: Product: syz [ 1207.676595][ T24] usb 6-1: Manufacturer: syz [ 1207.700636][ T24] usb 6-1: SerialNumber: syz [ 1207.951742][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.978178][ T4459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13498'. [ 1207.996884][ T24] usb 6-1: MIDIStreaming interface descriptor not found [ 1208.167017][ T24] usb 6-1: USB disconnect, device number 126 [ 1208.257342][ T5863] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1208.332565][ T6760] udevd[6760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.418626][ T4474] loop4: detected capacity change from 0 to 2048 [ 1208.430785][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 1208.450835][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1208.474809][ T4474] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1208.508937][ T5863] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1208.525432][ T4474] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1208.542779][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.573067][ T5863] usb 7-1: Product: syz [ 1208.585519][ T5863] usb 7-1: Manufacturer: syz [ 1208.600714][ T5863] usb 7-1: SerialNumber: syz [ 1208.616845][ T4474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.112719][ T5863] usb 7-1: invalid MIDI EP [ 1209.134991][ T5863] usb 7-1: snd-bcd2000: error during probing [ 1209.157662][ T4496] loop0: detected capacity change from 0 to 1024 [ 1209.161177][ T5863] snd-bcd2000 7-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 1209.196814][ T4497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.250708][ T5863] usb 7-1: invalid MIDI EP [ 1209.264944][ T5863] usb 7-1: snd-bcd2000: error during probing [ 1209.280469][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1209.280486][ T31] audit: type=1800 audit(2000000904.397:2194): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13515" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 1209.294206][ T5863] snd-bcd2000 7-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 1209.375001][ T5863] usb 7-1: USB disconnect, device number 7 [ 1209.424319][ T4505] loop4: detected capacity change from 0 to 512 [ 1209.485146][ T4505] FAT-fs (loop4): bogus number of FAT sectors [ 1209.502485][ T4505] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1209.544548][ T4509] loop2: detected capacity change from 0 to 256 [ 1209.574128][ T4509] exfat: Deprecated parameter 'namecase' [ 1209.630848][ T4509] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1209.807981][ T4519] loop0: detected capacity change from 0 to 512 [ 1209.808838][ T4521] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13527'. [ 1209.820084][ T4512] loop6: detected capacity change from 0 to 8192 [ 1209.837794][ T4519] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 1209.847347][ T4519] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.13526: inode #15: comm syz.0.13526: iget: illegal inode # [ 1209.864206][ T4519] loop0: lost filesystem error report for type 5 error -117 [ 1209.864690][ T4519] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.13526: couldn't read orphan inode 15 (err -117) [ 1209.872075][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1209.872100][ C1] EXT4-fs (loop0): initial error at time 2000000905: ext4_orphan_get:1399 [ 1209.872133][ C1] EXT4-fs (loop0): last error at time 2000000905: ext4_orphan_get:1399 [ 1209.909033][ T4519] loop0: lost filesystem error report for type 5 error -117 [ 1209.921658][ T4519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.924111][ T4521] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1210.002503][ T4519] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.13526: inode #15: comm syz.0.13526: iget: illegal inode # [ 1210.241151][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.327085][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.375041][ T4542] usb usb8: usbfs: process 4542 (syz.5.13538) did not claim interface 0 before use [ 1210.400672][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1210.552690][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1210.571259][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1210.595717][ T24] usb 5-1: config 0 has no interface number 0 [ 1210.619041][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1210.630573][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13541'. [ 1210.645183][ T4557] sit0: entered promiscuous mode [ 1210.662388][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1210.687628][ T4557] validate_nla: 38 callbacks suppressed [ 1210.687650][ T4557] netlink: 'syz.2.13544': attribute type 3 has an invalid length. [ 1210.717138][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.733728][ T4557] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13544'. [ 1210.766111][ T24] usb 5-1: Product: syz [ 1210.809219][ T24] usb 5-1: Manufacturer: syz [ 1210.819453][ T24] usb 5-1: SerialNumber: syz [ 1210.851462][ T24] usb 5-1: config 0 descriptor?? [ 1210.897063][ T4533] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.109573][ T4533] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.323453][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1211.352442][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13551'. [ 1211.385260][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1211.456233][ T24] usb 5-1: USB disconnect, device number 17 [ 1211.542334][ T4579] xt_hashlimit: invalid rate [ 1212.039499][ T4600] ipt_ECN: cannot use operation on non-tcp rule [ 1212.048510][ T24] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1212.218330][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.249936][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.281652][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1212.312854][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.325861][ T4612] loop0: detected capacity change from 0 to 64 [ 1212.348605][ T24] usb 6-1: Product: syz [ 1212.361452][ T24] usb 6-1: Manufacturer: syz [ 1212.376027][ T24] usb 6-1: SerialNumber: syz [ 1212.599393][ T4620] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1212.623108][ T24] usb 6-1: 0:1 : does not exist [ 1212.647878][ T24] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 1212.673187][ T24] usb 6-1: unit 80 not found! [ 1212.823669][ T24] usb 6-1: USB disconnect, device number 127 [ 1212.983992][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.159618][ T4634] loop0: detected capacity change from 0 to 256 [ 1213.397011][ T4638] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13584'. [ 1213.438242][ T4608] loop4: detected capacity change from 0 to 32768 [ 1213.505717][ T4608] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1213.527111][ T4608] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1213.657771][ T4608] XFS (loop4): Ending clean mount [ 1213.673485][ T4608] XFS (loop4): Quotacheck needed: Please wait. [ 1213.807617][ T4618] loop3: detected capacity change from 0 to 32768 [ 1213.887722][ T4618] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1213.933062][ T4661] netlink: 'syz.0.13589': attribute type 1 has an invalid length. [ 1213.941304][ T4661] netlink: 'syz.0.13589': attribute type 1 has an invalid length. [ 1214.027885][ T4666] loop6: detected capacity change from 0 to 64 [ 1214.103867][ T4608] XFS (loop4): Quotacheck: Done. [ 1214.287568][ T4618] XFS (loop3): Ending clean mount [ 1214.340174][ T4676] loop2: detected capacity change from 0 to 164 [ 1214.366926][ T4676] Unsupported NM flag settings (240) [ 1214.379006][ T5633] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1214.515553][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1214.645848][ T5620] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1214.709021][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1214.736199][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.748183][ T24] usb 6-1: config 0 has no interface number 0 [ 1214.755578][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1214.814324][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1214.861916][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.884327][ T24] usb 6-1: Product: syz [ 1214.904611][ T24] usb 6-1: Manufacturer: syz [ 1214.948987][ T24] usb 6-1: SerialNumber: syz [ 1214.993072][ T24] usb 6-1: config 0 descriptor?? [ 1215.231331][ T24] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1215.407076][ T5759] usb 6-1: USB disconnect, device number 2 [ 1215.846538][ T4682] loop0: detected capacity change from 0 to 32768 [ 1216.691509][ T4746] TCP: TCP_TX_DELAY enabled [ 1217.124367][ T4762] loop0: detected capacity change from 0 to 1024 [ 1217.711912][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13649'. [ 1217.891241][ T4789] loop6: