last executing test programs: 7m32.024799255s ago: executing program 4 (id=3809): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffff7}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 7m31.717152737s ago: executing program 4 (id=3814): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x7, @local, 0x1}, 0x18, &(0x7f0000000f40)=[{&(0x7f00000033c0)='\'', 0x1}], 0x1}}], 0x1, 0x0) 7m31.511222869s ago: executing program 4 (id=3816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004060108000000000000000006000005050001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 7m31.170413016s ago: executing program 4 (id=3823): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c}) 7m30.399202557s ago: executing program 4 (id=3835): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040)=0x2, 0x4) 7m29.180112362s ago: executing program 4 (id=3853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002a000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m28.763201699s ago: executing program 32 (id=3853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002a000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m19.534426319s ago: executing program 2 (id=3965): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) 7m19.390661509s ago: executing program 2 (id=3967): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x20000000}}) 7m19.084648152s ago: executing program 2 (id=3969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x92bef000) 7m18.786033427s ago: executing program 2 (id=3972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c}) 7m18.101436242s ago: executing program 2 (id=3975): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x10000000000004) 7m16.539715361s ago: executing program 2 (id=3985): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x61b, &(0x7f0000000980)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 7m15.892360632s ago: executing program 33 (id=3985): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x61b, &(0x7f0000000980)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 5m56.964173651s ago: executing program 3 (id=4924): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x2004c0c1) 5m56.59472359s ago: executing program 3 (id=4929): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x7, 'Cr\a\x00\x00\x00\x00'}}) 5m56.176145019s ago: executing program 3 (id=4935): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) 5m55.028048635s ago: executing program 3 (id=4952): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m54.369183389s ago: executing program 3 (id=4962): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004ac0)={0x2020}, 0x2020) 5m53.508117238s ago: executing program 3 (id=4971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}]}, 0x1, 0x510, &(0x7f0000000540)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x20fffffffc) 5m52.791603884s ago: executing program 34 (id=4971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}]}, 0x1, 0x510, &(0x7f0000000540)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x20fffffffc) 4m18.430290784s ago: executing program 8 (id=6143): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) 4m18.16720511s ago: executing program 8 (id=6147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198008"], 0x44}}, 0x0) 4m17.918125646s ago: executing program 8 (id=6150): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x40, 0x6, 0x303, 0xfffd, 0xffffffffffffff54, 0x0, 0x0}) 4m17.554940227s ago: executing program 8 (id=6155): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m17.045173522s ago: executing program 8 (id=6160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m16.499757132s ago: executing program 8 (id=6164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xffffffffffffffa4}, 0x50000, 0x0, 0x2, 0xb, 0x9}, 0x20) 4m15.830806936s ago: executing program 35 (id=6164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xffffffffffffffa4}, 0x50000, 0x0, 0x2, 0xb, 0x9}, 0x20) 3.190724704s ago: executing program 5 (id=9431): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x1f00, 0x0, 0x0}) 2.885029097s ago: executing program 0 (id=9437): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x8, 0x4) 2.753209718s ago: executing program 5 (id=9440): syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120009bf0000000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.520098969s ago: executing program 9 (id=9443): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x22100) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 2.474755447s ago: executing program 0 (id=9444): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.178387858s ago: executing program 9 (id=9448): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x5}, 0x200}, 0x1c) 2.076030126s ago: executing program 0 (id=9449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000600)="b9ff03076844268cb89e14f086dd1b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.884637228s ago: executing program 9 (id=9451): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x76, 0x682, &(0x7f0000000640)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.824065596s ago: executing program 6 (id=9452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1.82378809s ago: executing program 7 (id=9453): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.758325652s ago: executing program 0 (id=9454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x60, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.626323485s ago: executing program 1 (id=9455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x0) 1.543084611s ago: executing program 6 (id=9456): capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) setresgid(0xee00, 0xee01, 0x0) 1.530478175s ago: executing program 9 (id=9457): r0 = socket(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="8639c74d1b79334265bb32c86463f0040000000000000056585aa950b1a214341400000000000000290000003b000000e0955702", 0x34) 1.465021694s ago: executing program 0 (id=9458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x47}, 0x4e20, 0x3, 'none\x00', 0x10, 0x2, 0x49}, 0x2c) 1.450232199s ago: executing program 7 (id=9459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x11}}) 1.272198657s ago: executing program 6 (id=9460): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) 1.208099675s ago: executing program 1 (id=9461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1.194283261s ago: executing program 9 (id=9462): r0 = io_uring_setup(0x25e, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x40000, 0x8e}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x1b, 0x0, 0x0) 1.179365624s ago: executing program 7 (id=9463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) 1.131882378s ago: executing program 0 (id=9464): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x4449, &(0x7f00000088c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.054685485s ago: executing program 5 (id=9465): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 958.791721ms ago: executing program 1 (id=9466): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64305c0c56dfae1fef0de5421326"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 928.902083ms ago: executing program 6 (id=9467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa20de9dcb0343a43}}]}]}, 0x58}}, 0x0) 928.224336ms ago: executing program 9 (id=9468): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x472, &(0x7f0000000900)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42140, 0x0) 841.404085ms ago: executing program 7 (id=9469): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x1e, "4372071e845c1497c855383000000002000000372a72ee4d37968b000000"}}) 714.221914ms ago: executing program 5 (id=9470): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 652.557348ms ago: executing program 1 (id=9471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x40) 534.828462ms ago: executing program 1 (id=9472): r0 = syz_open_dev$media(&(0x7f0000000240), 0x0, 0xc0080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 507.026723ms ago: executing program 6 (id=9473): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x48) 495.10287ms ago: executing program 7 (id=9474): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3f0443aee546504c59e34086d986253527282fcd149ebff4f000632f942c1b44a336c2043a676ed5d4178cc617f18efde8ce91", 0x33}, {&(0x7f00000001c0)="4a61635c6fafacc206e76e35a9048a905bac4f1b26b251e9954e3d88b36e66d5de760e9b0212ed7383f14139194f8188da863e54e077bab7740bd1026c028d8034776176f53776807a3960a2457173edf5b79df71358e4633137fbdcc87927", 0x5f}, {&(0x7f0000000240)="59a8dbaf01c939a0e0c64aab7792358755580625de9011b0083ae3fb4d72db756345375b1ea9be05d4fdcfa95d56279876acd45e1c85037a4f0c8c3f8946808da8d2e501f9ff", 0x46}, {&(0x7f0000000d40)="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", 0x729}], 0x4) 476.297935ms ago: executing program 1 (id=9475): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 282.964756ms ago: executing program 5 (id=9476): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 204.282566ms ago: executing program 6 (id=9477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x844) 4.26459ms ago: executing program 7 (id=9478): r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x100, 0x2, 0x3013, 0x0, 0x8, 0x3, 0x0, 0x3}}) 0s ago: executing program 5 (id=9479): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x25dfdbfb, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0xffae}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) kernel console output (not intermixed with test programs): .482926][T28816] XFS (loop9): Ending clean mount [ 867.534969][T28900] FAT-fs (loop0): Directory bread(block 67) failed [ 867.573354][T28900] FAT-fs (loop0): Directory bread(block 68) failed [ 867.608314][T28932] loop5: detected capacity change from 0 to 64 [ 867.621138][T28900] FAT-fs (loop0): Directory bread(block 69) failed [ 867.627803][T28900] FAT-fs (loop0): Directory bread(block 70) failed [ 867.636372][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.733679][T28900] FAT-fs (loop0): Directory bread(block 71) failed [ 867.815704][T22082] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 867.826434][T28900] FAT-fs (loop0): Directory bread(block 72) failed [ 867.856093][T28900] FAT-fs (loop0): Directory bread(block 73) failed [ 868.185392][T28958] loop1: detected capacity change from 0 to 512 [ 868.376625][T28958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 868.407401][T28958] System zones: 1-12 [ 868.426776][T28958] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7744: invalid indirect mapped block 8 (level 2) [ 868.583751][T28958] EXT4-fs (loop1): Remounting filesystem read-only [ 868.641396][T28958] EXT4-fs (loop1): 1 truncate cleaned up [ 868.653019][T28958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.986957][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.051428][T12662] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 869.200834][T29014] binfmt_misc: register: failed to install interpreter file ./file0 [ 869.243087][T12662] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 869.268565][T12662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.323008][T12662] usb 10-1: config 0 descriptor?? [ 869.529189][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.571396][T12662] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 869.772971][T12662] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 869.807336][T12662] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 869.858622][T12662] asix 10-1:0.0: probe with driver asix failed with error -71 [ 869.869994][T29049] loop6: detected capacity change from 0 to 256 [ 869.907263][T29049] exfat: Deprecated parameter 'utf8' [ 869.949001][T12662] usb 10-1: USB disconnect, device number 7 [ 869.979714][T29049] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 870.039631][T29056] netlink: 'syz.0.7772': attribute type 1 has an invalid length. [ 870.079454][T29057] ip6gretap2: entered promiscuous mode [ 870.126748][T29057] ip6gretap2: entered allmulticast mode [ 870.611587][T29086] netlink: 392 bytes leftover after parsing attributes in process `syz.0.7779'. [ 870.660461][T29090] loop6: detected capacity change from 0 to 256 [ 870.749591][T29012] loop1: detected capacity change from 0 to 40427 [ 870.812021][T29012] F2FS-fs (loop1): build fault injection type: 0x7 [ 870.897948][T29012] F2FS-fs (loop1): invalid crc value [ 870.905758][T29090] FAT-fs (loop6): Directory bread(block 64) failed [ 870.941538][T29090] FAT-fs (loop6): Directory bread(block 65) failed [ 870.951728][T29097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 870.978352][T29090] FAT-fs (loop6): Directory bread(block 66) failed [ 871.016367][T29090] FAT-fs (loop6): Directory bread(block 67) failed [ 871.054188][T29090] FAT-fs (loop6): Directory bread(block 68) failed [ 871.082021][T29090] FAT-fs (loop6): Directory bread(block 69) failed [ 871.117869][T29148] netlink: 'syz.5.7788': attribute type 63 has an invalid length. [ 871.131713][T29090] FAT-fs (loop6): Directory bread(block 70) failed [ 871.164430][T29090] FAT-fs (loop6): Directory bread(block 71) failed [ 871.211056][T29090] FAT-fs (loop6): Directory bread(block 72) failed [ 871.226387][T29090] FAT-fs (loop6): Directory bread(block 73) failed [ 871.414320][T29012] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 871.485848][T29012] F2FS-fs (loop1): Start checkpoint disabled! [ 871.577994][T29012] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 871.841721][T16708] kworker/u8:13: attempt to access beyond end of device [ 871.841721][T16708] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 871.918054][T16708] CPU: 0 UID: 0 PID: 16708 Comm: kworker/u8:13 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 871.918091][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 871.918109][T16708] Workqueue: writeback wb_workfn (flush-7:1) [ 871.918145][T16708] Call Trace: [ 871.918156][T16708] [ 871.918167][T16708] dump_stack_lvl+0x189/0x250 [ 871.918206][T16708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.918237][T16708] ? __pfx_queue_work_on+0x10/0x10 [ 871.918262][T16708] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 871.918295][T16708] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 871.918344][T16708] f2fs_handle_critical_error+0x37c/0x540 [ 871.918390][T16708] f2fs_write_end_io+0x886/0xb60 [ 871.918441][T16708] __submit_merged_bio+0x27a/0x6a0 [ 871.918486][T16708] __submit_merged_write_cond+0x255/0x530 [ 871.918532][T16708] f2fs_write_data_pages+0x261d/0x3000 [ 871.918619][T16708] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 871.918655][T16708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 871.918706][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.918735][T16708] ? rcu_is_watching+0x15/0xb0 [ 871.918811][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.918898][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.918925][T16708] ? unwind_next_frame+0x19ae/0x2390 [ 871.918959][T16708] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 871.918999][T16708] do_writepages+0x32e/0x550 [ 871.919041][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919068][T16708] ? reacquire_held_locks+0x127/0x1d0 [ 871.919095][T16708] ? writeback_sb_inodes+0x384/0x1010 [ 871.919140][T16708] __writeback_single_inode+0x145/0xff0 [ 871.919173][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919200][T16708] ? do_raw_spin_unlock+0x122/0x240 [ 871.919238][T16708] writeback_sb_inodes+0x6c7/0x1010 [ 871.919310][T16708] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 871.919403][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919430][T16708] ? rcu_is_watching+0x15/0xb0 [ 871.919455][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919496][T16708] wb_writeback+0x43b/0xaf0 [ 871.919541][T16708] ? queue_io+0x3c1/0x590 [ 871.919578][T16708] ? __pfx_wb_writeback+0x10/0x10 [ 871.919623][T16708] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.919663][T16708] wb_workfn+0x409/0xef0 [ 871.919719][T16708] ? __pfx_wb_workfn+0x10/0x10 [ 871.919752][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919780][T16708] ? __lock_acquire+0xab9/0xd20 [ 871.919833][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919865][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.919899][T16708] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.919928][T16708] ? process_scheduled_works+0x9ef/0x17b0 [ 871.919952][T16708] ? process_scheduled_works+0x9ef/0x17b0 [ 871.919980][T16708] process_scheduled_works+0xae1/0x17b0 [ 871.920050][T16708] ? __pfx_process_scheduled_works+0x10/0x10 [ 871.920087][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.920127][T16708] worker_thread+0x8a0/0xda0 [ 871.920194][T16708] kthread+0x711/0x8a0 [ 871.920230][T16708] ? __pfx_worker_thread+0x10/0x10 [ 871.920256][T16708] ? __pfx_kthread+0x10/0x10 [ 871.920283][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.920317][T16708] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.920346][T16708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 871.920374][T16708] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.920406][T16708] ? __pfx_kthread+0x10/0x10 [ 871.920439][T16708] ret_from_fork+0x3fc/0x770 [ 871.920471][T16708] ? __pfx_ret_from_fork+0x10/0x10 [ 871.920506][T16708] ? __switch_to_asm+0x39/0x70 [ 871.920538][T16708] ? __switch_to_asm+0x33/0x70 [ 871.920569][T16708] ? __pfx_kthread+0x10/0x10 [ 871.920603][T16708] ret_from_fork_asm+0x1a/0x30 [ 871.920661][T16708] [ 871.920672][T16708] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 872.200741][T29191] netlink: 'syz.9.7803': attribute type 21 has an invalid length. [ 872.200839][T29191] netlink: 156 bytes leftover after parsing attributes in process `syz.9.7803'. [ 872.653297][T29213] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7809'. [ 872.733251][T29213] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 873.222099][T22147] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 873.243771][T29254] loop9: detected capacity change from 0 to 256 [ 873.356816][T29257] loop7: detected capacity change from 0 to 1024 [ 873.423172][T22147] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 873.458875][T22147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.500568][T22147] usb 6-1: Product: syz [ 873.526598][T22147] usb 6-1: Manufacturer: syz [ 873.531215][T22147] usb 6-1: SerialNumber: syz [ 873.601415][T22147] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 873.619509][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 873.671905][ T6077] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 873.906758][T29287] loop7: detected capacity change from 0 to 256 [ 873.997500][T29287] exfat: Deprecated parameter 'utf8' [ 874.116761][ T10] usb 6-1: USB disconnect, device number 106 [ 874.131760][T29287] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 874.407800][T29315] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7835'. [ 874.444546][T29315] netlink: 'syz.9.7835': attribute type 8 has an invalid length. [ 874.482019][T29315] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 874.740109][ T6077] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 874.801187][ T6077] ath9k_htc: Failed to initialize the device [ 874.810886][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 874.904687][T29347] /dev/nullb0: Can't open blockdev [ 875.107903][T29361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.432169][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7857'. [ 875.802666][T29405] netlink: 'syz.1.7864': attribute type 30 has an invalid length. [ 875.965521][T29397] loop0: detected capacity change from 0 to 4096 [ 876.054938][T29397] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 876.170674][T29397] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 876.350519][T29422] loop7: detected capacity change from 0 to 4096 [ 876.501970][T29440] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 876.527743][T29437] loop9: detected capacity change from 0 to 1024 [ 876.625016][T29437] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 876.789346][T29449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 877.412233][ T6077] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 877.601603][ T6077] usb 2-1: Using ep0 maxpacket: 16 [ 877.624007][ T6077] usb 2-1: config index 0 descriptor too short (expected 65038, got 27) [ 877.661243][ T6077] usb 2-1: config 0 has too many interfaces: 150, using maximum allowed: 32 [ 877.706141][ T6077] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 877.742457][ T6077] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 150 [ 877.777586][ T6077] usb 2-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 877.818825][ T6077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.871831][ T6077] usb 2-1: config 0 descriptor?? [ 877.892319][T29519] MPI: mpi too large (107144 bits) [ 878.082570][T29533] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7902'. [ 878.121577][ T6077] usb 2-1: USB disconnect, device number 115 [ 878.248997][T29547] netlink: 'syz.9.7905': attribute type 1 has an invalid length. [ 878.309029][T29547] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7905'. [ 878.361711][T29547] nbd: illegal input index 1048576 [ 878.374370][T14796] Bluetooth: hci1: Malformed HCI Event [ 878.663060][T29569] netlink: 'syz.6.7912': attribute type 11 has an invalid length. [ 878.679578][T29569] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7912'. [ 878.871868][T29587] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.895845][T29572] netlink: 'syz.9.7915': attribute type 1 has an invalid length. [ 878.940931][T29572] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7915'. [ 879.929695][T29645] loop6: detected capacity change from 0 to 512 [ 880.084391][T29645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.137665][T29645] ext4 filesystem being mounted at /634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 880.187548][T29665] loop1: detected capacity change from 0 to 1024 [ 880.303768][T29665] syz.1.7939: attempt to access beyond end of device [ 880.303768][T29665] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 880.424188][T29665] Buffer I/O error on dev loop1, logical block 458752, async page read [ 880.495960][T29665] syz.1.7939: attempt to access beyond end of device [ 880.495960][T29665] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 880.539640][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.557262][T29676] bridge_slave_0: left allmulticast mode [ 880.560493][T29665] Buffer I/O error on dev loop1, logical block 458752, async page read [ 880.582971][T29676] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.316482][T29724] binfmt_misc: register: failed to install interpreter file ./file0 [ 881.587700][T29741] netlink: 'syz.1.7960': attribute type 21 has an invalid length. [ 881.634010][T29744] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 881.792046][T29753] netlink: 'syz.6.7964': attribute type 32 has an invalid length. [ 881.930619][T29759] netlink: 648 bytes leftover after parsing attributes in process `syz.1.7966'. [ 882.162821][T29776] IPv6: Can't replace route, no match found [ 882.271148][ T30] audit: type=1326 audit(1755156225.420:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29779 comm="syz.9.7972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff310f8ebe9 code=0x0 [ 883.559223][T29768] loop5: detected capacity change from 0 to 32768 [ 883.643909][T29794] loop7: detected capacity change from 0 to 32768 [ 883.669312][T29794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7975 (29794) [ 883.772985][T29768] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 883.790653][T29794] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 883.870117][T29794] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 883.879627][T29794] BTRFS info (device loop7): using free-space-tree [ 884.213813][T29768] XFS (loop5): Ending clean mount [ 884.269787][T29768] XFS (loop5): Quotacheck needed: Please wait. [ 884.354731][T29907] loop6: detected capacity change from 0 to 16 [ 884.367187][T29907] erofs (device loop6): mounted with root inode @ nid 36. [ 884.394140][T29891] loop9: detected capacity change from 0 to 4096 [ 884.423135][T15119] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 884.461464][T29891] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 884.474903][T29768] XFS (loop5): Quotacheck: Done. [ 884.788767][ T6042] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 884.808302][T29891] ntfs3(loop9): ino=19, mi_enum_attr [ 884.835280][T29891] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 884.915719][T29891] ntfs3(loop9): ino=19, mi_enum_attr [ 884.942910][T29891] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 885.264380][T22147] IPVS: starting estimator thread 0... [ 885.433066][T29936] IPVS: using max 26 ests per chain, 62400 per kthread [ 886.035939][T29968] netlink: 9280 bytes leftover after parsing attributes in process `syz.9.8017'. [ 886.083601][T29965] loop1: detected capacity change from 0 to 1024 [ 886.220321][ T30] audit: type=1326 audit(1755156229.370:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.5.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 886.259150][T29976] loop0: detected capacity change from 0 to 64 [ 886.331470][T29965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.408745][ T30] audit: type=1326 audit(1755156229.370:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.5.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 886.543199][ T30] audit: type=1326 audit(1755156229.380:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.5.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 886.620706][T29982] loop7: detected capacity change from 0 to 4096 [ 886.660489][ T30] audit: type=1326 audit(1755156229.380:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.5.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 886.734351][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.779850][ T30] audit: type=1326 audit(1755156229.380:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.5.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 886.957770][T29982] ntfs3(loop7): ino=b, mi_enum_attr [ 886.983232][T29982] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 887.063176][T29982] ntfs3(loop7): Failed to load $Extend (-22). [ 887.098946][T29982] ntfs3(loop7): Failed to initialize $Extend. [ 887.149078][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8029'. [ 887.673429][T30039] netlink: 'syz.6.8036': attribute type 12 has an invalid length. [ 887.681438][T30039] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8036'. [ 888.062144][T30055] loop6: detected capacity change from 0 to 2048 [ 888.076736][T30061] netlink: 'syz.9.8043': attribute type 10 has an invalid length. [ 888.112248][T30055] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 888.115780][T30061] team0: Device ipvlan1 failed to register rx_handler [ 888.183918][ T6244] udevd[6244]: incorrect nilfs2 checksum on /dev/loop6 [ 888.233675][T30067] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.276452][ T6077] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 888.299352][T30055] kAFS: unable to lookup cell '̅?ۛkմ]-״8ވ>~OC1sߘi?Ϯaya<C' [ 888.392122][T30006] loop5: detected capacity change from 0 to 32768 [ 888.458824][ T6077] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 888.468856][T30006] read_mapping_page failed! [ 888.482674][ T6077] usb 2-1: config 0 has no interface number 0 [ 888.499419][T30006] jfs_create: dtInsert returned -EIO [ 888.521615][ T6077] usb 2-1: config 0 interface 122 has no altsetting 0 [ 888.529163][T30006] ERROR: (device loop5): jfs_create: [ 888.529163][T30006] [ 888.570106][ T6077] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 888.582433][T30006] ERROR: (device loop5): remounting filesystem as read-only [ 888.602498][ T6077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.644043][ T6077] usb 2-1: Product: syz [ 888.668841][ T6077] usb 2-1: Manufacturer: syz [ 888.698277][ T6077] usb 2-1: SerialNumber: syz [ 888.730878][ T6077] usb 2-1: config 0 descriptor?? [ 888.821657][T30031] loop0: detected capacity change from 0 to 32768 [ 888.850904][T30031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8033 (30031) [ 888.923346][ T6193] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 888.931862][T30031] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 888.968061][T30031] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 889.021671][T30031] BTRFS info (device loop0): using free-space-tree [ 889.037638][T30101] loop9: detected capacity change from 0 to 2048 [ 889.113493][ T6193] usb 7-1: Using ep0 maxpacket: 32 [ 889.137317][ T6193] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 889.153274][ T6193] usb 7-1: config 0 has no interface number 0 [ 889.203788][T30122] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 889.223413][ T6193] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 889.263672][T30101] NILFS (loop9): failed to count free inodes: err=-34 [ 889.303516][ T6193] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.365778][ T6193] usb 7-1: Product: syz [ 889.391632][ T6193] usb 7-1: Manufacturer: syz [ 889.397615][ T3428] usb 2-1: USB disconnect, device number 116 [ 889.425403][ T6193] usb 7-1: SerialNumber: syz [ 889.436243][ T3428] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 889.474641][ T6193] usb 7-1: config 0 descriptor?? [ 889.637140][ T6031] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 889.910021][ T6193] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 889.951914][ T6193] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 890.045498][ T6193] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 890.063283][T30164] netlink: 23 bytes leftover after parsing attributes in process `syz.0.8058'. [ 890.153819][ T6193] usb 7-1: USB disconnect, device number 15 [ 890.177342][T30173] loop7: detected capacity change from 0 to 2048 [ 890.308375][T30173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.333836][ T6077] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 890.534451][ T6077] usb 2-1: Using ep0 maxpacket: 16 [ 890.561719][ T6077] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 890.648649][ T6077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 890.725528][ T6077] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 890.755724][ T6077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.783968][ T6077] usb 2-1: Product: syz [ 890.788182][ T6077] usb 2-1: Manufacturer: syz [ 890.821070][ T6077] usb 2-1: SerialNumber: syz [ 890.871060][ T6077] usb 2-1: config 0 descriptor?? [ 891.074949][T30152] loop9: detected capacity change from 0 to 32768 [ 891.141330][T14796] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 891.149068][ T6077] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 891.175480][ T6077] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 891.198585][ T6077] usb 2-1: USB disconnect, device number 117 [ 891.273832][T30152] JBD2: Ignoring recovery information on journal [ 891.428893][T30238] loop5: detected capacity change from 0 to 764 [ 891.486479][T30238] rock: directory entry would overflow storage [ 891.486491][T30238] rock: sig=0x4654, size=5, remaining=4 [ 891.496024][T30152] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 891.626672][T30250] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 891.749537][T30250] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 891.769745][T22082] ocfs2: Unmounting device (7,9) on (node local) [ 891.815279][T30250] gretap1: entered promiscuous mode [ 891.852329][T30250] gretap1: entered allmulticast mode [ 891.956635][T30258] loop5: detected capacity change from 0 to 2048 [ 891.988782][T30258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 892.163380][T30278] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8085'. [ 892.223655][T30278] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8085'. [ 892.255553][T30280] loop7: detected capacity change from 0 to 1024 [ 892.352956][T30287] netlink: 'syz.1.8089': attribute type 1 has an invalid length. [ 892.576617][T30299] ALSA: mixer_oss: invalid OSS volume 'u' [ 893.208414][T30353] vivid-000: disconnect [ 893.215681][T30325] bond2: entered promiscuous mode [ 893.271933][T30352] vivid-000: reconnect [ 893.272529][T30368] loop5: detected capacity change from 0 to 22 [ 893.289555][T30368] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 893.294644][T30325] bond2: entered allmulticast mode [ 893.305682][T30325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.367315][T30368] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 893.658106][ T30] audit: type=1326 audit(1755156236.819:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30385 comm="syz.5.