last executing test programs: 1m21.722719081s ago: executing program 0 (id=2161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffeb7, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m21.535735854s ago: executing program 0 (id=2163): r0 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r0, 0x111, 0x0, 0x0, 0x90aa62107f0000) 1m21.21030873s ago: executing program 0 (id=2167): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400", 0x34324948}) 1m20.867891424s ago: executing program 0 (id=2170): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m20.451636671s ago: executing program 0 (id=2174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@dev, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e00000f000000000000ffffff7f00", 0x81}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 1m19.83158423s ago: executing program 0 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x40, 0x0, 0x0, 0x0, "620000a975ff236e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x26, 0x0, 0x6, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x4000810) 1m19.482349766s ago: executing program 32 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x40, 0x0, 0x0, 0x0, "620000a975ff236e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x26, 0x0, 0x6, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x4000810) 3.695801433s ago: executing program 5 (id=3145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3.695369063s ago: executing program 3 (id=3146): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 3.484706236s ago: executing program 5 (id=3149): io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 3.459925956s ago: executing program 3 (id=3151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.18630708s ago: executing program 3 (id=3155): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e"], 0x0) syz_emit_vhci(0x0, 0xd) 3.120288092s ago: executing program 5 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xb, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) 2.959048764s ago: executing program 2 (id=3161): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 2.826225056s ago: executing program 5 (id=3163): unshare(0x22020600) listen(0xffffffffffffffff, 0x9) 2.719723988s ago: executing program 2 (id=3164): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 2.688142218s ago: executing program 1 (id=3166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8}]}, 0x74}, 0x1, 0x3}, 0x0) 2.592226259s ago: executing program 2 (id=3168): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl(r0, 0x7fffffff, 0x0) 2.468563272s ago: executing program 2 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x44}}, 0x0) 2.457511472s ago: executing program 1 (id=3171): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1003, 0x0) 2.415367713s ago: executing program 5 (id=3172): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000000440)={[{@ssd}, {@nossd}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 2.270406495s ago: executing program 1 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffeb7, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.139413087s ago: executing program 2 (id=3176): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.001330879s ago: executing program 1 (id=3178): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.819440301s ago: executing program 1 (id=3181): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)="2ff737", 0x3}, 0x1, 0x0, 0x0, 0x4011}, 0x800) 1.648655074s ago: executing program 1 (id=3183): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00)={[{@noikeep}, {@sunit}]}, 0x4, 0x9864, &(0x7f0000000140)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000099c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.362271339s ago: executing program 4 (id=3185): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)}) 1.361465979s ago: executing program 3 (id=3186): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1.125532102s ago: executing program 4 (id=3187): r0 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x11, 0x0, 0x0, 0xfa000, 0x1a5e00}) 1.084074343s ago: executing program 3 (id=3188): r0 = socket(0x2b, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) 721.974808ms ago: executing program 5 (id=3189): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 721.881048ms ago: executing program 4 (id=3190): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fstat(r0, &(0x7f0000001dc0)) 618.09844ms ago: executing program 4 (id=3191): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x401, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) 411.806963ms ago: executing program 3 (id=3192): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r0) 411.633933ms ago: executing program 4 (id=3193): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) 17.488559ms ago: executing program 33 (id=3192): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r0) 9.802599ms ago: executing program 2 (id=3195): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) 0s ago: executing program 4 (id=3204): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) kernel console output (not intermixed with test programs): ck' for blocksize < PAGE_SIZE [ 195.508049][ T7836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.578707][ T7836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.801317][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 195.952615][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 196.327455][ T7866] netlink: 'syz.0.1631': attribute type 8 has an invalid length. [ 196.349127][ T7866] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1631'. [ 196.569489][ T7876] xt_TCPMSS: Only works on TCP SYN packets [ 196.813710][ T7886] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 197.113424][ T7898] overlayfs: unrecognized mount option "\" or missing value [ 197.260348][ T7900] loop2: detected capacity change from 0 to 4096 [ 197.312390][ T7900] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 197.469531][ T7900] ntfs3: loop2: failed to convert "c46c" to cp437 [ 197.532868][ T7912] loop0: detected capacity change from 0 to 8 [ 197.711392][ T7916] loop4: detected capacity change from 0 to 512 [ 197.775182][ T7916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.835064][ T7920] netlink: 'syz.2.1656': attribute type 3 has an invalid length. [ 197.919105][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 197.935989][ T7916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1654: bg 0: block 248: padding at end of block bitmap is not set [ 198.042722][ T7916] Quota error (device loop4): write_blk: dquota write failed [ 198.067339][ T7916] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 198.114404][ T7916] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1654: Failed to acquire dquot type 1 [ 198.145596][ T7916] EXT4-fs (loop4): 1 truncate cleaned up [ 198.183750][ T7916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.210290][ T7916] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.276970][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1663'. [ 198.299179][ T7916] EXT4-fs: Cannot change quota options when quota turned on [ 198.347577][ T7940] loop2: detected capacity change from 0 to 256 [ 198.398706][ T7940] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 198.528138][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 198.695862][ T7946] loop1: detected capacity change from 0 to 1764 [ 198.739754][ T26] audit: type=1326 audit(1751064438.611:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 198.804777][ T7952] cgroup: name respecified [ 198.819021][ T26] audit: type=1326 audit(1751064438.641:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 198.938270][ T26] audit: type=1326 audit(1751064438.641:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 199.031387][ T26] audit: type=1326 audit(1751064438.641:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.4.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 199.053660][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.525423][ T7972] loop1: detected capacity change from 0 to 2048 [ 199.676970][ T7972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.689525][ T7974] loop2: detected capacity change from 0 to 4096 [ 199.709144][ T7972] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.733850][ T7972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1681: bg 0: block 345: padding at end of block bitmap is not set [ 199.762350][ T7972] EXT4-fs (loop1): Remounting filesystem read-only [ 199.770101][ T7974] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 199.798087][ T7954] loop3: detected capacity change from 0 to 32768 [ 199.805698][ T7954] XFS: attr2 mount option is deprecated. [ 199.811806][ T7954] XFS: ikeep mount option is deprecated. [ 199.817646][ T7954] XFS: noikeep mount option is deprecated. [ 199.873744][ T7954] XFS (loop3): Mounting V5 Filesystem [ 200.029404][ T7974] ntfs3: loop2: failed to convert "c46c" to cp737 [ 200.042939][ T7954] XFS (loop3): Ending clean mount [ 200.051992][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 200.145739][ T7954] XFS (loop3): Quotacheck needed: Please wait. [ 200.164847][ T7995] xt_HMARK: spi-set and port-set can't be combined [ 200.238540][ T7954] XFS (loop3): Quotacheck: Done. [ 200.461655][ T8000] loop2: detected capacity change from 0 to 256 [ 200.488441][ T8000] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 200.506507][ T4263] XFS (loop3): Unmounting Filesystem [ 200.615199][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1694'. [ 200.858187][ T4373] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.879625][ T8009] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 200.972073][ T7992] loop4: detected capacity change from 0 to 32768 [ 200.983536][ T8009] device bond2 entered promiscuous mode [ 200.989529][ T8009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.015071][ T7992] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1687 (7992) [ 201.052093][ T4373] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 201.105090][ T4373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.110378][ T26] audit: type=1326 audit(1751064440.971:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 201.173980][ T4373] usb 3-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 201.186166][ T26] audit: type=1326 audit(1751064441.021:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 201.223528][ T4373] usb 3-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 201.259974][ T26] audit: type=1326 audit(2000000000.000:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 201.299428][ T4373] usb 3-1: config 1 interface 1 has no altsetting 0 [ 201.318681][ T4373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.328067][ T7992] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 201.345382][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.354091][ T7992] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 201.373881][ T4373] usb 3-1: Product: syz [ 201.378128][ T4373] usb 3-1: Manufacturer: syz [ 201.388586][ T7992] BTRFS info (device loop4): max_inline at 0 [ 201.404738][ T4373] usb 3-1: SerialNumber: syz [ 201.412871][ T7992] BTRFS info (device loop4): using free space tree [ 201.446073][ T4373] usb 3-1: selecting invalid altsetting 0 [ 201.459764][ T4373] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 201.519263][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 201.525407][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 201.539531][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 201.539551][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 201.539586][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 201.573618][ T8028] loop1: detected capacity change from 0 to 1024 [ 201.650268][ T4373] usb 3-1: selecting invalid altsetting 0 [ 201.656390][ T4373] usbtest: probe of 3-1:1.1 failed with error -22 [ 201.744373][ T4373] usb 3-1: USB disconnect, device number 10 [ 201.941782][ T7992] BTRFS info (device loop4): enabling ssd optimizations [ 202.004939][ T8051] loop1: detected capacity change from 0 to 1024 [ 202.115080][ T4252] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 202.221094][ T46] hfsplus: b-tree write err: -5, ino 4 [ 202.350752][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 202.384974][ T4363] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop4 scanned by udevd (4363) [ 202.596384][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 202.839665][ T8069] loop3: detected capacity change from 0 to 4096 [ 202.915946][ T8076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.006045][ T8069] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 203.019089][ T8069] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 203.061686][ T8069] Remounting filesystem read-only [ 203.073619][ T8069] NILFS (loop3): error -5 truncating bmap (ino=12) [ 203.311051][ T4263] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 203.489669][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 203.725171][ T8095] loop2: detected capacity change from 0 to 2048 [ 203.809903][ T8100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.003269][ T8100] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 204.039227][ T8100] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 204.107632][ T8100] Remounting filesystem read-only [ 204.113602][ T4261] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 204.293696][ T8084] loop1: detected capacity change from 0 to 32768 [ 204.361125][ T8084] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 204.523601][ T8118] program syz.2.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.884885][ T4363] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 205.179611][ T8106] loop0: detected capacity change from 0 to 32768 [ 205.239189][ T8106] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1731 (8106) [ 205.282144][ T8106] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.333417][ T8106] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 205.385325][ T8106] BTRFS info (device loop0): using free space tree [ 205.674500][ T8106] BTRFS info (device loop0): enabling ssd optimizations [ 205.770637][ T8164] loop1: detected capacity change from 0 to 1024 [ 205.928768][ T4258] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.206909][ T8174] netlink: 'syz.1.1755': attribute type 2 has an invalid length. [ 206.502418][ T8183] loop4: detected capacity change from 0 to 256 [ 206.560643][ T8183] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.673911][ T8183] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.926160][ T8195] loop1: detected capacity change from 0 to 1024 [ 206.968147][ T8197] loop2: detected capacity change from 0 to 1024 [ 207.085350][ T8203] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 207.122258][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'. [ 207.156307][ T8203] device dummy0 entered promiscuous mode [ 207.176082][ T8203] bridge0: port 3(dummy0) entered blocking state [ 207.183097][ T8203] bridge0: port 3(dummy0) entered disabled state [ 207.192868][ T9] hfsplus: b-tree write err: -5, ino 4 [ 207.211743][ T8203] bridge0: port 3(dummy0) entered blocking state [ 207.219000][ T8203] bridge0: port 3(dummy0) entered forwarding state [ 207.324898][ T8206] loop3: detected capacity change from 0 to 256 [ 207.414725][ T8211] loop2: detected capacity change from 0 to 1024 [ 207.450908][ T8206] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.546745][ T8206] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 207.589106][ T8206] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 207.617847][ T8206] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 207.855044][ T8215] loop0: detected capacity change from 0 to 4096 [ 207.898693][ T8215] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 207.945608][ T8215] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 207.961489][ T8215] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 207.982811][ T8215] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 208.069287][ T8215] ntfs: volume version 3.1. [ 208.076977][ T8215] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 208.105907][ T8215] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 208.124243][ T8215] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 208.147795][ T8230] loop3: detected capacity change from 0 to 1024 [ 208.227626][ T8215] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 208.245068][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 208.261400][ T8215] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 208.377804][ T8232] loop2: detected capacity change from 0 to 1764 [ 208.406823][ T8234] loop4: detected capacity change from 0 to 1024 [ 208.486575][ T8232] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 208.637849][ T8236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.133012][ T8255] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1796'. [ 209.295534][ T8261] Cannot find del_set index 2 as target [ 209.493798][ T8270] netlink: 'syz.1.1801': attribute type 95 has an invalid length. [ 210.169186][ T4325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.232629][ T8267] loop4: detected capacity change from 0 to 32768 [ 210.265380][ T8267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1800 (8267) [ 210.351876][ T8267] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.369038][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 210.379446][ T8267] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 210.384680][ T4325] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.407277][ T8267] BTRFS info (device loop4): using free space tree [ 210.411857][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.425798][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 210.443870][ T4325] usb 4-1: Product: syz [ 210.458598][ T4325] usb 4-1: Manufacturer: syz [ 210.465540][ T8287] netlink: 'syz.2.1810': attribute type 8 has an invalid length. [ 210.470135][ T4325] usb 4-1: SerialNumber: syz [ 210.479010][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.492104][ T8287] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 210.538189][ T4325] r8152-cfgselector 4-1: config 0 descriptor?? [ 210.549912][ T8295] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1811'. [ 210.669144][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 210.676459][ T32] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 210.692242][ T8302] netlink: 'syz.2.1812': attribute type 21 has an invalid length. [ 210.700314][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.710630][ T32] usb 2-1: config 0 descriptor?? [ 210.717086][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1812'. [ 210.729464][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 210.886194][ T8267] BTRFS info (device loop4): enabling ssd optimizations [ 210.998820][ T8314] loop2: detected capacity change from 0 to 512 [ 211.013351][ T4325] r8152-cfgselector 4-1: Unknown version 0x0000 [ 211.023347][ T4325] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 211.061782][ T8314] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 211.080657][ T8314] EXT4-fs (loop2): 1 truncate cleaned up [ 211.086390][ T8314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.125191][ T32] gspca_nw80x: reg_r err -71 [ 211.130081][ T32] nw80x: probe of 2-1:0.0 failed with error -71 [ 211.166166][ T8314] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 211.199897][ T32] usb 2-1: USB disconnect, device number 9 [ 211.259878][ T4252] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.291170][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 211.443063][ T8321] loop0: detected capacity change from 0 to 512 [ 211.557136][ T8321] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1819: bad orphan inode 11862016 [ 211.610060][ T8321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.619235][ T8321] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.871348][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 212.106407][ T8338] loop3: detected capacity change from 0 to 64 [ 212.205829][ T8342] netlink: 'syz.4.1827': attribute type 21 has an invalid length. [ 212.251840][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1827'. [ 212.367425][ T8346] netlink: 'syz.0.1829': attribute type 95 has an invalid length. [ 212.805396][ T8365] netlink: 'syz.2.1837': attribute type 21 has an invalid length. [ 212.816399][ T8366] netlink: 'syz.0.1838': attribute type 4 has an invalid length. [ 212.839022][ T4373] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.853675][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1837'. [ 213.029111][ T4373] usb 5-1: Using ep0 maxpacket: 32 [ 213.041131][ T4373] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 213.063597][ T4373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.086996][ T4373] usb 5-1: config 0 descriptor?? [ 213.118828][ T4373] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 213.510011][ T4373] gspca_nw80x: reg_r err -71 [ 213.514736][ T4373] nw80x: probe of 5-1:0.0 failed with error -71 [ 213.551954][ T4373] usb 5-1: USB disconnect, device number 8 [ 213.579143][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 213.769021][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 213.776106][ T14] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 213.805953][ T14] usb 3-1: config 2 has no interface number 0 [ 213.825851][ T14] usb 3-1: config 2 interface 31 has no altsetting 0 [ 213.861985][ T14] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 213.884432][ T8406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.901147][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.919210][ T14] usb 3-1: Product: syz [ 213.925920][ T8406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.933885][ T14] usb 3-1: Manufacturer: syz [ 213.938534][ T14] usb 3-1: SerialNumber: syz [ 213.957420][ T8406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.046034][ T8410] loop0: detected capacity change from 0 to 256 [ 214.096822][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'. [ 214.180058][ T8412] netlink: 'syz.1.1862': attribute type 8 has an invalid length. [ 214.227108][ T8412] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 214.384832][ T14] ch9200: probe of 3-1:2.31 failed with error -22 [ 214.396387][ T8416] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.419607][ T14] usb 3-1: USB disconnect, device number 11 [ 214.791521][ T8433] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 