detected capacity change from 0 to 1764 [ 1217.972154][ T4789] tmpfs: Bad value for 'mpol' [ 1218.231244][ T4753] loop2: detected capacity change from 0 to 32768 [ 1218.331781][ T4753] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1218.390301][ T4753] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1218.467468][ T4818] loop6: detected capacity change from 0 to 64 [ 1218.541769][ T4753] XFS (loop2): Ending clean mount [ 1218.607130][ T4753] XFS (loop2): Quotacheck needed: Please wait. [ 1218.692681][ T4818] Trying to free block not in datazone [ 1218.717283][ T4818] Trying to free block not in datazone [ 1218.848081][ T4753] XFS (loop2): Quotacheck: Done. [ 1218.892460][ T4839] loop5: detected capacity change from 0 to 2048 [ 1218.931261][ T4839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1218.986343][ T5621] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1219.048319][ T4844] netlink: 184 bytes leftover after parsing attributes in process `syz.4.13674'. [ 1219.350702][ T4852] loop0: detected capacity change from 0 to 2048 [ 1219.443359][ T4852] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1219.544753][ T4863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1219.588575][ T4852] syz.0.13682: attempt to access beyond end of device [ 1219.588575][ T4852] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1219.643181][ T4868] loop5: detected capacity change from 0 to 128 [ 1219.742713][ T4874] loop2: detected capacity change from 0 to 64 [ 1219.753078][ T4868] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1219.831293][ T4868] ext4 filesystem being mounted at /2350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.860181][ T4874] syz.2.13686: attempt to access beyond end of device [ 1219.860181][ T4874] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1219.914761][ T4874] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1219.955574][ T4874] syz.2.13686: attempt to access beyond end of device [ 1219.955574][ T4874] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1219.985630][ T5625] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1219.987454][ T4879] loop3: detected capacity change from 0 to 164 [ 1220.001606][ T4874] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1220.011269][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.082227][ T31] audit: type=1800 audit(2000000915.735:2195): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13686" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 1220.106271][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1220.148499][ T4879] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1220.323976][ T4852] Remounting filesystem read-only [ 1220.386382][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.444291][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1220.500179][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.571876][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1220.612580][ T4890] loop6: detected capacity change from 0 to 256 [ 1220.630109][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.659794][ T4890] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1220.681773][ T4890] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1220.691593][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1220.753425][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.778086][ T4890] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1220.807154][ T4890] UDF-fs: Scanning with blocksize 512 failed [ 1220.823363][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1220.870849][ T4890] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1220.935518][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1220.960886][ T4890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1220.995659][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1221.041772][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1221.087770][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1221.142276][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1221.173874][ T4850] Bluetooth: hci3: command 0x0406 tx timeout [ 1221.188826][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1221.246596][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1221.342480][ T4852] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1221.379273][ T4852] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1221.383707][ T31] audit: type=1800 audit(2000000917.100:2196): pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13682" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1221.408726][ T4852] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1221.439471][ T4913] cgroup: Name too long [ 1221.477775][ T4852] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1221.639683][ T5622] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1221.718674][ T4928] set match dimension is over the limit! [ 1221.881308][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13715'. [ 1221.906990][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13713'. [ 1221.951069][ T4939] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1222.242671][ T5774] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1222.410156][ T4959] loop5: detected capacity change from 0 to 4096 [ 1222.422625][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 1222.438319][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1222.460888][ T4959] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1222.469277][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1222.489402][ T4964] Invalid option length (1048022) for dns_resolver key [ 1222.503145][ T5774] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1222.544838][ T5774] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 1222.576762][ T4959] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1222.586413][ T5774] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1222.623441][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.636308][ T4959] ntfs3(loop5): ino=1e, mi_enum_attr [ 1222.658207][ T5774] usb 3-1: config 0 descriptor?? [ 1222.669888][ T4959] ntfs3(loop5): ino=1e, mi_enum_attr [ 1222.684836][ T4967] cifs: Bad value for 'source' [ 1222.686085][ T4946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1223.118952][T14272] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1223.138020][ T5774] usb 3-1: USB disconnect, device number 34 [ 1223.427757][ T4957] loop3: detected capacity change from 0 to 32768 [ 1223.548503][ T4998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13740'. [ 1223.604297][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13740'. [ 1223.623048][ T4998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13740'. [ 1223.952365][ T5011] loop6: detected capacity change from 0 to 256 [ 1224.145004][ T5016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13751'. [ 1224.264932][ T5022] netlink: 'syz.6.13753': attribute type 21 has an invalid length. [ 1224.298532][ T5022] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13753'. [ 1224.440884][ T5030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13756'. [ 1224.675515][ T31] audit: type=1326 audit(2000000920.554:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1224.802437][ T31] audit: type=1326 audit(2000000920.585:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1224.909896][ T31] audit: type=1326 audit(2000000920.585:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1224.994913][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1225.004202][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13768'. [ 1225.040073][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13768'. [ 1225.053440][ T31] audit: type=1326 audit(2000000920.585:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.099047][ T5054] netlink: 'syz.4.13768': attribute type 5 has an invalid length. [ 1225.138032][ T31] audit: type=1326 audit(2000000920.596:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.207089][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1225.236017][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.236582][ T31] audit: type=1326 audit(2000000920.596:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.257164][ T24] usb 4-1: Product: syz [ 1225.308726][ T31] audit: type=1326 audit(2000000920.596:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.334040][ T31] audit: type=1326 audit(2000000920.596:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.359449][ T31] audit: type=1326 audit(2000000920.596:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.13763" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1225.373385][ T24] usb 4-1: Manufacturer: syz [ 1225.449781][ T24] usb 4-1: SerialNumber: syz [ 1225.451026][ T5774] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1225.474585][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1225.503760][ T5863] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1225.623998][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 1225.632306][ T5774] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1225.648097][ T5774] usb 1-1: config 2 has no interface number 0 [ 1225.681380][ T5774] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1225.729227][ T5774] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1225.768090][ T5774] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1225.794230][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.814118][ T5079] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1225.829868][ T5774] usb 1-1: Product: syz [ 1225.842019][ T5774] usb 1-1: Manufacturer: syz [ 1225.851229][ T5079] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1225.859658][ T5774] usb 1-1: SerialNumber: syz [ 1225.876266][ T5063] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1225.885830][ T5079] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1225.909800][ T5079] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1225.976504][ T24] usb 4-1: USB disconnect, device number 22 [ 1226.118535][ T5063] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1226.348575][ T5774] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1226.399749][ T5774] asix 1-1:2.88: probe with driver asix failed with error -71 [ 1226.436486][ T5774] usb 1-1: USB disconnect, device number 13 [ 1226.515086][ T5863] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1226.554711][ T5863] ath9k_htc: Failed to initialize the device [ 1226.583477][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 1227.265130][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13805'. [ 1227.660990][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1227.700433][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13814'. [ 1227.738175][ T5147] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1227.753836][ T5149] usb usb8: check_ctrlrecip: process 5149 (syz.6.13815) requesting ep 01 but needs 81 [ 1227.785299][ T5149] usb usb8: usbfs: process 5149 (syz.6.13815) did not claim interface 0 before use [ 1227.832479][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1227.878045][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1227.904260][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.930387][ T24] usb 5-1: Product: syz [ 1227.948874][ T24] usb 5-1: Manufacturer: syz [ 1227.964780][ T24] usb 5-1: SerialNumber: syz [ 1227.985599][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1227.991972][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 1228.439520][ T5863] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 1228.529273][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1228.613883][ T5175] netlink: 'syz.6.13828': attribute type 10 has an invalid length. [ 1228.640704][ T5175] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13828'. [ 1228.695376][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1228.718537][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1228.725258][ T5175] bridge0: port 3(dummy0) entered blocking state [ 1228.734472][ T24] usb 3-1: config 250 has an invalid interface number: 86 but max is 0 [ 1228.736557][ T5175] bridge0: port 3(dummy0) entered disabled state [ 1228.750314][ T5175] dummy0: entered allmulticast mode [ 1228.755677][ T24] usb 3-1: config 250 has no interface number 0 [ 1228.759599][ T5175] dummy0: entered promiscuous mode [ 1228.765372][ T24] usb 3-1: config 250 interface 86 has no altsetting 0 [ 1228.783914][ T24] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=b4.e1 [ 1228.796371][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.805369][ T5157] loop3: detected capacity change from 0 to 32768 [ 1228.813428][ T24] usb 3-1: Product: syz [ 1228.818147][ T24] usb 3-1: Manufacturer: syz [ 1228.823185][ T24] usb 3-1: SerialNumber: syz [ 1228.861711][ T5157] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1228.903574][ T5157] XFS (loop3): Ending clean mount [ 1228.912327][ T5157] XFS (loop3): Quotacheck needed: Please wait. [ 1229.070299][ T5157] XFS (loop3): Quotacheck: Done. [ 1229.116733][ T24] usb 3-1: USB disconnect, device number 35 [ 1229.220599][ T5620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1229.395746][ T5759] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1229.594398][ T5759] usb 6-1: Using ep0 maxpacket: 8 [ 1229.615544][ T5759] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1229.660387][ T5759] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1229.688745][ T5201] loop4: detected capacity change from 0 to 4096 [ 1229.701766][ T5759] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1229.734928][ T5201] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1229.758918][ T5759] usb 6-1: Product: syz [ 1229.786073][ T5759] usb 6-1: Manufacturer: syz [ 1229.800529][ T5201] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1229.806940][ T5759] usb 6-1: SerialNumber: syz [ 1229.814070][ T5201] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1229.874469][ T5201] ntfs3(loop4): ino=1e, mi_enum_attr [ 1229.933481][ T5201] ntfs3(loop4): ino=1e, mi_enum_attr [ 1229.994720][ T5201] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1230.073983][ T5201] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1230.085627][ T5759] usb 6-1: Invalid connection information received from device [ 1230.252188][ T5201] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1230.289843][ T5201] ntfs3(loop4): ino=1e, "file1" mi_enum_attr [ 1230.304383][ T5201] ntfs3(loop4): ino=1e, "file1" ni_find_attr [ 1230.313653][ T5355] usb 6-1: USB disconnect, device number 3 [ 1230.466930][ T5219] netlink: 'syz.6.13846': attribute type 2 has an invalid length. [ 1230.559902][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13847'. [ 1230.757780][ T5221] bond2: option resend_igmp: invalid value (511) [ 1230.808816][ T5221] bond2: option resend_igmp: allowed values 0 - 255 [ 1230.835750][ T5221] bond2 (unregistering): Released all slaves [ 1230.908364][ T5228] lo: entered allmulticast mode [ 1231.269145][ T5250] loop5: detected capacity change from 0 to 8 [ 1231.383967][ T5250] SQUASHFS error: Unable to read directory block [629:26] [ 1231.429539][ T5252] netlink: 'syz.6.13862': attribute type 28 has an invalid length. [ 1231.471045][ T5252] netlink: 'syz.6.13862': attribute type 3 has an invalid length. [ 1231.501182][ T5252] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13862'. [ 1231.809516][ T5202] loop0: detected capacity change from 0 to 65536 [ 1231.839403][ T5202] xfs: Deprecated parameter 'attr2' [ 1231.858179][ T5202] XFS: attr2 mount option is deprecated. [ 1231.886036][ T5202] xfs: Deprecated parameter 'attr2' [ 1231.909232][ T5202] XFS: attr2 mount option is deprecated. [ 1231.958554][ T5202] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1232.013330][ T5202] XFS (loop0): Ending clean mount [ 1232.032270][ T5202] XFS (loop0): Quotacheck needed: Please wait. [ 1232.324352][ T5202] XFS (loop0): Quotacheck: Done. [ 1232.369701][ T5302] loop4: detected capacity change from 0 to 512 [ 1232.457687][ T5296] loop6: detected capacity change from 0 to 4096 [ 1232.503171][ T5296] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1232.524620][ T5622] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1232.548441][ T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1232.683152][ T5296] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1232.714071][ T24] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 1232.748775][ T24] usb 3-1: config 8 has no interface number 0 [ 1232.793672][ T24] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1232.842218][ T24] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 65535, setting to 64 [ 1232.908077][ T24] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1232.919538][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.933538][ T24] usb 3-1: Product: syz [ 1232.969856][ T24] usb 3-1: Manufacturer: syz [ 1232.995135][ T24] usb 3-1: SerialNumber: syz [ 1233.024249][ T5300] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.082187][ T5316] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1233.120384][ T5316] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1233.366919][ T24] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 1233.369292][ T5324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13892'. [ 1233.447002][ T5324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13892'. [ 1233.459318][ T24] usb 3-1: USB disconnect, device number 36 [ 1233.479234][ T5324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13892'. [ 