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 893.744391][ T30] audit: type=1326 audit(1755156236.819:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30385 comm="syz.5.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 893.854589][T30310] loop6: detected capacity change from 0 to 32768 [ 893.879314][ T30] audit: type=1326 audit(1755156236.839:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30385 comm="syz.5.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 893.931353][T30310] (syz.6.8095,30310,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 893.950215][ T30] audit: type=1326 audit(1755156236.839:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30385 comm="syz.5.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 894.009659][T30310] (syz.6.8095,30310,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 894.054084][ T30] audit: type=1326 audit(1755156236.839:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30385 comm="syz.5.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 894.111746][T30405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8112'. [ 894.159432][T30310] JBD2: Ignoring recovery information on journal [ 894.174076][T30409] openvswitch: netlink: Flow key attribute not present in set flow. [ 894.302020][T30310] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 894.656358][T30435] loop7: detected capacity change from 0 to 512 [ 894.685490][T30435] EXT4-fs: Ignoring removed bh option [ 894.716288][T30425] loop0: detected capacity change from 0 to 4096 [ 894.760974][T30435] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 894.781569][T30425] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 894.810430][T14795] ocfs2: Unmounting device (7,6) on (node local) [ 894.900036][T30435] EXT4-fs (loop7): 1 truncate cleaned up [ 894.914177][T30451] netlink: 'syz.5.8126': attribute type 1 has an invalid length. [ 894.922097][T30451] netlink: 15 bytes leftover after parsing attributes in process `syz.5.8126'. [ 894.968176][T30435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.239513][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.334193][ T6193] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 895.515017][ T6193] usb 6-1: Using ep0 maxpacket: 16 [ 895.536382][ T6193] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 895.572897][ T6193] usb 6-1: config 0 has no interface number 0 [ 895.594014][ T6193] usb 6-1: config 0 interface 101 has no altsetting 0 [ 895.627556][ T6193] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 895.670257][ T6193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.692894][ T6193] usb 6-1: Product: syz [ 895.710631][ T6193] usb 6-1: Manufacturer: syz [ 895.738343][ T6193] usb 6-1: SerialNumber: syz [ 895.765696][ T1207] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 895.801225][ T6193] usb 6-1: config 0 descriptor?? [ 895.878182][ T6193] ums-onetouch 6-1:0.101: USB Mass Storage device detected [ 895.975474][ T1207] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 895.996277][ T1207] usb 10-1: config 0 has no interface number 0 [ 896.018190][ T1207] usb 10-1: config 0 interface 2 has no altsetting 0 [ 896.038172][ T1207] usb 10-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice=b7.29 [ 896.067906][ T1207] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.095194][ T1207] usb 10-1: config 0 descriptor?? [ 896.156649][ T6193] usb 6-1: USB disconnect, device number 107 [ 896.380653][T30487] loop6: detected capacity change from 0 to 32768 [ 896.418781][T30487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8123 (30487) [ 896.509806][T30487] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 896.552781][T30487] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 896.594235][T30487] BTRFS info (device loop6): using free-space-tree [ 896.623617][ T1207] usb 10-1: string descriptor 0 read error: -71 [ 896.650826][T30539] loop7: detected capacity change from 0 to 2048 [ 896.656900][ T1207] usb 10-1: NDI device with a latency value of 1 [ 896.674479][ T1207] ftdi_sio 10-1:0.2: FTDI USB Serial Device converter detected [ 896.750976][ T1207] ftdi_sio ttyUSB0: unknown device type: 0xb729 [ 896.781659][T30539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.827281][T30539] ext4 filesystem being mounted at /688/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.858478][T30539] EXT4-fs error (device loop7): __ext4_new_inode:1073: comm syz.7.8145: reserved inode found cleared - inode=1 [ 896.883811][ T1207] usb 10-1: USB disconnect, device number 8 [ 896.903890][T30487] BTRFS info (device loop6): rebuilding free space tree [ 896.914510][T30570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8148'. [ 896.923963][ T1207] ftdi_sio 10-1:0.2: device disconnected [ 897.082182][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.203306][T30586] netlink: 'syz.0.8150': attribute type 5 has an invalid length. [ 897.272728][T30595] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8153'. [ 897.310869][T14795] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 897.602242][T30612] netlink: 288 bytes leftover after parsing attributes in process `syz.5.8157'. [ 897.916707][T30624] loop1: detected capacity change from 0 to 512 [ 898.151838][T30624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.193631][T30624] ext4 filesystem being mounted at /1356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 898.503603][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.504829][T30660] netlink: 'syz.6.8168': attribute type 15 has an invalid length. [ 898.647921][T30660] netlink: 666 bytes leftover after parsing attributes in process `syz.6.8168'. [ 898.854918][ T6125] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 899.052683][ T6125] usb 1-1: Using ep0 maxpacket: 16 [ 899.105458][ T6125] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 899.134933][ T6125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.188796][ T6125] usb 1-1: Product: syz [ 899.214553][ T6125] usb 1-1: Manufacturer: syz [ 899.239870][ T6125] usb 1-1: SerialNumber: syz [ 899.312100][ T6125] r8152-cfgselector 1-1: Unknown version 0x0000 [ 899.341340][ T6125] r8152-cfgselector 1-1: config 0 descriptor?? [ 899.426350][T30711] tipc: Can't bind to reserved service type 2 [ 899.602967][T30723] netlink: 'syz.7.8184': attribute type 15 has an invalid length. [ 899.832235][ T3428] r8152-cfgselector 1-1: USB disconnect, device number 114 [ 900.676455][ T30] audit: type=1326 audit(1755156243.838:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30791 comm="syz.5.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 900.788601][ T30] audit: type=1326 audit(1755156243.838:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30791 comm="syz.5.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 900.857749][T30801] loop0: detected capacity change from 0 to 1024 [ 900.906562][T30801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 900.913214][ T30] audit: type=1326 audit(1755156243.878:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30791 comm="syz.5.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 900.961593][T30807] loop5: detected capacity change from 0 to 256 [ 901.004592][ T30] audit: type=1326 audit(1755156243.878:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30791 comm="syz.5.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 901.083971][T30839] loop9: detected capacity change from 0 to 24 [ 901.092443][T30844] loop6: detected capacity change from 0 to 1024 [ 901.103649][T30808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.126987][T30839] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 901.144867][T30801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 901.158257][T30839] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 901.168867][T30801] EXT4-fs (loop0): stripe (3675) is not aligned with cluster size (16), stripe is disabled [ 901.206035][T30844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.231466][T30801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 901.494453][T30871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.643662][ T6031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.661945][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.721429][T30881] loop9: detected capacity change from 0 to 64 [ 902.120615][T30898] loop0: detected capacity change from 0 to 4096 [ 902.193599][T30898] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 902.389899][T30898] ntfs3(loop0): ino=5, mi_enum_attr [ 902.397262][T30920] loop9: detected capacity change from 0 to 128 [ 902.418390][T30898] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 902.593718][T30908] loop5: detected capacity change from 0 to 8192 [ 903.025610][T30952] overlayfs: missing 'lowerdir' [ 903.045388][ T1207] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 903.208091][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 903.268252][ T1207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 903.323214][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 903.354925][ T1207] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 903.406573][ T1207] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 903.426983][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.475932][ T1207] usb 1-1: Product: syz [ 903.480156][ T1207] usb 1-1: Manufacturer: syz [ 903.508605][ T1207] usb 1-1: SerialNumber: syz [ 903.528215][ T1207] usb 1-1: config 0 descriptor?? [ 903.533449][T30972] loop7: detected capacity change from 0 to 512 [ 903.564317][T30972] EXT4-fs: Ignoring removed bh option [ 903.592691][ T1207] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 903.609758][T30972] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 903.633435][T30972] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 903.683805][T30972] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 903.766798][T30972] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 903.786063][T30972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.821954][T30901] loop6: detected capacity change from 0 to 40427 [ 903.834602][T30901] F2FS-fs: heap/no_heap options were deprecated [ 903.851564][T30901] F2FS-fs: heap/no_heap options were deprecated [ 903.987057][ T1207] scsi host1: usb-storage 1-1:0.0 [ 904.053003][ T1207] usb 1-1: USB disconnect, device number 115 [ 904.145186][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.396726][T31033] random: crng reseeded on system resumption [ 904.724788][T31042] netlink: 'syz.7.8258': attribute type 2 has an invalid length. [ 904.798052][T31042] netlink: 'syz.7.8258': attribute type 1 has an invalid length. [ 905.237873][T31074] loop9: detected capacity change from 0 to 128 [ 905.256051][T31072] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8268'. [ 905.419005][T31085] loop7: detected capacity change from 0 to 2048 [ 905.473211][T31085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 906.124075][T31126] usb usb8: usbfs: process 31126 (syz.9.8283) did not claim interface 2 before use [ 906.125642][ T6193] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 906.214377][T31046] loop1: detected capacity change from 0 to 32768 [ 906.286307][T31046] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 906.337539][ T6193] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.399456][ T6193] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.401406][T31152] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 906.470506][T31046] XFS (loop1): Ending clean mount [ 906.491271][ T6193] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 906.521755][ T6193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 906.556014][T31046] XFS (loop1): Quotacheck needed: Please wait. [ 906.575420][ T6193] usb 6-1: SerialNumber: syz [ 906.743886][T31046] XFS (loop1): Quotacheck: Done. [ 906.877245][ T6193] usb 6-1: 0:2 : does not exist [ 906.913977][T31178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8295'. [ 906.968914][ T6193] usb 6-1: USB disconnect, device number 108 [ 907.018246][ T6028] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 907.270115][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.525650][ T6077] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 907.715902][ T6077] usb 8-1: Using ep0 maxpacket: 8 [ 907.736585][ T6077] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 907.779166][T31233] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8309'. [ 907.794310][ T6077] usb 8-1: config 179 has no interface number 0 [ 907.822031][ T6077] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 907.865190][ T6077] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 907.929753][T31240] loop1: detected capacity change from 0 to 256 [ 907.945526][ T6077] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 907.983779][ T6077] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 908.032328][ T6077] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 908.069484][ T6077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.133743][T31209] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.157105][T31252] loop9: detected capacity change from 0 to 1024 [ 908.514699][ T1207] usb 8-1: USB disconnect, device number 13 [ 908.514767][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 908.522405][T16693] hfsplus: b-tree write err: -5, ino 4 [ 908.528968][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 908.869450][T31295] netlink: 'syz.5.8322': attribute type 1 has an invalid length. [ 908.889472][T31295] netlink: 'syz.5.8322': attribute type 1 has an invalid length. [ 908.930563][T31298] netlink: 'syz.0.8323': attribute type 10 has an invalid length. [ 908.981961][T31298] macvlan1: entered allmulticast mode [ 909.013778][T31302] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 909.026723][T31298] veth1_vlan: entered allmulticast mode [ 909.090813][T31298] team0: Port device macvlan1 added [ 909.103131][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8325'. [ 909.334850][T31315] netlink: 'syz.9.8328': attribute type 1 has an invalid length. [ 909.425766][ T30] audit: type=1326 audit(1755156252.577:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31322 comm="syz.6.8330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 909.560398][ T30] audit: type=1326 audit(1755156252.577:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31322 comm="syz.6.8330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 909.693505][ T30] audit: type=1326 audit(1755156252.587:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31322 comm="syz.6.8330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 909.736848][T31327] loop0: detected capacity change from 0 to 4096 [ 909.820308][ T30] audit: type=1326 audit(1755156252.587:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31322 comm="syz.6.8330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 909.849729][T31338] loop5: detected capacity change from 0 to 2048 [ 909.873063][ T30] audit: type=1326 audit(1755156252.587:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31322 comm="syz.6.8330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 