last executing test programs: 2.2337453s ago: executing program 1 (id=6577): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) alarm(0x6) 1.991709014s ago: executing program 1 (id=6582): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000780)) 1.85061417s ago: executing program 4 (id=6586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@rand_addr=0x64010102, 0x2, 0x4000, 0xfffc, 0x8000, 0x0, 0x0, 0x0, 0xc}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {0x327, 0x80009, 0x7, 0x1000000000000004, 0xfff, 0x219, 0x1}, {0x0, 0x802, 0x8, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1, 0xfc}, [@algo_aead={0x4c, 0x12, {{'essiv(essiv(morus1280-sse2,sha512-ce),blake2s-256)\x00'}, 0x0, 0x40}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) 1.762146827s ago: executing program 1 (id=6588): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) 1.638029062s ago: executing program 4 (id=6591): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') write$fb(r0, 0x0, 0x0) 1.549465415s ago: executing program 4 (id=6593): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 1.546449331s ago: executing program 1 (id=6594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) 1.334480563s ago: executing program 1 (id=6599): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000c06, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030362c696f636861727365743d6d6163726f6d616e69616e2c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c75737271756f74612c696e746567726974792c646973636172642c696f636861727365743d69736f383835392d362c75737271756f74612c0068067f9f944b8278884def0e057790dd79a985633a3f082972c5f43e390c14c8a267bd"], 0x24, 0x6303, &(0x7f0000001bc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 1.320781123s ago: executing program 3 (id=6600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="01009a1a"], 0x8) 1.200036187s ago: executing program 4 (id=6602): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x2) 1.124052933s ago: executing program 3 (id=6604): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000027c0)={&(0x7f00000020c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x0) 1.042321088s ago: executing program 4 (id=6605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 932.870853ms ago: executing program 0 (id=6607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f0000000200)) 882.233796ms ago: executing program 3 (id=6608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000004440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 830.190076ms ago: executing program 2 (id=6609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x13, 0x0, &(0x7f0000000340)="b4bf11a369d8625dd5ee1d8288a8599488a847046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848870c30f32ced51d54fa6b80b80c84346553a2fd35d9367af322ea7eeba816e0f4aee1a10f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2a) 767.349183ms ago: executing program 0 (id=6610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x902f6, 0x2824}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_LINKMODE={0x5}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 719.548699ms ago: executing program 2 (id=6611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x0, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x6, 0x100, 0x7, 0x7a, 0x3, 0x8, 0x9, 0x2, 0x6, 0x1000, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x7fff, 0x2, 0x17, 0x88, 0x8, 0x7fff, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0xfffffffe, 0x4e30, 0x10001, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x6, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x5, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xd, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33b, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x5, 0x6, 0x9, 0x233, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x400006, 0x2, 0x2, 0x2, 0x1, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 606.806116ms ago: executing program 3 (id=6612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xda) 595.718736ms ago: executing program 4 (id=6613): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, 0x0) 550.92667ms ago: executing program 2 (id=6614): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xfff, 0xb, 0x351, "e56ee836922adb156c9c1bb0ead727b8a153354da954002346353978eb8f7bd6", 0x59555956}) 505.815804ms ago: executing program 0 (id=6615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) 414.022537ms ago: executing program 2 (id=6616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x39, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3, {0x20}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 405.709797ms ago: executing program 3 (id=6617): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix_mp={0xffff, 0x9, 0x4236415b, 0x2, 0xa, [{0x200, 0x9}, {0x5}, {0xfffffff1, 0x1}, {0x2, 0x5}, {0x7fffffff, 0x8}, {0x8, 0x8}, {0x10001, 0x4}, {0x8c5, 0x4}], 0x9, 0x6, 0x8, 0x0, 0x4}}) 378.085744ms ago: executing program 0 (id=6618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 187.095197ms ago: executing program 3 (id=6619): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202"], 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) 187.017073ms ago: executing program 2 (id=6620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x14, 0x69, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@generic="2ea3"]}, 0x14}], 0x1, 0x0, 0x0, 0x21fca5fd1fa929ef}, 0x0) 186.049464ms ago: executing program 0 (id=6621): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x0) 1.032963ms ago: executing program 1 (id=6622): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0xe00, 0x31364d4e, 0x280, 0x1e0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) 932.677µs ago: executing program 2 (id=6623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 0s ago: executing program 0 (id=6624): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0) kernel console output (not intermixed with test programs): mm="syz.0.4148" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 460.805140][T14748] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4146: bad orphan inode 16 [ 460.805166][T14748] loop1: lost filesystem error report for type 5 error -117 [ 460.806217][T14748] ext4_test_bit(bit=15, block=18) = 1 [ 460.806233][T14748] is_bad_inode(inode)=0 [ 460.806242][T14748] NEXT_ORPHAN(inode)=0 [ 460.806250][T14748] max_ino=32 [ 460.806258][T14748] i_nlink=2 [ 460.811369][T14748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 460.820975][T14748] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 460.830417][ T38] audit: type=1326 audit(1782872608.098:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.0.4148" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 460.852061][ T38] audit: type=1326 audit(1782872608.117:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.0.4148" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 460.853922][ T38] audit: type=1326 audit(1782872608.117:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.0.4148" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 461.104167][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.177287][T14764] netlink: 'syz.0.4154': attribute type 21 has an invalid length. [ 461.177305][T14764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4154'. [ 461.177382][T14764] netlink: 'syz.0.4154': attribute type 5 has an invalid length. [ 461.177390][T14764] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4154'. [ 461.511378][T14774] loop3: detected capacity change from 0 to 64 [ 462.938230][T14838] loop4: detected capacity change from 0 to 256 [ 463.151850][T14850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4192'. [ 463.416453][T14862] loop3: detected capacity change from 0 to 64 [ 463.467965][T14862] hfs: cannot create new inode: folder count exceeds limit [ 464.298699][T14890] netlink: 'syz.3.4211': attribute type 1 has an invalid length. [ 464.750178][T14864] loop1: detected capacity change from 0 to 40427 [ 464.775795][T14864] F2FS-fs (loop1): invalid crc value [ 464.970253][T14870] loop4: detected capacity change from 0 to 32768 [ 465.135301][T14916] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 465.482220][T14864] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 465.726148][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.726253][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.765014][T14864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 465.895402][ T5748] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 466.059644][ T5748] usb 1-1: Using ep0 maxpacket: 16 [ 466.076907][ T5748] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.078952][ T5748] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 466.078999][ T5748] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 466.079022][ T5748] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 466.125386][ T5748] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.125416][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.125435][ T5748] usb 1-1: Product: syz [ 466.125450][ T5748] usb 1-1: Manufacturer: 賿‬ñ—¡§ [ 466.125465][ T5748] usb 1-1: SerialNumber: syz [ 466.249346][ T5616] syz-executor: attempt to access beyond end of device [ 466.249346][ T5616] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.323782][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 466.323813][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.323827][ T5616] Call Trace: [ 466.323836][ T5616] [ 466.323845][ T5616] dump_stack_lvl+0xe8/0x150 [ 466.323879][ T5616] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 466.323911][ T5616] f2fs_write_end_io+0x124b/0x1710 [ 466.323961][ T5616] __submit_merged_bio+0x258/0x6a0 [ 466.323985][ T5616] ? rcu_is_watching+0x15/0xb0 [ 466.324007][ T5616] __submit_merged_write_cond+0x3c9/0x4e0 [ 466.324040][ T5616] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 466.324089][ T5616] f2fs_write_data_pages+0x2a27/0x36f0 [ 466.324152][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.324191][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.324233][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.324258][ T5616] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 466.324291][ T5616] ? reacquire_held_locks+0x104/0x190 [ 466.324318][ T5616] ? rt_spin_unlock+0x157/0x200 [ 466.324335][ T5616] ? rt_spin_unlock+0x163/0x200 [ 466.324349][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.324365][ T5616] do_writepages+0x338/0x560 [ 466.324389][ T5616] ? rt_spin_unlock+0x157/0x200 [ 466.324427][ T5616] filemap_fdatawrite+0x1ec/0x2f0 [ 466.324454][ T5616] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 466.324473][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.324512][ T5616] ? rt_spin_unlock+0x157/0x200 [ 466.324529][ T5616] ? rt_spin_unlock+0x163/0x200 [ 466.324549][ T5616] f2fs_sync_dirty_inodes+0x30e/0x830 [ 466.324595][ T5616] f2fs_write_checkpoint+0xa3d/0x2710 [ 466.324625][ T5616] ? __lock_acquire+0x683/0x2ce0 [ 466.324671][ T5616] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 466.324716][ T5616] kill_f2fs_super+0x2f6/0x700 [ 466.324752][ T5616] ? __pfx_kill_f2fs_super+0x10/0x10 [ 466.324794][ T5616] ? call_rcu+0x64b/0x8b0 [ 466.324816][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.324841][ T5616] deactivate_locked_super+0xbc/0x130 [ 466.324857][ T5616] cleanup_mnt+0x3d3/0x460 [ 466.324875][ T5616] task_work_run+0x1d9/0x270 [ 466.324902][ T5616] ? __pfx_task_work_run+0x10/0x10 [ 466.324942][ T5616] exit_to_user_mode_loop+0x1fa/0x730 [ 466.324973][ T5616] ? rcu_is_watching+0x15/0xb0 [ 466.324997][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.325009][ T5616] do_syscall_64+0x353/0x580 [ 466.325021][ T5616] ? trace_irq_disable+0x3b/0x140 [ 466.325037][ T5616] ? clear_bhb_loop+0x40/0x90 [ 466.325050][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.325065][ T5616] RIP: 0033:0x7f5bc644f097 [ 466.325085][ T5616] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 466.325103][ T5616] RSP: 002b:00007ffd75f9cff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 466.325124][ T5616] RAX: 0000000000000000 RBX: 00007f5bc64e32ca RCX: 00007f5bc644f097 [ 466.325145][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd75f9d0b0 [ 466.325158][ T5616] RBP: 00007ffd75f9d0b0 R08: 00007ffd75f9e0b0 R09: 00000000ffffffff [ 466.325170][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd75f9e140 [ 466.325177][ T5616] R13: 00007f5bc64e32ca R14: 000000000006b725 R15: 00007ffd75f9e180 [ 466.325194][ T5616] [ 466.336076][ T5616] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 466.800447][ T5748] cdc_ncm 1-1:1.0: bind() failure [ 466.878154][ T5748] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 466.878193][ T5748] cdc_ncm 1-1:1.1: bind() failure [ 466.890422][T14951] unsupported nla_type 2061 [ 466.919433][ T5748] usb 1-1: USB disconnect, device number 66 [ 467.178212][T14969] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4248'. [ 467.536301][T14980] loop3: detected capacity change from 0 to 256 [ 467.801820][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4258'. [ 467.837368][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 467.837384][ T38] audit: type=1800 audit(1782872614.566:83): pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4254" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 468.026480][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 468.026507][T14996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4262'. [ 468.026528][T14996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4262'. [ 468.115364][T14988] bridge1: entered promiscuous mode [ 468.358097][T15006] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 468.358119][T15006] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4266'. [ 468.542442][ T32] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 468.702451][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 468.712302][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.712353][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 