1233.953456][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13900'. [ 1234.163713][ T5348] loop2: detected capacity change from 0 to 1024 [ 1234.196680][ T5348] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1234.235263][ T5352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1234.272745][ T5348] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.13904: lblock 1 mapped to illegal pblock 1 (length 1) [ 1234.377067][ T5348] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1234.378819][ T5348] Quota error (device loop2): write_blk: dquota write failed [ 1234.388081][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1234.388110][ C1] EXT4-fs (loop2): initial error at time 2000000930: ext4_map_blocks:833: inode 3: block 1 [ 1234.388165][ C1] EXT4-fs (loop2): last error at time 2000000930: ext4_map_blocks:833: inode 3: block 1 [ 1234.467619][ T5348] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1234.501898][ T5348] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.13904: Failed to acquire dquot type 0 [ 1234.540349][ T5348] loop2: lost filesystem error report for type 5 error -117 [ 1234.544278][ T5348] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.13904: Freeing blocks not in datazone - block = 0, count = 4096 [ 1234.652303][ T5348] loop2: lost filesystem error report for type 5 error -117 [ 1234.653149][ T5348] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.13904: Invalid inode bitmap blk 0 in block_group 0 [ 1234.673718][T29248] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1234.745053][T29248] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1234.745369][T29248] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1234.752096][ T5348] loop2: lost filesystem error report for type 5 error -117 [ 1234.801866][T29248] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 0 [ 1234.827345][ T5348] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1234.885994][ T5348] loop2: lost filesystem error report for type 5 error -117 [ 1234.889078][ T5348] EXT4-fs (loop2): 1 orphan inode deleted [ 1234.891420][T29248] loop2: lost filesystem error report for type 5 error -117 [ 1234.959804][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.048423][ T5348] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1235.103511][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13922'. [ 1235.232924][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.342779][ T5395] bond6: entered promiscuous mode [ 1235.795692][ T1010] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1235.969801][ T1010] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.004829][ T1010] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1236.039480][ T1010] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1236.084670][ T1010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1236.117409][ T1010] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1236.132956][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.150428][ T5414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1236.173829][ T1010] hub 4-1:1.0: bad descriptor, ignoring hub [ 1236.191125][ T1010] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1236.225010][ T1010] cdc_wdm 4-1:1.0: skipping garbage [ 1236.240494][ T1010] cdc_wdm 4-1:1.0: skipping garbage [ 1236.243434][ T31] audit: type=1326 audit(2000000932.700:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.252866][ T1010] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1236.304975][ T31] audit: type=1326 audit(2000000932.700:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.392130][ T31] audit: type=1326 audit(2000000932.700:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.425445][ T31] audit: type=1326 audit(2000000932.700:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.450951][ T31] audit: type=1326 audit(2000000932.700:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.460940][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.477836][ T31] audit: type=1326 audit(2000000932.700:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.508499][ T31] audit: type=1326 audit(2000000932.742:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.5.13942" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1236.537769][T21732] usb 4-1: USB disconnect, device number 23 [ 1237.021435][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.078398][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.167332][ T5447] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1237.324124][ T5402] veth0_vlan: left promiscuous mode [ 1237.325278][ T5447] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1237.349709][ T5447] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1237.364651][ T5447] usb 4-1: Product: syz [ 1237.371807][ T5447] usb 4-1: SerialNumber: syz [ 1237.380767][ T5447] usb 4-1: config 0 descriptor?? [ 1237.707075][ T5408] bridge1: entered allmulticast mode [ 1237.738607][T29248] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.772044][T29248] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.802344][ T5439] usb 4-1: USB disconnect, device number 24 [ 1237.832640][T29248] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.897059][T29248] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.221178][ T5475] netlink: 'syz.4.13950': attribute type 12 has an invalid length. [ 1238.293295][ T5484] sg_write: data in/out 229343/32 bytes for SCSI command 0x0-- guessing data in; [ 1238.293295][ T5484] program syz.5.13952 not setting count and/or reply_len properly [ 1238.834593][ T5504] netlink: 'syz.2.13961': attribute type 10 has an invalid length. [ 1239.227364][ T5455] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1239.278488][ T5525] loop5: detected capacity change from 0 to 64 [ 1239.405984][ T5455] usb 1-1: Using ep0 maxpacket: 32 [ 1239.413320][ T5528] netlink: 'syz.6.13971': attribute type 16 has an invalid length. [ 1239.449055][ T5455] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1239.462522][ T5528] netlink: 'syz.6.13971': attribute type 17 has an invalid length. [ 1239.488736][ T5455] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.520871][ T5455] usb 1-1: config 0 has no interface number 0 [ 1239.546987][ T5455] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1239.614180][ T5455] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1239.673536][ T5455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.702941][ T5538] loop3: detected capacity change from 0 to 256 [ 1239.717460][ T5455] usb 1-1: Product: syz [ 1239.737894][ T5455] usb 1-1: Manufacturer: syz [ 1239.762572][ T5455] usb 1-1: SerialNumber: syz [ 1239.819032][ T5455] usb 1-1: config 0 descriptor?? [ 1239.878542][ T5455] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1239.917016][ T5455] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1240.075419][ T5455] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1240.121147][ T5551] loop6: detected capacity change from 0 to 1024 [ 1240.134748][ T5455] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1240.244139][ T5551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.302423][ T5455] usb 1-1: USB disconnect, device number 14 [ 1240.410969][ T5551] EXT4-fs warning (device loop6): ext4_rmdir:3192: inode #11: comm syz.6.13982: empty directory 'file1' has too many links (111) [ 1240.567450][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 1240.567472][ T31] audit: type=1326 audit(2000000937.235:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz.5.13988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1240.682139][ T5573] loop2: detected capacity change from 0 to 64 [ 1240.700878][ T31] audit: type=1326 audit(2000000937.287:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz.5.13988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1240.753347][ T31] audit: type=1326 audit(2000000937.287:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz.5.13988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1240.780124][ T837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.815802][ T31] audit: type=1326 audit(2000000937.287:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz.5.13988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1240.944589][ T31] audit: type=1326 audit(2000000937.287:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5570 comm="syz.5.13988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b799ce59 code=0x7ffc0000 [ 1241.255034][ T5541] loop4: detected capacity change from 0 to 32768 [ 1241.297429][ T5541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13977 (5541) [ 1241.401251][ T5541] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1241.448716][ T5541] BTRFS info (device loop4): using crc32c checksum