last executing test programs: 4m4.906713774s ago: executing program 0 (id=7276): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="e11b", 0x2, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) 4m4.691928321s ago: executing program 0 (id=7279): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x141, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x10) 4m4.396484903s ago: executing program 0 (id=7285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040810) 4m4.213227554s ago: executing program 0 (id=7290): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m3.7584924s ago: executing program 0 (id=7296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000700010000000900010073797a30000000000900020073797a30000000002c0003800800014000005900080002"], 0xfc}}, 0x0) 3m57.905680099s ago: executing program 0 (id=7363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08000b"], 0x24}, 0x1, 0x0, 0x0, 0x24048818}, 0xc450) 3m57.406238952s ago: executing program 32 (id=7363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08000b"], 0x24}, 0x1, 0x0, 0x0, 0x24048818}, 0xc450) 4.703428575s ago: executing program 2 (id=10490): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r0], 0x10}}, 0x48000) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf500090584"], 0x0) 3.861639247s ago: executing program 5 (id=10501): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r0, 0x4, 0x0) 3.525048685s ago: executing program 5 (id=10505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x0) 3.086309966s ago: executing program 5 (id=10512): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0x18, 0x3, "9047c3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.362772256s ago: executing program 1 (id=10520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="595a08cb169762af2dee6f1cf7ddba01994769111e854c8e7f1d8b1e378f5ec47714bd380505884bbdbc72ee0b400b7c2dadae0f06307cd9d6fd2567840e4efafef3", 0x42) 2.031798935s ago: executing program 2 (id=10523): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000005a000d00000000000000000004000080080003"], 0x1c}], 0x1}, 0x0) 1.915514341s ago: executing program 1 (id=10525): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}, @in6={0xa, 0x0, 0xffffffff, @private0}, @in6={0xa, 0x4e24, 0x400004, @remote, 0x5}], 0x54) 1.898129517s ago: executing program 4 (id=10526): syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c02029c"], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x1e6, &(0x7f0000000700)=ANY=[@ANYBLOB="bbbbbbbbbbbba62ad9e6c48486dd6003000001b02c01fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b060005"], 0x0) 1.870072831s ago: executing program 2 (id=10527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000400b7040000010000008500000033000000850000001100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.680151616s ago: executing program 4 (id=10529): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x1000000, 0x0}) 1.42234737s ago: executing program 1 (id=10530): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$eJzs3V2IXFcBAOBzd3c2u2lrJjWxaxrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZnZnN7tz9+T44e+bcc+49587euXPn3nvuCcCGNbbwd35+pgjhwhsvH3n/gX9M35hysFWivvB3opSqhRCKmJ7IlvfeeDO+9sHzJ7rFRZhb+JvS4fErrXlvCyGcDbvCxVAPOy5ceumtuceOnTt6fvfbrx64vDJrDwAAG8s3Lh6Y3/7XP9+99epr9xwKm1rT0/F5PU2Yah73H4oH/un4fyx0potSKJvMyk3EMDbdWW68S7lyPbWs3ESP+iez+ms9ym0Ki9c/XprWbb1hLUvbcT0UY7MhhM2t9NjY7GzzN3lY+F0/WcyeOXX66Wcraiiw7P59bwhhVykcPt+ZXm3h4Cpow+ChVk43qm/P2gyHRlfX1UZT5es8otDYUvUeCKApv154k7P5mYVb01raxGD1X3l0rPv8sAxGvf0PVf9kxfUH9f/6nD0Oy2e9bk1pvdLn6PaYzq8j5PcvvfKHzvna8isdnVPz6xG1AdvZ6zrCWrm+0Kud4yNux1L1an++XaxXX4lxeh++2pF7b8fnJ/+frpX/MdDdh/n5f0EQVncIHenarSyrUfH+B1i98vvmGun6aJTf15fnb+qTP9Unf7pP/uY++bf1yYeN7Lc/+Gl4sWif78p/0w97PjydZ7sjxh8Zsj35+chh68/v+x3Wrdaf308Mq9nvjz9x8otPPXmpef9/0dr+r8ftPf3cqMfP1sVYIJ0vzM+rt+79r3fWM9aj3J1Ze+7oUn7h9bbOcsW29nJCaT9zUztmOufb0qvczs5y9azcdAxTWXvz45PN2Xzp+CPtV9P7NZGtby1bj8msHWm/sjXGeTtgKdL2mO7/b/cHaN7/n7bPmVArnj51+uQjMZ220z+N1zbdmL53xO0Glk+vz3/6/poJnf1/bm9Nr42V9wtb2tOL5n7h9bi8zulzrXpK00tfaul77tvj0wvlZ0987/RTK7DesJE9++PnvnP89OmT3/diyS++tjqaMcyL9LNltbRnBV+8EFd1tbRnmV7sWukqKtwpASOx54XmQcDDp757/JmTz5w8s2///n1zc/u/tG9+z8Jx/Z7y0X3Z2QpaCyyn9pd+1S0BAAAAAAAAAAAABvXDo0cuvfPmF95t9v9v9/9L/f/Tnb+p//9Psv7/eT/51A8+9QPc2iV/oUz2gNXJrFwtho9m7U2PAShit47t2Xwfi3FrHL/Y/z9Vlz/XNbXnrmx6rUcye5zATc9LmcyeQZKPF3hfjM/H+FcBKlRMd58c40Web118WNrW0/MpSl14G54PvHak/1v+/KLU/7vrc5269NdmbRlFj8Wq1xHo7p/r7fnfU4vl/6u94lW3U1gkTIy2vp9t3G2i0fMofdARbACWR9Xjf/49NOtN5z/P/PHrUzdCKnbl0c79Zf78UhjGX97pTK/28SdXuv583L5R11/1+o96/M/W+Hdx/5f2e733f9mIefWl1fufn19+t1Rt2DFo/fn6p+dAbxuu/qux/rQ2D4bB6m/8Mqs/vyA0oP9m9W8esP6b1n/n0ur/X6w/vW0P3T9o/c0WF2Od7ZjO1iNd/8vPGyfXsvVPz/ZcpP5vPtdt/Zc4UOP1WD9sZGtlnNlhZccRrYP2fuP/Dvv9f6vj/7Yam+3W8vswPh/TaUec7nPIxzsZtv3p/or0PbA9W37R5/vN+L9r25dj3O/zkMb/TdtjPX7ll9IL72VK17q8t+t1XwNr1Xvr7frfqgiXmz+Dljb/VPXtF5qh9I3Vu1xjfAnL3tR/uSMJjUZjZU9o9VFp5VT+/ld99bnq3yn3VVx/P/n4v/kxfD7+b56fj/+b5+fj/+b50/E/9H6P/Hz833x7zsf/zfPvypabjw880yf/413yi9DO39F9/tbP9rv7LH9nn/xP9Mnf3co/2FEi5d+z6Pztcr2Wf2ef/Pv75H8yhGuNRfI/1Wf+B/rkP1TKL48BnfI/nc1fZPnrXdr/9Hr/gPUr75/n8w8bR7r+0+vzv62dP1kuMtpWAivhldf2Hn7yN9+qN/v/T7bOh6TreIdiuhZ/G/0opvPr3qGUvpH3Zkz/Lcuv+nwT0JY/PyP//n+wTz6wdqX7vHy+YQMqprpPjnG/51b1Os5nbflMjD8b48/F+OEYz8Z4T4z3xnhuRO1jZRx+/XcHXizav/e3ZPmD3k+e9wfqeE5UCGHfgO3Jzw8Mez97/hy/Yd1q/UvsDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZsYW/8/MzRQgX3nj5yBPHTu25MeVgq0R94e9EKVVrzRfCIzEej/Ev4otrHzx/ohxfj3ER5kIRitb08PiVVk23hRDOhl3hYqiHHRcuvfTW3GPHzh09v/vtVw9cXrl3AAAAANa//wcAAP//yHMF9A==") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e8c, &(0x7f0000000140)={0x8, 0xe252, 0x0, 0x0, 0x7, 0x102, 0x2401}) 1.378827085s ago: executing program 4 (id=10531): timer_create(0x2, 0x0, &(0x7f0000000740)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) 1.337215542s ago: executing program 3 (id=10532): r0 = socket(0x23, 0x80805, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) 1.244219738s ago: executing program 2 (id=10533): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[], 0x1, 0x23b, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 1.183545118s ago: executing program 1 (id=10534): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r0) 1.062405231s ago: executing program 3 (id=10535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x262572883359e6ed, 0x70bd2d, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 1.061662911s ago: executing program 4 (id=10536): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x41, 0x0, 0x0, 0x400002, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 957.979133ms ago: executing program 2 (id=10537): socket$inet(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='rw\x00', 0x0, 0x4) 932.640146ms ago: executing program 4 (id=10538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x203c) read$FUSE(r0, &(0x7f0000022740)={0x2020}, 0x2020) 826.546393ms ago: executing program 5 (id=10539): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800060006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r1) 762.77733ms ago: executing program 3 (id=10540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001019}, 0x20000004) 762.622625ms ago: executing program 2 (id=10541): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014) 451.051326ms ago: executing program 4 (id=10542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200fffe500004802800018007000100637400001c000280080001400000000208000240000000100500030000000000240001800b0001007470726f7879000014000280080002400000000e08000140000000020900010073797a30000000000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 443.119257ms ago: executing program 3 (id=10543): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @local, 0x1}, 0x1c) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x22, 0x0, 0x0) 399.363795ms ago: executing program 5 (id=10544): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 349.820925ms ago: executing program 3 (id=10545): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40) 325.38227ms ago: executing program 1 (id=10546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 190.230946ms ago: executing program 3 (id=10547): unshare(0x22020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x11, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffdb7) 8.398548ms ago: executing program 1 (id=10548): creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) 0s ago: executing program 5 (id=10549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4804) kernel console output (not intermixed with test programs): m 0 to 128 [ 890.270932][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 890.336294][T19007] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 890.357898][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 890.495820][T19007] usb 6-1: Using ep0 maxpacket: 32 [ 890.498922][T19007] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 890.498954][T19007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.556512][T19007] usb 6-1: config 0 descriptor?? [ 890.572626][T23791] loop4: detected capacity change from 0 to 256 [ 890.576148][T19007] gspca_main: sq930x-2.14.0 probing 041e:403c [ 890.677667][T23791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 890.802762][T19007] gspca_sq930x: reg_r 001f failed -71 [ 890.802871][T19007] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 890.823696][T19007] usb 6-1: USB disconnect, device number 4 [ 891.095491][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 892.172015][T23814] ip6gretap1: entered allmulticast mode [ 892.184935][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 893.043027][T23846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8328'. [ 894.800905][T23857] loop4: detected capacity change from 0 to 32768 [ 894.899864][T23857] ERROR: (device loop4): diAllocAG: numfree > numinos [ 894.899864][T23857] [ 894.977491][T23857] ERROR: (device loop4): remounting filesystem as read-only [ 894.977513][T23857] ialloc: diAlloc returned -5! [ 895.077732][T23899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8356'. [ 895.401322][T23901] loop5: detected capacity change from 0 to 4096 [ 895.464564][T23901] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 895.594806][T23913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8363'. [ 895.732747][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 895.848068][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 895.900147][T23901] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 896.126289][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 896.126311][ T38] audit: type=1326 audit(1783496563.895:360): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.126367][ T38] audit: type=1326 audit(1783496563.895:361): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.171055][ T38] audit: type=1326 audit(1783496563.932:362): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.171109][ T38] audit: type=1326 audit(1783496563.932:363): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.173872][ T38] audit: type=1326 audit(1783496563.942:364): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.173920][ T38] audit: type=1326 audit(1783496563.942:365): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.173963][ T38] audit: type=1326 audit(1783496563.942:366): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.177354][ T38] audit: type=1326 audit(1783496563.942:367): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.177979][ T38] audit: type=1326 audit(1783496563.942:368): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23929 comm="syz.2.8370" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 896.708421][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 896.757975][T23946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 896.757995][T23946] IPv6: NLM_F_CREATE should be set when creating new route [ 896.758034][T23946] IPv6: NLM_F_CREATE should be set when creating new route [ 896.798727][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 897.185944][T23967] mmap: syz.4.8389 (23967): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 897.355449][T23975] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 897.952299][T23994] binder: 23993:23994 ioctl c018620b 0 returned -14 [ 898.388402][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8410'. [ 898.897954][T24032] loop1: detected capacity change from 0 to 256 [ 898.916827][T24032] exfat: Deprecated parameter 'utf8' [ 898.916852][T24032] exfat: Deprecated parameter 'utf8' [ 898.916883][T24032] exfat: Deprecated parameter 'namecase' [ 898.916995][T24032] exfat: Deprecated parameter 'namecase' [ 899.029249][T24032] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 899.553631][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 899.714987][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 900.190928][T24080] loop5: detected capacity change from 0 to 8 [ 900.441539][ T5948] Flush: task=udevd[5948] dev=loop5 state=2 [ 900.481480][T22829] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 900.524378][ T5948] Teardown: task=udevd[5948] dev=loop5 state=2 [ 900.552084][T24092] veth1_macvtap: left promiscuous mode [ 900.647964][T22829] usb 5-1: config 129 has an invalid interface number: 176 but max is 0 [ 900.647997][T22829] usb 5-1: config 129 has no interface number 0 [ 900.648032][T22829] usb 5-1: config 129 interface 176 has no altsetting 0 [ 900.671682][T22829] usb 5-1: string descriptor 0 read error: -22 [ 900.671827][T22829] usb 5-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 900.671850][T22829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.722200][T22829] option 5-1:129.176: GSM modem (1-port) converter detected [ 901.004659][T22829] usb 5-1: USB disconnect, device number 70 [ 901.020068][T22829] option 5-1:129.176: device disconnected [ 901.382407][T24118] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 901.698106][T24129] loop2: detected capacity change from 0 to 256 [ 901.703545][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8467'. [ 901.877979][T24138] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 902.266825][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8475'. [ 902.546973][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 902.651549][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 902.741514][T24170] loop2: detected capacity change from 0 to 256 [ 902.743519][T24170] Flush: task=syz.2.8482[24170] dev=loop2 state=2 [ 902.779950][T19007] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 902.930713][T24170] Teardown: task=syz.2.8482[24170] dev=loop2 state=2 [ 902.950493][T19007] usb 6-1: Using ep0 maxpacket: 16 [ 902.953215][T19007] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 902.953243][T19007] usb 6-1: config 0 has no interface number 0 [ 902.953307][T19007] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 902.953335][T19007] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 902.956788][T19007] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 902.956820][T19007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.956841][T19007] usb 6-1: Product: syz [ 902.956857][T19007] usb 6-1: Manufacturer: syz [ 902.956872][T19007] usb 6-1: SerialNumber: syz [ 903.071886][T19007] usb 6-1: config 0 descriptor?? [ 903.073108][T24163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 903.073335][T24163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 903.340693][T24163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 903.341308][T24163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 903.589759][T19007] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 903.589963][T19007] asix 6-1:0.34: probe with driver asix failed with error -71 [ 903.591960][ T5768] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 903.639431][T19007] usb 6-1: USB disconnect, device number 5 [ 903.776233][ T5768] usb 2-1: Using ep0 maxpacket: 32 [ 903.780204][ T5768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 903.782911][ T5768] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 903.782941][ T5768] usb 2-1: config 14 has no interface number 0 [ 903.782991][ T5768] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 903.783023][ T5768] usb 2-1: config 14 interface 228 has no altsetting 0 [ 903.791567][ T5768] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 903.791598][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.791617][ T5768] usb 2-1: Product: syz [ 903.791631][ T5768] usb 2-1: Manufacturer: syz [ 903.791645][ T5768] usb 2-1: SerialNumber: syz [ 904.061689][ T5261] veth1_macvtap: entered promiscuous mode [ 904.140867][ T5768] legousbtower 2-1:14.228: interrupt endpoints not found [ 904.168947][ T5768] usb 2-1: USB disconnect, device number 70 [ 904.397353][T24207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8498'. [ 904.469829][T24210] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8500'. [ 904.729972][T24220] loop5: detected capacity change from 0 to 164 [ 904.731152][T24219] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.912276][T24220] ISOFS: unable to read i-node block [ 904.912355][T24220] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 905.507378][ T5948] Flush: task=udevd[5948] dev=loop5 state=2 [ 905.617213][ T5948] Teardown: task=udevd[5948] dev=loop5 state=2 [ 906.095380][T24264] loop5: detected capacity change from 0 to 764 [ 906.122227][ T38] audit: type=1326 audit(2000000006.276:369): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.122287][ T38] audit: type=1326 audit(2000000006.276:370): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.140259][ T38] audit: type=1326 audit(2000000006.295:371): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.142168][ T38] audit: type=1326 audit(2000000006.295:372): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.149685][ T38] audit: type=1326 audit(2000000006.304:373): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.149735][ T38] audit: type=1326 audit(2000000006.304:374): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.149777][ T38] audit: type=1326 audit(2000000006.304:375): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.156506][ T38] audit: type=1326 audit(2000000006.304:376): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.156557][ T38] audit: type=1326 audit(2000000006.304:377): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24266 comm="syz.1.8524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 906.241041][T24273] loop4: detected capacity change from 0 to 64 [ 906.574115][ T5948] Flush: task=udevd[5948] dev=loop5 state=2 [ 906.687341][ T5948] Teardown: task=udevd[5948] dev=loop5 state=2 [ 906.734367][T24290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8535'. [ 906.882350][ T5951] Flush: task=udevd[5951] dev=loop4 state=2 [ 906.995596][ T5951] Teardown: task=udevd[5951] dev=loop4 state=2 [ 907.238171][T24306] netlink: 'syz.2.8542': attribute type 9 has an invalid length. [ 907.963177][T24328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8550'. [ 909.517288][T24378] loop5: detected capacity change from 0 to 128 [ 909.597416][T24378] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 909.597455][T24378] hpfs: filesystem error: improperly stopped [ 909.597471][T24378] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 909.597487][T24378] hpfs: You really don't want any checks? You are crazy... [ 909.597507][T24378] hpfs: Code page index out of array [ 909.597523][T24378] hpfs: code page support is disabled [ 909.597666][T24378] hpfs: hpfs_map_4sectors(): unaligned read [ 909.597760][T24378] hpfs: hpfs_map_4sectors(): unaligned read [ 909.597770][T24378] hpfs: filesystem error: unable to find root dir [ 909.787127][T24378] hpfs: hpfs_map_4sectors(): unaligned read [ 909.940327][T24381] bridge4: entered promiscuous mode [ 909.940368][T24381] bridge4: entered allmulticast mode [ 910.353053][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 910.466827][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 910.743492][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.443143][T24383] loop1: detected capacity change from 0 to 32768 [ 911.559829][T24383] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 911.660436][T24383] XFS (loop1): Ending clean mount [ 911.815172][ T5648] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 911.830823][T24447] loop2: detected capacity change from 0 to 1024 [ 911.852202][T24447] EXT4-fs: Invalid want_extra_isize 2816 [ 911.865790][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 911.995472][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 912.304945][T19007] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 912.671884][T19007] usb 5-1: unable to get BOS descriptor or descriptor too short [ 912.673509][T19007] usb 5-1: config 1 has an invalid interface number: 255 but max is 1 [ 912.673538][T19007] usb 5-1: config 1 has no interface number 1 [ 912.673584][T19007] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 912.673614][T19007] usb 5-1: config 1 interface 0 has no altsetting 0 [ 912.673634][T19007] usb 5-1: config 1 interface 255 has no altsetting 0 [ 912.676782][T19007] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 912.676814][T19007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.676836][T19007] usb 5-1: Product: syz [ 912.676852][T19007] usb 5-1: Manufacturer: syz [ 912.676878][T19007] usb 5-1: SerialNumber: syz [ 912.713746][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 912.946763][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 913.116715][T24479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8621'. [ 913.146969][T19007] smsusb:smsusb_probe: board id=8, interface number 0 [ 913.169200][T19007] smsusb:smsusb_probe: board id=8, interface number 255 [ 913.182323][T19007] usb 5-1: USB disconnect, device number 71 [ 914.271934][ T5754] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 914.438049][ T5754] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.438085][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.458032][ T5754] usb 3-1: config 0 descriptor?? [ 914.508494][ T5754] cp210x 3-1:0.0: cp210x converter detected [ 914.915277][ T5754] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 914.915310][ T5754] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 914.954021][ T5754] usb 3-1: cp210x converter now attached to ttyUSB0 [ 914.967583][ T5754] usb 3-1: USB disconnect, device number 79 [ 915.013880][ T5754] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 915.023566][ T5754] cp210x 3-1:0.0: device disconnected [ 915.364316][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8653'. [ 915.494966][T24553] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8655'. [ 915.494994][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8655'. [ 915.495010][T24553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8655'. [ 915.733213][T24560] loop5: detected capacity change from 0 to 512 [ 915.789344][T24560] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.8659: inode has both inline data and extents flags [ 915.789381][T24560] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 915.789800][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 915.789824][ C1] EXT4-fs (loop5): initial error at time 2000000015: ext4_orphan_get:1399: inode 15 [ 915.789857][ C1] EXT4-fs (loop5): last error at time 2000000015: ext4_orphan_get:1399: inode 15 [ 915.829555][T24560] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.8659: couldn't read orphan inode 15 (err -117) [ 915.829586][T24560] loop5: lost filesystem error report for type 5 error -117 [ 915.858821][T24566] loop1: detected capacity change from 0 to 256 [ 915.943043][T24566] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 915.943072][T24566] FAT-fs (loop1): Filesystem has been set read-only [ 915.949299][T24560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.109314][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 916.173202][T21677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.262204][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 916.437846][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 916.533674][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 916.682262][T24593] loop5: detected capacity change from 0 to 164 [ 916.810856][T24593] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 916.832232][T24593] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 916.855822][T24593] syz.5.8668: attempt to access beyond end of device [ 916.855822][T24593] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 916.876067][T24593] syz.5.8668: attempt to access beyond end of device [ 916.876067][T24593] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 916.960080][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 917.034647][T24605] netlink: 'syz.2.8681': attribute type 21 has an invalid length. [ 917.034750][T24605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8681'. [ 917.034787][T24605] netlink: 'syz.2.8681': attribute type 1 has an invalid length. [ 917.062418][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 917.469040][T24612] veth3: entered promiscuous mode [ 917.469073][T24612] veth3: entered allmulticast mode [ 917.652122][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8689'. [ 918.000383][T24634] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8694'. [ 918.161830][T24630] bond1: option downdelay: invalid value (18446744073709551615) [ 918.161860][T24630] bond1: option downdelay: allowed values 0 - 2147483647 [ 918.252474][T24630] bond1 (unregistering): Released all slaves [ 919.035349][T24670] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 919.035405][T24670] CIFS mount error: No usable UNC path provided in device string! [ 919.035405][T24670] [ 919.035684][T24670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 920.569247][T24722] IPv6: sit1: Disabled Multicast RS [ 920.828333][T24680] loop1: detected capacity change from 0 to 32768 [ 921.653800][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 921.857817][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 922.274252][T24780] comedi comedi1: pcmda12: I/O base address or length out of range [ 922.443355][T24788] loop2: detected capacity change from 0 to 256 [ 922.813565][ T5950] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 922.874414][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 922.967506][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 922.989776][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 922.989813][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 922.989842][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 922.989864][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 923.037873][ T5950] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 923.038073][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.038098][ T5950] usb 5-1: Product: syz [ 923.038114][ T5950] usb 5-1: Manufacturer: syz [ 923.038130][ T5950] usb 5-1: SerialNumber: syz [ 923.086820][ T5950] usb 5-1: config 0 descriptor?? [ 923.097069][T24792] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 923.115401][ T5950] usb 5-1: ucan: probing device on interface #0 [ 923.115430][ T5950] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 923.115446][ T5950] usb 5-1: ucan: probe failed; try to update the device firmware [ 923.212526][T24811] netlink: 'syz.5.8766': attribute type 4 has an invalid length. [ 923.212551][T24811] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8766'. [ 923.590628][T24822] loop2: detected capacity change from 0 to 512 [ 923.603728][T24822] EXT4-fs: Ignoring removed orlov option [ 923.603763][T24822] EXT4-fs: Ignoring removed mblk_io_submit option [ 923.691802][T24822] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.8770: corrupted in-inode xattr: e_value size too large [ 923.691844][T24822] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 923.692524][T24822] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.8770: couldn't read orphan inode 15 (err -117) [ 923.692557][T24822] loop2: lost filesystem error report for type 5 error -117 [ 923.748960][T24822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.793839][T24832] loop1: detected capacity change from 0 to 256 [ 923.940279][T24832] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 923.977443][T24832] exFAT-fs (loop1): error, data size is invalid(16781312) [ 923.977466][T24832] exFAT-fs (loop1): Filesystem has been set read-only [ 924.109757][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.325625][ T5951] Flush: task=udevd[5951] dev=loop1 state=2 [ 924.353813][ T5948] Flush: task=udevd[5948] dev=loop2 state=2 [ 924.363445][T24839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8780'. [ 924.363476][T24839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8780'. [ 924.363495][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8780'. [ 924.406836][ T5951] Teardown: task=udevd[5951] dev=loop1 state=2 [ 924.428354][ T5948] Teardown: task=udevd[5948] dev=loop2 state=2 [ 924.490371][T24844] loop2: detected capacity change from 0 to 8 [ 924.620224][ T823] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 924.765351][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 924.785038][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.785087][ T823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 924.790564][ T823] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 924.790597][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.790620][ T823] usb 2-1: Product: syz [ 924.790636][ T823] usb 2-1: Manufacturer: syz [ 924.790652][ T823] usb 2-1: SerialNumber: syz [ 924.866643][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 924.890046][ T823] usb 2-1: config 0 descriptor?? [ 924.909868][ T823] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 924.983130][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 924.995356][ T823] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 924.996861][ T823] usb 2-1: media controller created [ 925.102815][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.314662][ T823] DVB: Unable to find symbol tda10046_attach() [ 925.314681][ T823] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 925.314738][ T823] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 925.541182][ T823] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 925.562918][ T823] usb 2-1: USB disconnect, device number 71 [ 925.838175][ T823] usb 5-1: USB disconnect, device number 72 [ 925.896889][T24877] loop2: detected capacity change from 0 to 64 [ 926.250054][T24884] loop4: detected capacity change from 0 to 512 [ 926.251426][T24884] EXT4-fs: Ignoring removed bh option [ 926.252566][T24884] EXT4-fs (loop4): Test dummy encryption mode enabled [ 926.252586][T24884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 926.290347][ T1139] kworker/u8:8: attempt to access beyond end of device [ 926.290347][ T1139] loop2: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 926.290405][ T1139] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 926.290568][ T1139] kworker/u8:8: attempt to access beyond end of device [ 926.290568][ T1139] loop2: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 926.290608][ T1139] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 926.290631][ T1139] kworker/u8:8: attempt to access beyond end of device [ 926.290631][ T1139] loop2: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 926.290677][ T1139] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 926.290700][ T1139] kworker/u8:8: attempt to access beyond end of device [ 926.290700][ T1139] loop2: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 926.290738][ T1139] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 926.330289][ T1383] kworker/u8:9: attempt to access beyond end of device [ 926.330289][ T1383] loop2: rw=2049, sector=2320, nr_sectors = 1 limit=64 [ 926.330367][ T1383] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 926.330405][ T1383] kworker/u8:9: attempt to access beyond end of device [ 926.330405][ T1383] loop2: rw=2049, sector=2321, nr_sectors = 1 limit=64 [ 926.330469][ T1383] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 926.330505][ T1383] kworker/u8:9: attempt to access beyond end of device [ 926.330505][ T1383] loop2: rw=2049, sector=2322, nr_sectors = 1 limit=64 [ 926.330569][ T1383] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 926.330765][ T1383] kworker/u8:9: attempt to access beyond end of device [ 926.330765][ T1383] loop2: rw=2049, sector=2323, nr_sectors = 1 limit=64 [ 926.330838][ T1383] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 926.342433][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 926.493971][T24884] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8799: inode has both inline data and extents flags [ 926.494004][T24884] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 926.502363][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 926.502389][ C0] EXT4-fs (loop4): initial error at time 2000000025: ext4_orphan_get:1399: inode 15 [ 926.502421][ C0] EXT4-fs (loop4): last error at time 2000000025: ext4_orphan_get:1399: inode 15 [ 926.530626][T24884] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8799: couldn't read orphan inode 15 (err -117) [ 926.530659][T24884] loop4: lost filesystem error report for type 5 error -117 [ 926.554238][T24884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.587493][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 927.182352][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.311777][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 927.411766][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 927.898698][T24917] loop4: detected capacity change from 0 to 2048 [ 927.996477][T24917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.206553][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 928.289438][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 928.477781][T24886] loop5: detected capacity change from 0 to 32768 [ 928.634764][T24896] loop1: detected capacity change from 0 to 32768 [ 928.735088][T24896] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 928.849946][T24896] XFS (loop1): Ending clean mount [ 929.157040][T24945] bond0: entered promiscuous mode [ 929.157076][T24945] bond_slave_0: entered promiscuous mode [ 929.157357][T24945] bond_slave_1: entered promiscuous mode [ 929.202829][ T5648] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 929.796892][T24961] netlink: 'syz.2.8834': attribute type 2 has an invalid length. [ 929.914404][T24886] read_mapping_page failed! [ 929.914598][T24886] ERROR: (device loop5): txCommit: [ 929.914598][T24886] [ 930.207710][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 930.406878][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 930.824460][T24984] xfrm0: entered allmulticast mode [ 931.528525][ T1383] read_mapping_page failed! [ 931.528544][ T1383] ERROR: (device loop5): txCommit: [ 931.528544][ T1383] [ 931.528693][ T1383] jfs_write_inode: jfs_commit_inode failed! [ 931.636839][ T38] audit: type=1326 audit(2000000030.129:378): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25004 comm="syz.2.8856" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x0 [ 931.820298][T25014] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8860'. [ 931.997093][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 932.082471][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 932.427384][T25033] loop4: detected capacity change from 0 to 512 [ 932.451127][T25033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.8870: missing EA_INODE flag [ 932.451165][T25033] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 932.456396][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 932.456422][ C0] EXT4-fs (loop4): initial error at time 2000000030: ext4_xattr_inode_iget:441: inode 11 [ 932.456454][ C0] EXT4-fs (loop4): last error at time 2000000030: ext4_xattr_inode_iget:441: inode 11 [ 932.503845][T25033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.8870: error while reading EA inode 11 err=-117 [ 932.503883][T25033] loop4: lost filesystem error report for type 5 error -117 [ 932.504594][T25033] EXT4-fs (loop4): 1 orphan inode deleted [ 932.539263][T25037] loop5: detected capacity change from 0 to 16 [ 932.541253][T25033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.561075][T25037] erofs (device loop5): mounted with root inode @ nid 36. [ 932.656011][ T38] audit: type=1326 audit(2000000031.092:379): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 932.656072][ T38] audit: type=1326 audit(2000000031.092:380): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 932.677232][ T38] audit: type=1326 audit(2000000031.111:381): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 932.677287][ T38] audit: type=1326 audit(2000000031.111:382): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 932.684332][ T38] audit: type=1326 audit(2000000031.120:383): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f05a6de59 code=0x7ffc0000 [ 932.684385][ T38] audit: type=1326 audit(2000000031.120:384): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2f05a6dbc2 code=0x7ffc0000 [ 932.694241][ T38] audit: type=1326 audit(2000000031.120:385): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f05a2e68e code=0x7ffc0000 [ 932.720331][ T38] audit: type=1326 audit(2000000031.148:386): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2f05a6dc87 code=0x7ffc0000 [ 932.720385][ T38] audit: type=1326 audit(2000000031.148:387): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25038 comm="syz.2.8873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f05a2e68e code=0x7ffc0000 [ 932.725731][T25039] loop2: detected capacity change from 0 to 512 [ 932.754091][T25039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 932.915514][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.056925][T25044] syz.1.8872: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 933.057455][T25044] CPU: 1 UID: 0 PID: 25044 Comm: syz.1.8872 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 933.057483][T25044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 933.057497][T25044] Call Trace: [ 933.057575][T25044] [ 933.057632][T25044] dump_stack_lvl+0xe8/0x150 [ 933.057740][T25044] warn_alloc+0x24c/0x270 [ 933.057802][T25044] ? stack_depot_save_flags+0x3ec/0x800 [ 933.057902][T25044] ? __pfx_warn_alloc+0x10/0x10 [ 933.057924][T25044] ? kasan_save_track+0x4f/0x80 [ 933.058004][T25044] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 933.058050][T25044] ? xskq_create+0x56/0x170 [ 933.058081][T25044] ? __x64_sys_setsockopt+0x143/0x1b0 [ 933.058113][T25044] ? do_syscall_64+0x174/0x580 [ 933.058141][T25044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.058176][T25044] __vmalloc_node_range_noprof+0x130/0x1560 [ 933.058286][T25044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 933.058327][T25044] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 933.058353][T25044] vmalloc_user_noprof+0xad/0xe0 [ 933.058383][T25044] ? xskq_create+0xbf/0x170 [ 933.058414][T25044] xskq_create+0xbf/0x170 [ 933.058448][T25044] xsk_init_queue+0x8a/0xe0 [ 933.058481][T25044] xsk_setsockopt+0x52a/0x960 [ 933.058514][T25044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 933.058555][T25044] ? __fget_files+0x2a/0x420 [ 933.058603][T25044] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 933.058663][T25044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 933.058694][T25044] do_sock_setsockopt+0x17c/0x1b0 [ 933.058729][T25044] __x64_sys_setsockopt+0x143/0x1b0 [ 933.058764][T25044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.058786][T25044] do_syscall_64+0x174/0x580 [ 933.058818][T25044] ? trace_irq_disable+0x3b/0x140 [ 933.058892][T25044] ? clear_bhb_loop+0x40/0x90 [ 933.058919][T25044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.058941][T25044] RIP: 0033:0x7fd26cf8de59 [ 933.058987][T25044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.059008][T25044] RSP: 002b:00007fd26b1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 933.059039][T25044] RAX: ffffffffffffffda RBX: 00007fd26d215fa0 RCX: 00007fd26cf8de59 [ 933.059056][T25044] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 933.059069][T25044] RBP: 00007fd26d023e6f R08: 0000000000000004 R09: 0000000000000000 [ 933.059082][T25044] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.059095][T25044] R13: 00007fd26d216038 R14: 00007fd26d215fa0 R15: 00007ffc5df4e568 [ 933.059130][T25044] [ 933.059131][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 933.070962][T25044] Mem-Info: [ 933.070979][T25044] active_anon:8426 inactive_anon:0 isolated_anon:0 [ 933.070979][T25044] active_file:1 inactive_file:53428 isolated_file:0 [ 933.070979][T25044] unevictable:768 dirty:466 writeback:3 [ 933.070979][T25044] slab_reclaimable:12478 slab_unreclaimable:106090 [ 933.070979][T25044] mapped:30593 shmem:1550 pagetables:1456 [ 933.070979][T25044] sec_pagetables:0 bounce:0 [ 933.070979][T25044] kernel_misc_reclaimable:0 [ 933.070979][T25044] free:1300473 free_pcp:5965 free_cma:0 [ 933.071034][T25044] Node 0 active_anon:33704kB inactive_anon:0kB active_file:4kB inactive_file:213520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122372kB dirty:1864kB writeback:12kB shmem:4664kB kernel_stack:13564kB pagetables:5668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 933.071086][T25044] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 933.071135][T25044] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 933.071205][T25044] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 933.071242][T25044] Node 0 DMA32 free:1252912kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33704kB inactive_anon:0kB active_file:4kB inactive_file:213520kB unevictable:1536kB writepending:1876kB zspages:0kB present:3129332kB managed:2552512kB mlocked:0kB bounce:0kB free_pcp:23836kB local_pcp:7012kB free_cma:0kB [ 933.071304][T25044] lowmem_reserve[]: 0 0 0 0 0 [ 933.071339][T25044] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:836kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 933.071397][T25044] lowmem_reserve[]: 0 0 0 0 0 [ 933.071431][T25044] Node 1 Normal free:3933620kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 933.071490][T25044] lowmem_reserve[]: 0 0 0 0 0 [ 933.071523][T25044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 933.072214][T25044] Node 0 DMA32: 1069*4kB (UME) 629*8kB (UME) 377*16kB (UME) 151*32kB (UME) 168*64kB (UME) 97*128kB (UM) 57*256kB (UM) 10*512kB (UME) 6*1024kB (UM) 8*2048kB (UME) 285*4096kB (UM) = 1252940kB [ 933.072374][T25044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 933.072473][T25044] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 13*16kB (UM) 9*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (M) 958*4096kB (UM) = 3933620kB [ 933.072625][T25044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 933.072642][T25044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 933.072659][T25044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 933.072675][T25044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 933.072691][T25044] 54852 total pagecache pages [ 933.072699][T25044] 0 pages in swap cache [ 933.072706][T25044] Free swap = 124996kB [ 933.072714][T25044] Total swap = 124996kB [ 933.072722][T25044] 2097051 pages RAM [ 933.072730][T25044] 0 pages HighMem/MovableOnly [ 933.072737][T25044] 427100 pages reserved [ 933.072744][T25044] 0 pages cma reserved [ 933.101118][ T5951] Flush: task=udevd[5951] dev=loop5 state=2 [ 933.159302][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 933.217643][ T5951] Teardown: task=udevd[5951] dev=loop5 state=2 [ 933.426293][T25039] EXT4-fs (loop2): 1 truncate cleaned up [ 933.501109][T25039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.765727][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.884247][ T6438] Flush: task=udevd[6438] dev=loop2 state=2 [ 933.901657][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8881'. [ 933.985661][ T6438] Teardown: task=udevd[6438] dev=loop2 state=2 [ 934.302251][T25071] loop2: detected capacity change from 0 to 64 [ 934.591877][T25055] loop5: detected capacity change from 0 to 32768 [ 934.662067][T25071] syz.2.8887: attempt to access beyond end of device [ 934.662067][T25071] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 934.708749][T25080] loop1: detected capacity change from 0 to 128 [ 934.734765][T25080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 934.735311][T25080] ext4 filesystem being mounted at /1682/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 934.736830][T25055] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 935.036032][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 935.036722][ T5648] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 935.146690][ T6438] Flush: task=udevd[6438] dev=loop1 state=2 [ 935.179881][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 935.226170][ T6438] Teardown: task=udevd[6438] dev=loop1 state=2 [ 935.246021][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8898'. [ 935.660731][T25055] XFS (loop5): Ending clean mount [ 935.902114][T21677] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 936.030570][T25120] loop1: detected capacity change from 0 to 64 [ 936.504423][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 936.721497][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 936.968321][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 937.139353][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 937.285497][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8920'. [ 937.666812][T25155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8923'. [ 937.911317][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8906'. [ 938.267782][T25179] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8933'. [ 938.267810][T25179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 939.015187][T25209] loop2: detected capacity change from 0 to 256 [ 939.103288][T25209] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 939.103317][T25209] FAT-fs (loop2): Filesystem has been set read-only [ 939.191296][T25215] loop1: detected capacity change from 0 to 256 [ 939.269935][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 939.399511][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 939.679272][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 939.772286][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 941.109034][T25284] ./file0: Can't open blockdev [ 942.620003][T25351] loop2: detected capacity change from 0 to 16 [ 942.673163][T25351] erofs (device loop2): mounted with root inode @ nid 36. [ 942.972747][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 943.040710][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 943.193623][ T823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 943.378502][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.378550][ T823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 943.386590][ T823] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 943.386620][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.386639][ T823] usb 6-1: Product: syz [ 943.386653][ T823] usb 6-1: Manufacturer: syz [ 943.386667][ T823] usb 6-1: SerialNumber: syz [ 943.402482][ T823] usb 6-1: config 0 descriptor?? [ 943.405206][T25374] loop4: detected capacity change from 0 to 256 [ 943.406424][T25374] exfat: Deprecated parameter 'namecase' [ 943.416927][ T823] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 943.432588][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.433621][ T823] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 943.433676][ T823] usb 6-1: media controller created [ 943.488230][T25374] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 943.787567][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 944.247307][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 944.301801][ T823] DVB: Unable to find symbol tda10046_attach() [ 944.301820][ T823] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 944.301835][ T823] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 944.338543][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 944.518538][ T823] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 944.567829][ T823] usb 6-1: USB disconnect, device number 6 [ 944.949311][T25417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9044'. [ 945.497315][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9056'. [ 945.700091][T25443] loop4: detected capacity change from 0 to 256 [ 945.803067][T21683] Bluetooth: hci0: command 0x0406 tx timeout [ 945.888037][T25443] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 945.888068][T25443] FAT-fs (loop4): Filesystem