468.712376][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.712399][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.776409][ T32] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 468.776438][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.776459][ T32] usb 1-1: Product: syz [ 468.776473][ T32] usb 1-1: Manufacturer: syz [ 468.776487][ T32] usb 1-1: SerialNumber: syz [ 468.840213][ T32] usb 1-1: config 0 descriptor?? [ 468.852804][ T32] appledisplay 1-1:0.0: Submitting URB failed [ 468.853592][ T32] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 469.283425][T15040] kAFS: Can only specify source 'none' with -o dyn [ 469.354590][ T5748] usb 1-1: USB disconnect, device number 67 [ 470.127002][T15066] loop1: detected capacity change from 0 to 4096 [ 470.308880][T15066] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 470.346699][T15084] netlink: zone id is out of range [ 470.346715][T15084] netlink: zone id is out of range [ 470.346722][T15084] netlink: zone id is out of range [ 470.346730][T15084] netlink: zone id is out of range [ 470.346738][T15084] netlink: zone id is out of range [ 470.346747][T15084] netlink: zone id is out of range [ 470.346755][T15084] netlink: zone id is out of range [ 470.346763][T15084] netlink: zone id is out of range [ 470.346770][T15084] netlink: zone id is out of range [ 470.346778][T15084] netlink: zone id is out of range [ 470.775756][T15066] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 471.139019][T15109] loop3: detected capacity change from 0 to 764 [ 471.168001][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4319'. [ 471.415603][T15109] Symlink component flag not implemented [ 471.415617][T15109] Symlink component flag not implemented [ 471.415793][T15109] Symlink component flag not implemented (129) [ 471.415805][T15109] Symlink component flag not implemented (6) [ 472.026964][T15149] fuse: blksize only supported for fuseblk [ 472.159170][T15148] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.179234][T15148] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.948743][T15181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.368328][T15197] loop3: detected capacity change from 0 to 4096 [ 473.380945][T15197] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 473.480331][T15197] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 473.904460][T15217] IPVS: Unknown mcast interface: pimreg1 [ 474.957107][T15260] netlink: 'syz.4.4392': attribute type 3 has an invalid length. [ 475.912449][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4411'. [ 476.187367][T15309] net_ratelimit: 355 callbacks suppressed [ 476.187466][T15309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.494622][ T32] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 476.594587][T15334] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4427'. [ 476.669901][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 476.674065][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.677592][ T32] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 476.677620][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.677631][ T32] usb 1-1: Product: syz [ 476.677638][ T32] usb 1-1: Manufacturer: syz [ 476.677645][ T32] usb 1-1: SerialNumber: syz [ 476.705956][ T32] usb 1-1: config 0 descriptor?? [ 476.807430][ T32] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 476.807538][ T32] usb 1-1: selecting invalid altsetting 1 [ 476.912122][T15340] netlink: 296 bytes leftover after parsing attributes in process `syz.3.4431'. [ 476.976656][ T32] gspca_stk014: init reg: 0x00 [ 476.976749][ T32] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 477.223038][ T32] usb 1-1: USB disconnect, device number 68 [ 478.348422][ T5603] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 478.478067][T15400] netlink: 'syz.0.4460': attribute type 21 has an invalid length. [ 478.513165][ T5603] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 478.513192][ T5603] usb 4-1: config 0 has no interface number 0 [ 478.513254][ T5603] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 478.513280][ T5603] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 478.515117][ T5603] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 478.515144][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 478.515162][ T5603] usb 4-1: Manufacturer: syz [ 478.515176][ T5603] usb 4-1: SerialNumber: syz [ 478.586876][ T5603] usb 4-1: config 0 descriptor?? [ 478.829400][ T5603] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 478.829691][ T5603] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 478.877908][ T5603] usb 4-1: USB disconnect, device number 54 [ 479.913495][T15452] netlink: 'syz.3.4485': attribute type 1 has an invalid length. [ 479.913515][T15452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4485'. [ 480.383844][T15465] loop4: detected capacity change from 0 to 4096 [ 480.460478][T15465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.524614][T15477] syz.1.4496: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.525049][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.1.4496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.525074][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.525087][T15477] Call Trace: [ 480.525096][T15477] [ 480.525108][T15477] dump_stack_lvl+0xe8/0x150 [ 480.525142][T15477] warn_alloc+0x24c/0x270 [ 480.525168][T15477] ? __se_sys_ioctl+0x47/0x170 [ 480.525188][T15477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.525210][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525237][T15477] ? __pfx_warn_alloc+0x10/0x10 [ 480.525277][T15477] ? look_up_lock_class+0x57/0x110 [ 480.525304][T15477] __vmalloc_node_range_noprof+0x12c/0x1730 [ 480.525332][T15477] ? __lock_acquire+0x683/0x2ce0 [ 480.525367][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525393][T15477] ? kasan_quarantine_put+0xbb/0x1f0 [ 480.525430][T15477] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.525464][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525488][T15477] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 480.525518][T15477] vmalloc_noprof+0xb2/0xe0 [ 480.525541][T15477] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 480.525568][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525591][T15477] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 480.525616][T15477] ? dvb_demux_do_ioctl+0x323/0x540 [ 480.525644][T15477] dvb_demux_do_ioctl+0x460/0x540 [ 480.525668][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525691][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525712][T15477] dvb_usercopy+0x199/0x2e0 [ 480.525733][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525756][T15477] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 480.525780][T15477] ? __pfx_dvb_usercopy+0x10/0x10 [ 480.525817][T15477] ? __fget_files+0x3a8/0x420 [ 480.525852][T15477] ? __fget_files+0x2a/0x420 [ 480.525878][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525901][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525926][T15477] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 480.525952][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.525983][T15477] dvb_demux_ioctl+0x29/0x40 [ 480.526010][T15477] __se_sys_ioctl+0xff/0x170 [ 480.526030][T15477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.526052][T15477] do_syscall_64+0x174/0x580 [ 480.526076][T15477] ? trace_irq_disable+0x3b/0x140 [ 480.526104][T15477] ? clear_bhb_loop+0x40/0x90 [ 480.526130][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.526151][T15477] RIP: 0033:0x7f5bc644de59 [ 480.526168][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.526187][T15477] RSP: 002b:00007f5bc46a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.526207][T15477] RAX: ffffffffffffffda RBX: 00007f5bc66d5fa0 RCX: 00007f5bc644de59 [ 480.526223][T15477] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 480.526237][T15477] RBP: 00007f5bc64e3e6f R08: 0000000000000000 R09: 0000000000000000 [ 480.526250][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.526262][T15477] R13: 00007f5bc66d6038 R14: 00007f5bc66d5fa0 R15: 00007ffd75f9dd88 [ 480.526287][T15477] ? __UNIQUE_ID_modinfo_13351+0x64edf6f6/0xffffffffffed25ac [ 480.526319][T15477] [ 480.548033][T15477] Mem-Info: [ 480.548052][T15477] active_anon:8525 inactive_anon:0 isolated_anon:0 [ 480.548052][T15477] active_file:0 inactive_file:43575 isolated_file:0 [ 480.548052][T15477] unevictable:768 dirty:399 writeback:0 [ 480.548052][T15477] slab_reclaimable:12201 slab_unreclaimable:141964 [ 480.548052][T15477] mapped:30499 shmem:1790 pagetables:1319 [ 480.548052][T15477] sec_pagetables:0 bounce:0 [ 480.548052][T15477] kernel_misc_reclaimable:0 [ 480.548052][T15477] free:1279750 free_pcp:1264 free_cma:0 [ 480.548108][T15477] Node 0 active_anon:34100kB inactive_anon:0kB active_file:0kB inactive_file:174092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121996kB dirty:1592kB writeback:0kB shmem:5624kB kernel_stack:13156kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.548161][T15477] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.548208][T15477] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.548268][T15477] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 480.548307][T15477] Node 0 DMA32 free:1165696kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34100kB inactive_anon:0kB active_file:0kB inactive_file:174088kB unevictable:1536kB writepending:1592kB zspages:0kB present:3129332kB managed:2554240kB mlocked:0kB bounce:0kB free_pcp:5044kB local_pcp:2604kB free_cma:0kB [ 480.548377][T15477] lowmem_reserve[]: 0 0 1 1 1 [ 480.548410][T15477] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1156kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 480.548468][T15477] lowmem_reserve[]: 0 0 0 0 0 [ 480.548501][T15477] Node 1 Normal free:3937944kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.548563][T15477] lowmem_reserve[]: 0 0 0 0 0 [ 480.548595][T15477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.612348][T15477] Node 0 DMA32: 866*4kB (UM) 1527*8kB (UM) 739*16kB (UME) 376*32kB (UME) 250*64kB (UME) 95*128kB (UME) 26*256kB (UME) 21*512kB (UME) 5*1024kB (UM) 5*2048kB (UM) 260*4096kB (UM) = 1165424kB [ 480.612539][T15477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 480.612638][T15477] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 9*16kB (UM) 8*32kB (UM) 9*64kB (UM) 3*128kB (UM) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937944kB [ 480.630619][T15477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.630638][T15477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.630655][T15477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.630673][T15477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.630690][T15477] 45289 total pagecache pages [ 480.630715][T15477] 0 pages in swap cache [ 480.630722][T15477] Free swap = 124996kB [ 480.630730][T15477] Total swap = 124996kB [ 480.630740][T15477] 2097051 pages RAM [ 480.630748][T15477] 0 pages HighMem/MovableOnly [ 480.630756][T15477] 426588 pages reserved [ 480.630763][T15477] 0 pages cma reserved [ 480.754307][T15481] mac80211_hwsim hwsim4 30: renamed from wlan0 (while UP) [ 481.157030][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.547654][T15495] loop1: detected capacity change from 0 to 256 [ 481.695972][ T38] audit: type=1800 audit(1782872627.336:84): pid=15495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4505" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 481.754666][T15502] loop3: detected capacity change from 0 to 256 [ 481.779385][T15502] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 482.003312][T15507] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 482.123713][T15510] loop1: detected capacity change from 0 to 1024 [ 482.160671][T15510] hfsplus: invalid btree extent records (0 size) [ 482.160723][T15510] hfsplus: failed to load catalog file [ 482.371780][T15526] loop1: detected capacity change from 0 to 64 [ 482.820117][T15536] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 483.039563][T15546] loop1: detected capacity change from 0 to 512 [ 483.250081][T15546] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 483.250212][T15546] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 483.250281][T15546] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4528: Failed to acquire dquot type 1 [ 483.250303][T15546] loop1: lost filesystem error report for type 5 error -117 [ 483.259158][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 483.259179][ C0] EXT4-fs (loop1): initial error at time 1782872628: ext4_acquire_dquot:7041 [ 483.259200][ C0] EXT4-fs (loop1): last error at time 1782872628: ext4_acquire_dquot:7041 [ 483.274928][T15546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4528: bg 0: block 495: padding at end of block bitmap is not set [ 483.274960][T15546] loop1: lost filesystem error report for type 5 error -117 [ 483.278659][T15546] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 483.278684][T15546] loop1: lost filesystem error report for type 5 error -117 [ 483.283524][T15546] EXT4-fs (loop1): 1 truncate cleaned up [ 483.295808][T15546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.295928][T15546] ext4 filesystem being mounted at /751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.622217][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.904188][T15577] netlink: 'syz.0.4544': attribute type 21 has an invalid length. [ 483.957052][T15581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4546'. [ 484.234011][T15595] loop1: detected capacity change from 0 to 512 [ 484.239511][T15595] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 484.239878][T15595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 484.241090][T15595] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 484.241110][T15595] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 484.241161][T15595] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4553: Failed to acquire dquot type 1 [ 484.241184][T15595] loop1: lost filesystem error report for type 5 error -5 [ 