algorithm [ 1241.450098][ T31] audit: type=1400 audit(2000000938.169:2229): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5598 comm="syz.2.14000" [ 1241.707586][ T5541] BTRFS info (device loop4): enabling ssd optimizations [ 1241.728039][ T5638] loop0: detected capacity change from 0 to 1024 [ 1241.736320][ T5541] BTRFS info (device loop4): turning on flush-on-commit [ 1241.743628][ T5541] BTRFS info (device loop4): enabling free space tree [ 1241.751201][ T5541] BTRFS info (device loop4): force zlib compression, level 3 [ 1241.758700][ T5541] BTRFS info (device loop4): max_inline set to 4096 [ 1242.004917][ T5649] trusted_key: encrypted_key: master key parameter is missing [ 1242.618688][ T5670] CIFS mount error: No usable UNC path provided in device string! [ 1242.618688][ T5670] [ 1242.672785][ T5670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1242.819723][ T5633] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1243.021383][ T5684] netlink: 'syz.2.14024': attribute type 1 has an invalid length. [ 1243.497249][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14031'. [ 1243.727199][ T5455] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1243.916353][ T5455] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 1243.935182][ T5455] usb 7-1: config 0 has no interface number 0 [ 1243.953039][ T5455] usb 7-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1244.019729][ T5455] usb 7-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1244.063718][ T5455] usb 7-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 1244.137143][ T5455] usb 7-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.171176][ T5455] usb 7-1: config 0 interface 70 has no altsetting 0 [ 1244.201637][ T5455] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1244.216527][ T5455] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.243748][ T5455] usb 7-1: Product: syz [ 1244.263263][ T5455] usb 7-1: Manufacturer: syz [ 1244.283346][T21732] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1244.289644][ T5455] usb 7-1: SerialNumber: syz [ 1244.341577][ T5455] usb 7-1: config 0 descriptor?? [ 1244.370680][ T5694] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1244.464679][T21732] usb 3-1: Using ep0 maxpacket: 16 [ 1244.505790][T21732] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1244.539593][T21732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.573956][T21732] usb 3-1: Product: syz [ 1244.589822][T21732] usb 3-1: Manufacturer: syz [ 1244.605512][T21732] usb 3-1: SerialNumber: syz [ 1244.620457][ T5455] ti_usb_3410_5052 7-1:0.70: TI USB 3410 1 port adapter converter detected [ 1244.624581][T21732] usb 3-1: config 0 descriptor?? [ 1244.679620][ T5455] usb 7-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1244.689917][ T5702] loop0: detected capacity change from 0 to 32768 [ 1244.745581][ T5455] usb 7-1: USB disconnect, device number 8 [ 1244.803213][ T5455] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1244.847967][ T5455] ti_usb_3410_5052 7-1:0.70: device disconnected [ 1244.866895][T21732] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 1244.895166][T21732] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1245.105391][T21732] usb 3-1: USB disconnect, device number 37 [ 1245.223783][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14052'. [ 1245.238320][ T5810] netlink: 'syz.0.14053': attribute type 11 has an invalid length. [ 1245.276853][ T5810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14053'. [ 1245.567598][ T5824] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14060'. [ 1245.897768][ T5839] loop2: detected capacity change from 0 to 64 [ 1246.058837][ T5847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14071'. [ 1246.189704][ T5772] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1246.365146][ T5772] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1246.369464][ T5859] loop3: detected capacity change from 0 to 512 [ 1246.394548][ T5772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.446391][ T5772] usb 5-1: config 0 has no interface number 0 [ 1246.451585][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.468328][ T5772] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1246.485882][ T5772] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1246.496036][ T5772] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.511746][ T5772] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1246.521202][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.529635][ T5772] usb 5-1: Product: syz [ 1246.533988][ T5772] usb 5-1: Manufacturer: syz [ 1246.538637][ T5772] usb 5-1: SerialNumber: syz [ 1246.551120][ T5859] ext4 filesystem being mounted at /2367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.571234][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14080'. [ 1246.602941][ T5772] usb 5-1: config 0 descriptor?? [ 1246.813284][ T5772] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1246.861300][ T5772] usb 5-1: USB disconnect, device number 19 [ 1246.911432][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.283527][T21732] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1247.445889][T21732] usb 7-1: Using ep0 maxpacket: 8 [ 1247.469639][T21732] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.524702][T21732] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1247.572347][T21732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1247.617024][T21732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1247.673291][T21732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1247.726038][T21732] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.777375][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14102'. [ 1247.795753][T21732] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1247.820950][T21732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.838922][T21732] usb 7-1: Product: syz [ 1247.847300][T21732] usb 7-1: Manufacturer: syz [ 1247.884307][T21732] usb 7-1: SerialNumber: syz [ 1247.894150][T21732] usb 7-1: config 0 descriptor?? [ 1247.911914][ T5886] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1248.079533][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14106'. [ 1248.100320][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14106'. [ 1248.135985][ T5924] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1248.283185][ T5931] netlink: 'syz.2.14110': attribute type 1 has an invalid length. [ 1248.333217][ T5931] netlink: 'syz.2.14110': attribute type 1 has an invalid length. [ 1248.458753][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.039724][ T5439] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1249.212015][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1249.256630][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1249.300232][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1249.344312][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1249.354512][T21732] rc_core: IR keymap rc-snapstream-firefly not found [ 1249.375511][T21732] Registered IR keymap rc-empty [ 1249.393584][ T5439] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1249.414078][T21732] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1249.435491][ T5439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.462421][ T5439] usb 3-1: Product: syz [ 1249.469105][T21732] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input82 [ 1249.489999][ T5439] usb 3-1: Manufacturer: syz [ 1249.500933][ T5439] usb 3-1: SerialNumber: syz [ 1249.544550][ T5439] usb 3-1: config 0 descriptor?? [ 1249.608103][T21732] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input83 [ 1249.691911][T21732] usb 7-1: USB disconnect, device number 9 [ 1249.691988][ C0] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1249.760573][ T4972] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed! [ 1249.762625][ T5439] adutux 3-1:0.0: Could not retrieve serial number [ 1249.805859][ T5439] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 1249.965158][ T5999] xt_bpf: check failed: parse error [ 1250.049152][ T5772] usb 3-1: USB disconnect, device number 38 [ 1250.584839][ T6017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1250.630874][ T6017] block device autoloading is deprecated and will be removed. [ 1250.938422][ T5996] loop0: detected capacity change from 0 to 32768 [ 1250.964103][ T5996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.14137 (5996) [ 1251.009233][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14155'. [ 1251.021407][ T6033] ip6tnl3: entered promiscuous mode [ 1251.037524][ T5996] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1251.061227][ T5996] BTRFS info (device loop0): using sha256 checksum algorithm [ 1251.213520][ T5996] BTRFS