has been set read-only [ 946.295931][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 946.364589][T25463] loop1: detected capacity change from 0 to 64 [ 946.365536][T25462] loop5: detected capacity change from 0 to 256 [ 946.377979][T25462] exFAT-fs (loop5): error, no upcase table entry. Please run fsck [ 946.378002][T25462] exFAT-fs (loop5): Filesystem has been set read-only [ 946.378262][T25462] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 946.379421][T25433] virt_wifi0 speed is unknown, defaulting to 1000 [ 946.457234][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 946.931021][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 947.017153][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 947.081879][ T5951] Flush: task=udevd[5951] dev=loop5 state=2 [ 947.221171][ T5951] Teardown: task=udevd[5951] dev=loop5 state=2 [ 947.937871][T25504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.937889][T25504] IPv6: NLM_F_CREATE should be set when creating new route [ 947.937954][T25504] IPv6: NLM_F_CREATE should be set when creating new route [ 948.341938][T25516] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 948.547744][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9098'. [ 948.670134][T25524] bridge5: entered promiscuous mode [ 950.620400][T19007] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 950.804444][T19007] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 950.804482][T19007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.804505][T19007] usb 2-1: Product: syz [ 950.804521][T19007] usb 2-1: Manufacturer: syz [ 950.804537][T19007] usb 2-1: SerialNumber: syz [ 950.968486][ T5950] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 950.993956][ T823] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 951.170823][ T823] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 951.170854][ T823] usb 3-1: config 8 has no interface number 0 [ 951.197936][ T823] usb 3-1: string descriptor 0 read error: -22 [ 951.199086][ T823] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 951.199113][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.299165][ T823] ttusb_dec_send_command: command bulk message failed: error -22 [ 951.299694][ T823] ttusb-dec 3-1:8.137: probe with driver ttusb-dec failed with error -22 [ 951.445223][ T5754] usb 2-1: USB disconnect, device number 72 [ 951.515011][T19007] usb 3-1: USB disconnect, device number 80 [ 952.049885][T25638] loop4: detected capacity change from 0 to 512 [ 952.260962][T25638] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 952.278741][T25648] netlink: 'syz.5.9157': attribute type 20 has an invalid length. [ 952.278770][T25648] IPv6: NLM_F_CREATE should be specified when creating new route [ 952.296252][T25638] EXT4-fs (loop4): Remounting filesystem read-only [ 952.298484][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 952.298508][ C1] EXT4-fs (loop4): initial error at time 2000000049: ext4_mb_generate_buddy:1317 [ 952.298533][ C1] EXT4-fs (loop4): last error at time 2000000049: ext4_mb_generate_buddy:1317 [ 952.301603][T25638] EXT4-fs (loop4): 1 truncate cleaned up [ 952.315800][T25638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.315933][T25638] ext4 filesystem being mounted at /1697/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.330006][T25638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.362551][ T1385] __quota_error: 12 callbacks suppressed [ 952.362573][ T1385] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 952.362781][ T1385] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 952.362802][ T1385] Quota error (device loop4): write_blk: dquota write failed [ 952.362815][ T1385] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 952.362831][ T1385] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 952.362848][ T1385] Quota error (device loop4): write_blk: dquota write failed [ 952.362860][ T1385] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 952.362956][ T1385] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 952.362975][ T1385] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 952.362995][ T1385] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 952.363148][ T1385] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 952.491873][ T5950] usb 2-1: Service connection timeout for: 256 [ 952.491899][ T5950] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 952.651326][ T5950] ath9k_htc: Failed to initialize the device [ 952.657922][ T5754] usb 2-1: ath9k_htc: USB layer deinitialized [ 952.720490][ T5951] Flush: task=udevd[5951] dev=loop4 state=2 [ 952.823953][ T5951] Teardown: task=udevd[5951] dev=loop4 state=2 [ 953.339782][T25680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9173'. [ 954.090680][T25713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9189'. [ 954.090712][T25713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9189'. [ 954.576819][ T5950] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 954.747566][ T5950] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 954.747603][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.747625][ T5950] usb 2-1: Product: syz [ 954.747656][ T5950] usb 2-1: Manufacturer: syz [ 954.747672][ T5950] usb 2-1: SerialNumber: syz [ 954.868985][T19007] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 955.087426][T25703] loop5: detected capacity change from 0 to 32768 [ 955.211048][ C1] usb 2-1: ath: unknown panic pattern! [ 955.344252][T25703] dmapctl: leaf value 127 too large at index 344 [ 955.344277][T25703] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page [ 955.344277][T25703] [ 955.350146][T25703] ERROR: (device loop5): remounting filesystem as read-only [ 955.437869][ T5754] usb 2-1: USB disconnect, device number 73 [ 955.644094][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 955.688890][T25752] geneve6: entered promiscuous mode [ 955.742056][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 955.886044][T25758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9212'. [ 956.062851][T19007] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 956.137042][T19007] ath9k_htc: Failed to initialize the device [ 956.137974][ T5754] usb 2-1: ath9k_htc: USB layer deinitialized [ 956.178408][T25768] netlink: 'syz.5.9206': attribute type 22 has an invalid length. [ 956.454160][T25776] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.353079][T25761] loop2: detected capacity change from 0 to 32768 [ 957.415769][T25761] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 957.415769][T25761] [ 957.669461][T25761] ERROR: (device loop2): remounting filesystem as read-only [ 957.669528][T25761] ialloc: diAlloc returned -5! [ 957.877869][T25822] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9242'. [ 958.006442][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 958.092811][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9247'. [ 958.095462][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 958.762308][T25856] loop4: detected capacity change from 0 to 256 [ 958.836495][T25846] loop5: detected capacity change from 0 to 4096 [ 958.852075][T25846] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 959.007462][T25846] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 959.015871][T25846] ntfs3(loop5): Failed to load $Extend (-22). [ 959.015896][T25846] ntfs3(loop5): Failed to initialize $Extend. [ 959.016325][T25846] ntfs3(loop5): ino=5, mi_enum_attr [ 959.402302][ T5951] Flush: task=udevd[5951] dev=loop4 state=2 [ 959.517044][T25846] ntfs3(loop5): ino=5, "/" mi_enum_attr [ 959.517370][ T5951] Teardown: task=udevd[5951] dev=loop4 state=2 [ 959.710652][T25877] loop4: detected capacity change from 0 to 8 [ 959.879746][T25877] SQUASHFS error: Unable to read inode 0x87 [ 960.217795][ T5948] Flush: task=udevd[5948] dev=loop5 state=2 [ 960.250807][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 960.268248][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9282'. [ 960.317898][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 960.320485][ T5948] Teardown: task=udevd[5948] dev=loop5 state=2 [ 961.030969][T25929] No source specified [ 961.481251][T25942] netlink: 'syz.1.9303': attribute type 2 has an invalid length. [ 961.631136][ T5950] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 961.703123][T25945] veth8: entered allmulticast mode [ 962.017368][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 962.021542][ T5950] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 962.021609][ T5950] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.027472][ T5950] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 962.027502][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.027521][ T5950] usb 3-1: Product: syz [ 962.027535][ T5950] usb 3-1: Manufacturer: syz [ 962.027549][ T5950] usb 3-1: SerialNumber: syz [ 962.610041][ T5950] ljca 3-1:1.0: probe with driver ljca failed with error -71 [ 962.669834][ T5950] usb 3-1: USB disconnect, device number 81 [ 962.762981][T25971] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 963.356248][T25996] loop2: detected capacity change from 0 to 512 [ 963.366432][T25996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 963.366456][T25996] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.404622][T25996] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 963.404649][T25996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0102] [ 963.423351][T25996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 963.440550][T25996] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.9330: bad symlink. [ 963.575251][T26006] loop5: detected capacity change from 0 to 256 [ 963.586554][T26006] exfat: Deprecated parameter 'namecase' [ 963.586626][T26006] exfat: Deprecated parameter 'namecase' [ 963.594097][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.680385][T26006] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 963.758164][ T5948] Flush: task=udevd[5948] dev=loop2 state=2 [ 963.804836][T26008] unsupported nla_type 142 [ 963.833894][ T5948] Teardown: task=udevd[5948] dev=loop2 state=2 [ 964.130034][ T5948] Flush: task=udevd[5948] dev=loop5 state=2 [ 964.222043][ T5948] Teardown: task=udevd[5948] dev=loop5 state=2 [ 964.282868][ T5950] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 964.296227][T26024] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 964.334817][T26024] bond1 (unregistering): Released all slaves [ 964.413264][T22829] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 964.474261][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 964.483747][ T5950] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 964.483777][ T5950] usb 2-1: config 0 has no interface number 0 [ 964.483845][ T5950] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 964.598120][T22829] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 964.598155][T22829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.624084][T22829] usb 3-1: config 0 descriptor?? [ 964.639505][T22829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 964.814149][ T5950] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 964.814183][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 964.814206][ T5950] usb 2-1: Product: syz [ 964.814222][ T5950] usb 2-1: SerialNumber: syz [ 964.841034][ T5950] usb 2-1: config 0 descriptor?? [ 964.900916][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input26 [ 964.925744][T22829] gspca_cpia1: usb_control_msg 05, error -71 [ 964.926190][T22829] gspca_cpia1: usb_control_msg 01, error -71 [ 964.926208][T22829] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 964.976005][T22829] usb 3-1: USB disconnect, device number 82 [ 965.069276][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.077173][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.077423][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.077671][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.077911][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.078151][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.078384][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.078621][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.078862][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.079094][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 965.280166][T26045] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 965.380429][ T5950] usb 2-1: USB disconnect, device number 74 [ 965.380539][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 965.481016][ T5950] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 965.988811][T26065] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9363'. [ 966.817234][ T38] audit: type=1326 audit(2000000063.055:400): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26091 comm="syz.4.9379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ac6de59 code=0x7ffc0000 [ 966.819219][ T38] audit: type=1326 audit(2000000063.055:401): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26091 comm="syz.4.9379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ac6de59 code=0x7ffc0000 [ 966.820685][ T38] audit: type=1326 audit(2000000063.055:402): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26091 comm="syz.4.9379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7efd6ac6de59 code=0x7ffc0000 [ 966.821149][ T38] audit: type=1326 audit(2000000063.055:403): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26091 comm="syz.4.9379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ac6de59 code=0x7ffc0000 [ 966.821957][ T38] audit: type=1326 audit(2000000063.055:404): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26091 comm="syz.4.9379" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6ac6de59 code=0x7ffc0000 [ 967.350083][ T38] audit: type=1326 audit(2000000063.541:405): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26110 comm="syz.5.9386" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 967.350424][ T38] audit: type=1326 audit(2000000063.541:406): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26110 comm="syz.5.9386" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 967.375889][ T38] audit: type=1326 audit(2000000063.569:407): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26110 comm="syz.5.9386" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 967.376375][ T38] audit: type=1326 audit(2000000063.569:408): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26110 comm="syz.5.9386" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 967.376421][ T38] audit: type=1326 audit(2000000063.569:409): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26110 comm="syz.5.9386" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 967.458868][T26113] loop5: detected capacity change from 0 to 64 [ 967.780339][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 967.864325][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 967.955762][T26130] tmpfs: Bad value for 'mpol' [ 969.500804][T26181] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 969.903595][T26201] loop2: detected capacity change from 0 to 164 [ 969.935407][T26201] Unsupported NM flag settings (240) [ 970.195264][T26208] loop1: detected capacity change from 0 to 1764 [ 970.380295][ T5951] Flush: task=udevd[5951] dev=loop2 state=2 [ 970.400911][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 970.493997][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 970.496412][ T5951] Teardown: task=udevd[5951] dev=loop2 state=2 [ 970.544345][T26218] netlink: 'syz.4.9439': attribute type 31 has an invalid length. [ 971.061250][T26230] loop5: detected capacity change from 0 to 4096 [ 971.321311][T26245] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 971.359654][ T5950] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 971.573231][ T5950] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 971.573339][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 971.573362][ T5950] usb 3-1: Product: syz [ 971.573377][ T5950] usb 3-1: Manufacturer: syz [ 971.573393][ T5950] usb 3-1: SerialNumber: syz [ 971.749065][ T5950] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 971.809416][T26257] loop4: detected capacity change from 0 to 64 [ 972.127089][ T5950] vp7045: USB control message 'in' went