484.243475][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 484.243500][ C1] EXT4-fs (loop1): initial error at time 1782872629: ext4_acquire_dquot:7041 [ 484.243522][ C1] EXT4-fs (loop1): last error at time 1782872629: ext4_acquire_dquot:7041 [ 484.250356][T15595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4553: bg 0: block 40: padding at end of block bitmap is not set [ 484.250390][T15595] loop1: lost filesystem error report for type 5 error -117 [ 484.253205][T15595] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 484.253229][T15595] loop1: lost filesystem error report for type 5 error -117 [ 484.253753][T15595] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.4553: data will be lost [ 484.254023][T15595] EXT4-fs (loop1): 1 truncate cleaned up [ 484.384110][T15595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.422646][T15595] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.4553: bad symlink. [ 484.718383][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.910238][T15613] loop4: detected capacity change from 0 to 512 [ 484.923677][T15613] EXT4-fs (loop4): 1 truncate cleaned up [ 484.945279][T15613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.950566][T15615] tmpfs: Bad value for 'mpol' [ 485.104586][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.263163][T15625] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4566'. [ 485.431292][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4572'. [ 485.517669][ T38] audit: type=1326 audit(1782872630.870:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.3.4574" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x0 [ 485.596773][T15644] loop0: detected capacity change from 0 to 64 [ 485.636512][T15641] loop1: detected capacity change from 0 to 512 [ 485.637608][T15641] EXT4-fs: Ignoring removed bh option [ 485.637632][T15641] EXT4-fs: inline encryption not supported [ 485.665159][T15644] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 485.669585][T15641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 485.736656][T15641] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 485.758787][T15644] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 485.823830][T15641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4575: bg 0: block 248: padding at end of block bitmap is not set [ 485.823864][T15641] loop1: lost filesystem error report for type 5 error -117 [ 485.825167][T15641] Quota error (device loop1): write_blk: dquota write failed [ 485.825256][T15641] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 485.825313][T15641] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4575: Failed to acquire dquot type 1 [ 485.825335][T15641] loop1: lost filesystem error report for type 5 error -28 [ 485.827040][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 485.827060][ C0] EXT4-fs (loop1): last error at time 1782872631: ext4_acquire_dquot:7041 [ 486.000728][T15641] EXT4-fs (loop1): 1 truncate cleaned up [ 486.017717][T15641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 486.114995][ T1425] bond0: (slave bond_slave_0): interface is now down [ 486.115074][ T1425] bond0: (slave bond_slave_1): interface is now down [ 486.194457][ T2512] bond0: (slave bond_slave_0): interface is now down [ 486.194480][ T2512] bond0: (slave bond_slave_1): interface is now down [ 486.222695][ T2512] bond0: (slave bond_slave_0): interface is now down [ 486.222718][ T2512] bond0: (slave bond_slave_1): interface is now down [ 486.243998][ T2512] bond0: (slave bond_slave_0): interface is now down [ 486.244023][ T2512] bond0: (slave bond_slave_1): interface is now down [ 486.267866][ T2512] bond0: (slave bond_slave_0): interface is now down [ 486.279848][ T2512] bond0: (slave bond_slave_1): interface is now down [ 486.301784][ T1425] bond0: (slave bond_slave_0): interface is now down [ 486.301806][ T1425] bond0: (slave bond_slave_1): interface is now down [ 486.326569][ T1425] bond0: (slave bond_slave_0): interface is now down [ 486.326590][ T1425] bond0: (slave bond_slave_1): interface is now down [ 486.346565][ T57] bond0: (slave bond_slave_0): interface is now down [ 486.346588][ T57] bond0: (slave bond_slave_1): interface is now down [ 486.364867][T15641] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 486.364987][T15641] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 486.365010][T15641] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4575: Failed to acquire dquot type 1 [ 486.609796][ T57] bond0: now running without any active interface! [ 486.615301][ T2512] bridge0: port 3(bond0) entered disabled state [ 486.709861][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 486.745837][T15676] loop0: detected capacity change from 0 to 64 [ 488.055283][T15709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4606'. [ 488.079510][T15691] krxrpcio/0 (15691) used greatest stack depth: 18664 bytes left [ 488.340479][T15718] netlink: del zone limit has 8 unknown bytes [ 488.575851][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 488.603701][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 488.701496][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 488.745336][T15721] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 488.745374][T15721] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 488.745421][T15721] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 489.004764][T15721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 489.503635][T15721] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 489.970319][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 490.119997][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 490.187261][T15786] Device name not specified. [ 490.187261][T15786] [ 490.201313][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 490.262768][T15789] program syz.0.4646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.295590][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 490.322016][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 490.353033][T15792] loop0: detected capacity change from 0 to 1024 [ 490.353975][T15792] EXT4-fs: inline encryption not supported [ 490.386338][T15796] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4648'. [ 490.395319][T15794] netlink: 'syz.4.4647': attribute type 29 has an invalid length. [ 490.432619][T15792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.691462][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.880450][T15813] loop4: detected capacity change from 0 to 256 [ 490.881186][T15815] loop1: detected capacity change from 0 to 1024 [ 491.969015][T15849] loop3: detected capacity change from 0 to 256 [ 492.315980][T15860] loop1: detected capacity change from 0 to 64 [ 493.712734][T15901] smbdirect: ib_dev[!yz!]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 493.712777][T15901] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 493.712816][T15901] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 493.923211][T15901] infiniband !yz!: RDMA CMA: cma_listen_on_dev, error -98 [ 494.115467][T15926] netlink: 'syz.3.4711': attribute type 1 has an invalid length. [ 494.115489][T15926] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4711'. [ 494.382064][T15935] loop3: detected capacity change from 0 to 1024 [ 494.550753][T15935] cifs: Unknown parameter 'é [ 494.550753][T15935] @ö"2a×ch}#ÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#LÇ<æõ]%gCžÊ [ 494.550753][T15935] SÃȘ8µ)°' [ 494.730277][T15938] loop1: detected capacity change from 0 to 4096 [ 494.750475][T15938] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 494.803660][T15941] lo speed is unknown, defaulting to 1000 [ 494.825971][T15941] lo speed is unknown, defaulting to 1000 [ 494.989594][T15941] lo speed is unknown, defaulting to 1000 [ 495.032732][T15941] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 495.032772][T15941] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 495.032811][T15941] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 495.207623][T15951] loop4: detected capacity change from 0 to 128 [ 495.240491][T15951] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.292971][T15941] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 495.294188][T15951] ext4 filesystem being mounted at /832/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.358655][T15938] ntfs3(loop1): ino=0, attr_set_size_ex [ 495.565205][ T5620] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 495.913210][T15976] netlink: 'syz.1.4735': attribute type 4 has an invalid length. [ 495.913231][T15976] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4735'. [ 496.032685][T15976] .`: renamed from bond0 (while UP) [ 496.310359][T15941] lo speed is unknown, defaulting to 1000 [ 496.315744][T15941] lo speed is unknown, defaulting to 1000 [ 496.319558][T15941] lo speed is unknown, defaulting to 1000 [ 496.322620][T15941] lo speed is unknown, defaulting to 1000 [ 496.325750][T15941] lo speed is unknown, defaulting to 1000 [ 497.365017][T16023] loop1: detected capacity change from 0 to 2048 [ 497.476248][T16023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.526361][T16032] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4761'. [ 497.526392][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4761'. [ 497.526407][T16032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4761'. [ 497.991740][T16008] loop4: detected capacity change from 0 to 32768 [ 498.225321][ T38] audit: type=1800 audit(1782872642.598:86): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4758" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 498.277749][T16008] JBD2: Ignoring recovery information on journal [ 498.403615][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.590011][T16008] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 498.602315][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4776'. [ 499.154897][T16080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4785'. [ 499.154925][T16080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4785'. [ 499.154941][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 499.229480][ T5620] ocfs2: Unmounting device (7,4) on (node local) [ 499.891040][T16110] libceph: resolve 'c' (ret=-3): failed [ 500.274372][ T5603] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 500.442821][ T5603] usb 4-1: Using ep0 maxpacket: 8 [ 500.445833][ T5603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.447676][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 500.447704][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 500.447737][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 500.447763][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 500.447786][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.526630][ T5603] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 500.526658][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.526678][ T5603] usb 4-1: Product: syz [ 500.526692][ T5603] usb 4-1: Manufacturer: syz [ 500.526706][ T5603] usb 4-1: SerialNumber: syz [ 500.585284][ T5603] usb 4-1: config 0 descriptor?? [ 500.586160][T16116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.841701][T16105] loop0: detected capacity change from 0 to 32768 [ 500.870523][T16105] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 500.944706][T16105] XFS (loop0): Ending clean mount [ 501.163529][ T5617] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.234548][ T5603] rc_core: IR keymap rc-snapstream-firefly not found [ 502.234570][ T5603] Registered IR keymap rc-empty [ 502.237950][ T5603] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 502.271403][ T5603] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 502.368801][ T5603] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 502.461092][ T5603] usb 4-1: USB disconnect, device number 55 [ 502.461202][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 502.530365][ T4961] ati_remote 4-1:0.0: ati_remote_open: usb_submit_urb failed! [ 502.698646][T16188] openvswitch: netlink: Tunnel attr 245 out of range max 16 [ 503.233553][T16201] loop0: detected capacity change from 0 to 256 [ 503.296786][T16201] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 503.775633][T16221] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4849'. [ 503.813906][T16227] loop0: detected capacity change from 0 to 128 [ 503.929363][T16227] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 503.929433][T16227] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 503.929449][T16227] hpfs: You really don't want any checks? You are crazy... [ 503.929897][T16227] hpfs: hpfs_map_sector(): read error [ 503.929945][T16227] hpfs: code page support is disabled [ 503.933432][T16227] hpfs: hpfs_map_4sectors(): unaligned read [ 503.933588][T16227] hpfs: hpfs_map_4sectors(): unaligned read [ 503.933599][T16227] hpfs: filesystem error: unable to find root dir [ 504.725095][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4868'. [ 504.725216][T16259] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4868'. [ 507.091260][ T5748] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 507.245757][T16350] loop0: detected capacity change from 0 to 2048 [ 507.255011][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 507.257106][ T5748] usb 4-1: config 194 has an invalid interface number: 49 but max is 0 [ 507.257132][ T5748] usb 4-1: config 194 has no interface number 0 [ 507.257187][ T5748] usb 4-1: config 194 interface 49 has no altsetting 0 [ 507.264332][ T5748] usb 4-1: New USB device found, idVendor=1949, idProduct=cd89, bcdDevice=f1.db [ 507.264362][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.264382][ T5748] usb 4-1: Product: syz [ 507.264397][ T5748] usb 4-1: Manufacturer: syz [ 507.264413][ T5748] usb 4-1: SerialNumber: syz [ 507.548996][T16350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.645766][ T5748] usb 4-1: USB disconnect, device number 56 [ 507.964493][T16360] loop4: detected capacity change from 0 to 32768 [ 508.068577][T16360] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.245358][ T38] audit: type=1800 