info (device loop0): enabling ssd optimizations [ 1251.265523][ T5996] BTRFS info (device loop0): turning on async discard [ 1251.299183][ T5996] BTRFS info (device loop0): enabling free space tree [ 1251.430202][ T6068] netlink: 4108 bytes leftover after parsing attributes in process `syz.6.14164'. [ 1251.480372][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1251.979843][ T6085] loop3: detected capacity change from 0 to 1024 [ 1252.096471][ T6085] hfsplus: can't free extent: start 2889, count 1 [ 1252.639520][ T6106] loop4: detected capacity change from 0 to 256 [ 1252.714494][ T6109] unsupported nla_type 142 [ 1253.175895][ T6129] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1253.246874][ T5455] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1253.427517][ T5455] usb 7-1: Using ep0 maxpacket: 16 [ 1253.468747][ T5455] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1253.494523][ T5455] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.543252][ T5455] usb 7-1: Product: syz [ 1253.555073][ T5455] usb 7-1: Manufacturer: syz [ 1253.570393][ T5455] usb 7-1: SerialNumber: syz [ 1253.828814][ T5455] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1253.928474][ T5455] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1253.948967][ T6158] loop0: detected capacity change from 0 to 512 [ 1253.960702][ T5455] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1253.992429][ T5455] usb 7-1: media controller created [ 1254.010660][ T6158] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.14209: corrupted in-inode xattr: e_name out of bounds [ 1254.054818][ T6158] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1254.056169][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1254.071835][ C0] EXT4-fs (loop0): initial error at time 2000000951: ext4_iget_extra_inode:5180: inode 15 [ 1254.081819][ C0] EXT4-fs (loop0): last error at time 2000000951: ext4_iget_extra_inode:5180: inode 15 [ 1254.094210][ T6158] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.14209: couldn't read orphan inode 15 (err -117) [ 1254.108093][ T6158] loop0: lost filesystem error report for type 5 error -117 [ 1254.116041][ T5455] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.176599][ T6168] loop3: detected capacity change from 0 to 256 [ 1254.187858][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.278704][ T6158] EXT4-fs error (device loop0): ext4_xattr_set_entry:1672: inode #2: comm syz.0.14209: corrupted xattr entries [ 1254.302794][ T6172] Option ' ' to dns_resolver key: bad/missing value [ 1254.358353][ T5455] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1254.522548][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.565871][ T5455] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1254.585334][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14219'. [ 1254.647104][ T5455] usb 7-1: USB disconnect, device number 10 [ 1255.500433][ T6218] xt_TCPMSS: Only works on TCP SYN packets [ 1255.616537][ T31] audit: type=1326 audit(2000000953.034:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.14241" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1255.715664][ T31] audit: type=1326 audit(2000000953.034:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.14241" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1255.829278][ T31] audit: type=1326 audit(2000000953.045:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.14241" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1255.894359][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14246'. [ 1255.910624][ T31] audit: type=1326 audit(2000000953.045:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.14241" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577139ce59 code=0x7ffc0000 [ 1256.701633][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14261'. [ 1256.804084][ T6266] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1257.323618][ T31] audit: type=1326 audit(2000000954.819:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.14275" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1257.428445][ T31] audit: type=1326 audit(2000000954.819:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.14275" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1257.531544][ T31] audit: type=1326 audit(2000000954.872:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.14275" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1257.658664][ T31] audit: type=1326 audit(2000000954.872:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.14275" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1257.704176][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14283'. [ 1257.712852][ T6307] loop4: detected capacity change from 0 to 1024 [ 1257.734843][ T6310] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14283'. [ 1257.757176][ T6307] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1257.779007][ T31] audit: type=1326 audit(2000000954.872:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.14275" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261179ce59 code=0x7ffc0000 [ 1257.852729][ T6307] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.14282: lblock 1 mapped to illegal pblock 1 (length 1) [ 1257.919108][ T6307] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1257.920859][ T6307] Quota error (device loop4): write_blk: dquota write failed [ 1257.930038][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1257.930069][ C1] EXT4-fs (loop4): initial error at time 2000000955: ext4_map_blocks:833: inode 3: block 1 [ 1257.930118][ C1] EXT4-fs (loop4): last error at time 2000000955: ext4_map_blocks:833: inode 3: block 1 [ 1257.981212][ T6307] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.14282: Failed to acquire dquot type 0 [ 1257.994243][ T6307] loop4: lost filesystem error report for type 5 error -117 [ 1257.994686][ T6307] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.14282: Freeing blocks not in datazone - block = 0, count = 4096 [ 1258.036565][ T6307] loop4: lost filesystem error report for type 5 error -117 [ 1258.037062][ T6307] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.14282: Invalid inode bitmap blk 0 in block_group 0 [ 1258.064484][T29248] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1258.071367][ T6322] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14289'. [ 1258.112028][T29248] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1258.112381][T29248] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 0 [ 1258.132491][ T6322] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14289'. [ 1258.142774][ T6307] loop4: lost filesystem error report for type 5 error -117 [ 1258.143201][ T6307] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 1258.177175][T29248] loop4: lost filesystem error report for type 5 error -117 [ 1258.177526][ T6307] loop4: lost filesystem error report for type 5 error -117 [ 1258.190510][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14289'. [ 1258.220143][ T6307] EXT4-fs (loop4): 1 orphan inode deleted [ 1258.237517][ T6307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.276972][ T6307] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1258.330240][ T6328] netlink: 'syz.0.14292': attribute type 3 has an invalid length. [ 1258.404914][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.415984][ T6372] program syz.5.14315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.681721][ T6383] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1259.743043][ T5455] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1259.926565][ T5455] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1259.953818][ T5455] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.994491][ T5455] usb 5-1: config 220 has no interface number 2 [ 1260.017814][ T5455] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 1260.056685][ T5455] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1260.107253][ T5455] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1260.136777][ T5455] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1260.165090][ T5455] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1260.193478][ T5455] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1260.210782][ T5455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.248650][ T5455] usb 5-1: Product: syz [ 1260.252875][ T5455] usb 5-1: Manufacturer: syz [ 1260.265288][ T5455] usb 5-1: SerialNumber: syz [ 1260.470000][ T6406] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1260.524323][ T5455] usb 5-1: selecting invalid altsetting 0 [ 1260.527773][ T6406] bond3 (unregistering): Released all slaves [ 1260.541237][ T6377] loop0: detected capacity change from 0 to 32768 [ 1260.551396][ T5455] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1260.594848][ T5455] uvcvideo 5-1:220.0: No valid video chain found. [ 1260.652840][ T5455] usb 5-1: selecting invalid altsetting 0 [ 1260.677024][ T5455] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1260.685656][ T6377] ERROR: (device loop0): diNewExt: no free extents [ 1260.685656][ T6377] [ 1260.722402][ T5455] usb 5-1: USB disconnect, device number 20 [ 1260.807641][ T6377] ERROR: (device loop0): remounting filesystem as read-only [ 1260.850768][ T6377] ialloc: diAlloc returned -5! [ 1261.429392][ T5455] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1261.611806][ T5455] usb 1-1: Using ep0 maxpacket: 32 [ 1261.641666][ T5455] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1261.641699][ T5455] usb 1-1: config 0 has no interface number 0 [ 1261.641745][ T5455] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1261.641778][ T5455] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1261.644074][ T5455] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1261.644106][ T5455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.644131][ T5455] usb 1-1: Product: syz [ 1261.644150][ T5455] usb 1-1: Manufacturer: syz [ 1261.644170][ T5455] usb 1-1: SerialNumber: syz [ 1261.736705][ T5455] usb 1-1: config 0 descriptor?? [ 1261.759552][ T5455] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1262.029791][ T5455] em28xx 1-1:0.132: Video interface 132 found: isoc [ 1262.083804][ T6476] openvswitch: netlink: Key type 38 is out of range max 32 [ 1262.115330][ T5455] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1262.208667][ T5455] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1262.244812][ T5455] em28xx 1-1:0.132: board has no eeprom [ 1262.318296][ T5455] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1262.350771][ T5455] em28xx 1-1:0.132: analog set to isoc mode. [ 1262.385675][ T5456] em28xx 1-1:0.132: Registering V4L2 extension [ 1262.424677][ T5455] usb 1-1: USB disconnect, device number 15 [ 1262.468399][ T5455] em28xx 1-1:0.132: Disconnecting em28xx [ 1262.917590][ T5456] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1262.955981][ T5456] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1262.987791][ T5456] em28xx 1-1:0.132: No AC97 audio processor [ 1263.053145][ T5456] usb 1-1: Decoder not found [ 1263.069018][ T5456] em28xx 1-1:0.132: failed to create media graph [ 1263.091418][ T5456] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1263.118401][ T5456] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1263.153283][ T5455] em28xx 1-1:0.132: Closing input extension [ 1263.194702][ T6471] loop2: detected capacity change from 0 to 32768 [ 1263.233097][ T6471] btrfs: Deprecated parameter 'usebackuproot' [ 1263.250014][ T6471] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1263.285300][ T6471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14362 (6471) [ 1263.319366][ T5455] em28xx 1-1:0.132: Freeing device [ 1263.358069][ T6471] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1263.411473][ T6471] BTRFS info (device loop2): using sha256 checksum algorithm [ 1263.567483][ T6471] BTRFS info (device loop2): rebuilding free space tree [ 1263.649747][ T5455] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1263.667367][ T6471] BTRFS info (device loop2): disabling free space tree [ 1263.702489][ T6471] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1263.744465][ T6471] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1263.806731][ T6471] BTRFS info (device loop2): setting nodatasum [ 1263.835338][ T6471] BTRFS info (device loop2): allowing degraded mounts [ 1263.840064][ T5455] usb 1-1: Using ep0 maxpacket: 8 [ 1263.862740][ T6471] BTRFS info (device loop2): setting nodatacow [ 1263.876730][ T5455] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 1263.892197][ T6471] BTRFS info (device loop2): turning off barriers [ 1263.916334][ T5455] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 1263.921147][ T6471] BTRFS info (device loop2): turning on flush-on-commit [ 1263.957372][ T5455] usb 1-1: config 0 has no interface number 1 [ 1263.972563][ T6471] BTRFS info (device loop2): turning on async discard [ 1263.975185][ T5455] usb 1-1: config 0 has no interface number 2 [ 1263.996575][ T6471] BTRFS info (device loop2): force clearing of disk cache [ 1264.010854][ T5455] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1264.029717][ T6471] BTRFS info (device loop2): trying to use backup root at mount time [ 1264.077230][ T5455] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1264.113554][ T5455] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1264.143483][ T5455] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1264.172850][ T5455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.229950][ T5455] usb 1-1: config 0 descriptor?? [ 1264.283388][ T5621] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1264.316042][ T6516] loop5: detected capacity change from 0 to 32768 [ 1264.422122][ T6516] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 1264.466723][ T6516] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1264.481655][ T5455] usb 1-1: Could not set interface, error -71 [ 1264.494512][ T5455] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1264.508860][ T5455] usb 1-1: USB disconnect, device number 16 [ 1264.697662][ T6516] XFS (loop5): Ending clean mount [ 1264.764414][ T6516] XFS (loop5): Quotacheck needed: Please wait. [ 1264.881158][ T6564] bond0: (slave erspan0): Opening slave failed [ 1264.887550][ T5439] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1265.085811][ T6516] XFS (loop5): Quotacheck: Done. [ 1265.091143][ T5439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.095667][ T5439] usb 7-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1265.123403][ T5439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.141553][ T5439] usb 7-1: Product: syz [ 1265.148984][ T5439] usb 7-1: Manufacturer: syz [ 1265.163994][ T5439] usb 7-1: SerialNumber: syz [ 1265.178715][ T5439] usb 7-1: config 0 descriptor?? [ 1265.376903][ T5625] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1265.395976][ T5439] cdc_subset 7-1:0.0: probe with driver cdc_subset failed with error -22 [ 1265.647868][ T5439] usb 7-1: USB disconnect, device number 11 [ 1265.671887][ T6585] loop0: detected capacity change from 0 to 256 [ 1266.404430][ T6599] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1267.092894][ T6635] xt_cgroup: path and classid specified [ 1267.336866][ T6637] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1267.387733][ T6637] bond7 (unregistering): Released all slaves [ 1268.263945][ T6630] loop2: detected capacity change from 0 to 32768 [ 1268.308192][ T6630] (syz.2.14427,6630,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1268.362103][ T6630] (syz.2.14427,6630,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1268.416991][ T6640] loop4: detected capacity change from 0 to 32768 [ 1268.484879][ T6640] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1268.493702][ T6630] JBD2: Ignoring recovery information on journal [ 1268.587176][ T6671] bond7: option lacp_active: invalid value (8) [ 1268.626014][ T6630] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1268.646988][ T6671] bond7 (unregistering): Released all slaves [ 1268.671566][ T5439] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1268.720015][ T6640] XFS (loop4): Ending clean mount [ 1268.844329][ T5439] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1268.869409][ T6630] [ 1268.871742][ T5439] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.871763][ T6630] ====================================================== [ 1268.871775][ T6630] WARNING: possible circular locking dependency detected [ 1268.896025][ T6630] syzkaller #0 Tainted: G L [ 1268.902005][ T6630] ------------------------------------------------------ [ 1268.902913][ T5439] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1268.909452][ T6630] syz.2.14427/6630 is trying to acquire lock: [ 1268.909470][ T6630] ffff888076f979a0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xbeb/0x13a0 [ 1268.934450][ T5439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.936938][ T6630] [ 1268.936938][ T6630] but task is already holding lock: [ 1268.936951][ T6630] ffff888050f906e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0 [ 1268.961766][ T6630] [ 1268.961766][ T6630] which lock already depends on the new lock. [ 1268.961766][ T6630] [ 1268.963837][ T5439] usb 4-1: Product: syz [ 1268.972166][ T6630] [ 1268.972166][ T6630] the existing dependency chain (in reverse order) is: [ 1268.972180][ T6630] [ 1268.972180][ T6630] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1268.972223][ T6630] down_read+0x4a/0x330 [ 1268.992346][ T5439] usb 4-1: Manufacturer: syz [ 1268.993194][ T6630] ocfs2_init_acl+0x2fd/0x7e0 [ 1268.993229][ T6630] ocfs2_mknod+0x166a/0x2240 [ 1269.004376][ T5439] usb 4-1: SerialNumber: syz [ 1269.007621][ T6630] ocfs2_create+0x195/0x460 [ 1269.007665][ T6630] path_openat+0x133a/0x3830 [ 1269.027840][ T6630] do_file_open+0x23e/0x4a0 [ 1269.032863][ T6630] do_sys_openat2+0x115/0x200 [ 1269.038070][ T6630] __x64_sys_openat+0x138/0x170 [ 1269.043459][ T6630] do_syscall_64+0x174/0x580 [ 1269.048590][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.055204][ T6630] [ 1269.055204][ T6630] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 1269.063735][ T6630] down_read+0x4a/0x330 [ 1269.068512][ T6630] ocfs2_start_trans+0x3ab/0x700 [ 1269.073986][ T6630] ocfs2_shutdown_local_alloc+0x1ef/0xa50 [ 1269.080244][ T6630] ocfs2_dismount_volume+0x1ec/0x8d0 [ 1269.086097][ T6630] generic_shutdown_super+0x13d/0x2d0 [ 1269.091983][ T6630] kill_block_super+0x44/0x90 [ 1269.097200][ T6630] deactivate_locked_super+0xbc/0x130 [ 1269.103085][ T6630] cleanup_mnt+0x3d3/0x460 [ 1269.108016][ T6630] task_work_run+0x1d9/0x270 [ 1269.113126][ T6630] exit_to_user_mode_loop+0x1fa/0x730 [ 1269.119007][ T6630] do_syscall_64+0x353/0x580 [ 1269.124150][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.130610][ T6630] [ 1269.130610][ T6630] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 1269.138089][ T6630] ocfs2_start_trans+0x2ac/0x700 [ 1269.143541][ T6630] ocfs2_shutdown_local_alloc+0x1ef/0xa50 [ 1269.149781][ T6630] ocfs2_dismount_volume+0x1ec/0x8d0 [ 1269.155586][ T6630] generic_shutdown_super+0x13d/0x2d0 [ 1269.161497][ T6630] kill_block_super+0x44/0x90 [ 1269.166693][ T6630] deactivate_locked_super+0xbc/0x130 [ 1269.172604][ T6630] cleanup_mnt+0x3d3/0x460 [ 1269.177552][ T6630] task_work_run+0x1d9/0x270 [ 1269.182655][ T6630] exit_to_user_mode_loop+0x1fa/0x730 [ 1269.188532][ T6630] do_syscall_64+0x353/0x580 [ 1269.193645][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.200136][ T6630] [ 1269.200136][ T6630] -> #1 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}: [ 1269.210931][ T6630] down_write+0x96/0x200 [ 1269.215738][ T6630] __ocfs2_flush_truncate_log+0x339/0x1230 [ 1269.222149][ T6630] ocfs2_flush_truncate_log+0x4f/0x70 [ 1269.228065][ T6630] ocfs2_sync_fs+0x11c/0x340 [ 1269.233204][ T6630] sync_filesystem+0x1cf/0x230 [ 1269.238490][ T6630] ocfs2_reconfigure+0x131/0xbd0 [ 1269.243968][ T6630] reconfigure_super+0x232/0x8f0 [ 1269.249421][ T6630] path_mount+0xd4b/0x1040 [ 1269.254382][ T6630] __se_sys_mount+0x31d/0x420 [ 1269.259572][ T6630] do_syscall_64+0x174/0x580 [ 1269.264712][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.271134][ T6630] [ 1269.271134][ T6630] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 1269.281835][ T6630] __lock_acquire+0x1520/0x2cf0 [ 1269.287207][ T6630] lock_acquire+0x106/0x350 [ 1269.292225][ T6630] down_write+0x96/0x200 [ 1269.297008][ T6630] ocfs2_xattr_set+0xbeb/0x13a0 [ 1269.302398][ T6630] ocfs2_set_acl+0x6fd/0x7b0 [ 1269.307510][ T6630] ocfs2_iop_set_acl+0x1b1/0x2b0 [ 1269.312993][ T6630] vfs_set_acl+0x8a0/0xb50 [ 1269.317947][ T6630] do_set_acl+0xf5/0x190 [ 1269.322738][ T6630] filename_setxattr+0x305/0x630 [ 1269.328296][ T6630] path_setxattrat+0x408/0x450 [ 1269.333601][ T6630] __x64_sys_lsetxattr+0xbf/0xe0 [ 1269.339059][ T6630] do_syscall_64+0x174/0x580 [ 1269.344208][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.350667][ T6630] [ 1269.350667][ T6630] other info that might help us debug this: [ 1269.350667][ T6630] [ 1269.361006][ T6630] Chain exists of: [ 1269.361006][ T6630] &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1269.361006][ T6630] [ 1269.378142][ T6630] Possible unsafe locking scenario: [ 1269.378142][ T6630] [ 1269.385774][ T6630] CPU0 CPU1 [ 1269.391127][ T6630] ---- ---- [ 1269.396569][ T6630] lock(&oi->ip_xattr_sem); [ 1269.401169][ T6630] lock(&journal->j_trans_barrier); [ 1269.408985][ T6630] lock(&oi->ip_xattr_sem); [ 1269.416093][ T6630] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 1269.423548][ T6630] [ 1269.423548][ T6630] *** DEADLOCK *** [ 1269.423548][ T6630] [ 1269.431683][ T6630] 3 locks held by syz.2.14427/6630: [ 1269.436883][ T6630] #0: ffff888050a0c450 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1269.446166][ T6630] #1: ffff888050f909a0 (&type->i_mutex_dir_key#24){+.+.}-{4:4}, at: vfs_set_acl+0x368/0xb50 [ 1269.456374][ T6630] #2: ffff888050f906e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0 [ 1269.466319][ T6630] [ 1269.466319][ T6630] stack backtrace: [ 1269.472199][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.2.14427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.472231][ T6630] Tainted: [L]=SOFTLOCKUP [ 1269.472239][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.472253][ T6630] Call Trace: [ 1269.472264][ T6630] [ 1269.472274][ T6630] dump_stack_lvl+0xe8/0x150 [ 1269.472304][ T6630] print_circular_bug+0x2e1/0x300 [ 1269.472337][ T6630] check_noncircular+0x12e/0x150 [ 1269.472369][ T6630] __lock_acquire+0x1520/0x2cf0 [ 1269.472405][ T6630] ? ocfs2_xattr_set+0xbeb/0x13a0 [ 1269.472433][ T6630] lock_acquire+0x106/0x350 [ 1269.472454][ T6630] ? ocfs2_xattr_set+0xbeb/0x13a0 [ 1269.472484][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472515][ T6630] down_write+0x96/0x200 [ 1269.472549][ T6630] ? ocfs2_xattr_set+0xbeb/0x13a0 [ 1269.472581][ T6630] ? __pfx_down_write+0x10/0x10 [ 1269.472613][ T6630] ? ocfs2_xattr_ibody_find+0xc4/0x980 [ 1269.472641][ T6630] ? ocfs2_xattr_set+0x3ac/0x13a0 [ 1269.472672][ T6630] ocfs2_xattr_set+0xbeb/0x13a0 [ 1269.472699][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472738][ T6630] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 1269.472781][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472809][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472834][ T6630] ? rcu_is_watching+0x15/0xb0 [ 1269.472861][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472887][ T6630] ? trace_kmalloc+0x2a/0xf0 [ 1269.472920][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.472945][ T6630] ? from_kgid+0x1c6/0x660 [ 1269.472979][ T6630] ? __pfx_from_kgid+0x10/0x10 [ 1269.473010][ T6630] ? ocfs2_set_acl+0x117/0x7b0 [ 1269.473043][ T6630] ? ocfs2_set_acl+0x117/0x7b0 [ 1269.473070][ T6630] ocfs2_set_acl+0x6fd/0x7b0 [ 1269.473100][ T6630] ocfs2_iop_set_acl+0x1b1/0x2b0 [ 1269.473126][ T6630] ? __pfx_ocfs2_iop_set_acl+0x10/0x10 [ 1269.473149][ T6630] ? from_kgid+0x1c6/0x660 [ 1269.473180][ T6630] ? __pfx_evm_inode_set_acl+0x10/0x10 [ 1269.473215][ T6630] ? __pfx_from_kgid+0x10/0x10 [ 1269.473248][ T6630] ? __pfx_down_write+0x10/0x10 [ 1269.473280][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.473309][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.473335][ T6630] ? posix_acl_valid+0x3bf/0x430 [ 1269.473360][ T6630] vfs_set_acl+0x8a0/0xb50 [ 1269.473392][ T6630] do_set_acl+0xf5/0x190 [ 1269.473419][ T6630] filename_setxattr+0x305/0x630 [ 1269.473447][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.473481][ T6630] ? __pfx_filename_setxattr+0x10/0x10 [ 1269.473506][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.473531][ T6630] ? do_getname+0x151/0x250 [ 1269.473570][ T6630] path_setxattrat+0x408/0x450 [ 1269.473604][ T6630] ? __pfx_path_setxattrat+0x10/0x10 [ 1269.473631][ T6630] ? do_futex+0x3e7/0x4e0 [ 1269.473674][ T6630] ? rcu_is_watching+0x15/0xb0 [ 1269.473700][ T6630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1269.473729][ T6630] __x64_sys_lsetxattr+0xbf/0xe0 [ 1269.473753][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.473777][ T6630] do_syscall_64+0x174/0x580 [ 1269.473808][ T6630] ? trace_irq_disable+0x3b/0x140 [ 1269.473846][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.473869][ T6630] RIP: 0033:0x7fee8f19ce59 [ 1269.473891][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.473910][ T6630] RSP: 002b:00007fee9000a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1269.473932][ T6630] RAX: ffffffffffffffda RBX: 00007fee8f415fa0 RCX: 00007fee8f19ce59 [ 1269.473949][ T6630] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 0000200000000400 [ 1269.473966][ T6630] RBP: 00007fee8f232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1269.473981][ T6630] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 1269.473995][ T6630] R13: 00007fee8f416038 R14: 00007fee8f415fa0 R15: 00007fffa90f6868 [ 1269.474024][ T6630] [ 1269.854362][ T5439] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1269.909058][ T5633] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1269.940128][ T5439] usb 4-1: USB disconnect, device number 25 [ 1270.046978][ T5621] ocfs2: Unmounting device (7,2) on (node local)