wrong. [ 972.127109][ T5950] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 972.127152][ T5950] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 972.153118][ T5950] usb 3-1: USB disconnect, device number 83 [ 972.282373][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 972.375609][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 972.655931][T26275] tmpfs: Bad value for 'mpol' [ 972.915608][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 973.030123][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 973.096634][T26288] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9474'. [ 973.096783][T26288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9474'. [ 973.283340][T26292] mac80211_hwsim hwsim6 30: renamed from wlan0 [ 973.515744][T26300] loop2: detected capacity change from 0 to 64 [ 973.784056][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 973.886081][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 974.337025][T26322] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9488'. [ 975.529865][T26357] comedi comedi4: bad chanlist[1]=0x00000009 chan=9 range length=2 [ 975.607358][T26360] loop4: detected capacity change from 0 to 256 [ 975.716547][T26328] loop1: detected capacity change from 0 to 32768 [ 975.813349][T26328] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 975.816798][T26360] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 975.816830][T26360] FAT-fs (loop4): Filesystem has been set read-only [ 976.005116][T26360] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 976.005199][T26360] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 976.422295][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.582625][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 976.627587][T26328] XFS (loop1): Ending clean mount [ 976.634018][T26380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.662829][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 976.879275][ T5648] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 976.963494][T26391] loop2: detected capacity change from 0 to 64 [ 976.990912][T26392] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9519'. [ 977.429497][ T5948] Flush: task=udevd[5948] dev=loop2 state=2 [ 977.692359][ T5948] Teardown: task=udevd[5948] dev=loop2 state=2 [ 978.667763][T26437] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9542'. [ 978.736519][T26437] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9542'. [ 978.845209][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 978.976754][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 979.023699][T26446] netlink: 'syz.2.9548': attribute type 7 has an invalid length. [ 979.023724][T26446] netlink: 'syz.2.9548': attribute type 8 has an invalid length. [ 979.023738][T26446] netlink: 'syz.2.9548': attribute type 15 has an invalid length. [ 979.692215][T26469] loop5: detected capacity change from 0 to 256 [ 979.711564][T26469] exfat: Deprecated parameter 'namecase' [ 979.724588][T26469] exfat: Deprecated parameter 'utf8' [ 979.761062][T26469] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 979.981565][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 980.213547][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 981.610263][T26538] loop2: detected capacity change from 0 to 512 [ 981.614877][T26538] EXT4-fs: Ignoring removed oldalloc option [ 981.770800][T26538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.770946][T26538] ext4 filesystem being mounted at /1812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.011903][T26540] loop1: detected capacity change from 0 to 4096 [ 982.143544][T26540] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 982.291571][T26538] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.9590: corrupted inode contents [ 982.342358][T26538] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.9590: mark_inode_dirty error [ 982.343280][T26538] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.9590: corrupted inode contents [ 982.400959][T26538] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.9590: mark_inode_dirty error [ 982.542131][T26560] loop4: detected capacity change from 0 to 65 [ 982.673572][T26560] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 982.748998][T26524] loop5: detected capacity change from 0 to 32768 [ 983.003317][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 983.005280][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.192153][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 983.251532][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 983.298927][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 983.301943][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 983.410775][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 984.001658][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 984.075525][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 984.844617][T26612] syz.2.9625 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 985.687309][T26640] loop1: detected capacity change from 0 to 256 [ 985.690182][T26640] exfat: Deprecated parameter 'namecase' [ 985.690255][T26640] exfat: Deprecated parameter 'namecase' [ 985.768113][T26640] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 986.294888][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 986.392044][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 986.481247][T26667] IPv6: NLM_F_CREATE should be specified when creating new route [ 986.481490][T26667] netlink: 'syz.1.9649': attribute type 1 has an invalid length. [ 986.563714][T26669] loop1: detected capacity change from 0 to 256 [ 987.024463][ T5951] Flush: task=udevd[5951] dev=loop1 state=2 [ 987.058473][T26681] netlink: 'syz.5.9659': attribute type 1 has an invalid length. [ 987.118440][ T5951] Teardown: task=udevd[5951] dev=loop1 state=2 [ 988.053667][T26715] loop1: detected capacity change from 0 to 512 [ 988.056541][T26715] EXT4-fs: Ignoring removed orlov option [ 988.121022][T26715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.121163][T26715] ext4 filesystem being mounted at /1820/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.329371][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.436542][T26732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9685'. [ 988.613511][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9684'. [ 988.712330][T26743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9691'. [ 988.747288][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 988.839513][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 989.096101][ T5754] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 989.311248][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 989.313729][ T5754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 989.313771][ T5754] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 989.313801][ T5754] usb 3-1: config 1 interface 0 has no altsetting 0 [ 989.384469][ T5754] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 989.384509][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.384531][ T5754] usb 3-1: Product: syz [ 989.384546][ T5754] usb 3-1: Manufacturer: syz [ 989.384562][ T5754] usb 3-1: SerialNumber: syz [ 989.900434][T26773] loop4: detected capacity change from 0 to 128 [ 989.903849][ T5754] smsusb:smsusb_probe: board id=8, interface number 0 [ 989.904136][ T5754] smsusb:smsusb_probe: Device initialized with return code -19 [ 990.014085][ T5754] usb 3-1: USB disconnect, device number 84 [ 990.237531][T26776] loop1: detected capacity change from 0 to 2048 [ 990.447750][T26776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 990.757910][T26773] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 990.757942][T26773] FAT-fs (loop4): Filesystem has been set read-only [ 990.838758][T26786] netlink: 'syz.2.9710': attribute type 32 has an invalid length. [ 990.947060][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 991.015922][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 991.131495][T26796] tmpfs: Bad value for 'mpol' [ 991.362489][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 991.602179][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 991.735531][T26814] overlayfs: conflicting options: nfs_export=on,index=off [ 992.005206][ T5768] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 992.167608][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 992.167629][ T38] audit: type=1326 audit(2000000086.767:414): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.169937][ T38] audit: type=1326 audit(2000000086.767:415): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.184878][ T5768] usb 5-1: Using ep0 maxpacket: 32 [ 992.235876][ T38] audit: type=1326 audit(2000000086.767:416): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.238159][ T5768] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 992.250394][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.281232][ T38] audit: type=1326 audit(2000000086.823:417): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.281297][ T38] audit: type=1326 audit(2000000086.833:418): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.283033][ T38] audit: type=1326 audit(2000000086.870:419): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.283084][ T38] audit: type=1326 audit(2000000086.870:420): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.287433][ T38] audit: type=1326 audit(2000000086.870:421): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.287483][ T38] audit: type=1326 audit(2000000086.870:422): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26829 comm="syz.5.9731" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 992.460747][ T5768] usb 5-1: config 0 descriptor?? [ 992.481572][ T5768] gspca_main: sq930x-2.14.0 probing 041e:403c [ 992.559751][T26839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9736'. [ 993.015375][ T5768] gspca_sq930x: ucbus_write failed -71 [ 993.015484][ T5768] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 993.081913][ T5768] usb 5-1: USB disconnect, device number 73 [ 993.190457][T26852] tmpfs: Bad value for 'mpol' [ 993.386021][T26858] loop1: detected capacity change from 0 to 136 [ 994.148364][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 994.251965][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 994.610389][T26886] bond1: option tlb_dynamic_lb: invalid value (13) [ 994.654630][T26886] bond1 (unregistering): Released all slaves [ 994.777126][T26900] 9pnet_fd: p9_fd_create_tcp (26900): problem binding to privport [ 994.992497][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9768'. [ 995.389555][T26912] loop2: detected capacity change from 0 to 4096 [ 995.395749][T26912] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 995.502446][T26912] ntfs3(loop2): ino=b, mi_enum_attr [ 995.508425][T26912] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 995.517512][T26912] ntfs3(loop2): Failed to load $Extend (-22). [ 995.517537][T26912] ntfs3(loop2): Failed to initialize $Extend. [ 996.132106][T26932] loop1: detected capacity change from 0 to 512 [ 996.219787][T26939] netlink: 'syz.2.9784': attribute type 2 has an invalid length. [ 996.243976][ T5948] Flush: task=udevd[5948] dev=loop2 state=2 [ 996.262104][T26932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.262232][T26932] ext4 filesystem being mounted at /1837/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.377488][ T5948] Teardown: task=udevd[5948] dev=loop2 state=2 [ 996.519551][T26947] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 996.519578][T26947] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 996.555887][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.698689][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 996.774484][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 997.260932][T26967] netlink: 'syz.1.9797': attribute type 21 has an invalid length. [ 997.260962][T26967] IPv6: NLM_F_CREATE should be specified when creating new route [ 997.261329][T26967] netlink: 'syz.1.9797': attribute type 1 has an invalid length. [ 997.486879][T26973] openvswitch: netlink: Multiple metadata blocks provided [ 997.571542][T26975] comedi: No check for data length of config insn id 4196308 is implemented [ 997.571563][T26975] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 997.571648][T26975] comedi: Assuming n=95 is correct [ 997.830162][T26985] loop4: detected capacity change from 0 to 512 [ 997.861234][T26985] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 997.861261][T26985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 997.869615][T26985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 997.872441][T26985] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.9808: iget: bad i_size value: 12154761577498 [ 997.872480][T26985] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 997.882968][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 997.882992][ C1] EXT4-fs (loop4): initial error at time 2000000092: ext4_orphan_get:1399: inode 13 [ 997.883040][ C1] EXT4-fs (loop4): last error at time 2000000092: ext4_orphan_get:1399: inode 13 [ 997.888831][T26985] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9808: couldn't read orphan inode 13 (err -117) [ 997.888864][T26985] loop4: lost filesystem error report for type 5 error -117 [ 997.965852][T26985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 997.974992][T26988] netlink: 'syz.1.9806': attribute type 2 has an invalid length. [ 997.975016][T26988] netlink: 'syz.1.9806': attribute type 2 has an invalid length. [ 998.072593][T26985] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.9808: dx entry: limit 65535 != root limit 120 [ 998.072633][T26985] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9808: Corrupt directory, running e2fsck is recommended [ 998.113303][T26994] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9810'. [ 998.362341][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.480041][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 998.591630][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 998.660139][T27009] loop4: detected capacity change from 0 to 256 [ 999.111901][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 999.235867][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 1001.063677][T27096] loop4: detected capacity change from 0 to 2048 [ 1001.107216][T27096] loop4: p1 < > p4 < > [ 1001.268778][ T5951] Flush: task=udevd[5951] dev=loop4 state=2 [ 1001.402054][ T5951] Teardown: task=udevd[5951] dev=loop4 state=2 [ 1001.514045][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1001.533521][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1001.732860][T27079] loop2: detected capacity change from 0 to 32768 [ 1001.794621][T27079] find_entry called with index >= next_index [ 1001.794639][T27079] find_entry called with index >= next_index [ 1001.794648][T27079] find_entry called with index >= next_index [ 1001.794656][T27079] find_entry called with index >= next_index [ 1001.794665][T27079] find_entry called with index >= next_index [ 1001.794674][T27079] add_index: next_index = 0. Resetting! [ 1001.794692][T27079] find_entry called with index >= next_index [ 1001.794701][T27079] find_entry called with index >= next_index [ 1001.794710][T27079] find_entry called with index >= next_index [ 1002.269964][T27136] netlink: 'syz.4.9879': attribute type 1 has an invalid length. [ 1002.269989][T27136] netlink: 'syz.4.9879': attribute type 2 has an invalid length. [ 1002.302885][T27133] loop1: detected capacity change from 0 to 2048 [ 1002.365683][T27136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1002.386946][T27133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.616038][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1002.699160][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 1002.720262][T27146] geneve1: entered promiscuous mode [ 1002.726990][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1003.029068][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 1003.367851][T27167] usb usb5: usbfs: process 27167 (syz.1.9895) did not claim interface 0 before use [ 1003.512222][T27171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9897'. [ 1003.512250][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9897'. [ 