909.900501][T31327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.909896][T31268] loop1: detected capacity change from 0 to 32768 [ 909.964029][T31338] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 910.017947][T31338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.092912][T31268] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 910.170317][ T6031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.345572][T31374] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 910.635487][T31268] XFS (loop1): Ending clean mount [ 910.709585][T31268] XFS (loop1): Quotacheck needed: Please wait. [ 910.769818][T31394] netlink: 'syz.9.8349': attribute type 7 has an invalid length. [ 910.820009][T31394] netlink: 'syz.9.8349': attribute type 8 has an invalid length. [ 910.904638][T31268] XFS (loop1): Quotacheck: Done. [ 911.069279][ T6028] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 911.287641][ T3428] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 911.508985][ T3428] usb 8-1: Using ep0 maxpacket: 16 [ 911.537924][ T3428] usb 8-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 911.562187][ T3428] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.623893][ T3428] usb 8-1: Product: syz [ 911.636497][ T3428] usb 8-1: Manufacturer: syz [ 911.641097][ T3428] usb 8-1: SerialNumber: syz [ 911.731680][ T3428] usb 8-1: config 0 descriptor?? [ 911.775079][ T3428] usb-storage 8-1:0.0: USB Mass Storage device detected [ 911.841333][ T3428] usb-storage 8-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 911.885988][ T3428] usb-storage 8-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00038-g0cc53520e68b) [ 911.885988][ T3428] Please send a copy of this message to and [ 911.925487][T31460] loop6: detected capacity change from 0 to 256 [ 912.106030][T31460] FAT-fs (loop6): Directory bread(block 64) failed [ 912.112594][T31460] FAT-fs (loop6): Directory bread(block 65) failed [ 912.159022][T31460] FAT-fs (loop6): Directory bread(block 66) failed [ 912.196277][ T3428] usb 8-1: USB disconnect, device number 14 [ 912.202359][T31460] FAT-fs (loop6): Directory bread(block 67) failed [ 912.226981][T31460] FAT-fs (loop6): Directory bread(block 68) failed [ 912.252328][T31460] FAT-fs (loop6): Directory bread(block 69) failed [ 912.293777][T31460] FAT-fs (loop6): Directory bread(block 70) failed [ 912.334179][T31460] FAT-fs (loop6): Directory bread(block 71) failed [ 912.366894][T31460] FAT-fs (loop6): Directory bread(block 72) failed [ 912.384236][T31460] FAT-fs (loop6): Directory bread(block 73) failed [ 912.645468][T31498] loop9: detected capacity change from 0 to 128 [ 912.691584][T31504] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8377'. [ 912.740298][T31498] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 912.742765][T31506] loop6: detected capacity change from 0 to 256 [ 912.792018][T31498] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 912.803500][T31434] loop0: detected capacity change from 0 to 32768 [ 912.833577][T31434] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8360 (31434) [ 912.862259][T31498] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 4095 (only 1 groups) [ 912.877877][T31506] exfat: Deprecated parameter 'namecase' [ 912.921440][T31506] exfat: Deprecated parameter 'namecase' [ 912.927535][T31434] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 912.985043][T31434] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 913.003629][T31506] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 913.018556][T31434] BTRFS info (device loop0): disk space caching is enabled [ 913.020467][T22082] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 913.027624][T31434] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 913.451679][T31434] BTRFS info (device loop0): rebuilding free space tree [ 913.579410][T31434] BTRFS info (device loop0): disabling free space tree [ 913.634426][T31434] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 913.689864][T31434] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 914.102100][T31434] BTRFS info (device loop0): balance: start -f [ 914.169752][T31434] BTRFS info (device loop0): balance: ended with status: 0 [ 914.476481][ T6031] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 914.736146][T31621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8405'. [ 915.416318][T31653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8413'. [ 915.425231][T31653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8413'. [ 915.838684][T31679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8419'. [ 916.176331][T31692] netlink: 'syz.1.8420': attribute type 10 has an invalid length. [ 916.244561][T31692] macvlan1: entered allmulticast mode [ 916.306508][T31692] veth1_vlan: entered allmulticast mode [ 916.358596][T31692] team0: Port device macvlan1 added [ 916.544669][T31709] loop6: detected capacity change from 0 to 512 [ 916.598351][T31709] EXT4-fs: Ignoring removed nobh option [ 916.688495][T31641] loop7: detected capacity change from 0 to 32768 [ 916.752649][T31641] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8408 (31641) [ 916.812438][T31709] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8425: corrupted inode contents [ 916.863225][T31641] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 916.902301][T31641] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 916.921928][T31709] EXT4-fs (loop6): Remounting filesystem read-only [ 916.973311][T31641] BTRFS info (device loop7): using free-space-tree [ 916.996808][T31709] EXT4-fs (loop6): 1 truncate cleaned up [ 917.018457][T31709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.033571][T16708] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 917.054659][T16708] Quota error (device loop6): write_blk: dquota write failed [ 917.064555][T16708] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 917.105143][T31709] ext4 filesystem being mounted at /711/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.145949][T16708] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 917.157157][T16708] Quota error (device loop6): write_blk: dquota write failed [ 917.164545][T16708] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 917.206362][T16708] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 917.223133][T16708] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 917.236907][T16708] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 917.297085][T31743] bond2: entered promiscuous mode [ 917.347205][T31743] bond2: entered allmulticast mode [ 917.377044][T31743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 917.410173][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.835535][T15119] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 917.905147][T31819] loop9: detected capacity change from 0 to 512 [ 918.027743][T31819] EXT4-fs: Ignoring removed bh option [ 918.068888][T31819] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 918.148269][T31819] EXT4-fs (loop9): invalid journal inode [ 918.191152][T31833] netlink: 168 bytes leftover after parsing attributes in process `syz.6.8443'. [ 918.246588][T31819] EXT4-fs (loop9): can't get journal size [ 918.355612][T31819] EXT4-fs (loop9): 1 truncate cleaned up [ 918.361558][T31841] netlink: 'syz.5.8445': attribute type 2 has an invalid length. [ 918.437001][T31841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8445'. [ 918.438337][T31819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.508632][T31843] loop1: detected capacity change from 0 to 1764 [ 918.749495][T31819] Device name not specified. [ 918.749495][T31819] [ 919.113152][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.276569][ T6193] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 919.503646][ T6193] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 919.540684][ T6193] usb 2-1: config 0 has no interface number 0 [ 919.585007][ T6193] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 919.647659][ T6193] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.689520][ T6193] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 919.700117][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.709279][ T6193] usb 2-1: Product: syz [ 919.723695][ T6193] usb 2-1: Manufacturer: syz [ 919.754048][ T6193] usb 2-1: SerialNumber: syz [ 919.807622][ T6193] usb 2-1: config 0 descriptor?? [ 919.844952][T31876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.872804][ T6193] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 919.924114][ T6193] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 920.387098][ T1207] usb 2-1: USB disconnect, device number 118 [ 920.455739][ T1207] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 920.531937][ T1207] cyberjack 2-1:0.69: device disconnected [ 920.882025][T31901] loop7: detected capacity change from 0 to 32768 [ 920.995099][T31901] __jfs_setxattr: xattr_size = 75, new_size = 12821 [ 921.558911][T32038] loop7: detected capacity change from 0 to 1024 [ 921.649829][T32038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 921.677211][T32045] loop6: detected capacity change from 0 to 2048 [ 921.732157][T32038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 921.821342][T32038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.833962][T32045] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 921.924967][T32045] UDF-fs: Scanning with blocksize 512 failed [ 921.969748][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.993385][T32045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.137255][T32045] overlayfs: conflicting options: userxattr,redirect_dir=on [ 922.464083][T32096] netlink: 'syz.9.8500': attribute type 6 has an invalid length. [ 922.837054][T32116] netlink: 'syz.7.8505': attribute type 2 has an invalid length. [ 922.896267][T32116] : entered promiscuous mode [ 922.981568][T32118] loop9: detected capacity change from 0 to 2048 [ 923.094602][T32118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.534963][T32152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8516'. [ 923.579418][T32155] loop7: detected capacity change from 0 to 64 [ 923.882301][T32174] openvswitch: netlink: Missing key (keys=40, expected=100) [ 923.956418][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 924.092726][T32185] loop7: detected capacity change from 0 to 256 [ 924.293823][T32185] FAT-fs (loop7): Directory bread(block 64) failed [ 924.329906][T32185] FAT-fs (loop7): Directory bread(block 65) failed [ 924.387632][T32185] FAT-fs (loop7): Directory bread(block 66) failed [ 924.394185][T32185] FAT-fs (loop7): Directory bread(block 67) failed [ 924.492796][T32185] FAT-fs (loop7): Directory bread(block 68) failed [ 924.538975][T32185] FAT-fs (loop7): Directory bread(block 69) failed [ 924.545867][T32185] FAT-fs (loop7): Directory bread(block 70) failed [ 924.616354][T32185] FAT-fs (loop7): Directory bread(block 71) failed [ 924.645914][T32185] FAT-fs (loop7): Directory bread(block 72) failed [ 924.678213][T32185] FAT-fs (loop7): Directory bread(block 73) failed [ 924.837518][T32224] random: crng reseeded on system resumption [ 925.074999][ T30] audit: type=1326 audit(1755156268.226:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32235 comm="syz.5.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 925.237200][ T30] audit: type=1326 audit(1755156268.226:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32235 comm="syz.5.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 925.261833][ T30] audit: type=1326 audit(1755156268.286:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32235 comm="syz.5.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 925.342086][T32163] loop0: detected capacity change from 0 to 32768 [ 925.370499][ T30] audit: type=1326 audit(1755156268.286:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32235 comm="syz.5.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 925.462445][T32163] [ 925.462445][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.462445][T32163] [ 925.480026][T32255] loop5: detected capacity change from 0 to 64 [ 925.498560][ T30] audit: type=1326 audit(1755156268.286:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32235 comm="syz.5.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d90f8ebe9 code=0x7ffc0000 [ 925.649830][T32163] [ 925.649830][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.649830][T32163] [ 925.729474][T32163] [ 925.729474][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.729474][T32163] [ 925.835486][T32163] [ 925.835486][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.835486][T32163] [ 925.917716][T32163] [ 925.917716][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.917716][T32163] [ 925.970319][T32163] [ 925.970319][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 925.970319][T32163] [ 926.041145][T32163] [ 926.041145][T32163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 926.041145][T32163] [ 926.052923][T32281] netlink: 5636 bytes leftover after parsing attributes in process `syz.7.8551'. [ 926.131723][ T111] [ 926.131723][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 926.131723][ T111] [ 926.255023][T32288] sctp: [Deprecated]: syz.6.8553 (pid 32288) Use of int in maxseg socket option. [ 926.255023][T32288] Use struct sctp_assoc_value instead [ 926.420126][ T6031] [ 926.420126][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 926.420126][ T6031] [ 926.441866][ T6031] [ 926.441866][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 926.441866][ T6031] [ 926.787862][T32314] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 926.847926][T32314] exFAT-fs (nullb0): invalid boot record signature [ 926.878030][T32314] exFAT-fs (nullb0): failed to read boot sector [ 926.913030][T32314] exFAT-fs (nullb0): failed to recognize exfat type [ 927.109940][T32325] loop1: detected capacity change from 0 to 164 [ 927.216397][T32257] loop9: detected capacity change from 0 to 32768 [ 927.216626][T32325] Unable to read rock-ridge attributes [ 927.248785][ T30] audit: type=1326 audit(1755156270.385:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32333 comm="syz.7.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e38d8ebe9 code=0x7ffc0000 [ 927.274621][T32257] (syz.9.8543,32257,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 927.367667][T32325] Unable to read rock-ridge attributes [ 927.369692][T32257] (syz.9.8543,32257,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 927.383474][ T30] audit: type=1326 audit(1755156270.385:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32333 comm="syz.7.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e38d8ebe9 code=0x7ffc0000 [ 927.460248][T32257] JBD2: Ignoring recovery information on journal [ 927.503661][T32347] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8568'. [ 927.530058][ T30] audit: type=1326 audit(1755156270.405:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32333 comm="syz.7.