audit(1782872651.843:87): pid=16350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4912" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 508.313230][T16360] XFS (loop4): Ending clean mount [ 508.410777][ T5620] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.466476][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.973401][T16397] loop1: detected capacity change from 0 to 512 [ 509.186504][T16403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.354683][ T5603] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 509.531295][ T5603] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 509.531328][ T5603] usb 1-1: config 1 interface 0 has no altsetting 0 [ 509.533596][ T5603] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 509.533624][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.533643][ T5603] usb 1-1: Product: syz [ 509.533658][ T5603] usb 1-1: Manufacturer: syz [ 509.533672][ T5603] usb 1-1: SerialNumber: syz [ 509.604800][T16400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.809376][T16387] loop3: detected capacity change from 0 to 32768 [ 509.839018][ T5603] usblp0: Disabling reads from problematic bidirectional printer [ 509.870379][ T5603] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 6 proto 2 vid 0x03F0 pid 0x0004 [ 509.930652][ T5603] usb 1-1: USB disconnect, device number 69 [ 510.041367][ T5603] usblp0: removed [ 510.817563][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4953'. [ 510.912884][T16446] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 511.529390][T16474] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 511.629343][T16480] loop0: detected capacity change from 0 to 256 [ 511.777377][T16488] loop3: detected capacity change from 0 to 512 [ 511.815602][T16488] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.4973: inode has both inline data and extents flags [ 511.815635][T16488] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.816507][T16488] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4973: couldn't read orphan inode 15 (err -117) [ 511.816538][T16488] loop3: lost filesystem error report for type 5 error -117 [ 511.884941][T16488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.140547][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.462238][T16510] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.4982'. [ 512.781107][T16512] loop3: detected capacity change from 0 to 4096 [ 512.798392][T16512] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 513.082964][ T37] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 513.171462][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 513.257210][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 513.259898][ T37] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 513.259926][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.282892][ T37] usb 5-1: config 0 descriptor?? [ 513.316462][ T37] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 513.341950][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 513.341978][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 513.341998][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 513.342017][ T9] usb 2-1: config 220 has no interface number 2 [ 513.342084][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 513.342112][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 513.342130][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 513.342148][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 513.397162][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 513.397193][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.397213][ T9] usb 2-1: Product: syz [ 513.397227][ T9] usb 2-1: Manufacturer: syz [ 513.397241][ T9] usb 2-1: SerialNumber: syz [ 513.486115][T16546] loop3: detected capacity change from 0 to 256 [ 513.723019][ T9] usb 2-1: selecting invalid altsetting 0 [ 513.723578][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 513.723610][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 513.831949][ T37] gspca_vc032x: reg_w err -71 [ 513.832041][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832054][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832063][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832072][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832081][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832089][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832098][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832107][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832116][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832125][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832134][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832142][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832151][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832160][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832169][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832178][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832187][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832195][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.832204][ T37] gspca_vc032x: Unknown sensor... [ 513.832282][ T37] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 513.850601][ T9] usb 2-1: selecting invalid altsetting 0 [ 513.850638][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 513.869340][ T9] usb 2-1: USB disconnect, device number 46 [ 513.975984][ T37] usb 5-1: USB disconnect, device number 62 [ 514.516484][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 514.682429][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 514.695517][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 514.695543][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.695560][ T9] usb 4-1: Product: syz [ 514.695573][ T9] usb 4-1: Manufacturer: syz [ 514.695584][ T9] usb 4-1: SerialNumber: syz [ 514.760579][ T9] usb 4-1: config 0 descriptor?? [ 514.788386][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 514.995524][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -32 [ 515.049520][ T9] usb 4-1: USB disconnect, device number 57 [ 515.506824][T16574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.509188][T16574] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 515.789279][T16574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.789396][T16574] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 515.906608][T16611] loop0: detected capacity change from 0 to 8192 [ 515.927358][T16613] loop3: detected capacity change from 0 to 1764 [ 516.088548][T16613] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 516.388664][T16574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 516.394315][T16574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.394415][T16574] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 516.854410][ T37] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 517.029355][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 517.037334][ T37] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 517.037361][ T37] usb 2-1: config 0 has no interface number 0 [ 517.037405][ T37] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.037427][ T37] usb 2-1: config 0 interface 85 has no altsetting 0 [ 517.050578][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 517.070653][T16643] netlink: 'syz.3.5048': attribute type 4 has an invalid length. [ 517.070675][T16643] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5048'. [ 517.088468][ T37] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 517.088507][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.088526][ T37] usb 2-1: Product: syz [ 517.088539][ T37] usb 2-1: Manufacturer: syz [ 517.088554][ T37] usb 2-1: SerialNumber: syz [ 517.135937][T16643] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 517.173915][ T37] usb 2-1: config 0 descriptor?? [ 517.189959][ T37] appletouch 2-1:0.85: Could not find int-in endpoint [ 517.189997][ T37] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 517.207974][ T37] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 518.017764][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 518.170738][T16676] loop0: detected capacity change from 0 to 8192 [ 518.185464][T16676] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.612630][ T5603] usb 2-1: USB disconnect, device number 47 [ 518.621082][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 518.621355][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.644878][ T5748] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 518.805929][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 518.812259][ T5748] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 518.812289][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.878849][ T5748] pvrusb2: Hardware description: Terratec Grabster AV400 [ 518.878889][ T5748] pvrusb2: ********** [ 518.878897][ T5748] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 518.878908][ T5748] pvrusb2: Important functionality might not be entirely working. [ 518.878917][ T5748] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 518.878929][ T5748] pvrusb2: ********** [ 519.104400][ T2377] pvrusb2: Invalid write control endpoint [ 519.303799][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 519.361517][ T32] usb 5-1: USB disconnect, device number 63 [ 519.508647][T16713] netlink: 'syz.3.5082': attribute type 10 has an invalid length. [ 519.513076][T16713] veth1_virt_wifi: entered promiscuous mode [ 520.258094][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 520.283275][T16736] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 520.357147][T16701] syz.1.5077 (16701): drop_caches: 2 [ 520.639396][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5099'. [ 520.729289][ T2377] pvrusb2: Invalid write control endpoint [ 520.729300][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 520.729306][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 520.729310][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 520.729316][ T2377] pvrusb2: Device being rendered inoperable [ 520.820548][ T2377] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 520.820658][ T2377] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 520.866185][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 521.181590][ T2377] pvrusb2: Attached sub-driver cx25840 [ 521.181691][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 521.181704][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 521.464102][T16769] loop3: detected capacity change from 0 to 512 [ 521.487202][T16769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 521.580435][T16756] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 521.642780][T16756] bond2 (unregistering): Released all slaves [ 521.769747][T16769] EXT4-fs (loop3): 1 truncate cleaned up [ 521.776107][T16769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.116922][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.333682][T16791] loop1: detected capacity change from 0 to 2048 [ 522.389594][T16791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.298212][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5136'. [ 523.298240][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5136'. [ 523.352291][T16828] tmpfs: Bad value for 'mpol' [ 523.458145][T16790] loop0: detected capacity change from 0 to 32768 [ 524.193215][T16858] netlink: 'syz.3.5152': attribute type 10 has an invalid length. [ 524.287959][T16861] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5146'. [ 524.287983][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'. [ 524.287996][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5146'. [ 524.421297][ T5748] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 524.583986][ T5748] usb 2-1: config 0 has an invalid interface number: 13 but max is 2 [ 524.584021][ T5748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.584039][ T5748] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 524.584058][ T5748] usb 2-1: config 0 has no interface number 0 [ 524.584101][ T5748] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 524.584124][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.662599][ T5748] usb 2-1: config 0 descriptor?? [ 524.738262][T16858] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 524.840655][T16840] loop4: detected capacity change from 0 to 32768 [ 524.867955][T16840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5143 (16840) [ 524.952026][ T37] usb 2-1: USB disconnect, device number 48 [ 525.087709][T16840] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 525.087742][T16840] BTRFS info (device loop4): using sha256 checksum algorithm [ 525.553268][T16840] BTRFS info (device loop4): enabling ssd optimizations [ 525.553293][T16840] BTRFS info (device loop4): turning on async discard [ 525.553309][T16840] BTRFS info (device loop4): enabling free space tree [ 525.743944][ T5620] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 525.993158][ T37] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 526.184049][ T37] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.184080][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.184100][ T37] usb 2-1: Product: syz [ 526.184114][ T37] usb 2-1: Manufacturer: syz [ 526.184128][ T37] usb 2-1: SerialNumber: syz [ 526.227048][T16923] loop3: detected capacity change from 0 to 8 [ 526.388121][ T37] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 526.763569][T16934] loop0: detected capacity change from 0 to 1764 [ 526.848496][T16934] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 527.342524][T16934] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 527.452916][T16950] loop3: detected capacity change from 0 to 1024 [ 527.501680][T16950] hfsplus: (loop3): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only. [ 527.501714][T16950] hfsplus: Run fsck.hfsplus to repair. [ 527.950231][ T5821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 528.191130][T16968] veth0_to_batadv: entered allmulticast mode [ 528.192724][T16968] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 