1003.561366][T27175] loop1: detected capacity change from 0 to 512 [ 1003.643023][T27177] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 1003.664153][T27175] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1003.708293][T27175] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1003.709354][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1003.709375][ C1] EXT4-fs (loop1): initial error at time 2000000097: ext4_mb_generate_buddy:1317 [ 1003.709401][ C1] EXT4-fs (loop1): last error at time 2000000097: ext4_mb_generate_buddy:1317 [ 1003.735153][T27175] Quota error (device loop1): write_blk: dquota write failed [ 1003.735176][T27175] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1003.735288][T27175] Quota error (device loop1): write_blk: dquota write failed [ 1003.735402][T27175] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1003.735454][T27175] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.9899: Failed to acquire dquot type 1 [ 1003.735475][T27175] loop1: lost filesystem error report for type 5 error -28 [ 1003.756203][T27175] EXT4-fs (loop1): 1 truncate cleaned up [ 1003.776615][T27175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.843425][T27175] Quota error (device loop1): write_blk: dquota write failed [ 1003.919816][T27175] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1003.919909][T27175] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.9899: Failed to acquire dquot type 1 [ 1004.005648][T27188] netlink: 'syz.5.9903': attribute type 2 has an invalid length. [ 1004.005672][T27188] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9903'. [ 1004.166043][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.340247][ T5797] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1004.378306][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 1004.459097][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 1004.503269][ T5797] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1004.503301][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.503352][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1004.503398][ T5797] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1004.503423][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.519052][ T5797] usb 3-1: config 0 descriptor?? [ 1004.590300][ T5797] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1004.621633][ T5797] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1004.778916][T27214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1004.871786][ T5332] usb 3-1: USB disconnect, device number 85 [ 1005.072361][T27228] netlink: 'syz.4.9921': attribute type 32 has an invalid length. [ 1005.267795][T27235] netlink: 'syz.5.9925': attribute type 1 has an invalid length. [ 1005.267812][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9925'. [ 1005.267828][T27235] netlink: 'syz.5.9925': attribute type 1 has an invalid length. [ 1006.126359][T27270] loop5: detected capacity change from 0 to 8 [ 1006.129403][T27270] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1006.174985][ T5951] udevd[5951]: incorrect cramfs checksum on /dev/loop5 [ 1006.179627][ T5332] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1006.230167][ T5948] udevd[5948]: incorrect cramfs checksum on /dev/loop5 [ 1006.289532][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1006.350187][ T5332] usb 2-1: Using ep0 maxpacket: 32 [ 1006.363227][T27276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9945'. [ 1006.367201][ T5332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.367230][ T5332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1006.404994][ T5332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1006.405030][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.405052][ T5332] usb 2-1: Product: syz [ 1006.405068][ T5332] usb 2-1: Manufacturer: syz [ 1006.405083][ T5332] usb 2-1: SerialNumber: syz [ 1006.415425][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1006.457316][ T5332] usb 2-1: config 0 descriptor?? [ 1006.696750][ T5332] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 1006.696776][ T5332] 00 00 00 00 00 00 00 00 [ 1006.696862][ T5332] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1006.986453][ T5332] usb 2-1: USB disconnect, device number 75 [ 1007.549017][T27274] loop2: detected capacity change from 0 to 32768 [ 1007.636804][T27308] loop4: detected capacity change from 0 to 1764 [ 1007.654467][T27274] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1007.799708][T27308] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1008.023405][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1008.161899][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1008.546142][ T38] audit: type=1326 audit(2000000102.080:423): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27334 comm="syz.5.9976" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1008.547323][T27335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9975'. [ 1008.548564][ T38] audit: type=1326 audit(2000000102.080:424): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27334 comm="syz.5.9976" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1008.622152][ T38] audit: type=1326 audit(2000000102.155:425): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27334 comm="syz.5.9976" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1008.624335][ T38] audit: type=1326 audit(2000000102.155:426): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27334 comm="syz.5.9976" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1008.828550][ T5646] ocfs2: Unmounting device (7,2) on (node local) [ 1009.029222][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1009.119189][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1009.495648][T27358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9986'. [ 1010.083538][T27338] loop4: detected capacity change from 0 to 32768 [ 1010.251738][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9994'. [ 1010.251773][T27379] openvswitch: netlink: EtherType 0 is less than min 600 [ 1011.091471][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1011.194492][T27399] overlayfs: missing 'lowerdir' [ 1011.194867][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1012.050527][T27429] netlink: 'syz.5.10017': attribute type 1 has an invalid length. [ 1012.050553][T27429] netlink: 'syz.5.10017': attribute type 1 has an invalid length. [ 1012.322378][T27439] netlink: 'syz.4.10022': attribute type 10 has an invalid length. [ 1012.322542][T27439] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1012.668536][T27454] loop4: detected capacity change from 0 to 512 [ 1012.677537][T27454] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1012.677559][T27454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1012.677885][T27454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1012.680867][T27454] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.10028: iget: bad i_size value: 12154761577498 [ 1012.680900][T27454] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.681481][T27454] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10028: couldn't read orphan inode 13 (err -117) [ 1012.681508][T27454] loop4: lost filesystem error report for type 5 error -117 [ 1012.688575][T27454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1012.760528][T27454] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.10028: dx entry: limit 65535 != root limit 120 [ 1012.760563][T27454] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.10028: Corrupt directory, running e2fsck is recommended [ 1012.990068][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.126740][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 1013.651722][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 1013.830293][T27484] netlink: 'syz.1.10042': attribute type 1 has an invalid length. [ 1013.969352][T27478] loop5: detected capacity change from 0 to 4096 [ 1014.523959][T27478] ntfs3(loop5): ino=9, attr_set_size_ex [ 1015.093035][T27518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10060'. [ 1015.210145][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1015.301148][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1015.646292][T27543] loop1: detected capacity change from 0 to 256 [ 1015.672218][ T5768] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1015.781794][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10074'. [ 1015.832559][ T5768] usb 6-1: Using ep0 maxpacket: 8 [ 1015.835536][ T5768] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1015.841133][ T5768] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1015.841167][ T5768] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1015.841189][ T5768] usb 6-1: Product: syz [ 1015.841206][ T5768] usb 6-1: Manufacturer: syz [ 1015.841221][ T5768] usb 6-1: SerialNumber: syz [ 1016.196567][ T5768] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 1016.196597][ T5768] usb 6-1: Handspring Visor / Palm OS: port 151, is for unknown use [ 1016.196618][ T5768] usb 6-1: Handspring Visor / Palm OS: port 234, is for unknown use [ 1016.196639][ T5768] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1016.262455][ T6438] Flush: task=udevd[6438] dev=loop1 state=2 [ 1016.384336][ T6438] Teardown: task=udevd[6438] dev=loop1 state=2 [ 1016.413741][ T5768] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1016.413899][ T5768] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1016.463454][ T5768] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1016.486925][ T73] bond0: (slave bond_slave_0): interface is now down [ 1016.486949][ T73] bond0: (slave bond_slave_1): interface is now down [ 1016.486962][ T73] bond0: (slave syz_tun): interface is now down [ 1016.508504][T27561] bond0: left promiscuous mode [ 1016.508594][T27561] bond_slave_0: left promiscuous mode [ 1016.508864][T27561] bond_slave_1: left promiscuous mode [ 1016.513521][ T73] bond0: (slave bond_slave_0): interface is now down [ 1016.513542][ T73] bond0: (slave bond_slave_1): interface is now down [ 1016.513555][ T73] bond0: (slave syz_tun): interface is now down [ 1016.530363][ T73] bond0: (slave bond_slave_0): interface is now down [ 1016.530385][ T73] bond0: (slave bond_slave_1): interface is now down [ 1016.530398][ T73] bond0: (slave syz_tun): interface is now down [ 1016.565479][ T1383] bond0: (slave bond_slave_0): interface is now down [ 1016.565511][ T1383] bond0: (slave bond_slave_1): interface is now down [ 1016.565525][ T1383] bond0: (slave syz_tun): interface is now down [ 1016.580983][ T73] bond0: (slave bond_slave_0): interface is now down [ 1016.581007][ T73] bond0: (slave bond_slave_1): interface is now down [ 1016.581022][ T73] bond0: (slave syz_tun): interface is now down [ 1016.604786][ T73] bond0: (slave bond_slave_0): interface is now down [ 1016.604811][ T73] bond0: (slave bond_slave_1): interface is now down [ 1016.604824][ T73] bond0: (slave syz_tun): interface is now down [ 1016.628639][T16361] bond0: (slave bond_slave_0): interface is now down [ 1016.628663][T16361] bond0: (slave bond_slave_1): interface is now down [ 1016.628676][T16361] bond0: (slave syz_tun): interface is now down [ 1016.655824][ T1139] bond0: (slave bond_slave_0): interface is now down [ 1016.655848][ T1139] bond0: (slave bond_slave_1): interface is now down [ 1016.655860][ T1139] bond0: (slave syz_tun): interface is now down [ 1016.677133][ T1383] bond0: (slave bond_slave_0): interface is now down [ 1016.677156][ T1383] bond0: (slave bond_slave_1): interface is now down [ 1016.677170][ T1383] bond0: (slave syz_tun): interface is now down [ 1016.698507][ T1383] bond0: (slave bond_slave_0): interface is now down [ 1016.698529][ T1383] bond0: (slave bond_slave_1): interface is now down [ 1016.698544][ T1383] bond0: (slave syz_tun): interface is now down [ 1016.720889][ T1139] bond0: (slave bond_slave_0): interface is now down [ 1016.720914][ T1139] bond0: (slave bond_slave_1): interface is now down [ 1016.720927][ T1139] bond0: (slave syz_tun): interface is now down [ 1016.743512][ T5768] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1016.747822][ T1383] bond0: (slave bond_slave_0): interface is now down [ 1016.747848][ T1383] bond0: (slave bond_slave_1): interface is now down [ 1016.812545][ T5768] usb 6-1: USB disconnect, device number 7 [ 1016.842436][ T1383] bond0: (slave syz_tun): interface is now down [ 1016.845121][ T5768] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1016.845701][T27561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.870289][T16363] bond0: (slave bond_slave_0): interface is now down [ 1016.870314][T16363] bond0: (slave bond_slave_1): interface is now down [ 1016.870328][T16363] bond0: (slave syz_tun): interface is now down [ 1016.905118][ T5768] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1016.905559][ T1385] bond0: (slave bond_slave_0): interface is now down [ 1016.905581][ T1385] bond0: (slave bond_slave_1): interface is now down [ 1016.905597][ T1385] bond0: (slave syz_tun): interface is now down [ 1016.905983][ T5768] visor 6-1:1.0: device disconnected [ 1017.193144][ T1385] bond0: now running without any active interface! [ 1017.887468][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1017.887496][T27603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1017.887512][T27603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1018.111811][T27598] veth0_to_bond: entered allmulticast mode [ 1019.067056][T27640] loop1: detected capacity change from 0 to 1024 [ 1019.069937][T27640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1019.069999][T27640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1019.073805][T27640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1019.139750][T27640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.359200][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.481578][ T5948] Flush: task=udevd[5948] dev=loop1 state=2 [ 1019.582656][T27659] loop4: detected capacity change from 0 to 256 [ 1019.596612][ T5948] Teardown: task=udevd[5948] dev=loop1 state=2 [ 1019.645583][T27662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10127'. [ 1019.874035][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1019.874056][ T38] audit: type=1107 audit(2000000112.650:432): pid=27667 uid=0 auid=4294967295 ses=4294967295 msg='' [ 1020.033250][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1020.125150][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1021.551770][T27731] loop2: detected capacity change from 0 to 4096 [ 1021.552779][ T5768] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1021.604219][T27731] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1021.726730][ T5768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1021.727580][ T5768] usb 2-1: not running at top speed; connect to a high speed hub [ 1021.729918][ T5768] usb 2-1: config 13 has an invalid interface number: 102 but max is 0 [ 1021.729946][ T5768] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.729965][ T5768] usb 2-1: config 13 has no interface number 0 [ 1021.777280][ T5768] usb 2-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.c6 [ 1021.777314][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.777336][ T5768] usb 2-1: Product: syz [ 1021.777350][ T5768] usb 2-1: Manufacturer: syz [ 1021.777366][ T5768] usb 2-1: SerialNumber: syz [ 1021.784014][T27741] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1022.136235][ T5768] cdc_phonet 2-1:13.102: probe with driver cdc_phonet failed with error -22 [ 1022.174243][ T5768] usb 2-1: USB disconnect, device number 76 [ 1022.268644][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1022.353940][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1022.602336][T27758] netlink: 744 bytes leftover after parsing attributes in process `syz.5.10174'. [ 1022.602367][T27758] netlink: 744 bytes leftover after parsing attributes in process `syz.5.10174'. [ 1022.997996][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1023.155717][T27779] netlink: 'syz.2.10186': attribute type 3 has an invalid length. [ 1023.155805][T27779] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10186'. [ 1024.577630][T27803] virt_wifi0 speed is unknown, defaulting to 