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1e38d8ebe9 code=0x7ffc0000 [ 927.607654][T32257] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 927.973853][T22082] ocfs2: Unmounting device (7,9) on (node local) [ 928.130898][ T30] audit: type=1326 audit(1755156271.285:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32374 comm="syz.1.8575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28218ebe9 code=0x7ffc0000 [ 928.153627][ T1207] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 928.248732][ T30] audit: type=1326 audit(1755156271.285:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32374 comm="syz.1.8575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28218ebe9 code=0x7ffc0000 [ 928.347499][ T1207] usb 6-1: Using ep0 maxpacket: 32 [ 928.403567][ T1207] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 928.423342][ T1207] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 928.465791][ T1207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.497241][T32389] netlink: 'syz.1.8579': attribute type 1 has an invalid length. [ 928.509990][ T1207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 928.565482][ T1207] usb 6-1: config 1 has no interface number 0 [ 928.595652][ T1207] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 928.650193][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.688710][ T1207] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 928.867778][ T6193] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 928.927873][ T1207] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 928.936351][ T1207] snd_usb_pod 6-1:1.1: invalid control EP [ 928.982294][ T1207] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 929.001568][ T1207] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 929.028814][ T1207] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 929.037671][ T6193] usb 1-1: Using ep0 maxpacket: 32 [ 929.064287][ T6193] usb 1-1: unable to get BOS descriptor or descriptor too short [ 929.113621][ T6193] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 929.145285][ T6193] usb 1-1: config 1 interface 0 has no altsetting 0 [ 929.163783][ T3428] usb 6-1: USB disconnect, device number 109 [ 929.180982][ T6193] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.40 [ 929.201067][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.226727][ T6193] usb 1-1: Product: syz [ 929.234348][ T6193] usb 1-1: Manufacturer: syz [ 929.252443][ T6193] usb 1-1: SerialNumber: syz [ 929.416115][T32379] loop6: detected capacity change from 0 to 32768 [ 929.428839][T32438] fuse: Unknown parameter 'smackfsdef' [ 929.477334][T32379] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 929.502247][T32449] misc userio: No port type given on /dev/userio [ 929.526791][T32379] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 929.709070][ T6193] usbhid 1-1:1.0: can't add hid device: -71 [ 929.720847][ T6193] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 929.731562][ T6193] usb 1-1: USB disconnect, device number 116 [ 930.002263][T32379] XFS (loop6): Ending clean mount [ 930.025766][T32482] loop7: detected capacity change from 0 to 512 [ 930.156270][T32482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.172981][T32482] ext4 filesystem being mounted at /759/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.218417][T14795] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 930.289749][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.620868][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8608'. [ 930.975984][T32534] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8614'. [ 931.488136][T32564] autofs4:pid:32564:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2816), cmd(0xc0189375) [ 931.572441][T32564] autofs4:pid:32564:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 931.814320][T32581] loop9: detected capacity change from 0 to 1024 [ 931.926854][T32581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.032360][T32581] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.239196][T32620] netlink: 'syz.6.8640': attribute type 2 has an invalid length. [ 932.503371][T32617] infiniband syz2: set active [ 932.508728][T32617] infiniband syz2: added veth1_vlan [ 932.525594][ T1207] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 932.586671][T32617] RDS/IB: syz2: added [ 932.591686][T32617] smc: adding ib device syz2 with port count 1 [ 932.600094][T32617] smc: ib device syz2 port 1 has pnetid [ 932.713869][T32643] loop1: detected capacity change from 0 to 1024 [ 932.729210][T32643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.757668][T32643] EXT4-fs: Invalid want_extra_isize 130 [ 932.807140][ T1207] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 932.854700][ T1207] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 932.870612][T32653] loop5: detected capacity change from 0 to 256 [ 933.000821][ T1207] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 933.028305][ T1207] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65267, setting to 1024 [ 933.044439][ T1207] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 933.070541][ T1207] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 933.090054][ T1207] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.118611][T32663] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 933.128363][ T1207] usb 10-1: Product: syz [ 933.134346][ T1207] usb 10-1: Manufacturer: syz [ 933.145708][T32653] FAT-fs (loop5): Directory bread(block 64) failed [ 933.169394][ T1207] usb 10-1: SerialNumber: syz [ 933.178285][T32653] FAT-fs (loop5): Directory bread(block 65) failed [ 933.186205][T32663] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 933.192458][ T1207] usb 10-1: config 0 descriptor?? [ 933.208417][T32653] FAT-fs (loop5): Directory bread(block 66) failed [ 933.215464][T32666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8655'. [ 933.237643][T32653] FAT-fs (loop5): Directory bread(block 67) failed [ 933.243434][T32581] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 933.263112][T32653] FAT-fs (loop5): Directory bread(block 68) failed [ 933.288253][ T1207] redrat3 10-1:0.0: Couldn't find all endpoints [ 933.323676][T32653] FAT-fs (loop5): Directory bread(block 69) failed [ 933.343566][T32653] FAT-fs (loop5): Directory bread(block 70) failed [ 933.351005][T32653] FAT-fs (loop5): Directory bread(block 71) failed [ 933.371830][T32663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 933.386301][T32653] FAT-fs (loop5): Directory bread(block 72) failed [ 933.402526][T32653] FAT-fs (loop5): Directory bread(block 73) failed [ 933.502482][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 933.502504][ T30] audit: type=1800 audit(1755156276.655:263): pid=32653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8650" name="bus" dev="loop5" ino=1048738 res=0 errno=0 [ 933.558733][T32599] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 933.628062][ T6193] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 933.685218][ T6125] usb 10-1: USB disconnect, device number 9 [ 933.799760][ T6193] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 933.822958][ T6193] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 933.848790][ T6193] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 933.880548][ T6193] usb 7-1: config 8 has no interface number 0 [ 933.886754][ T6193] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 933.941462][ T6193] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.010091][ T6193] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 934.044963][ T6193] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.077703][ T6193] usb 7-1: Product: syz [ 934.090055][ T6193] usb 7-1: Manufacturer: syz [ 934.118902][ T6193] usb 7-1: SerialNumber: syz [ 934.168423][ T3428] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 934.351529][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.376381][ T3428] usb 1-1: config index 0 descriptor too short (expected 897, got 27) [ 934.418064][ T3428] usb 1-1: config 2 has an invalid interface number: 1 but max is -1 [ 934.426759][T32761] loop1: detected capacity change from 0 to 512 [ 934.437756][ T3428] usb 1-1: config 2 has an invalid interface number: 1 but max is -1 [ 934.461834][T32761] EXT4-fs: Ignoring removed orlov option [ 934.480475][ T6193] usb 7-1: USB disconnect, device number 16 [ 934.489109][ T3428] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 934.530394][T32761] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002] [ 934.554381][ T3428] usb 1-1: config 2 has no interface number 0 [ 934.574469][ T3428] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 934.575984][T32761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.594635][ T3428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.605819][ T3428] usb 1-1: Product: syz [ 934.610324][ T3428] usb 1-1: Manufacturer: syz [ 934.614921][ T3428] usb 1-1: SerialNumber: syz [ 934.621420][T32761] ext4 filesystem being mounted at /1444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.638145][ T10] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 934.753016][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.823556][ T10] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.861660][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 934.884592][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 934.895569][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.905393][ T10] usb 6-1: Product: syz [ 934.913596][ T3428] cdc_ncm 1-1:2.1: CDC Union missing and no IAD found [ 934.922771][ T10] usb 6-1: Manufacturer: syz [ 934.927399][ T10] usb 6-1: SerialNumber: syz [ 934.942763][ T3428] cdc_ncm 1-1:2.1: bind() failure [ 934.967559][ T3428] usb 1-1: no audio or video endpoints found [ 935.016245][ T3428] usb 1-1: USB disconnect, device number 117 [ 935.241888][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input66 [ 935.295642][ T5213] bcm5974 6-1:1.0: could not read from device [ 935.330306][ T10] usb 6-1: USB disconnect, device number 110 [ 935.580216][ T368] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8676'. [ 935.871753][ T379] loop9: detected capacity change from 0 to 512 [ 935.971566][ T379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.011018][ T379] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.078508][ T395] loop1: detected capacity change from 0 to 16 [ 936.088993][ T393] loop0: detected capacity change from 0 to 256 [ 936.096403][ T395] cramfs: empty filesystem [ 936.152073][ T393] exfat: Deprecated parameter 'namecase' [ 936.162429][ T379] EXT4-fs error (device loop9): ext4_empty_dir:3081: inode #12: comm syz.9.8680: invalid size [ 936.165040][ T393] exfat: Deprecated parameter 'namecase' [ 936.232691][ T393] exfat: Deprecated parameter 'namecase' [ 936.243684][ T379] EXT4-fs (loop9): Remounting filesystem read-only [ 936.275951][ T393] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 936.432780][T16710] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 936.462883][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.480763][T16710] Quota error (device loop9): write_blk: dquota write failed [ 936.515787][T16710] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 936.546516][T16710] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 936.566765][T16710] Quota error (device loop9): write_blk: dquota write failed [ 936.637350][T16710] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 936.898942][ T425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 937.034285][ T439] loop1: detected capacity change from 0 to 512 [ 937.155017][ T439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.249423][ T448] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 937.269036][ T439] ext4 filesystem being mounted at /1453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.504423][ T460] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8703'. [ 937.524113][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.561201][ T460] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8703'. [ 937.598765][ T460] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 937.672324][ T470] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8707'. [ 937.717283][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8707'. [ 937.753259][ T470] netlink: 31 bytes leftover after parsing attributes in process `syz.6.8707'. [ 937.782887][ T470] netlink: 'syz.6.8707': attribute type 3 has an invalid length. [ 937.806186][ T476] C: renamed from team_slave_0 (while UP) [ 937.825604][ T470] netlink: 'syz.6.8707': attribute type 2 has an invalid length. [ 937.856792][ T470] netlink: 31 bytes leftover after parsing attributes in process `syz.6.8707'. [ 937.886210][ T476] netlink: 'syz.5.8708': attribute type 1 has an invalid length. [ 937.917681][ T476] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8708'. [ 937.948833][ T482] usb usb1: usbfs: process 482 (syz.9.8710) did not claim interface 0 before use [ 937.969805][ T476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 938.329749][ T499] loop1: detected capacity change from 0 to 512 [ 938.337734][ T499] EXT4-fs: Ignoring removed mblk_io_submit option [ 938.482362][ T499] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.8715: inode #13: comm syz.1.8715: iget: illegal inode # [ 938.533893][ T499] EXT4-fs (loop1): Remounting filesystem read-only [ 938.657961][ T499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.902100][ T30] audit: type=1107 audit(1755156282.054:264): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 939.013145][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.226579][ T481] loop0: detected capacity change from 0 to 32768 [ 939.291554][ T481] (syz.0.8709,481,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 939.332393][ T481] (syz.0.8709,481,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 939.500056][ T481] JBD2: Ignoring recovery information on journal [ 939.697110][ T481] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 939.788835][T22147] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 939.995165][ T571] ceph: No source [ 940.000642][T22147] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 940.058823][T22147] usb 2-1: config 0 interface 0 has no altsetting 0 [ 940.082035][T22147] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 940.109421][T22147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.139041][T22147] usb 2-1: Product: syz [ 940.177052][T22147] usb 2-1: Manufacturer: syz [ 940.187924][ T6031] ocfs2: Unmounting device (7,0) on (node local) [ 940.194929][T22147] usb 2-1: SerialNumber: syz [ 940.248269][T22147] usb 2-1: config 0 descriptor?? [ 940.284406][ T549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 940.360906][T22147] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 940.419242][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 940.436503][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 940.460850][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 940.500664][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 940.508415][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 940.569094][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 940.619545][T22147] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 940.631619][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 940.669662][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 940.677830][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 940.737046][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 940.769297][T22147] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 940.800760][T22147] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 940.889036][T22147] usb 2-1: USB disconnect, device number 119 [ 940.938403][T22147] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 941.052956][ T614] loop9: detected capacity change from 0 to 128 [ 941.059618][T22147] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 941.074663][ T623] netlink: 'syz.6.8741': attribute type 2 has an invalid length. [ 941.089747][T22147] keyspan 2-1:0.0: device disconnected [ 941.124530][ T623] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8741'. [ 941.167122][ T635] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 941.209024][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 941.615997][ T660] loop1: detected capacity change from 0 to 512 [ 941.696819][ T660] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 941.781230][ T660] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.8750: attempt to clear invalid blocks 2 len 1 [ 941.862332][ T660] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 941.916945][ T660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8750: invalid indirect mapped block 1819239214 (level 0) [ 942.068979][ T660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8750: invalid indirect mapped block 1819239214 (level 1) [ 942.108707][ T660] EXT4-fs (loop1): 1 truncate cleaned up [ 942.177499][ T660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.211459][ T686] loop0: detected capacity change from 0 to 128 [ 942.249378][ T686] affs: Bad value for 'setgid' [ 942.278895][ T686] affs: Bad value for 'setgid' [ 942.289939][ T660] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.787868][ T711] loop7: detected capacity change from 0 to 4096 [ 943.019226][ T711] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 943.249299][ T741] loop0: detected capacity change from 0 to 256 [ 943.348450][ T741] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 943.461995][ T755] loop7: detected capacity change from 0 to 128 [ 943.557554][ T755] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.703207][ T755] ext4 filesystem being mounted at /771/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 943.924072][T15119] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.978219][ T792] loop6: detected capacity change from 0 to 164 [ 944.039162][T22147] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 944.217596][T22147] usb 10-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 944.253934][T22147] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.311006][T22147] usb 10-1: config 0 descriptor?? [ 944.331012][ T808] loop5: detected capacity change from 0 to 512 [ 944.348959][T22147] ums-realtek 10-1:0.0: USB Mass Storage device detected [ 944.381465][ T808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 944.523560][ T808] EXT4-fs (loop5): 1 truncate cleaned up [ 944.556624][T22147] usb 10-1: USB disconnect, device number 10 [ 944.587189][ T808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.601295][ T840] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 944.911214][ T6042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.273479][ T874] loop1: detected capacity change from 0 to 1024 [ 945.371708][ T884] loop9: detected capacity change from 0 to 512 [ 945.390989][ T884] EXT4-fs: Ignoring removed bh option [ 945.398136][ T884] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 945.421404][ T884] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 945.434789][ T884] EXT4-fs (loop9): orphan cleanup on readonly fs [ 945.442252][T16704] hfsplus: b-tree write err: -5, ino 4 [ 945.442346][ T884] EXT4-fs error (device loop9): ext4_quota_enable:7120: comm syz.9.8812: Bad quota inum: 4294967291, type: 0 [ 945.465242][ T884] EXT4-fs (loop9): Remounting filesystem read-only [ 945.471859][ T884] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 945.487407][ T884] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 945.497064][ T884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 945.731461][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.026176][ T945] loop7: detected capacity change from 0 to 512 [ 946.056623][ T949] netlink: 'syz.6.8826': attribute type 9 has an invalid length. [ 946.095914][ T945] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 946.105992][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8826'. [ 946.161398][ T945] EXT4-fs (loop7): orphan cleanup on readonly fs [ 946.164114][ T954] netlink: 'syz.5.8827': attribute type 7 has an invalid length. [ 946.185912][ T945] Quota error (device loop7): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 946.199332][ T945] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 946.219377][ T945] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 946.262558][ T945] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8824: bg 0: block 40: padding at end of block bitmap is not set [ 946.297818][ T945] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 946.325889][ T945] EXT4-fs (loop7): 1 truncate cleaned up [ 946.362018][ T945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 946.485652][ T945] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.8824: bad symlink. [ 946.519220][ T975] loop6: detected capacity change from 0 to 256 [ 946.548708][ T973] loop1: detected capacity change from 0 to 1024 [ 946.706151][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.969162][ T900] loop0: detected capacity change from 0 to 32768 [ 947.048034][ T1004] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8838'. [ 947.155057][ T900] JBD2: Ignoring recovery information on journal [ 947.377007][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8843'. [ 947.383142][ T900] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 947.624819][ T1035] loop9: detected capacity change from 0 to 512 [ 947.664224][ T1035] EXT4-fs: inline encryption not supported [ 947.859348][ T6031] ocfs2: Unmounting device (7,0) on (node local) [ 947.871192][ T1035] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.8845: corrupted in-inode xattr: invalid ea_ino [ 947.995582][ T1035] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.8845: couldn't read orphan inode 15 (err -117) [ 948.107489][ T1035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.339272][ T1035] cgroup: name respecified [ 948.391270][ T1066] lo speed is unknown, defaulting to 1000 [ 948.397627][ T1066] lo speed is unknown, defaulting to 1000 [ 948.502477][ T1066] lo speed is unknown, defaulting to 1000 [ 948.610618][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.664288][ T1066] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 948.911322][ T1066] lo speed is unknown, defaulting to 1000 [ 948.961437][ T1066] lo speed is unknown, defaulting to 1000 [ 949.000374][ T1066] lo speed is unknown, defaulting to 1000 [ 949.037666][ T1066] lo speed is unknown, defaulting to 1000 [ 949.069133][ T1066] lo speed is unknown, defaulting to 1000 [ 949.103341][ T1066] lo speed is unknown, defaulting to 1000 [ 949.232029][ T1095] No source specified [ 949.495205][ T1105] loop1: detected capacity change from 0 to 4096 [ 949.535340][ T1105] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 949.577881][ T1049] loop6: detected capacity change from 0 to 32768 [ 949.724365][ T1049] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 950.159288][ T1141] netlink: 'syz.9.8876': attribute type 8 has an invalid length. [ 950.208537][T14795] ocfs2: Unmounting device (7,6) on (node local) [ 950.513315][ T1173] IPv6: NLM_F_CREATE should be specified when creating new route [ 950.522795][ T1152] veth3: entered allmulticast mode [ 950.747212][ T1187] loop0: detected capacity change from 0 to 24 [ 950.793526][ T1187] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 950.812199][ T1187] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 950.835068][ T1191] autofs: Unknown parameter 'no9 PG!8E ' [ 950.868338][ T1194] loop7: detected capacity change from 0 to 64 [ 950.925337][ T1187] romfs: read error for inode 0x70040 [ 951.190782][ T1212] loop5: detected capacity change from 0 to 512 [ 951.266384][ T1212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.347757][ T1225] loop0: detected capacity change from 0 to 1024 [ 951.390095][ T1212] ext4 filesystem being mounted at /1480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.483794][ T1225] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 951.688411][ T6042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.367563][ T1272] loop0: detected capacity change from 0 to 4096 [ 952.381251][ T1280] loop7: detected capacity change from 0 to 2048 [ 952.407925][ T1280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.435937][ T1272] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 952.481035][ T1272] ntfs3(loop0): It is recommened to use chkdsk. [ 952.801692][ T6125] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 952.970225][ T6125] usb 6-1: Using ep0 maxpacket: 16 [ 952.987353][ T6125] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 953.036023][ T6125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.067871][ T6125] usb 6-1: Product: syz [ 953.100488][ T6125] usb 6-1: Manufacturer: syz [ 953.116534][ T1324] loop9: detected capacity change from 0 to 64 [ 953.123418][ T6125] usb 6-1: SerialNumber: syz [ 953.182401][ T6125] usb 6-1: config 0 descriptor?? [ 953.430914][ T6125] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 953.458466][ T1258] loop1: detected capacity change from 0 to 32768 [ 953.521048][ T1258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8906 (1258) [ 953.610299][ T1345] loop7: detected capacity change from 0 to 1024 [ 953.626689][ T6077] usb 6-1: USB disconnect, device number 111 [ 953.645174][ T1345] EXT4-fs: Ignoring removed bh option [ 953.664436][ T1258] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 953.712804][ T1258] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 953.723804][ T1258] BTRFS info (device loop1): using free-space-tree [ 953.746129][ T1345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.920568][T16710] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0 [ 954.140919][ T1258] BTRFS error (device loop1): failed to read chunk root [ 954.226613][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.290966][ T1258] BTRFS error (device loop1): open_ctree failed: -5 [ 954.510338][ T1419] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8933'. [ 954.525856][ T6077] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 954.733359][ T6077] usb 10-1: Using ep0 maxpacket: 16 [ 954.784356][ T6077] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 954.830498][ T6077] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.890212][ T6077] usb 10-1: config 0 has no interface number 0 [ 954.913554][ T6077] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 954.951010][ T6077] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.003904][ T6077] usb 10-1: Product: syz [ 955.008195][ T6077] usb 10-1: Manufacturer: syz [ 955.040247][ T6077] usb 10-1: SerialNumber: syz [ 955.093120][ T6077] usb 10-1: config 0 descriptor?? [ 955.168041][ T6077] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 955.234591][ T6077] usb 10-1: No valid video chain found. [ 955.272514][ T1458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8946'. [ 955.379867][ T6077] usb 10-1: USB disconnect, device number 11 [ 955.380292][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8946'. [ 955.586809][ T1477] loop0: detected capacity change from 0 to 1024 [ 956.587545][ T1535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8961'. [ 957.045229][ T1564] loop1: detected capacity change from 0 to 256 [ 957.243240][ T1577] loop5: detected capacity change from 0 to 64 [ 957.477379][ T1592] netlink: 5 bytes leftover after parsing attributes in process `syz.9.8978'. [ 957.576355][ T1592] 0{X: renamed from macvtap0 (while UP) [ 957.663937][ T1592] 0{X: entered allmulticast mode [ 957.706226][ T1592] veth0_macvtap: entered allmulticast mode [ 957.726887][ T1592] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 958.175254][ T1623] openvswitch: netlink: IP tunnel dst address not specified [ 958.177139][ T1624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8987'. [ 958.655619][ T1566] loop0: detected capacity change from 0 to 32768 [ 958.797528][ T1566] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 958.911830][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9000'. [ 958.921020][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9000'. [ 959.033720][ T1566] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 959.244610][ T1682] vti0: entered promiscuous mode [ 959.258892][ T1670] loop5: detected capacity change from 0 to 4096 [ 959.305842][ T1670] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 959.465565][ T6031] ocfs2: Unmounting device (7,0) on (node local) [ 959.805059][ T1694] loop1: detected capacity change from 0 to 4096 [ 959.863985][ T1694] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 959.975388][ T1707] loop9: detected capacity change from 0 to 256 [ 960.950659][ T1675] loop6: detected capacity change from 0 to 32768 [ 961.709802][ T6077] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 961.783059][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9024'. [ 961.882101][ T6077] usb 2-1: Using ep0 maxpacket: 8 [ 961.918155][ T6077] usb 2-1: too many configurations: 245, using maximum allowed: 8 [ 961.997375][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.050274][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.125509][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.170197][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.254100][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.305689][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.356665][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.399994][ T6077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.431277][ T1828] program syz.0.9037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 962.482770][ T6077] usb 2-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 962.502220][ T6077] usb 2-1: New USB device strings: Mfr=144, Product=230, SerialNumber=250 [ 962.549497][ T6077] usb 2-1: Product: syz [ 962.588553][ T6077] usb 2-1: Manufacturer: syz [ 962.599893][ T6077] usb 2-1: SerialNumber: syz [ 962.692330][ T6077] usb 2-1: config 0 descriptor?? [ 962.715137][ T6077] rndis_host 2-1:0.0: invalid descriptor buffer length [ 962.755455][ T6077] usb 2-1: bad CDC descriptors [ 962.782302][ T6077] option 2-1:0.0: GSM modem (1-port) converter detected [ 962.943314][ T1859] loop6: detected capacity change from 0 to 256 [ 962.971601][ T6077] usb 2-1: USB disconnect, device number 120 [ 962.979208][ T6077] option 2-1:0.0: device disconnected [ 963.093484][ T1859] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 963.170798][ T1859] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 963.297398][ T1888] netlink: 'syz.5.9052': attribute type 29 has an invalid length. [ 963.306043][ T1887] binder: 1884:1887 ioctl c018620c 200000000040 returned -22 [ 963.968828][ T1923] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 964.001396][ T1925] netlink: 300 bytes leftover after parsing attributes in process `syz.7.9063'. [ 964.298944][ T1940] syz.0.9068: attempt to access beyond end of device [ 964.298944][ T1940] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 964.351655][ T1943] kernel read not supported for file /  (pid: 1943 comm: syz.9.9071) [ 964.388214][ T30] audit: type=1800 audit(1755156307.531:265): pid=1943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9071" name=200120 dev="mqueue" ino=75621 res=0 errno=0 [ 964.409699][ T1940] vxfs: unable to read disk superblock at 1 [ 964.474133][ T1940] syz.0.9068: attempt to access beyond end of device [ 964.474133][ T1940] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 964.536281][ T1956] nftables ruleset with unbound chain [ 964.634756][ T1940] vxfs: unable to read disk superblock at 8 [ 964.640692][ T1940] vxfs: can't find superblock. [ 965.093804][ T1986] loop7: detected capacity change from 0 to 512 [ 965.103213][ T1987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9081'. [ 965.159142][ T1987] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9081'. [ 965.193769][ T1992] loop5: detected capacity change from 0 to 512 [ 965.210763][ T1987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9081'. [ 965.325822][ T1986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 965.365262][ T1992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.374413][ T1986] ext4 filesystem being mounted at /831/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.450966][ T1992] ext4 filesystem being mounted at /1514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.478352][ T1986] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 965.496009][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9086'. [ 965.562332][ T1986] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 965.638214][ T1986] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9079: Failed to acquire dquot type 0 [ 965.662806][ T2013] loop6: detected capacity change from 0 to 128 [ 965.779667][ T6042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.809467][ T2013] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 965.878681][ T2013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 