528.193501][T16972] netlink: 'syz.0.5199': attribute type 3 has an invalid length. [ 528.193545][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5199'. [ 528.656171][ T5821] usb 2-1: ath9k_htc: Unable to allocate URBs [ 528.683606][ T5603] usb 2-1: USB disconnect, device number 49 [ 528.724040][ T5603] usb 2-1: ath9k_htc: USB layer deinitialized [ 528.825230][T16987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5209'. [ 529.240632][T17005] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5216'. [ 529.463296][T17015] loop1: detected capacity change from 0 to 128 [ 529.476348][T17015] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 529.491873][T17015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.676421][T17024] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5225'. [ 530.165283][T17043] loop1: detected capacity change from 0 to 256 [ 530.171007][T17043] exfat: Deprecated parameter 'namecase' [ 530.271785][T17043] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 530.332179][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 530.636419][T17056] loop3: detected capacity change from 0 to 4096 [ 530.677904][T17056] NILFS (loop3): invalid segment: Checksum error in segment payload [ 530.677938][T17056] NILFS (loop3): trying rollback from an earlier position [ 530.718220][T17057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.993697][T17056] NILFS (loop3): recovery complete [ 531.186829][T17077] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.305465][T17076] loop4: detected capacity change from 0 to 2048 [ 531.318769][T17076] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 531.320277][T17076] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 531.361657][T17076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.994759][T17095] binfmt_misc: register: failed to install interpreter file ./file0 [ 532.329945][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.330030][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.359827][T17111] loop0: detected capacity change from 0 to 256 [ 533.155855][T17138] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5276'. [ 533.805214][T17164] loop4: detected capacity change from 0 to 64 [ 533.878470][T17166] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 534.124689][T17181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.434338][T17200] loop3: detected capacity change from 0 to 128 [ 534.489045][T17204] netlink: 'syz.1.5309': attribute type 1 has an invalid length. [ 535.154284][T17232] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5322'. [ 535.309043][T17242] loop3: detected capacity change from 0 to 512 [ 535.385093][T17242] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 535.439369][T17242] EXT4-fs (loop3): 1 truncate cleaned up [ 535.558534][T17246] loop4: detected capacity change from 0 to 512 [ 535.628133][T17242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.990559][T17246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.990677][T17246] ext4 filesystem being mounted at /925/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.233313][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.541044][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.798720][T17280] netlink: 'syz.3.5344': attribute type 4 has an invalid length. [ 537.021086][T17287] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5348'. [ 537.021114][T17287] netlink: 'syz.1.5348': attribute type 1 has an invalid length. [ 537.251320][T17295] loop4: detected capacity change from 0 to 2048 [ 537.329801][T17295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.767024][T17284] loop0: detected capacity change from 0 to 32768 [ 537.808935][T17284] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 537.909207][T17284] XFS (loop0): Ending clean mount [ 538.348263][ T5617] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 538.406239][T17334] IPVS: Error joining to the multicast group [ 538.929428][T17354] snd_dummy snd_dummy.0: control 1:0:99:syz1:6 is already present [ 539.080078][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5378'. [ 539.080144][T17358] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 540.319824][T17411] loop0: detected capacity change from 0 to 256 [ 540.778523][T17423] loop3: detected capacity change from 0 to 1024 [ 540.791841][T17423] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 540.911796][T17423] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5411: lblock 2 mapped to illegal pblock 2 (length 1) [ 540.911837][T17423] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 540.916422][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 540.916447][ C0] EXT4-fs (loop3): initial error at time 1782872681: ext4_map_blocks:791: inode 3: block 2 [ 540.916484][ C0] EXT4-fs (loop3): last error at time 1782872681: ext4_map_blocks:791: inode 3: block 2 [ 540.944737][T17423] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 540.944801][T17423] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5411: lblock 0 mapped to illegal pblock 48 (length 1) [ 540.944835][T17423] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 540.990879][T17423] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 540.990905][T17423] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5411: Failed to acquire dquot type 0 [ 540.990930][T17423] loop3: lost filesystem error report for type 5 error -117 [ 540.994642][T17423] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 540.994752][T17423] loop3: lost filesystem error report for type 5 error -117 [ 541.022196][T17423] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5411: mark_inode_dirty error [ 541.022228][T17423] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 541.024799][T17423] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 541.024901][T17423] EXT4-fs (loop3): 1 orphan inode deleted [ 541.034770][T17423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.051563][T17435] netlink: 57 bytes leftover after parsing attributes in process `syz.4.5416'. [ 541.197298][ T1425] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.428875][ T1425] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 541.429000][ T1425] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0 [ 541.465236][T17423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.471852][T17423] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.5411: Invalid inode table block 1 in block_group 0 [ 541.472049][T17423] loop3: lost filesystem error report for type 5 error -117 [ 541.547314][ T38] audit: type=1326 audit(1782872682.569:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.547367][ T38] audit: type=1326 audit(1782872682.578:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.552581][ T38] audit: type=1326 audit(1782872682.578:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.559447][ T38] audit: type=1326 audit(1782872682.588:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.559496][ T38] audit: type=1326 audit(1782872682.588:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.559536][ T38] audit: type=1326 audit(1782872682.588:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.559575][ T38] audit: type=1326 audit(1782872682.588:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.0.5422" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 541.619529][T17452] loop1: detected capacity change from 0 to 512 [ 541.630727][T17423] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 541.630749][T17423] loop3: lost filesystem error report for type 5 error -117 [ 541.646734][T17452] EXT4-fs (loop1): invalid journal inode [ 541.646835][T17452] EXT4-fs (loop1): can't get journal size [ 541.654901][T17452] EXT4-fs (loop1): 1 truncate cleaned up [ 541.677813][T17452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.732500][T17423] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz.3.5411: mark_inode_dirty error [ 541.732535][T17423] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 541.800988][T17452] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.5424: invalid fast symlink length 39 [ 541.969239][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.498056][ T5603] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 542.661134][ T5603] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 542.661161][ T5603] usb 5-1: config 0 has no interface number 1 [ 542.661216][ T5603] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 542.661251][ T5603] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.662406][ T5603] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 542.662432][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.662452][ T5603] usb 5-1: SerialNumber: syz [ 542.735095][ T5603] usb 5-1: config 0 descriptor?? [ 542.971065][ T5603] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 542.971099][ T5603] uvcvideo 5-1:0.199: No valid video chain found. [ 543.208458][ T5603] usb 5-1: USB disconnect, device number 64 [ 543.272622][T17521] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 544.022343][T17541] loop3: detected capacity change from 0 to 512 [ 544.068236][T17541] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.5466: invalid block [ 544.068282][T17541] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 544.079508][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 544.079534][ C0] EXT4-fs (loop3): initial error at time 1782872684: __ext4_iget:5533: inode 11: block 1 [ 544.079569][ C0] EXT4-fs (loop3): last error at time 1782872684: __ext4_iget:5533: inode 11: block 1 [ 544.128846][T17541] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5466: couldn't read orphan inode 11 (err -117) [ 544.128880][T17541] loop3: lost filesystem error report for type 5 error -117 [ 544.192149][T17541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.468520][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.689662][T17565] loop0: detected capacity change from 0 to 64 [ 544.733924][T17569] loop4: detected capacity change from 0 to 1764 [ 544.908479][T17569] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 545.512193][T17595] loop3: detected capacity change from 0 to 128 [ 545.687818][T17605] ubi8: attaching mtd0 [ 545.687906][T17605] ubi8 error: ubi_attach_mtd_dev: bad VID header (69435) or data offsets (69499) [ 545.998888][T17614] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5501'. [ 546.119992][T17623] loop4: detected capacity change from 0 to 2048 [ 546.143103][T17623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.793931][T17648] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 547.399866][T17637] loop3: detected capacity change from 0 to 32768 [ 547.443802][T17637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5512 (17637) [ 547.685023][T17637] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 547.685055][T17637] BTRFS info (device loop3): using crc32c checksum algorithm [ 548.012529][T17637] BTRFS info (device loop3): enabling ssd optimizations [ 548.012553][T17637] BTRFS info (device loop3): using spread ssd allocation scheme [ 548.012570][T17637] BTRFS info (device loop3): turning on flush-on-commit [ 548.012587][T17637] BTRFS info (device loop3): enabling free space tree [ 548.012668][T17637] BTRFS info (device loop3): force zlib compression, level 3 [ 548.378638][ T5618] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 548.603077][ T37] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 548.634348][T17714] bridge0: port 3(batadv0) entered blocking state [ 548.634707][T17714] bridge0: port 3(batadv0) entered disabled state [ 548.634980][T17714] batadv0: entered allmulticast mode [ 548.638404][T17714] batadv0: entered promiscuous mode [ 548.639691][T17714] bridge0: port 3(batadv0) entered blocking state [ 548.686690][T17714] bridge0: port 3(batadv0) entered forwarding state [ 548.760698][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 548.763001][ T37] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 548.763024][ T37] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 548.763041][ T37] usb 1-1: config 6 has no interface number 0 [ 548.763648][ T37] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 548.763669][ T37] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.765719][ T37] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 548.765745][ T37] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 548.765765][ T37] usb 1-1: Product: syz [ 548.765778][ T37] usb 1-1: Manufacturer: syz [ 548.765792][ T37] usb 1-1: SerialNumber: syz [ 548.863676][ T37] hso 1-1:6.2: Failed to find INT IN ep [ 549.013800][ T2512] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 549.013820][ T2512] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 549.143753][ T11] usb 1-1: USB disconnect, device number 70 [ 550.039591][ T37] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 550.231800][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 550.246697][ T37] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 550.246726][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.316239][ T37] usb 5-1: config 0 descriptor?? [ 550.320315][ T37] cp210x 5-1:0.0: cp210x converter detected [ 550.594947][ T37] usb 5-1: cp210x converter now attached to ttyUSB0 [ 550.788754][ T5731] usb 5-1: USB disconnect, device number 65 [ 550.911639][ T5731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 550.927126][ T5731] cp210x 5-1:0.0: device disconnected [ 552.596829][T17832] sg_write: data in/out 229376/136 bytes for SCSI command 0x0-- guessing data in; [ 552.596829][T17832] program syz.3.5601 not setting count and/or reply_len properly [ 553.238012][T17860] bridge3: entered promiscuous mode [ 553.356992][ T5731] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 553.503346][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5621'. [ 553.521152][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 553.523314][ T5731] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.523340][ T5731] usb 2-1: config 0 has no interface number 0 [ 553.525640][ T5731] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.525668][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.525687][ T5731] usb 2-1: Product: syz [ 553.525701][ T5731] usb 2-1: Manufacturer: syz [ 553.525716][ T5731] usb 2-1: SerialNumber: syz [ 553.545119][ T5731] usb 2-1: config 0 descriptor?? [ 553.564544][ T5731] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 553.892694][ T5731] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 553.978333][ T5731] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.010208][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.022759][ T5731] usb 2-1: USB disconnect, device number 50 [ 554.040876][ T5731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 554.094714][ T5731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 554.119881][ T5731] quatech2 2-1:0.51: device disconnected [ 554.188998][T17898] netlink: 'syz.3.5634': attribute type 3 has an invalid length. [ 554.746234][T17920] loop1: detected capacity change from 0 to 16 [ 554.859934][T17920] erofs (device loop1): mounted with root inode @ nid 36. [ 555.038189][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 555.151872][T17930] loop4: detected capacity change from 0 to 8 [ 555.192353][T17930] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 556.544279][ T5603] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 556.704827][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 556.710511][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 556.710545][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 556.717780][ T5603] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 556.717810][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.717829][ T5603] usb 4-1: Product: syz [ 556.717843][ T5603] usb 4-1: Manufacturer: syz [ 556.717857][ T5603] usb 4-1: SerialNumber: syz [ 556.736778][ T5603] usb 4-1: config 0 descriptor?? [ 556.818444][ T5603] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 556.985602][ T5603] usb 4-1: USB disconnect, device number 58 [ 557.053452][ T76] usb 4-1: Failed to submit usb control message: -71 [ 557.053474][ T76] usb 4-1: unable to send the bmi data to the device: -71 [ 557.053484][ T76] usb 4-1: unable to get target info from device [ 557.053503][ T76] usb 4-1: could not get target info (-71) [ 557.053695][ T76] usb 4-1: could not probe fw (-71) [ 557.886230][ T5731] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 558.050906][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.050933][ T5731] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 558.086472][ T5731] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.086500][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.086519][ T5731] usb 2-1: Product: syz [ 558.086533][ T5731] usb 2-1: Manufacturer: syz [ 558.086546][ T5731] usb 2-1: SerialNumber: syz [ 558.126605][ T5731] usb 2-1: config 0 descriptor?? [ 558.375278][ T5731] usb 2-1: USB disconnect, device number 51 [ 558.564645][T18062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5713'. [ 559.348102][T18087] loop1: detected capacity change from 0 to 256 [ 559.363475][T18087] exfat: Deprecated parameter 'namecase' [ 559.363534][T18087] exfat: Deprecated parameter 'namecase' [ 559.381248][T18089] ieee802154 phy0 wpan0: encryption failed: -22 [ 559.427889][T18087] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 559.943965][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'. [ 560.085653][T18069] loop0: detected capacity change from 0 to 32768 [ 560.260159][T18069] JBD2: Ignoring recovery information on journal [ 560.279593][T18069] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 560.319302][T18069] JBD2: bad block at offset 32 [ 560.331149][T18069] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 560.845943][T18131] loop3: detected capacity change from 0 to 64 [ 561.073530][T18111] loop4: detected capacity change from 0 to 32768 [ 561.162777][T18111] [ 561.162777][T18111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 561.162777][T18111] [ 561.236511][T18138] ALSA: mixer_oss: invalid OSS volume '' [ 561.626515][T18111] ERROR: (device loop4): diWrite: ixpxd invalid [ 561.626515][T18111] [ 561.806119][T18111] ERROR: (device loop4): txCommit: [ 561.806119][T18111] [ 562.103047][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 562.375956][ T5620] [ 562.375956][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 562.375956][ T5620] [ 562.446253][ T5620] [ 562.446253][ T5620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 562.446253][ T5620] [ 562.787248][T18186] loop3: detected capacity change from 0 to 256 [ 562.790830][T18186] exfat: Deprecated parameter 'namecase' [ 562.790864][T18186] exfat: Deprecated parameter 'utf8' [ 562.848184][T18186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 563.093514][T18193] loop0: detected capacity change from 0 to 2048 [ 563.422184][T18193] loop0: unable to read partition table [ 563.422392][T18193] loop0: partition table beyond EOD, truncated [ 563.427521][T18193] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 564.026654][T18223] loop1: detected capacity change from 0 to 2048 [ 564.108205][T18223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.108335][T18223] ext4 filesystem being mounted at /937/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.466637][T18223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5791: bg 0: block 345: padding at end of block bitmap is not set [ 564.546270][T18223] EXT4-fs (loop1): Remounting filesystem read-only [ 564.761733][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.922144][T18211] loop3: detected capacity change from 0 to 40427 [ 565.045193][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5804'. [ 565.606517][T18211] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 565.729040][T18267] loop1: detected capacity change from 0 to 4096 [ 565.747306][T18267] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 565.960854][T18211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 566.062147][T18267] ntfs3(loop1): ino=19, mi_enum_attr [ 566.389407][T18297] netlink: 'syz.0.5823': attribute type 4 has an invalid length. [ 567.368909][T18296] loop4: detected capacity change from 0 to 32768 [ 567.379803][T18296] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5825 (18296) [ 567.618527][T18296] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 567.618561][T18296] BTRFS info (device loop4): using sha256 checksum algorithm [ 567.831207][T18296] BTRFS info (device loop4): turning off barriers [ 567.831231][T18296] BTRFS info (device loop4): enabling free space tree [ 567.948169][T18341] loop1: detected capacity change from 0 to 512 [ 567.951657][T18341] EXT4-fs: Ignoring removed nobh option [ 568.017034][T18341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 568.026546][T18341] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.5841: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 568.026584][T18341] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 568.026989][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 568.027010][ C0] EXT4-fs (loop1): initial error at time 1782872707: ext4_xattr_inode_update_ref:1037: inode 11 [ 568.027041][ C0] EXT4-fs (loop1): last error at time 1782872707: ext4_xattr_inode_update_ref:1037: inode 11 [ 568.173619][T18341] EXT4-fs (loop1): Remounting filesystem read-only [ 568.173645][T18341] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.5841: ea_inode dec ref err=-117 [ 568.173819][T18341] EXT4-fs (loop1): 1 orphan inode deleted [ 568.201364][T18341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 568.225810][T18341] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.284827][ T5620] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 569.156457][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5854'. [ 569.324834][T18362] veth2: entered promiscuous mode [ 569.324856][T18362] veth2: entered allmulticast mode [ 569.889397][T18383] loop4: detected capacity change from 0 to 256 [ 569.891632][T18383] exfat: Deprecated parameter 'utf8' [ 569.891684][T18383] exfat: Deprecated parameter 'namecase' [ 569.891884][T18383] exfat: Deprecated parameter 'namecase' [ 569.891908][T18383] exfat: Deprecated parameter 'utf8' [ 570.015453][T18383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 570.015910][T18383] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 570.315435][T18394] usb usb7: usbfs: process 18394 (syz.1.5867) did not claim interface 0 before use [ 570.343527][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 570.343545][ T38] audit: type=1326 audit(1782872709.634:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.343590][ T38] audit: type=1326 audit(1782872709.634:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.364889][ T38] audit: type=1326 audit(1782872709.652:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.364939][ T38] audit: type=1326 audit(1782872709.652:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.366960][ T38] audit: type=1326 audit(1782872709.652:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.367006][ T38] audit: type=1326 audit(1782872709.652:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.375475][ T38] audit: type=1326 audit(1782872709.652:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.375522][ T38] audit: type=1326 audit(1782872709.661:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.375563][ T38] audit: type=1326 audit(1782872709.661:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.0.5866" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 570.610618][T18402] loop4: detected capacity change from 0 to 512 [ 570.712603][T18402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 570.787652][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.995734][T18419] loop4: detected capacity change from 0 to 64 [ 571.157390][ T5748] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 571.323075][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 571.331837][ T5748] usb 2-1: not running at top speed; connect to a high speed hub [ 571.342622][ T5748] usb 2-1: config 16 has an invalid interface number: 195 but max is 1 [ 571.342647][ T5748] usb 2-1: config 16 has an invalid interface number: 228 but max is 1 [ 571.342664][ T5748] usb 2-1: config 16 has an invalid interface descriptor of length 2, skipping [ 571.342681][ T5748] usb 2-1: config 16 has no interface number 0 [ 571.342696][ T5748] usb 2-1: config 16 has no interface number 1 [ 571.342749][ T5748] usb 2-1: config 16 interface 228 altsetting 13 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 571.342775][ T5748] usb 2-1: config 16 interface 228 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.342802][ T5748] usb 2-1: config 16 interface 195 has no altsetting 0 [ 571.342819][ T5748] usb 2-1: config 16 interface 228 has no altsetting 0 [ 571.345687][ T5748] usb 2-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=ce.6c [ 571.345715][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.345733][ T5748] usb 2-1: Product: syz [ 571.345746][ T5748] usb 2-1: Manufacturer: syz [ 571.345760][ T5748] usb 2-1: SerialNumber: syz [ 571.735394][ T5748] usb 2-1: USB disconnect, device number 52 [ 572.043956][T18456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 572.773362][T18482] netlink: 'syz.4.5909': attribute type 1 has an invalid length. [ 572.773385][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5909'. [ 573.542568][T18472] loop3: detected capacity change from 0 to 32768 [ 573.816077][T18515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.011908][T18524] loop0: detected capacity change from 0 to 1024 [ 574.142378][T18524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.394072][T18524] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5930: missing EA_INODE flag [ 574.611475][T18524] EXT4-fs (loop0): Remounting filesystem read-only [ 574.777031][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.649982][T18575] loop0: detected capacity change from 0 to 512 [ 575.738217][ T32] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 575.764202][T18578] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.829139][T18575] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 575.942296][ T32] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 575.942323][ T32] usb 5-1: config 220 has an invalid descriptor of length 153, skipping remainder of the config [ 575.942343][ T32] usb 5-1: config 220 has no interface number 2 [ 575.942417][ T32] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 575.942444][ T32] usb 5-1: config 220 interface 0 has no altsetting 0 [ 575.942463][ T32] usb 5-1: config 220 interface 76 has no altsetting 0 [ 575.942480][ T32] usb 5-1: config 220 interface 1 has no altsetting 0 [ 575.975732][ T32] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 575.975762][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.975782][ T32] usb 5-1: Product: syz [ 575.975797][ T32] usb 5-1: Manufacturer: syz [ 575.975812][ T32] usb 5-1: SerialNumber: syz [ 576.286244][ T32] usb 5-1: selecting invalid altsetting 0 [ 576.328896][T18598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.365236][ T32] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 576.365269][ T32] uvcvideo 5-1:220.0: No valid video chain found. [ 576.462809][ T32] usb 5-1: selecting invalid altsetting 0 [ 576.462833][ T32] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 576.492380][ T32] usb 5-1: USB disconnect, device number 66 [ 576.917552][ T5603] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 576.982038][ T60] Bluetooth: hci2: unexpected cc 0x0c2d length: 65 > 4 [ 576.982104][ T60] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 577.022423][T18620] netlink: 'syz.4.5976': attribute type 2 has an invalid length. [ 577.049716][T18586] loop1: detected capacity change from 0 to 32768 [ 577.056527][T18586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5960 (18586) [ 577.105003][ T5603] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 577.105032][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.105050][ T5603] usb 1-1: Product: syz [ 577.105064][ T5603] usb 1-1: Manufacturer: syz [ 577.105077][ T5603] usb 1-1: SerialNumber: syz [ 577.145344][ T5603] usb 1-1: config 0 descriptor?? [ 577.153662][ T5603] ch341 1-1:0.0: ch341-uart converter detected [ 577.279011][T18586] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 577.279044][T18586] BTRFS info (device loop1): using crc32c checksum algorithm [ 577.394549][ T5603] usb 1-1: failed to receive control message: -121 [ 577.394608][ T5603] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 577.577304][ T1381] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 577.603744][T18586] BTRFS warning (device loop1): couldn't read tree root [ 577.603774][T18586] BTRFS warning (device loop1): try to load backup roots slot 1 [ 577.606004][ T1425] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 577.607452][T18586] BTRFS warning (device loop1): couldn't read tree root [ 577.607474][T18586] BTRFS warning (device loop1): try to load backup roots slot 2 [ 577.608131][ T1425] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 577.608257][T18586] BTRFS warning (device loop1): couldn't read tree root [ 577.608277][T18586] BTRFS warning (device loop1): try to load backup roots slot 3 [ 577.679206][ T32] usb 1-1: USB disconnect, device number 71 [ 577.747388][T18586] BTRFS info (device loop1): checking UUID tree [ 577.754776][T18586] BTRFS info (device loop1): setting nodatasum [ 577.754799][T18586] BTRFS info (device loop1): enabling ssd optimizations [ 577.754816][T18586] BTRFS info (device loop1): turning on flush-on-commit [ 577.754833][T18586] BTRFS info (device loop1): turning on async discard [ 577.754849][T18586] BTRFS info (device loop1): enabling free space tree [ 577.754865][T18586] BTRFS info (device loop1): trying to use backup root at mount time [ 577.754883][T18586] BTRFS info (device loop1): max_inline set to 0 [ 577.859062][ T32] ch341 1-1:0.0: device disconnected [ 578.056309][T18656] loop4: detected capacity change from 0 to 128 [ 578.061894][T18656] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 578.062044][T18656] hpfs: filesystem error: improperly stopped [ 578.062059][T18656] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 578.062073][T18656] hpfs: You really don't want any checks? You are crazy... [ 578.062086][T18656] hpfs: Code page index out of array [ 578.062093][T18656] hpfs: code page support is disabled [ 578.064028][T18656] hpfs: hpfs_map_4sectors(): unaligned read [ 578.064127][T18656] hpfs: hpfs_map_4sectors(): unaligned read [ 578.064138][T18656] hpfs: filesystem error: unable to find root dir [ 578.692526][ T38] audit: type=1326 audit(1782872717.359:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.3.5994" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 578.692573][ T38] audit: type=1326 audit(1782872717.359:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.3.5994" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 578.695056][ T38] audit: type=1326 audit(1782872717.369:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.3.5994" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 578.695954][ T38] audit: type=1326 audit(1782872717.369:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.3.5994" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 578.700980][ T38] audit: type=1326 audit(1782872717.369:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.3.5994" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 578.848526][T18677] netlink: 'syz.0.5996': attribute type 10 has an invalid length. [ 578.848548][T18677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5996'. [ 578.921985][T18678] loop4: detected capacity change from 0 to 764 [ 579.258360][T18677] team0: Port device geneve1 added [ 579.545967][ T5748] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 579.572927][T18695] loop0: detected capacity change from 0 to 1024 [ 579.714063][ T5748] usb 4-1: Using ep0 maxpacket: 16 [ 579.715901][ T5748] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 579.715926][ T5748] usb 4-1: config 0 has no interface number 0 [ 579.715967][ T5748] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 579.715994][ T5748] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 579.718517][ T5748] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 579.718547][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 579.718567][ T5748] usb 4-1: Product: syz [ 579.718580][ T5748] usb 4-1: SerialNumber: syz [ 579.742532][ T5748] usb 4-1: config 0 descriptor?? [ 579.836006][ T5748] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 579.865365][ T5748] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input26 [ 580.024609][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 580.128461][ T37] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 580.262968][T18708] loop0: detected capacity change from 0 to 1024 [ 580.264103][T18708] EXT4-fs: Ignoring removed bh option [ 580.283575][ T11] usb 4-1: USB disconnect, device number 59 [ 580.326334][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 580.338009][ T37] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 580.338052][ T37] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 580.366040][T18708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.368931][ T37] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 580.368956][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.368974][ T37] usb 5-1: Product: syz [ 580.368985][ T37] usb 5-1: Manufacturer: syz [ 580.368998][ T37] usb 5-1: SerialNumber: syz [ 580.565928][ T11] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 580.879649][ T37] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 580.965261][ T37] usb 5-1: USB disconnect, device number 67 [ 581.146594][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.288137][T18722] loop3: detected capacity change from 0 to 128 [ 581.778666][T18734] loop4: detected capacity change from 0 to 1024 [ 581.787475][T18734] hfsplus: unable to find HFS+ superblock [ 582.318081][ T5616] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 582.838743][T18754] loop3: detected capacity change from 0 to 4096 [ 582.909269][T18759] loop4: detected capacity change from 0 to 256 [ 583.161471][T18754] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 583.161828][T18754] ntfs3(loop3): Failed to load $Extend (-22). [ 583.161848][T18754] ntfs3(loop3): Failed to initialize $Extend. [ 583.838498][T18785] sg_write: data in/out 200668/136 bytes for SCSI command 0x0-- guessing data in; [ 583.838498][T18785] program syz.4.6048 not setting count and/or reply_len properly [ 584.113770][T18790] erspan1: entered promiscuous mode [ 584.113797][T18790] erspan1: entered allmulticast mode [ 585.197019][T18840] loop0: detected capacity change from 0 to 512 [ 585.198293][T18840] EXT4-fs: Ignoring removed orlov option [ 585.198325][T18840] ext4: Unknown parameter 'uid' [ 586.171047][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6094'. [ 586.186947][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6095'. [ 586.520626][T18898] loop1: detected capacity change from 0 to 256 [ 586.527800][T18898] exfat: Deprecated parameter 'namecase' [ 586.561570][T18898] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 587.473175][T18938] ubi8: attaching mtd0 [ 587.473196][T18938] ubi8 error: ubi_attach_mtd_dev: bad VID header (56) or data offsets (120) [ 587.548236][T18943] netlink: 'syz.4.6126': attribute type 4 has an invalid length. [ 587.548257][T18943] netlink: 'syz.4.6126': attribute type 5 has an invalid length. [ 587.548269][T18943] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6126'. [ 587.756324][T18952] loop3: detected capacity change from 0 to 256 [ 587.765638][T18952] exfat: Deprecated parameter 'utf8' [ 587.765732][T18952] exfat: Deprecated parameter 'namecase' [ 587.765792][T18952] exfat: Deprecated parameter 'namecase' [ 587.830507][T18952] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 587.876879][T18959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6135'. [ 587.889993][T18952] exfat: Deprecated parameter 'utf8' [ 587.890083][T18952] exfat: Deprecated parameter 'namecase' [ 587.890139][T18952] exfat: Deprecated parameter 'namecase' [ 588.192812][T18973] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 588.244537][T18975] loop0: detected capacity change from 0 to 128 [ 588.443581][T18987] loop0: detected capacity change from 0 to 512 [ 588.518254][T18987] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 588.518321][T18987] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 588.525047][T18987] EXT4-fs (loop0): 1 truncate cleaned up [ 588.531647][T18987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.569257][ T11] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 588.618768][T18987] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 588.676553][T18998] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6151'. [ 588.676579][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6151'. [ 588.676598][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6151'. [ 588.676631][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6151'. [ 588.748206][ T11] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 588.748236][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.748256][ T11] usb 5-1: Product: syz [ 588.748270][ T11] usb 5-1: Manufacturer: syz [ 588.748285][ T11] usb 5-1: SerialNumber: syz [ 588.791068][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.044098][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6154'. [ 589.044122][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6154'. [ 589.080453][ T11] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 589.088893][ T11] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 589.381243][ T11] usb 5-1: USB disconnect, device number 68 [ 589.595801][ T6394] udevd[6394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.085853][T19029] comedi comedi0: Minor 4 could not be opened [ 591.261854][T19066] loop3: detected capacity change from 0 to 64 [ 591.432117][T19043] loop0: detected capacity change from 0 to 32768 [ 591.448000][T19043] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6172 (19043) [ 591.461828][T19043] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 591.461859][T19043] BTRFS info (device loop0): using sha256 checksum algorithm [ 591.754029][T19043] BTRFS info (device loop0): turning off barriers [ 591.754054][T19043] BTRFS info (device loop0): enabling free space tree [ 591.894852][ T5617] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 592.336052][T19105] __nla_validate_parse: 2 callbacks suppressed [ 592.336148][T19105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6196'. [ 593.526643][T19147] tmpfs: User quota block hardlimit too large. [ 593.640862][T19145] loop1: detected capacity change from 0 to 2048 [ 593.671473][T19145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.786478][T19157] netlink: 384 bytes leftover after parsing attributes in process `syz.3.6221'. [ 593.929512][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6224'. [ 593.929541][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6224'. [ 594.228571][T19175] openvswitch: netlink: IPv6 tunnel dst address is zero [ 594.249157][T19169] loop4: detected capacity change from 0 to 4096 [ 594.295007][T19169] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 594.465367][T19169] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 594.498627][T19169] ntfs3(loop4): ino=5, "/" indx_read_ra [ 594.795086][ T38] audit: type=1326 audit(1782872732.216:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795142][ T38] audit: type=1326 audit(1782872732.216:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795183][ T38] audit: type=1326 audit(1782872732.216:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795223][ T38] audit: type=1326 audit(1782872732.216:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795266][ T38] audit: type=1326 audit(1782872732.216:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795309][ T38] audit: type=1326 audit(1782872732.216:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795350][ T38] audit: type=1326 audit(1782872732.216:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795389][ T38] audit: type=1326 audit(1782872732.216:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795426][ T38] audit: type=1326 audit(1782872732.216:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 594.795456][ T38] audit: type=1326 audit(1782872732.216:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.0.6240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ff00000 [ 595.390249][T19203] veth0_to_bond: entered allmulticast mode [ 595.572820][T19218] loop0: detected capacity change from 0 to 256 [ 595.947826][T19233] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.6254'. [ 595.947868][T19233] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 597.297804][T19245] loop0: detected capacity change from 0 to 4096 [ 597.305979][T19245] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 597.412100][T19273] netlink: 'syz.1.6278': attribute type 15 has an invalid length. [ 597.412122][T19273] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6278'. [ 597.593298][T19245] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 597.602120][T19245] ntfs3(loop0): Inode r=b is not in use! [ 597.602217][T19245] ntfs3(loop0): Failed to load $Extend (-116). [ 597.602235][T19245] ntfs3(loop0): Failed to initialize $Extend. [ 598.367859][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.367963][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.217955][T19376] netlink: 'syz.4.6326': attribute type 9 has an invalid length. [ 601.073256][T19391] loop3: detected capacity change from 0 to 4096 [ 601.098330][T19391] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.098425][T19391] EXT4-fs: inline encryption not supported [ 601.163287][T19391] EXT4-fs (loop3): Test dummy encryption mode enabled [ 601.191581][T19396] loop0: detected capacity