1000 [ 1025.068546][T27833] loop5: detected capacity change from 0 to 512 [ 1025.183356][T27833] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1025.183446][T27833] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.183469][T27833] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.10212: Failed to acquire dquot type 1 [ 1025.183483][T27833] loop5: lost filesystem error report for type 5 error -117 [ 1025.186168][T27833] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1025.186335][T27833] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.186378][T27833] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.10212: Failed to acquire dquot type 1 [ 1025.186403][T27833] loop5: lost filesystem error report for type 5 error -117 [ 1025.186796][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 1025.186817][ C0] EXT4-fs (loop5): last error at time 2000000117: ext4_acquire_dquot:7041 [ 1025.306839][T27833] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10212: bg 0: block 248: padding at end of block bitmap is not set [ 1025.306882][T27833] loop5: lost filesystem error report for type 5 error -117 [ 1025.307485][T27833] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1025.307510][T27833] loop5: lost filesystem error report for type 5 error -117 [ 1025.308325][T27833] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1025.308497][T27833] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.308541][T27833] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.10212: Failed to acquire dquot type 1 [ 1025.308563][T27833] loop5: lost filesystem error report for type 5 error -117 [ 1025.309266][T27833] EXT4-fs (loop5): 1 orphan inode deleted [ 1025.502715][T27833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.502861][T27833] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.588909][T27850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10219'. [ 1025.655044][T27850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10219'. [ 1025.661325][T27833] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1025.735879][T27853] loop4: detected capacity change from 0 to 1024 [ 1025.789826][T27853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.857450][T27833] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.857511][T27833] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.10212: Failed to acquire dquot type 1 [ 1026.056136][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.201437][T21677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.307843][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1026.456905][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 1026.484118][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1026.558617][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 1026.585176][T27873] syz.5.10225 (27873): drop_caches: 0 [ 1026.721589][T27877] loop2: detected capacity change from 0 to 16 [ 1026.734649][T27877] erofs (device loop2): mounted with root inode @ nid 36. [ 1026.837453][T27881] netlink: 'syz.4.10230': attribute type 13 has an invalid length. [ 1026.851816][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1026.988693][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1028.156089][T27917] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10251'. [ 1028.287242][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10238'. [ 1028.797451][T27940] loop2: detected capacity change from 0 to 128 [ 1029.348826][T27956] loop4: detected capacity change from 0 to 512 [ 1029.486258][T27956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.486429][T27956] ext4 filesystem being mounted at /1898/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.500250][ T5649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.598308][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1030.682654][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1030.887567][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1030.987040][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1031.100327][ T5656] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1031.413300][T28004] netlink: 'syz.1.10292': attribute type 5 has an invalid length. [ 1032.512083][ T5332] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1032.587115][ T38] audit: type=1326 audit(2000000124.576:433): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.588071][ T38] audit: type=1326 audit(2000000124.576:434): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.590988][ T38] audit: type=1326 audit(2000000124.576:435): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.592733][ T38] audit: type=1326 audit(2000000124.576:436): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.592789][ T38] audit: type=1326 audit(2000000124.576:437): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.592848][ T38] audit: type=1326 audit(2000000124.576:438): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.592898][ T38] audit: type=1326 audit(2000000124.576:439): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.592949][ T38] audit: type=1326 audit(2000000124.576:440): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28043 comm="syz.1.10313" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd26cf8de59 code=0x7ffc0000 [ 1032.676881][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 1032.684686][ T5332] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1032.684715][ T5332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.684735][ T5332] usb 3-1: config 0 has no interface number 0 [ 1032.693290][ T5332] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1032.693322][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.693341][ T5332] usb 3-1: Product: syz [ 1032.693355][ T5332] usb 3-1: Manufacturer: syz [ 1032.693370][ T5332] usb 3-1: SerialNumber: syz [ 1032.723356][ T5332] usb 3-1: config 0 descriptor?? [ 1032.765236][ T5332] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1032.765273][ T5332] uvcvideo 3-1:0.31: No valid video chain found. [ 1033.000357][ T5332] usb 3-1: USB disconnect, device number 86 [ 1033.118859][T28054] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10318'. [ 1033.118889][T28054] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10318'. [ 1033.118906][T28054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10318'. [ 1033.484831][T28041] loop5: detected capacity change from 0 to 32768 [ 1034.468268][T28041] lbmIODone: I/O error in JFS log [ 1034.468732][T28041] *** Log Format Error ! *** [ 1034.469598][T28041] lmLogInit: exit(-22) [ 1034.469658][T28041] lmLogOpen: exit(-22) [ 1034.688928][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1034.801632][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1034.898765][T28102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10341'. [ 1034.983777][T28107] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1035.429280][ T5656] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1035.429668][ T5656] Bluetooth: hci0: Injecting HCI hardware error event [ 1035.452520][T21683] Bluetooth: hci0: hardware error 0x00 [ 1036.341956][T28154] loop4: detected capacity change from 0 to 164 [ 1036.369885][T28154] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1036.529173][T28154] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1036.816545][T28163] loop5: detected capacity change from 0 to 1764 [ 1036.866269][T28154] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1037.012209][T28163] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1037.071766][ T5948] Flush: task=udevd[5948] dev=loop4 state=2 [ 1037.106262][T28175] netlink: 'syz.2.10377': attribute type 9 has an invalid length. [ 1037.186258][T28177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10378'. [ 1037.206343][ T5948] Teardown: task=udevd[5948] dev=loop4 state=2 [ 1037.213204][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1037.289270][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1037.474500][ T38] audit: type=1326 audit(2000000129.141:441): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28184 comm="syz.5.10381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1037.474572][ T38] audit: type=1326 audit(2000000129.141:442): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28184 comm="syz.5.10381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72efbde59 code=0x7ffc0000 [ 1037.823354][T21683] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1038.095703][T28203] IPv6: NLM_F_CREATE should be specified when creating new route [ 1038.168683][T28205] loop2: detected capacity change from 0 to 256 [ 1038.276688][T19007] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1038.404975][T28211] netlink: 'syz.5.10394': attribute type 13 has an invalid length. [ 1038.445817][T19007] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1038.446650][T19007] usb 2-1: not running at top speed; connect to a high speed hub [ 1038.447764][T19007] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1038.447789][T19007] usb 2-1: config 4 has an invalid descriptor of length 119, skipping remainder of the config [ 1038.447809][T19007] usb 2-1: config 4 has no interface number 0 [ 1038.450674][T19007] usb 2-1: Dual-Role OTG device on HNP port [ 1038.451179][T19007] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1038.451209][T19007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1038.451242][T19007] usb 2-1: Product: syz [ 1038.451259][T19007] usb 2-1: Manufacturer: syz [ 1038.451274][T19007] usb 2-1: SerialNumber: syz [ 1038.880214][T19007] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1038.880378][T19007] uvcvideo 2-1:4.147: No valid video chain found. [ 1038.905415][T19007] usb 2-1: USB disconnect, device number 77 [ 1038.949819][ T5948] Flush: task=udevd[5948] dev=loop2 state=2 [ 1039.079411][ T5948] Teardown: task=udevd[5948] dev=loop2 state=2 [ 1040.021612][T28254] loop4: detected capacity change from 0 to 256 [ 1040.042031][T28254] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 1040.174016][T28260] netlink: 'syz.2.10418': attribute type 12 has an invalid length. [ 1040.349632][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1040.656807][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1041.121129][T28287] loop5: detected capacity change from 0 to 1024 [ 1041.778146][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1041.853799][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1042.108459][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1044.695856][T28382] loop1: detected capacity change from 0 to 256 [ 1044.709598][T28374] loop2: detected capacity change from 0 to 4096 [ 1044.719897][T28382] exfat: Deprecated parameter 'utf8' [ 1044.888884][T28382] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 1045.122386][T28395] loop5: detected capacity change from 0 to 64 [ 1045.524615][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 1045.653283][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 1045.865480][T28407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10486'. [ 1046.171253][T21677] Flush: task=syz-executor[21677] dev=loop5 state=2 [ 1046.245740][ T5646] Flush: task=syz-executor[5646] dev=loop2 state=2 [ 1046.270256][T21677] Teardown: task=syz-executor[21677] dev=loop5 state=2 [ 1046.337444][ T5646] Teardown: task=syz-executor[5646] dev=loop2 state=2 [ 1046.488396][T28415] loop4: detected capacity change from 0 to 4096 [ 1046.498164][T28415] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1046.498197][T28415] NILFS (loop4): mounting unchecked fs [ 1046.498210][T28415] NILFS (loop4): recovery required for readonly filesystem [ 1046.498223][T28415] NILFS (loop4): write access will be enabled during recovery [ 1046.623737][T28428] loop1: detected capacity change from 0 to 512 [ 1046.747474][T28428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.747617][T28428] ext4 filesystem being mounted at /1950/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.954846][T28415] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1047.105883][T19007] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1047.121774][ T6438] udevd[6438]: incorrect nilfs2 checksum on /dev/loop4 [ 1047.198110][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.339363][T19007] usb 3-1: Using ep0 maxpacket: 8 [ 1047.373960][T19007] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1047.373990][T19007] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1047.374010][T19007] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1047.374071][T19007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1047.374097][T19007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1047.380529][ T5648] Flush: task=syz-executor[5648] dev=loop1 state=2 [ 1047.411582][T19007] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1047.411616][T19007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.411636][T19007] usb 3-1: Product: syz [ 1047.411650][T19007] usb 3-1: Manufacturer: syz [ 1047.411665][T19007] usb 3-1: SerialNumber: syz [ 1047.457007][T19007] usb 3-1: config 0 descriptor?? [ 1047.463366][T19007] hub 3-1:0.0: bad descriptor, ignoring hub [ 1047.463405][T19007] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1047.514482][ T5948] udevd[5948]: incorrect nilfs2 checksum on /dev/loop4 [ 1047.617103][ T5648] Teardown: task=syz-executor[5648] dev=loop1 state=2 [ 1047.683131][T19007] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 1047.755780][ T5649] Flush: task=syz-executor[5649] dev=loop4 state=2 [ 1047.840325][ T5754] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1047.859255][T19007] usb 3-1: USB disconnect, device number 87 [ 1047.902824][T28462] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1047.908922][ T5649] Teardown: task=syz-executor[5649] dev=loop4 state=2 [ 1048.000587][ T5754] usb 6-1: Using ep0 maxpacket: 16 [ 1048.005533][ T5754] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1048.005568][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.005590][ T5754] usb 6-1: Product: syz [ 1048.005614][ T5754] usb 6-1: Manufacturer: syz [ 1048.005628][ T5754] usb 6-1: SerialNumber: syz [ 1048.205622][ T5754] usb 6-1: config 0 descriptor?? [ 1048.225763][ T5754] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1048.283478][ T5754] usb 6-1: Detected FT-X [ 1048.903765][ T5754] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1048.928651][ T5754] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1048.970645][ T5754] usb 6-1: USB disconnect, device number 8 [ 1048.991771][ T5754] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1048.992639][ T5754] ftdi_sio 6-1:0.0: device disconnected [ 1049.108754][T28495] loop1: detected capacity change from 0 to 2048 [ 1049.138097][T28497] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.259494][T28501] loop2: detected capacity change from 0 to 16 [ 1049.273273][T28501] erofs (device loop2): mounted with root inode @ nid 36. [ 1049.300789][T28501] erofs (device loop2): readahead error at folio 7 @ nid 36 [ 1049.300840][T28501] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 1049.300872][T28501] erofs (device loop2): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 1049.300895][T28501] erofs (device loop2): readahead error at folio 5 @ nid 36 [ 1049.300925][T28501] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 1049.300961][T28501] erofs (device loop2): not enough plain data on disk @ la 15360 of nid 36 [ 1049.300981][T28501] erofs (device loop2): readahead error at folio 3 @ nid 36 [ 1049.301006][T28501] erofs (device loop2): readahead error at folio 2 @ nid 36 [ 1049.301034][T28501] erofs (device loop2): readahead error at folio 1 @ nid 36 [ 1049.301054][T28501] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 1049.301100][T28501] erofs (device loop2): read error -117 @ 0 of nid 36 [ 1049.301121][T28501] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 1049.462477][T28504] netlink: 'syz.4.10536': attribute type 23 has an invalid length. [ 1049.598279][ T6442] Flush: task=udevd[6442] dev=loop2 state=2 [ 1049.684293][ T6442] Teardown: task=udevd[6442] dev=loop2 state=2 [ 1049.710505][T28512] loop2: detected capacity change from 0 to 512 [ 1049.719000][T28512] EXT4-fs: Ignoring removed i_version option [ 