965.879213][ T2019] loop1: detected capacity change from 0 to 4096 [ 965.956794][T15119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 966.077484][ T2019] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 966.079022][ T2038] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 966.184964][ T2019] Remounting filesystem read-only [ 966.275975][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9095'. [ 966.941504][ T1108] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.299554][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9110'. [ 967.381832][ T2102] netlink: 312 bytes leftover after parsing attributes in process `syz.7.9110'. [ 967.425400][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9110'. [ 967.482306][ T6077] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 967.665848][ T6077] usb 7-1: Using ep0 maxpacket: 16 [ 967.720021][ T6077] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 967.721743][ T2040] loop0: detected capacity change from 0 to 32768 [ 967.742540][ T6077] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 967.800544][ T6077] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.855012][ T6077] usb 7-1: config 1 interface 0 has no altsetting 0 [ 967.890123][ T6077] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 967.925033][ T2040] JBD2: Ignoring recovery information on journal [ 967.971226][ T6077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.019865][T14796] Bluetooth: hci5: unexpected event for opcode 0x0803 [ 968.033050][ T6077] usb 7-1: Product: syz [ 968.051609][ T6077] usb 7-1: Manufacturer: syz [ 968.061840][ T6077] usb 7-1: SerialNumber: syz [ 968.083846][ T2040] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 968.333354][ T6077] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 968.346571][ T2142] loop1: detected capacity change from 0 to 4096 [ 968.366069][ T2158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9122'. [ 968.423670][ T6031] ocfs2: Unmounting device (7,0) on (node local) [ 968.536775][ T6125] usb 7-1: USB disconnect, device number 17 [ 968.593507][ T6125] usblp0: removed [ 969.736797][ T2236] loop6: detected capacity change from 0 to 512 [ 969.792991][ T2236] EXT4-fs: Ignoring removed nobh option [ 969.915067][ T2236] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 970.003625][ T2236] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.9141: invalid indirect mapped block 256 (level 1) [ 970.034834][ T2236] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.9141: invalid indirect mapped block 2683928664 (level 1) [ 970.111924][ T6125] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 970.149843][ T2236] EXT4-fs (loop6): 1 truncate cleaned up [ 970.158659][ T2236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.271865][ T6125] usb 2-1: Using ep0 maxpacket: 32 [ 970.298273][ T6125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 970.339226][ T6125] usb 2-1: config 255 has an invalid interface number: 81 but max is 0 [ 970.372042][ T6125] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 970.421951][ T6125] usb 2-1: config 255 has no interface number 0 [ 970.453862][ T6125] usb 2-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 970.501957][ T6125] usb 2-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 970.521853][ T30] audit: type=1800 audit(1755156313.651:266): pid=2236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9141" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 970.547660][ T6125] usb 2-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 970.618534][ T6125] usb 2-1: config 255 interface 81 has no altsetting 0 [ 970.645129][ T6125] usb 2-1: string descriptor 0 read error: -22 [ 970.663710][ T6125] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 970.715568][ T6125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.728666][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.785183][ T6125] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:255.81/input/input68 [ 971.261792][ T6077] usb 2-1: USB disconnect, device number 121 [ 971.306325][ T2231] loop0: detected capacity change from 0 to 32768 [ 971.334486][ T2302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9156'. [ 971.336122][ T2299] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 971.364132][ T2231] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9139 (2231) [ 971.440545][ T2245] loop9: detected capacity change from 0 to 32768 [ 971.488579][ T2231] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 971.502071][ T2245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9143 (2245) [ 971.555592][ T2231] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 971.591997][ T2245] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 971.626507][ T2231] BTRFS info (device loop0): disk space caching is enabled [ 971.636193][ T2245] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 971.657796][ T2231] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 971.689899][ T2245] BTRFS info (device loop9): using free-space-tree [ 972.094652][T14796] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 972.105224][T14796] Bluetooth: hci5: Injecting HCI hardware error event [ 972.114760][T28753] Bluetooth: hci5: hardware error 0x00 [ 972.156646][ T2371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9163'. [ 972.184034][ T2371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9163'. [ 972.193072][ T2231] BTRFS info (device loop0): rebuilding free space tree [ 972.358381][ T2231] BTRFS info (device loop0): disabling free space tree [ 972.380825][ T2231] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 972.403580][T22082] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 972.458890][ T2231] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 972.524208][ T2379] loop7: detected capacity change from 0 to 1764 [ 972.629599][ T2379] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 972.831881][ T6031] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 973.617878][ T2443] netlink: 'syz.5.9179': attribute type 21 has an invalid length. [ 973.691702][ T2443] netlink: 'syz.5.9179': attribute type 4 has an invalid length. [ 974.030445][ T2464] loop9: detected capacity change from 0 to 512 [ 974.262338][ T2464] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.319163][ T2485] netlink: 'syz.7.9188': attribute type 40 has an invalid length. [ 974.332625][T28753] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 974.344479][ T2467] loop6: detected capacity change from 0 to 4096 [ 974.355286][ T2464] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.397219][ T2485] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9188'. [ 974.558223][ T2464] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.9184: Abort forced by user [ 974.677182][ T2467] ntfs3(loop6): ino=b, Correct links count -> 1. [ 974.718839][ T2464] EXT4-fs (loop9): Remounting filesystem read-only [ 974.729568][ T2467] ntfs3(loop6): ino=18, mi_enum_attr [ 974.742432][ T2464] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 974.780649][ T2467] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 974.828239][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9191'. [ 974.946080][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.344888][ T2532] netlink: 'syz.0.9198': attribute type 10 has an invalid length. [ 975.453971][ T2532] team0: Device veth1_vlan is already a lower device of the team interface [ 976.037498][ T2477] loop5: detected capacity change from 0 to 32768 [ 976.962533][ T2641] dlm: no locking on control device [ 977.022569][ T6125] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 977.046826][ T2646] syz.0.9223 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 977.263450][ T6125] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 977.292501][ T30] audit: type=1400 audit(1755156320.431:267): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=2656 comm="syz.1.9225" [ 977.295374][ T6125] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 977.358322][ T2660] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9227'. [ 977.422309][ T6125] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 977.463152][ T6125] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 977.498850][ T6125] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 977.512089][ T6125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.551000][ T6125] usb 8-1: Product: syz [ 977.587334][ T6125] usb 8-1: Manufacturer: syz [ 977.621484][ T6125] usb 8-1: SerialNumber: syz [ 977.663496][ T6125] usb 8-1: config 0 descriptor?? [ 977.703829][ T2623] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 977.715065][ T2685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.723556][ T6125] usb 8-1: ucan: probing device on interface #0 [ 977.735883][ T6125] usb 8-1: ucan: invalid endpoint configuration [ 977.752451][ T6125] usb 8-1: ucan: probe failed; try to update the device firmware [ 978.068913][ T1207] usb 8-1: USB disconnect, device number 15 [ 978.710513][ T2752] loop5: detected capacity change from 0 to 64 [ 979.117403][ T2774] netlink: 'syz.9.9248': attribute type 16 has an invalid length. [ 979.174907][ T2774] netlink: 'syz.9.9248': attribute type 3 has an invalid length. [ 979.236592][ T2774] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9248'. [ 979.252398][ T2782] netlink: 348 bytes leftover after parsing attributes in process `syz.5.9250'. [ 979.943061][ T2825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.952506][ T2824] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9261'. [ 979.980329][ T2824] netlink: 'syz.5.9261': attribute type 1 has an invalid length. [ 980.259874][ T2742] loop1: detected capacity change from 0 to 32768 [ 980.364648][ T2843] loop6: detected capacity change from 0 to 512 [ 980.422161][ T2843] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 980.440616][ T2861] netlink: 'syz.0.9267': attribute type 5 has an invalid length. [ 980.491203][ T2843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102] [ 980.565577][ T2843] System zones: 1-12 [ 980.569782][ T2843] EXT4-fs (loop6): orphan cleanup on readonly fs [ 980.623001][ T2861] ip6erspan0: entered promiscuous mode [ 980.668396][ T2843] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9263: invalid indirect mapped block 12 (level 1) [ 980.720179][ T2843] EXT4-fs (loop6): Remounting filesystem read-only [ 980.730872][ T2843] EXT4-fs (loop6): 1 truncate cleaned up [ 980.753906][ T2843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 981.073209][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 981.429068][ T2919] netlink: 'syz.0.9281': attribute type 3 has an invalid length. [ 981.510812][ T2919] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9281'. [ 981.611071][ T2930] netlink: 'syz.6.9284': attribute type 5 has an invalid length. [ 981.884563][ T2942] loop6: detected capacity change from 0 to 256 [ 981.930827][ T2947] cgroup: release_agent respecified [ 981.948945][ T2948] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 982.050062][ T2942] FAT-fs (loop6): Directory bread(block 64) failed [ 982.091909][ T2942] FAT-fs (loop6): Directory bread(block 65) failed [ 982.125273][ T2942] FAT-fs (loop6): Directory bread(block 66) failed [ 982.131827][ T2942] FAT-fs (loop6): Directory bread(block 67) failed [ 982.163396][ T2957] loop0: detected capacity change from 0 to 256 [ 982.196194][ T2942] FAT-fs (loop6): Directory bread(block 68) failed [ 982.223200][ T2942] FAT-fs (loop6): Directory bread(block 69) failed [ 982.237034][ T2957] exfat: Deprecated parameter 'namecase' [ 982.271822][ T2942] FAT-fs (loop6): Directory bread(block 70) failed [ 982.302429][ T2942] FAT-fs (loop6): Directory bread(block 71) failed [ 982.309096][ T2942] FAT-fs (loop6): Directory bread(block 72) failed [ 982.362520][ T2957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 982.390235][ T2942] FAT-fs (loop6): Directory bread(block 73) failed [ 983.704998][ T3032] loop7: detected capacity change from 0 to 2048 [ 983.821645][ T3032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.937735][ T2971] loop5: detected capacity change from 0 to 32768 [ 983.980153][ T2971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9296 (2971) [ 984.063137][ T2971] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 984.125517][ T2971] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 984.203997][ T2971] BTRFS info (device loop5): disk space caching is enabled [ 984.252186][ T30] audit: type=1326 audit(1755156327.391:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3064 comm="syz.6.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 984.256706][ T2971] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 984.274666][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.372183][ T6077] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 984.381586][ T30] audit: type=1326 audit(1755156327.391:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3064 comm="syz.6.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 984.492863][ T30] audit: type=1326 audit(1755156327.481:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3064 comm="syz.6.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 984.517311][ T30] audit: type=1326 audit(1755156327.481:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3064 comm="syz.6.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 984.549152][ T30] audit: type=1326 audit(1755156327.481:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3064 comm="syz.6.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57bd8ebe9 code=0x7ffc0000 [ 984.596759][ T6077] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 984.642288][ T3094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9323'. [ 984.651285][ T3094] netlink: 'syz.9.9323': attribute type 1 has an invalid length. [ 984.692389][ T6077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.705866][ T2971] BTRFS info (device loop5): rebuilding free space tree [ 984.748661][ T6077] usb 1-1: Product: syz [ 984.764428][ T3094] netlink: 'syz.9.9323': attribute type 2 has an invalid length. [ 984.768501][ T3103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9325'. [ 984.774567][ T6077] usb 1-1: Manufacturer: syz [ 984.815699][ T3094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9323'. [ 984.832275][ T2971] BTRFS info (device loop5): disabling free space tree [ 984.843319][ T6077] usb 1-1: SerialNumber: syz [ 984.860029][ T2971] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 984.896534][ T6077] usb 1-1: config 0 descriptor?? [ 984.925024][ T6077] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 984.941620][ T2971] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 985.368945][ T6077] gspca_sunplus: reg_r err -71 [ 985.375540][ T6077] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 985.387719][ T6077] usb 1-1: USB disconnect, device number 118 [ 985.591823][ T3139] netlink: 'syz.9.9331': attribute type 1 has an invalid length. [ 985.757719][ T6042] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 986.139958][ T3165] sctp: [Deprecated]: syz.5.9335 (pid 3165) Use of int in maxseg socket option. [ 986.139958][ T3165] Use struct sctp_assoc_value instead [ 986.412529][ T3177] netlink: 'syz.0.9342': attribute type 6 has an invalid length. [ 987.507625][ T3243] netdevsim netdevsim7: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 988.205529][ T3278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9370'. [ 988.922200][ T6125] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 988.966398][ T3311] veth3: entered promiscuous mode [ 989.000511][ T3319] .: renamed from bond0 (while UP) [ 989.123777][ T6125] usb 7-1: Using ep0 maxpacket: 16 [ 989.157710][ T6125] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 989.230919][ T6125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 989.255130][ T6125] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 989.298741][ T6125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.322344][ T6125] usb 7-1: Product: syz [ 989.326552][ T6125] usb 7-1: Manufacturer: syz [ 989.358416][ T6125] usb 7-1: SerialNumber: syz [ 989.378091][ T6125] usb 7-1: config 0 descriptor?? [ 989.599989][ T3259] syz.7.9365 (3259): drop_caches: 2 [ 989.647213][ T3351] loop1: detected capacity change from 0 to 1024 [ 989.650553][ T6125] appledisplay: Apple Cinema Display connected [ 989.681264][ T3355] netlink: 'syz.0.9388': attribute type 1 has an invalid length. [ 989.749423][ T3355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9388'. [ 989.996689][ T6125] usb 7-1: USB disconnect, device number 18 [ 990.002722][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 990.049281][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 990.076710][ T6125] appledisplay: Apple Cinema Display disconnected [ 990.129242][ T3379] loop9: detected capacity change from 0 to 64 [ 990.295095][ T3391] loop1: detected capacity change from 0 to 512 [ 990.367885][ T3391] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 990.434156][ T3391] EXT4-fs (loop1): orphan cleanup on readonly fs [ 990.469611][ T3391] EXT4-fs error (device loop1): __ext4_iget:5464: inode #11: block 8: comm syz.1.9394: invalid block [ 990.516417][ T3391] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.9394: couldn't read orphan inode 11 (err -117) [ 990.531075][ T3391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 990.551067][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9397'. [ 990.595181][ T3391] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 990.816043][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.537001][ T3356] loop5: detected capacity change from 0 to 32768 [ 991.647090][ T3454] loop1: detected capacity change from 0 to 4096 [ 991.671085][ T3356] ea_get: invalid extended attribute [ 991.695205][ T3454] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 991.727056][ T3356] ea_get: invalid extended attribute [ 991.732642][ T30] audit: type=1800 audit(1755156334.861:273): pid=3356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9389" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 991.761164][ T3454] ntfs3(loop1): ino=3, mi_enum_attr [ 991.779774][ T3472] loop9: detected capacity change from 0 to 256 [ 991.811148][ T3472] exfat: Deprecated parameter 'utf8' [ 991.939146][ T3472] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 992.449652][ T3501] netlink: 'syz.9.9422': attribute type 10 has an invalid length. [ 992.573550][ T3501] veth0_vlan: left promiscuous mode [ 992.643372][ T3501] veth0_vlan: entered promiscuous mode [ 992.718545][ T3501] team0: Device veth0_vlan failed to register rx_handler [ 993.062612][ T3512] loop0: detected capacity change from 0 to 8192 [ 993.232768][ T3540] usb usb1: usbfs: process 3540 (syz.5.9431) did not claim interface 0 before use [ 993.618979][ T3567] loop7: detected capacity change from 0 to 64 [ 993.739768][ T3567] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 993.902526][ T6125] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 994.102247][ T6125] usb 6-1: Using ep0 maxpacket: 32 [ 994.137481][ T6125] usb 6-1: config 191 has 1 interface, different from the descriptor's value: 9 [ 994.139144][ T3591] IPv6: sit1: Disabled Multicast RS [ 994.175959][ T6125] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 994.213124][ T6125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.252074][ T6125] usb 6-1: Product: syz [ 994.276792][ T6125] usb 6-1: Manufacturer: syz [ 994.281426][ T6125] usb 6-1: SerialNumber: syz [ 994.325648][ T6125] usb 6-1: active config #191 != 1 ?? [ 994.473594][ T3610] loop9: detected capacity change from 0 to 1024 [ 994.582175][ T6125] usb 6-1: USB disconnect, device number 112 [ 994.977307][ T6125] IPVS: starting estimator thread 0... [ 995.092153][ T3651] IPVS: using max 25 ests per chain, 60000 per kthread [ 995.436319][ T3676] loop9: detected capacity change from 0 to 512 [ 995.577329][ T3676] EXT4-fs: Ignoring removed nobh option [ 995.642398][ T3676] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 995.678782][ T3689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9470'. [ 995.690489][ T3676] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.9468: invalid indirect mapped block 256 (level 1) [ 995.799829][ T3676] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.9468: invalid indirect mapped block 2683928664 (level 1) [ 995.927724][ T3676] EXT4-fs (loop9): 1 truncate cleaned up [ 995.963980][ T3676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.141510][ T3703] loop1: detected capacity change from 0 to 4096 [ 996.226130][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.280474][ T3719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9479'. [ 996.312555][ T3703] [ 996.314911][ T3703] ====================================================== [ 996.321924][ T3703] WARNING: possible circular locking dependency detected [ 996.328935][ T3703] 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 Not tainted [ 996.336027][ T3703] ------------------------------------------------------ [ 996.343025][ T3703] syz.1.9475/3703 is trying to acquire lock: [ 996.348980][ T3703] ffff88805718d928 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x72a/0xf10 [ 996.357338][ T3703] [ 996.357338][ T3703] but task is already holding lock: [ 996.364682][ T3703] ffff88805bf64d48 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0 [ 996.373670][ T3703] [ 996.373670][ T3703] which lock already depends on the new lock. [ 996.373670][ T3703] [ 996.384059][ T3703] [ 996.384059][ T3703] the existing dependency chain (in reverse order) is: [ 996.393060][ T3703] [ 996.393060][ T3703] -> #5 (&ei->xattr_sem){++++}-{4:4}: [ 996.400617][ T3703] lock_acquire+0x120/0x360 [ 996.405646][ T3703] down_read+0x46/0x2e0 [ 996.410323][ T3703] ext4_setattr+0x855/0x1bc0 [ 996.415435][ T3703] notify_change+0xb36/0xe40 [ 996.420538][ T3703] chown_common+0x40c/0x5c0 [ 996.425551][ T3703] do_fchownat+0x161/0x270 [ 996.430480][ T3703] __x64_sys_chown+0x82/0xa0 [ 996.435580][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.440601][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.447003][ T3703] [ 996.447003][ T3703] -> #4 (jbd2_handle){++++}-{0:0}: [ 996.454298][ T3703] lock_acquire+0x120/0x360 [ 996.459324][ T3703] start_this_handle+0x1fa7/0x21c0 [ 996.464986][ T3703] jbd2__journal_start+0x2c1/0x5b0 [ 996.470613][ T3703] jbd2_journal_start+0x2a/0x40 [ 996.475983][ T3703] ocfs2_start_trans+0x376/0x6d0 [ 996.481438][ T3703] ocfs2_modify_bh+0xe8/0x470 [ 996.486627][ T3703] ocfs2_local_read_info+0x1465/0x17e0 [ 996.492598][ T3703] dquot_load_quota_sb+0x791/0xbd0 [ 996.498218][ T3703] dquot_load_quota_inode+0x2e1/0x5d0 [ 996.504100][ T3703] ocfs2_enable_quotas+0x1c6/0x450 [ 996.509733][ T3703] ocfs2_fill_super+0x50fe/0x63c0 [ 996.515287][ T3703] get_tree_bdev_flags+0x40e/0x4d0 [ 996.520923][ T3703] vfs_get_tree+0x92/0x2b0 [ 996.525863][ T3703] do_new_mount+0x2a2/0x9e0 [ 996.530890][ T3703] __se_sys_mount+0x317/0x410 [ 996.536097][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.541122][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.547526][ T3703] [ 996.547526][ T3703] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 996.556040][ T3703] lock_acquire+0x120/0x360 [ 996.561067][ T3703] down_read+0x46/0x2e0 [ 996.565762][ T3703] ocfs2_start_trans+0x36a/0x6d0 [ 996.571221][ T3703] ocfs2_modify_bh+0xe8/0x470 [ 996.576409][ T3703] ocfs2_local_read_info+0x1465/0x17e0 [ 996.582384][ T3703] dquot_load_quota_sb+0x791/0xbd0 [ 996.588010][ T3703] dquot_load_quota_inode+0x2e1/0x5d0 [ 996.593895][ T3703] ocfs2_enable_quotas+0x1c6/0x450 [ 996.599528][ T3703] ocfs2_fill_super+0x50fe/0x63c0 [ 996.605067][ T3703] get_tree_bdev_flags+0x40e/0x4d0 [ 996.610700][ T3703] vfs_get_tree+0x92/0x2b0 [ 996.615631][ T3703] do_new_mount+0x2a2/0x9e0 [ 996.620650][ T3703] __se_sys_mount+0x317/0x410 [ 996.625844][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.630982][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.637388][ T3703] [ 996.637388][ T3703] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 996.644908][ T3703] lock_acquire+0x120/0x360 [ 996.649970][ T3703] ocfs2_start_trans+0x26b/0x6d0 [ 996.655424][ T3703] ocfs2_acquire_dquot+0x455/0xb30 [ 996.661046][ T3703] dqget+0x7b1/0xf10 [ 996.665902][ T3703] dquot_set_dqblk+0x2b/0xfa0 [ 996.671091][ T3703] quota_setquota+0x4b7/0x540 [ 996.676290][ T3703] __se_sys_quotactl+0x279/0x950 [ 996.681740][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.686781][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.693182][ T3703] [ 996.693182][ T3703] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 996.702040][ T3703] lock_acquire+0x120/0x360 [ 996.707069][ T3703] down_write+0x96/0x1f0 [ 996.711821][ T3703] ocfs2_create_local_dquot+0x19d/0x1a40 [ 996.717963][ T3703] ocfs2_acquire_dquot+0x80f/0xb30 [ 996.723591][ T3703] dqget+0x7b1/0xf10 [ 996.728000][ T3703] dquot_set_dqblk+0x2b/0xfa0 [ 996.733189][ T3703] quota_setquota+0x4b7/0x540 [ 996.738386][ T3703] __se_sys_quotactl+0x279/0x950 [ 996.743848][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.748879][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.755290][ T3703] [ 996.755290][ T3703] -> #0 (&dquot->dq_lock){+.+.}-{4:4}: [ 996.762942][ T3703] validate_chain+0xb9b/0x2140 [ 996.768253][ T3703] __lock_acquire+0xab9/0xd20 [ 996.773458][ T3703] lock_acquire+0x120/0x360 [ 996.778489][ T3703] __mutex_lock+0x187/0x1360 [ 996.783686][ T3703] dqget+0x72a/0xf10 [ 996.788110][ T3703] dquot_transfer+0x2f8/0x6d0 [ 996.793301][ T3703] ext4_setattr+0x865/0x1bc0 [ 996.798500][ T3703] notify_change+0xb36/0xe40 [ 996.803611][ T3703] chown_common+0x40c/0x5c0 [ 996.808636][ T3703] do_fchownat+0x161/0x270 [ 996.813567][ T3703] __x64_sys_lchown+0x85/0xa0 [ 996.818795][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.823835][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.830258][ T3703] [ 996.830258][ T3703] other info that might help us debug this: [ 996.830258][ T3703] [ 996.840473][ T3703] Chain exists of: [ 996.840473][ T3703] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 996.840473][ T3703] [ 996.853095][ T3703] Possible unsafe locking scenario: [ 996.853095][ T3703] [ 996.860542][ T3703] CPU0 CPU1 [ 996.865934][ T3703] ---- ---- [ 996.871288][ T3703] rlock(&ei->xattr_sem); [ 996.875701][ T3703] lock(jbd2_handle); [ 996.882285][ T3703] lock(&ei->xattr_sem); [ 996.889131][ T3703] lock(&dquot->dq_lock); [ 996.893544][ T3703] [ 996.893544][ T3703] *** DEADLOCK *** [ 996.893544][ T3703] [ 996.901812][ T3703] 3 locks held by syz.1.9475/3703: [ 996.906916][ T3703] #0: ffff88807bda8428 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 996.916086][ T3703] #1: ffff88805bf65060 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: chown_common+0x313/0x5c0 [ 996.926464][ T3703] #2: ffff88805bf64d48 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0 [ 996.935894][ T3703] [ 996.935894][ T3703] stack backtrace: [ 996.941775][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.1.9475 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 996.941803][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.941817][ T3703] Call Trace: [ 996.941828][ T3703] [ 996.941839][ T3703] dump_stack_lvl+0x189/0x250 [ 996.941873][ T3703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.941899][ T3703] ? __pfx__printk+0x10/0x10 [ 996.941930][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.941956][ T3703] ? print_lock_name+0xde/0x100 [ 996.941987][ T3703] print_circular_bug+0x2ee/0x310 [ 996.942020][ T3703] check_noncircular+0x134/0x160 [ 996.942050][ T3703] validate_chain+0xb9b/0x2140 [ 996.942074][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942100][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942124][ T3703] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 996.942152][ T3703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 996.942180][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942204][ T3703] ? look_up_lock_class+0x74/0x170 [ 996.942234][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942259][ T3703] ? register_lock_class+0x51/0x320 [ 996.942297][ T3703] __lock_acquire+0xab9/0xd20 [ 996.942333][ T3703] ? dqget+0x72a/0xf10 [ 996.942352][ T3703] lock_acquire+0x120/0x360 [ 996.942382][ T3703] ? dqget+0x72a/0xf10 [ 996.942408][ T3703] __mutex_lock+0x187/0x1360 [ 996.942438][ T3703] ? dqget+0x72a/0xf10 [ 996.942462][ T3703] ? __lock_acquire+0xab9/0xd20 [ 996.942552][ T3703] ? dqget+0x72a/0xf10 [ 996.942574][ T3703] ? __pfx___mutex_lock+0x10/0x10 [ 996.942607][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942644][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942672][ T3703] dqget+0x72a/0xf10 [ 996.942697][ T3703] dquot_transfer+0x2f8/0x6d0 [ 996.942724][ T3703] ? __pfx_dquot_transfer+0x10/0x10 [ 996.942747][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942776][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942800][ T3703] ? down_read+0x1ad/0x2e0 [ 996.942833][ T3703] ext4_setattr+0x865/0x1bc0 [ 996.942872][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.942915][ T3703] ? try_break_deleg+0x79/0x130 [ 996.942944][ T3703] ? __pfx_ext4_setattr+0x10/0x10 [ 996.942993][ T3703] notify_change+0xb36/0xe40 [ 996.943034][ T3703] chown_common+0x40c/0x5c0 [ 996.943059][ T3703] ? __pfx_chown_common+0x10/0x10 [ 996.943104][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.943133][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.943157][ T3703] ? mnt_get_write_access+0x223/0x2a0 [ 996.943184][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.943210][ T3703] do_fchownat+0x161/0x270 [ 996.943231][ T3703] ? __pfx_do_fchownat+0x10/0x10 [ 996.943251][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.943275][ T3703] ? rcu_is_watching+0x15/0xb0 [ 996.943301][ T3703] __x64_sys_lchown+0x85/0xa0 [ 996.943323][ T3703] do_syscall_64+0xfa/0x3b0 [ 996.943353][ T3703] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.943382][ T3703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.943402][ T3703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 996.943427][ T3703] ? exc_page_fault+0x9f/0xf0 [ 996.943455][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.943477][ T3703] RIP: 0033:0x7fd28218ebe9 [ 996.943497][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.943516][ T3703] RSP: 002b:00007fd283029038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 996.943549][ T3703] RAX: ffffffffffffffda RBX: 00007fd2823b5fa0 RCX: 00007fd28218ebe9 [ 996.943566][ T3703] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000200000000080 [ 996.943581][ T3703] RBP: 00007fd282211e19 R08: 0000000000000000 R09: 0000000000000000 [ 996.943595][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.943608][ T3703] R13: 00007fd2823b6038 R14: 00007fd2823b5fa0 R15: 00007ffc59b79768 [ 996.943633][ T3703] [ 997.393753][ T30] audit: type=1800 audit(1755156340.511:274): pid=3676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9468" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 997.431963][ T3665] loop0: detected capacity change from 0 to 32768 [ 997.464862][ T3690] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 997.524478][ T3690] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 997.541906][ T3665] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 997.557487][T22082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.604116][ T6028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.619947][ T3665] (syz.0.9464,3665,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255 [ 997.647724][ T3665] (syz.0.9464,3665,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 997.690782][ T3665] (syz.0.9464,3665,0):ocfs2_mknod:301 ERROR: status = -2 [ 997.701506][ T3665] (syz.0.9464,3665,0):ocfs2_mknod:505 ERROR: status = -2 [ 997.711378][ T3665] (syz.0.9464,3665,0):ocfs2_create:678 ERROR: status = -2 [ 997.753951][ T6031] ocfs2: Unmounting device (7,0) on (node local)