change from 0 to 4096 [ 601.208770][T19396] ntfs3(loop0): Primary boot: invalid bytes per MFT record 20480 (5). [ 601.379207][T19396] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 601.548556][T19413] loop1: detected capacity change from 0 to 1024 [ 601.635984][T19391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.260026][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.912079][ T5724] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 602.980475][T19461] loop0: detected capacity change from 0 to 256 [ 603.073239][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 603.075163][ T5724] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 603.075189][ T5724] usb 2-1: config 0 has no interface number 0 [ 603.075234][ T5724] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 603.075256][ T5724] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.075276][ T5724] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 603.078236][ T5724] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 603.078263][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.078282][ T5724] usb 2-1: Product: syz [ 603.078298][ T5724] usb 2-1: Manufacturer: syz [ 603.078312][ T5724] usb 2-1: SerialNumber: syz [ 603.192561][ T5724] usb 2-1: config 0 descriptor?? [ 603.193513][T19445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 603.471194][ T5724] usb 2-1: USB disconnect, device number 53 [ 603.562513][T19476] binfmt_misc: register: failed to install interpreter file ./file0 [ 603.744796][ T38] kauditd_printk_skb: 21 callbacks suppressed [ 603.744814][ T38] audit: type=1326 audit(1782872740.488:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.0.6378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 603.750605][ T38] audit: type=1326 audit(1782872740.497:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.0.6378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 603.752544][ T38] audit: type=1326 audit(1782872740.497:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.0.6378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 603.752891][ T38] audit: type=1326 audit(1782872740.497:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.0.6378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 603.753202][ T38] audit: type=1326 audit(1782872740.497:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.0.6378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0f1fde59 code=0x7ffc0000 [ 603.772951][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6377'. [ 604.278881][T19499] loop4: detected capacity change from 0 to 1764 [ 604.281343][T19503] loop0: detected capacity change from 0 to 128 [ 604.352441][T19499] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 604.703254][T19513] loop3: detected capacity change from 0 to 1024 [ 604.709238][T19513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.709289][T19513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.710020][T19513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 604.750817][T19513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.803611][T19515] ip6tnl1: entered promiscuous mode [ 604.872427][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.903634][ T5603] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 604.977272][T19520] ieee802154 phy0 wpan0: encryption failed: -22 [ 605.068343][ T5603] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 605.068377][ T5603] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 605.070804][ T5603] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 605.070831][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.070849][ T5603] usb 2-1: Product: syz [ 605.070863][ T5603] usb 2-1: Manufacturer: syz [ 605.070876][ T5603] usb 2-1: SerialNumber: syz [ 605.137392][ T5603] usb 2-1: config 0 descriptor?? [ 605.145313][T19511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 605.145498][T19511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 605.182045][T19526] loop4: detected capacity change from 0 to 256 [ 605.287773][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6395'. [ 605.287803][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6395'. [ 605.371333][ T5603] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71 [ 605.411713][ T5603] usb 2-1: USB disconnect, device number 54 [ 605.654042][T19538] loop0: detected capacity change from 0 to 256 [ 606.558731][T19567] loop0: detected capacity change from 0 to 256 [ 606.559875][T19567] exfat: Deprecated parameter 'namecase' [ 606.647074][T19567] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 606.885805][ T5603] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 607.064148][ T5603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 607.067917][ T5603] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 607.067945][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.067965][ T5603] usb 2-1: Product: syz [ 607.067979][ T5603] usb 2-1: Manufacturer: syz [ 607.067993][ T5603] usb 2-1: SerialNumber: syz [ 607.149507][ T5603] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 607.498603][T19603] netlink: 'syz.0.6435': attribute type 1 has an invalid length. [ 607.653439][ T5603] usb 2-1: USB disconnect, device number 55 [ 607.840164][T19612] loop0: detected capacity change from 0 to 64 [ 607.998278][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.170084][T19613] loop4: detected capacity change from 0 to 4096 [ 608.190347][T19613] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 608.400783][T19613] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 608.413215][T19613] ntfs3(loop4): Inode r=b is not in use! [ 608.413324][T19613] ntfs3(loop4): Failed to load $Extend (-116). [ 608.413341][T19613] ntfs3(loop4): Failed to initialize $Extend. [ 608.866135][T19633] loop3: detected capacity change from 0 to 256 [ 609.118536][T19633] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2dae3d2b, utbl_chksum : 0xe619d30d) [ 609.160172][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6453'. [ 609.219870][T19621] loop1: detected capacity change from 0 to 32768 [ 609.544116][ T5603] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 609.690605][T19651] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 609.702061][ T5603] usb 1-1: Using ep0 maxpacket: 8 [ 609.704451][ T5603] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.708592][ T5603] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 609.708618][ T5603] usb 1-1: config 0 has no interface number 0 [ 609.708663][ T5603] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 609.708688][ T5603] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 609.708713][ T5603] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 609.708739][ T5603] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 609.708764][ T5603] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 609.708782][ T5603] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 609.708804][ T5603] usb 1-1: config 0 interface 122 has no altsetting 0 [ 609.810696][ T5603] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 609.810725][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.810744][ T5603] usb 1-1: Product: syz [ 609.810758][ T5603] usb 1-1: Manufacturer: syz [ 609.810772][ T5603] usb 1-1: SerialNumber: syz [ 609.851210][ T5603] usb 1-1: config 0 descriptor?? [ 609.854073][T19643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 609.854315][T19643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 610.299259][ T5603] pl2303 1-1:0.122: pl2303 converter detected [ 610.304854][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 610.306857][ T5603] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 610.307285][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 610.307691][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 610.308085][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 610.356512][ T5603] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 610.356945][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 610.357358][ T5603] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 610.357771][ T5603] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 610.358181][ T5603] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 610.401040][ T5603] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 610.420197][ T5603] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 610.469829][ T5603] usb 1-1: USB disconnect, device number 72 [ 610.497740][ T5603] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 610.498706][ T5603] pl2303 1-1:0.122: device disconnected [ 610.557953][ T38] audit: type=1326 audit(1782872746.784:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.3.6468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 610.558123][ T38] audit: type=1326 audit(1782872746.784:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.3.6468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 610.584424][ T38] audit: type=1326 audit(1782872746.802:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.3.6468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 610.655068][ T38] audit: type=1326 audit(1782872746.867:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.3.6468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 610.655655][ T38] audit: type=1326 audit(1782872746.876:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19663 comm="syz.3.6468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda02d6de59 code=0x7ffc0000 [ 610.918225][T19677] loop1: detected capacity change from 0 to 128 [ 611.246998][T19688] loop4: detected capacity change from 0 to 256 [ 611.251520][T19688] exfat: Deprecated parameter 'utf8' [ 611.251644][T19688] exfat: Deprecated parameter 'namecase' [ 611.440048][T19688] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 612.167741][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'. [ 612.360132][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6495'. [ 614.587420][T19821] overlayfs: conflicting options: nfs_export=on,index=off [ 614.863265][ T38] audit: type=1400 audit(1782872750.754:152): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=19828 comm="syz.0.6548" [ 615.127446][T19835] loop0: detected capacity change from 0 to 256 [ 615.142280][T19835] exfat: Deprecated parameter 'utf8' [ 615.142417][T19835] exfat: Deprecated parameter 'namecase' [ 615.228468][T19835] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 615.839465][T19853] netlink: 'syz.4.6560': attribute type 10 has an invalid length. [ 615.841612][T19853] veth0: entered allmulticast mode [ 616.030456][T19853] team0: Port device veth0 added [ 616.212036][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6565'. [ 616.377819][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6570'. [ 618.617195][T19933] loop1: detected capacity change from 0 to 32768 [ 618.807741][ T130] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002f: 0000 [#1] SMP KASAN PTI [ 618.807876][ T130] KASAN: null-ptr-deref in range [0x0000000000000178-0x000000000000017f] [ 618.807897][ T130] CPU: 0 UID: 0 PID: 130 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 618.807919][ T130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 618.807931][ T130] RIP: 0010:txEnd+0x1c0/0x530 [ 618.807957][ T130] Code: 43 0f b6 04 2c 84 c0 0f 85 d8 02 00 00 66 41 89 2e 0f b7 44 24 04 89 05 8e 1f 3b 16 4c 8d b3 7c 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 cb 02 00 00 45 8b 3e 41 8d 77 ff 41 89 [ 618.807976][ T130] RSP: 0018:ffffc900038c7cc0 EFLAGS: 00010203 [ 618.807995][ T130] RAX: 000000000000002f RBX: 0000000000000000 RCX: ffff88801ef70000 [ 618.808008][ T130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.808019][ T130] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 618.808031][ T130] R10: dffffc0000000000 R11: fffffbfff1f18e5f R12: 1ffff92000623269 [ 618.808045][ T130] R13: dffffc0000000000 R14: 000000000000017c R15: 0000000000000000 [ 618.808058][ T130] FS: 0000000000000000(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 618.808073][ T130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.808086][ T130] CR2: 00007ffbc16a56b8 CR3: 000000004031e000 CR4: 00000000003526f0 [ 618.808104][ T130] Call Trace: [ 618.808112][ T130] [ 618.808122][ T130] jfs_lazycommit+0x561/0xa20 [ 618.808150][ T130] ? __pfx_jfs_lazycommit+0x10/0x10 [ 618.808173][ T130] ? __pfx_default_wake_function+0x10/0x10 [ 618.808193][ T130] ? __kthread_parkme+0x71/0x1f0 [ 618.808216][ T130] ? __kthread_parkme+0x196/0x1f0 [ 618.808240][ T130] kthread+0x388/0x470 [ 618.808265][ T130] ? __pfx_jfs_lazycommit+0x10/0x10 [ 618.808286][ T130] ? __pfx_kthread+0x10/0x10 [ 618.808319][ T130] ret_from_fork+0x514/0xb70 [ 618.808347][ T130] ? __pfx_ret_from_fork+0x10/0x10 [ 618.808373][ T130] ? __switch_to+0xc89/0x1420 [ 618.808396][ T130] ? __pfx_kthread+0x10/0x10 [ 618.808421][ T130] ret_from_fork_asm+0x1a/0x30 [ 618.808455][ T130] [ 618.808467][ T130] Modules linked in: [ 618.808485][ T130] ---[ end trace 0000000000000000 ]--- [ 618.808495][ T130] RIP: 0010:txEnd+0x1c0/0x530 [ 618.808514][ T130] Code: 43 0f b6 04 2c 84 c0 0f 85 d8 02 00 00 66 41 89 2e 0f b7 44 24 04 89 05 8e 1f 3b 16 4c 8d b3 7c 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 cb 02 00 00 45 8b 3e 41 8d 77 ff 41 89 [ 618.808528][ T130] RSP: 0018:ffffc900038c7cc0 EFLAGS: 00010203 [ 618.808543][ T130] RAX: 000000000000002f RBX: 0000000000000000 RCX: ffff88801ef70000 [ 618.808555][ T130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.808567][ T130] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 618.808578][ T130] R10: dffffc0000000000 R11: fffffbfff1f18e5f R12: 1ffff92000623269 [ 618.808592][ T130] R13: dffffc0000000000 R14: 000000000000017c R15: 0000000000000000 [ 618.808604][ T130] FS: 0000000000000000(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 618.808619][ T130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.808631][ T130] CR2: 00007ffbc16a56b8 CR3: 000000004031e000 CR4: 00000000003526f0 [ 618.808653][ T130] Kernel panic - not syncing: Fatal exception [ 618.808916][ T130] Kernel Offset: disabled