1049.720053][T28512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1049.754091][T28512] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.10541: invalid block [ 1049.754131][T28512] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1049.764759][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1049.764784][ C0] EXT4-fs (loop2): initial error at time 2000000140: ext4_get_branch:178: inode 11: block 4294967295 [ 1049.764816][ C0] EXT4-fs (loop2): last error at time 2000000140: ext4_get_branch:178: inode 11: block 4294967295 [ 1049.771663][T28512] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10541: invalid indirect mapped block 4294967295 (level 1) [ 1049.771701][T28512] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1049.824695][T28512] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10541: invalid indirect mapped block 4294967295 (level 1) [ 1049.824725][T28512] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1049.826411][T28512] EXT4-fs (loop2): 2 truncates cleaned up [ 1049.847697][ T6438] Flush: task=udevd[6438] dev=loop1 state=2 [ 1049.886038][T28512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.937747][ T6438] Teardown: task=udevd[6438] dev=loop1 state=2 [ 1050.442423][T28512] [ 1050.442437][T28512] ====================================================== [ 1050.442482][T28512] WARNING: possible circular locking dependency detected [ 1050.442524][T28512] syzkaller #0 Not tainted [ 1050.442536][T28512] ------------------------------------------------------ [ 1050.442552][T28512] syz.2.10541/28512 is trying to acquire lock: [ 1050.442564][T28512] ffff88802a452800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 1050.442706][T28512] [ 1050.442706][T28512] but task is already holding lock: [ 1050.442714][T28512] ffff888028f0ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1050.442783][T28512] [ 1050.442783][T28512] which lock already depends on the new lock. [ 1050.442783][T28512] [ 1050.442791][T28512] [ 1050.442791][T28512] the existing dependency chain (in reverse order) is: [ 1050.442800][T28512] [ 1050.442800][T28512] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1050.442910][T28512] percpu_down_read_internal+0x48/0x1d0 [ 1050.442945][T28512] ext4_writepages+0x205/0x3b0 [ 1050.442965][T28512] do_writepages+0x338/0x560 [ 1050.443016][T28512] __writeback_single_inode+0x12e/0xf90 [ 1050.443079][T28512] writeback_single_inode+0x4dd/0xe10 [ 1050.443128][T28512] write_inode_now+0x1c2/0x290 [ 1050.443157][T28512] iput+0x98b/0xf00 [ 1050.443177][T28512] ext4_xattr_block_set+0x1b0c/0x2a80 [ 1050.443265][T28512] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1050.443286][T28512] __ext4_expand_extra_isize+0x30d/0x400 [ 1050.443314][T28512] __ext4_mark_inode_dirty+0x455/0x700 [ 1050.443336][T28512] ext4_evict_inode+0x976/0x10c0 [ 1050.443358][T28512] evict+0x624/0xb50 [ 1050.443381][T28512] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1050.443404][T28512] ext4_fill_super+0x5cc5/0x65d0 [ 1050.443424][T28512] get_tree_bdev_flags+0x430/0x4f0 [ 1050.443448][T28512] vfs_get_tree+0x92/0x2a0 [ 1050.443468][T28512] do_new_mount+0x319/0xdc0 [ 1050.443482][T28512] __se_sys_mount+0x31d/0x420 [ 1050.443498][T28512] do_syscall_64+0x174/0x580 [ 1050.443522][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.443538][T28512] [ 1050.443538][T28512] -> #0 (sb_internal){.+.+}-{0:0}: [ 1050.443561][T28512] __lock_acquire+0x15ff/0x2e40 [ 1050.443608][T28512] lock_acquire+0x115/0x350 [ 1050.443625][T28512] percpu_down_read_internal+0x48/0x1d0 [ 1050.443650][T28512] ext4_evict_inode+0x426/0x10c0 [ 1050.443668][T28512] evict+0x624/0xb50 [ 1050.443687][T28512] ext4_ext_migrate+0xddf/0x10e0 [ 1050.443702][T28512] ext4_fileattr_set+0xf41/0x16e0 [ 1050.443720][T28512] vfs_fileattr_set+0x9f5/0xc90 [ 1050.443771][T28512] ioctl_setflags+0x305/0x370 [ 1050.443788][T28512] do_vfs_ioctl+0x9f5/0x1550 [ 1050.443812][T28512] __se_sys_ioctl+0x82/0x170 [ 1050.443832][T28512] do_syscall_64+0x174/0x580 [ 1050.443856][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.443872][T28512] [ 1050.443872][T28512] other info that might help us debug this: [ 1050.443872][T28512] [ 1050.443878][T28512] Possible unsafe locking scenario: [ 1050.443878][T28512] [ 1050.443884][T28512] CPU0 CPU1 [ 1050.443890][T28512] ---- ---- [ 1050.443896][T28512] lock(&sbi->s_writepages_rwsem); [ 1050.443910][T28512] lock(sb_internal); [ 1050.443922][T28512] lock(&sbi->s_writepages_rwsem); [ 1050.443936][T28512] rlock(sb_internal); [ 1050.443948][T28512] [ 1050.443948][T28512] *** DEADLOCK *** [ 1050.443948][T28512] [ 1050.443953][T28512] locks held by syz.2.10541/28512: 3, last CPU#1: [ 1050.443992][T28512] #0: ffff88802a452510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 1050.444043][T28512] #1: ffff8880330eeec0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x160/0xc90 [ 1050.444097][T28512] #2: ffff888028f0ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1050.444137][T28512] [ 1050.444137][T28512] stack backtrace: [ 1050.444149][T28512] CPU: 1 UID: 0 PID: 28512 Comm: syz.2.10541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1050.444169][T28512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.444179][T28512] Call Trace: [ 1050.444187][T28512] [ 1050.444196][T28512] dump_stack_lvl+0xe8/0x150 [ 1050.444223][T28512] print_circular_bug+0x2e2/0x300 [ 1050.444267][T28512] check_noncircular+0x12f/0x150 [ 1050.444292][T28512] __lock_acquire+0x15ff/0x2e40 [ 1050.444314][T28512] ? __lock_acquire+0x6df/0x2e40 [ 1050.444335][T28512] ? __asan_memset+0x22/0x50 [ 1050.444360][T28512] lock_acquire+0x115/0x350 [ 1050.444378][T28512] ? ext4_evict_inode+0x426/0x10c0 [ 1050.444402][T28512] percpu_down_read_internal+0x48/0x1d0 [ 1050.444428][T28512] ? ext4_evict_inode+0x426/0x10c0 [ 1050.444448][T28512] ext4_evict_inode+0x426/0x10c0 [ 1050.444468][T28512] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1050.444511][T28512] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1050.444530][T28512] ? rt_spin_unlock+0x157/0x200 [ 1050.444551][T28512] ? rt_spin_unlock+0x163/0x200 [ 1050.444570][T28512] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1050.444590][T28512] evict+0x624/0xb50 [ 1050.444615][T28512] ? __pfx_evict+0x10/0x10 [ 1050.444637][T28512] ? rt_spin_unlock+0x163/0x200 [ 1050.444658][T28512] ? iput+0xb84/0xf00 [ 1050.444676][T28512] ext4_ext_migrate+0xddf/0x10e0 [ 1050.444697][T28512] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1050.444713][T28512] ? inode_maybe_inc_iversion+0x18f/0x200 [ 1050.444755][T28512] ? ext4_reserve_inode_write+0x2ef/0x360 [ 1050.444782][T28512] ? ext4_set_inode_flags+0x249/0x5b0 [ 1050.444806][T28512] ? __ext4_journal_stop+0x34/0x1a0 [ 1050.444864][T28512] ext4_fileattr_set+0xf41/0x16e0 [ 1050.444888][T28512] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1050.444927][T28512] ? rcu_is_watching+0x15/0xb0 [ 1050.444989][T28512] ? cap_capable+0x123/0x460 [ 1050.445043][T28512] ? bpf_lsm_capable+0x9/0x20 [ 1050.445091][T28512] ? security_capable+0x74/0x280 [ 1050.445129][T28512] ? fscrypt_prepare_setflags+0x62/0x3c0 [ 1050.445168][T28512] vfs_fileattr_set+0x9f5/0xc90 [ 1050.445188][T28512] ? mnt_get_write_access+0x66/0x2d0 [ 1050.445211][T28512] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1050.445233][T28512] ? mnt_want_write_file+0x17e/0x210 [ 1050.445255][T28512] ioctl_setflags+0x305/0x370 [ 1050.445276][T28512] ? __pfx_ioctl_setflags+0x10/0x10 [ 1050.445296][T28512] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1050.445352][T28512] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1050.445372][T28512] do_vfs_ioctl+0x9f5/0x1550 [ 1050.445394][T28512] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1050.445422][T28512] ? do_futex+0x3e7/0x4e0 [ 1050.445470][T28512] ? __fget_files+0x2a/0x420 [ 1050.445487][T28512] ? __fget_files+0x2a/0x420 [ 1050.445504][T28512] ? __fget_files+0x3a8/0x420 [ 1050.445520][T28512] ? __fget_files+0x2a/0x420 [ 1050.445537][T28512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1050.445574][T28512] __se_sys_ioctl+0x82/0x170 [ 1050.445595][T28512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.445612][T28512] do_syscall_64+0x174/0x580 [ 1050.445637][T28512] ? trace_irq_disable+0x3b/0x140 [ 1050.445657][T28512] ? clear_bhb_loop+0x40/0x90 [ 1050.445676][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.445694][T28512] RIP: 0033:0x7f2f05a6de59 [ 1050.445710][T28512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.445727][T28512] RSP: 002b:00007f2f03cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.445745][T28512] RAX: ffffffffffffffda RBX: 00007f2f05cf5fa0 RCX: 00007f2f05a6de59 [ 1050.445758][T28512] RDX: 00002000000000c0 RSI: 0000000040086602 RDI: 0000000000000004 [ 1050.445770][T28512] RBP: 00007f2f05b03e6f R08: 0000000000000000 R09: 0000000000000000 [ 1050.445781][T28512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.445792][T28512] R13: 00007f2f05cf6038 R14: 00007f2f05cf5fa0 R15: 00007ffca35a1948 [ 1050.445810][T28512] [ 1050.449625][T21677] ------------[ cut here ]------------ [ 1050.449640][T21677] mas->ld_seq != lock_sequence(map) [ 1050.449649][T21677] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: syz-executor/21677 [ 1050.449753][T21677] Modules linked in: [ 1050.449822][T21677] CPU: 1 UID: 0 PID: 21677 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1050.449848][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.449862][T21677] RIP: 0010:mas_find+0xa02/0xca0 [ 1050.449894][T21677] Code: 74 08 4c 89 f7 e8 6e f6 f4 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 db 08 89 f6 31 c0 e9 0a fd ff ff e8 cf 08 89 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 c1 08 89 f6 31 c0 e9 f0 fc ff ff e8 b5 [ 1050.449914][T21677] RSP: 0018:ffffc90003ed7738 EFLAGS: 00010293 [ 1050.449933][T21677] RAX: ffffffff8b3c1221 RBX: 1ffff920007daf19 RCX: ffff888037273e00 [ 1050.449950][T21677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.449964][T21677] RBP: 00000000000000d1 R08: 0000000000000000 R09: 0000000000000000 [ 1050.449977][T21677] R10: 0000000000000100 R11: 00000000fffffffb R12: 00000000ffffffff [ 1050.449991][T21677] R13: ffffc90003ed78d4 R14: ffffc90003ed7880 R15: ffffc90003ed78c8 [ 1050.450007][T21677] FS: 000055555bb3c500(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 1050.450035][T21677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.450051][T21677] CR2: 00007fd72fd756b8 CR3: 00000000358f6000 CR4: 00000000003526f0 [ 1050.450079][T21677] Call Trace: [ 1050.450097][T21677] [ 1050.450107][T21677] ? up_write+0x5a/0x190 [ 1050.450168][T21677] dup_mmap+0xf99/0x1d40 [ 1050.450198][T21677] ? __pfx_dup_mmap+0x10/0x10 [ 1050.450223][T21677] ? lock_acquire+0x115/0x350 [ 1050.450254][T21677] copy_mm+0x11a/0x480 [ 1050.450283][T21677] ? copy_process+0xd3c/0x43f0 [ 1050.450308][T21677] copy_process+0x1e7d/0x43f0 [ 1050.450338][T21677] ? copy_process+0xd3c/0x43f0 [ 1050.450372][T21677] ? __pfx_copy_process+0x10/0x10 [ 1050.450404][T21677] kernel_clone+0x2d7/0x940 [ 1050.450434][T21677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1050.450467][T21677] ? __pfx_kernel_clone+0x10/0x10 [ 1050.450504][T21677] __x64_sys_clone+0x1b6/0x230 [ 1050.450536][T21677] ? __pfx___x64_sys_clone+0x10/0x10 [ 1050.450572][T21677] ? do_user_addr_fault+0xc4a/0x1340 [ 1050.450627][T21677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.450649][T21677] do_syscall_64+0x174/0x580 [ 1050.450681][T21677] ? trace_irq_disable+0x3b/0x140 [ 1050.450705][T21677] ? clear_bhb_loop+0x40/0x90 [ 1050.450730][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.450752][T21677] RIP: 0033:0x7fd72efe68d2 [ 1050.450770][T21677] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1050.450789][T21677] RSP: 002b:00007fffe5018180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1050.450811][T21677] RAX: ffffffffffffffda RBX: 00007fffe5018180 RCX: 00007fd72efe68d2 [ 1050.450827][T21677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1050.450840][T21677] RBP: 00007fffe501830c R08: 0000000000000000 R09: 0000000000000001 [ 1050.450854][T21677] R10: 000055555bb3c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1050.450869][T21677] R13: 00000000000927c0 R14: 00000000000f44be R15: 00007fffe5018360 [ 1050.450891][T21677] [ 1050.450902][T21677] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1050.450918][T21677] CPU: 1 UID: 0 PID: 21677 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1050.450942][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.450955][T21677] Call Trace: [ 1050.450963][T21677] [ 1050.450971][T21677] vpanic+0x5d9/0xad0 [ 1050.451001][T21677] ? lock_release+0x4b/0x3c0 [ 1050.451024][T21677] ? __pfx_vpanic+0x10/0x10 [ 1050.451045][T21677] ? __pfx__printk+0x10/0x10 [ 1050.451076][T21677] ? is_bpf_text_address+0x292/0x2b0 [ 1050.451129][T21677] ? is_bpf_text_address+0x26/0x2b0 [ 1050.451160][T21677] panic+0xc5/0xd0 [ 1050.451179][T21677] ? __pfx_panic+0x10/0x10 [ 1050.451204][T21677] __warn+0x315/0x4c0 [ 1050.451221][T21677] ? mas_find+0xa02/0xca0 [ 1050.451252][T21677] ? mas_find+0xa02/0xca0 [ 1050.451283][T21677] __report_bug+0x331/0x530 [ 1050.451358][T21677] ? mas_find+0xa02/0xca0 [ 1050.451389][T21677] ? __pfx___report_bug+0x10/0x10 [ 1050.451422][T21677] ? copy_page_range+0xe8d/0x1160 [ 1050.451475][T21677] ? mas_find+0xa02/0xca0 [ 1050.451502][T21677] report_bug+0x16a/0x220 [ 1050.451533][T21677] ? mas_find+0xa02/0xca0 [ 1050.451563][T21677] ? mas_find+0xa04/0xca0 [ 1050.451591][T21677] handle_bug+0x9c/0x200 [ 1050.451612][T21677] exc_invalid_op+0x1a/0x50 [ 1050.451630][T21677] asm_exc_invalid_op+0x1a/0x20 [ 1050.451651][T21677] RIP: 0010:mas_find+0xa02/0xca0 [ 1050.451680][T21677] Code: 74 08 4c 89 f7 e8 6e f6 f4 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 db 08 89 f6 31 c0 e9 0a fd ff ff e8 cf 08 89 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 c1 08 89 f6 31 c0 e9 f0 fc ff ff e8 b5 [ 1050.451697][T21677] RSP: 0018:ffffc90003ed7738 EFLAGS: 00010293 [ 1050.451712][T21677] RAX: ffffffff8b3c1221 RBX: 1ffff920007daf19 RCX: ffff888037273e00 [ 1050.451727][T21677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.451740][T21677] RBP: 00000000000000d1 R08: 0000000000000000 R09: 0000000000000000 [ 1050.451753][T21677] R10: 0000000000000100 R11: 00000000fffffffb R12: 00000000ffffffff [ 1050.451768][T21677] R13: ffffc90003ed78d4 R14: ffffc90003ed7880 R15: ffffc90003ed78c8 [ 1050.451786][T21677] ? mas_find+0xa01/0xca0 [ 1050.451817][T21677] ? mas_find+0xa01/0xca0 [ 1050.451845][T21677] ? up_write+0x5a/0x190 [ 1050.451876][T21677] dup_mmap+0xf99/0x1d40 [ 1050.451902][T21677] ? __pfx_dup_mmap+0x10/0x10 [ 1050.451928][T21677] ? lock_acquire+0x115/0x350 [ 1050.451959][T21677] copy_mm+0x11a/0x480 [ 1050.451985][T21677] ? copy_process+0xd3c/0x43f0 [ 1050.452010][T21677] copy_process+0x1e7d/0x43f0 [ 1050.452038][T21677] ? copy_process+0xd3c/0x43f0 [ 1050.452078][T21677] ? __pfx_copy_process+0x10/0x10 [ 1050.452108][T21677] kernel_clone+0x2d7/0x940 [ 1050.452138][T21677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1050.452169][T21677] ? __pfx_kernel_clone+0x10/0x10 [ 1050.452204][T21677] __x64_sys_clone+0x1b6/0x230 [ 1050.452235][T21677] ? __pfx___x64_sys_clone+0x10/0x10 [ 1050.452271][T21677] ? do_user_addr_fault+0xc4a/0x1340 [ 1050.452296][T21677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.452318][T21677] do_syscall_64+0x174/0x580 [ 1050.452348][T21677] ? trace_irq_disable+0x3b/0x140 [ 1050.452372][T21677] ? clear_bhb_loop+0x40/0x90 [ 1050.452396][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.452416][T21677] RIP: 0033:0x7fd72efe68d2 [ 1050.452431][T21677] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1050.452449][T21677] RSP: 002b:00007fffe5018180 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1050.452470][T21677] RAX: ffffffffffffffda RBX: 00007fffe5018180 RCX: 00007fd72efe68d2 [ 1050.452486][T21677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1050.452501][T21677] RBP: 00007fffe501830c R08: 0000000000000000 R09: 0000000000000001 [ 1050.452514][T21677] R10: 000055555bb3c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1050.452528][T21677] R13: 00000000000927c0 R14: 00000000000f44be R15: 00007fffe5018360 [ 1050.452550][T21677] [ 1050.452833][T21677] Kernel Offset: disabled