214.807073][ T8433] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 214.829978][ T8433] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 214.863768][ T8436] loop3: detected capacity change from 0 to 64 [ 215.256999][ T8448] loop4: detected capacity change from 0 to 64 [ 215.307961][ T8448] hfs: keylen 94 too large [ 215.347523][ T8448] hfs: request for non-existent node 1818584064 in B*Tree [ 215.375515][ T8448] hfs: request for non-existent node 1818584064 in B*Tree [ 215.641418][ T8457] loop3: detected capacity change from 0 to 8 [ 215.759365][ T8457] SQUASHFS error: Failed to read block 0x738: -5 [ 215.808964][ T8457] SQUASHFS error: Unable to read metadata cache entry [736] [ 216.732458][ T8500] loop4: detected capacity change from 0 to 64 [ 217.084125][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 217.274723][ T14] usb 1-1: too many configurations: 241, using maximum allowed: 8 [ 217.301245][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.334914][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.354360][ T14] usb 1-1: Product: syz [ 217.358607][ T14] usb 1-1: Manufacturer: syz [ 217.379005][ T14] usb 1-1: SerialNumber: syz [ 217.415589][ T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.464452][ T8528] loop2: detected capacity change from 0 to 128 [ 217.478361][ T14] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.549809][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.569540][ T8528] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.634853][ T26] audit: type=1326 audit(2000000016.476:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 217.658009][ T26] audit: type=1326 audit(2000000016.496:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 217.689167][ T26] audit: type=1326 audit(2000000016.496:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 217.744100][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 217.758966][ T26] audit: type=1326 audit(2000000016.496:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 217.883436][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 217.959977][ T3699] usb 1-1: USB disconnect, device number 7 [ 218.131419][ T8544] loop1: detected capacity change from 0 to 64 [ 218.365333][ T8552] netlink: 604 bytes leftover after parsing attributes in process `syz.3.1929'. [ 218.520953][ T8550] loop2: detected capacity change from 0 to 4096 [ 218.553976][ T8550] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 218.563344][ T14] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 218.578667][ T14] ath9k_htc: Failed to initialize the device [ 218.607389][ T3699] usb 1-1: ath9k_htc: USB layer deinitialized [ 218.613843][ T8559] netlink: 'syz.4.1932': attribute type 2 has an invalid length. [ 218.621758][ T26] audit: type=1326 audit(2000000017.456:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 218.669947][ T8559] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 218.674428][ T26] audit: type=1326 audit(2000000017.456:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 218.740475][ T8550] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 218.757922][ T8564] loop0: detected capacity change from 0 to 128 [ 218.795684][ T26] audit: type=1326 audit(2000000017.456:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 218.851606][ T8550] ntfs3: loop2: ino=5, "/" directory corrupted [ 218.903867][ T8564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.911798][ T8567] loop3: detected capacity change from 0 to 64 [ 218.975359][ T26] audit: type=1326 audit(2000000017.456:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef3d8e929 code=0x7ffc0000 [ 219.019023][ T8564] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.337509][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 219.553141][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 219.906391][ T8601] netlink: 'syz.3.1954': attribute type 2 has an invalid length. [ 219.939400][ T4318] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 219.947931][ T8601] netlink: 'syz.3.1954': attribute type 11 has an invalid length. [ 219.974200][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1954'. [ 220.129207][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 220.139348][ T4318] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.164123][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.179204][ T4318] usb 2-1: Product: syz [ 220.194554][ T4318] usb 2-1: Manufacturer: syz [ 220.204432][ T4318] usb 2-1: SerialNumber: syz [ 220.214753][ T4318] r8152-cfgselector 2-1: config 0 descriptor?? [ 220.364064][ T8615] overlayfs: conflicting options: userxattr,redirect_dir=on [ 220.393139][ T8617] Option ' ' to dns_resolver key: bad/missing value [ 220.623489][ T8623] loop3: detected capacity change from 0 to 256 [ 220.649031][ T4318] r8152-cfgselector 2-1: Unknown version 0x0000 [ 220.655859][ T4318] r8152-cfgselector 2-1: bad CDC descriptors [ 220.692993][ T4318] r8152-cfgselector 2-1: Unknown version 0x0000 [ 220.714370][ T4318] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 220.761368][ T8625] xt_TCPMSS: Only works on TCP SYN packets [ 220.937655][ T8629] dlm: no locking on control device [ 221.074394][ T8606] loop0: detected capacity change from 0 to 40427 [ 221.121881][ T8606] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 221.149382][ T8606] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.174320][ T8606] F2FS-fs (loop0): invalid crc value [ 221.240672][ T8606] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.474368][ T8606] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.486201][ T8606] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.518654][ T8650] nfs: Deprecated parameter 'nointr' [ 221.915141][ T3699] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 222.032641][ T8666] loop4: detected capacity change from 0 to 164 [ 222.064427][ T8666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 222.110737][ T8666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 222.137300][ T3699] usb 2-1: config 7 has an invalid interface number: 192 but max is 0 [ 222.155163][ T3699] usb 2-1: config 7 has no interface number 0 [ 222.171716][ T3699] usb 2-1: config 7 interface 192 has no altsetting 0 [ 222.191229][ T8666] Symlink component flag not implemented [ 222.205493][ T3699] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 222.219065][ T8666] Symlink component flag not implemented [ 222.235169][ T8666] Symlink component flag not implemented (7) [ 222.252143][ T3699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.261268][ T8671] netlink: 1020 bytes leftover after parsing attributes in process `syz.3.1986'. [ 222.271073][ T8666] Symlink component flag not implemented (116) [ 222.277367][ T3699] usb 2-1: Product: syz [ 222.292457][ T3699] usb 2-1: Manufacturer: syz [ 222.321145][ T3699] usb 2-1: SerialNumber: syz [ 222.575792][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 222.585861][ T3699] usb 2-1: USB disconnect, device number 11 [ 223.307361][ T8695] loop0: detected capacity change from 0 to 4096 [ 223.331139][ T8695] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 223.456666][ T8695] ntfs3: loop0: failed to convert "c46c" to cp437 [ 223.809181][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 223.825256][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 223.962327][ T8724] cgroup: name respecified [ 223.999097][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 224.006222][ T14] usb 4-1: config 6 has an invalid interface number: 225 but max is 0 [ 224.024768][ T14] usb 4-1: config 6 has no interface number 0 [ 224.033046][ T14] usb 4-1: config 6 interface 225 has no altsetting 0 [ 224.052491][ T14] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 224.087733][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.128417][ T14] usb 4-1: Product: syz [ 224.133144][ T14] usb 4-1: Manufacturer: syz [ 224.153738][ T8732] loop1: detected capacity change from 0 to 256 [ 224.172160][ T14] usb 4-1: SerialNumber: syz [ 224.294842][ T8732] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 224.403979][ T14] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 224.442195][ T14] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 224.475322][ T8742] loop0: detected capacity change from 0 to 8 [ 224.477037][ T14] dib0700: firmware download failed at 7 with -22 [ 224.498135][ T14] usb 4-1: USB disconnect, device number 9 [ 224.519313][ T8742] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 224.595082][ T8742] cramfs: Error -3 while decompressing! [ 224.599668][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop0 [ 224.628728][ T4363] udevd[4363]: incorrect cramfs checksum on /dev/loop0 [ 224.641139][ T8742] cramfs: ffffffff96b51568(26)->ffff88804a17d000(4096) [ 224.648767][ T8742] cramfs: Error -3 while decompressing! [ 224.654795][ T8742] cramfs: ffffffff96b51582(26)->ffff8880498d1000(4096) [ 224.658594][ T8740] loop4: detected capacity change from 0 to 4096 [ 224.662667][ T8742] cramfs: Error -3 while decompressing! [ 224.675072][ T8742] cramfs: ffffffff96b5159c(16)->ffff88804a643000(4096) [ 224.691168][ T8742] cramfs: Error -3 while decompressing! [ 224.692951][ T8740] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 224.703556][ T8742] cramfs: ffffffff96b51568(26)->ffff88804a17d000(4096) [ 224.812505][ T8740] ntfs3: loop4: failed to convert "c46c" to cp437 [ 224.824937][ T8748] loop2: detected capacity change from 0 to 256 [ 225.428987][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 225.620075][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 225.632337][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.651197][ T8769] loop3: detected capacity change from 0 to 4096 [ 225.667880][ T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.694795][ T32] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 225.714277][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.749992][ T32] usb 2-1: Product: syz [ 225.754245][ T32] usb 2-1: Manufacturer: syz [ 225.777544][ T32] usb 2-1: SerialNumber: syz [ 225.795592][ T8779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.811264][ T32] usb 2-1: config 0 descriptor?? [ 226.040149][ T32] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 226.068728][ T32] ea af d9 87 ad fc c9 53 [ 226.079126][ T32] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 226.182774][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 226.263196][ T32] usb 2-1: USB disconnect, device number 12 [ 226.327039][ T8793] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 226.608163][ T8805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2054'. [ 226.644006][ T8804] loop2: detected capacity change from 0 to 512 [ 226.699241][ T8804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.746429][ T8804] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2052: bg 0: block 248: padding at end of block bitmap is not set [ 226.890749][ T8804] Quota error (device loop2): write_blk: dquota write failed [ 226.908500][ T8804] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 226.970616][ T8804] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.2052: Failed to acquire dquot type 1 [ 227.017158][ T8804] EXT4-fs (loop2): 1 truncate cleaned up [ 227.028051][ T8804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.053699][ T8821] i2c i2c-0: Invalid block write size 34 [ 227.062758][ T8804] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.174599][ T8804] EXT4-fs: Cannot change quota options when quota turned on [ 227.309798][ T8828] loop1: detected capacity change from 0 to 256 [ 227.321395][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 227.360744][ T8828] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 227.385188][ T8831] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 227.719126][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.931104][ T7] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 227.967751][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.010205][ T7] usb 2-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 228.034833][ T7] usb 2-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 228.096251][ T7] usb 2-1: config 1 interface 1 has no altsetting 0 [ 228.134059][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.167026][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.187451][ T8861] xt_HMARK: spi-set and port-set can't be combined [ 228.189181][ T7] usb 2-1: Product: syz [ 228.213352][ T7] usb 2-1: Manufacturer: syz [ 228.244547][ T8863] loop2: detected capacity change from 0 to 256 [ 228.253881][ T7] usb 2-1: SerialNumber: syz [ 228.283290][ T7] usb 2-1: selecting invalid altsetting 0 [ 228.322418][ T7] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 228.335218][ T8863] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 228.385549][ T8866] loop3: detected capacity change from 0 to 64 [ 228.469664][ T8863] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 228.490636][ T7] usb 2-1: selecting invalid altsetting 0 [ 228.501532][ T7] usbtest: probe of 2-1:1.1 failed with error -22 [ 228.520337][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2078'. [ 228.557542][ T7] usb 2-1: USB disconnect, device number 13 [ 228.566012][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2078'. [ 228.739790][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.943226][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 228.960178][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.981360][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 229.002470][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.053316][ T14] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 229.088857][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.116074][ T14] usb 1-1: Product: syz [ 229.124269][ T14] usb 1-1: Manufacturer: syz [ 229.129719][ T14] usb 1-1: SerialNumber: syz [ 229.143680][ T14] usb 1-1: config 0 descriptor?? [ 229.182650][ T14] radioshark 1-1:0.0: Invalid radioSHARK device [ 229.205787][ T14] radioshark: probe of 1-1:0.0 failed with error -22 [ 229.239784][ T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 229.394442][ T14] usb 1-1: USB disconnect, device number 8 [ 229.622097][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 229.766424][ T8913] loop3: detected capacity change from 0 to 2048 [ 229.814935][ T8917] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.866914][ T8913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.876012][ T8913] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.906693][ T8913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2098: bg 0: block 345: padding at end of block bitmap is not set [ 229.952871][ T8913] EXT4-fs (loop3): Remounting filesystem read-only [ 230.024382][ T8925] loop4: detected capacity change from 0 to 1024 [ 230.066995][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 230.352022][ T8933] loop4: detected capacity change from 0 to 1024 [ 230.553578][ T8931] loop3: detected capacity change from 0 to 4096 [ 230.568315][ T8941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.585251][ T75] hfsplus: b-tree write err: -5, ino 4 [ 230.600570][ T8931] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 230.975727][ T46] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 231.024333][ T4263] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 231.049182][ T4263] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 231.126025][ T8955] x_tables: unsorted entry at hook 2 [ 231.183773][ T8957] capability: warning: `syz.4.2120' uses 32-bit capabilities (legacy support in use) [ 231.342467][ T8961] loop0: detected capacity change from 0 to 4096 [ 231.376463][ T8964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.400760][ T8961] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 231.422796][ T8961] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 231.458585][ T8961] Remounting filesystem read-only [ 231.509316][ T8961] NILFS (loop0): error -5 truncating bmap (ino=12) [ 231.614001][ T8970] loop3: detected capacity change from 0 to 1024 [ 231.620956][ T8947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.690930][ T4258] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 231.805636][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 232.414041][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'. [ 232.521030][ T8997] loop3: detected capacity change from 0 to 4096 [ 232.566280][ T8997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.734658][ T4259] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 232.809143][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 232.879349][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.957742][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 232.999020][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 233.007089][ T32] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.049005][ T32] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 233.067929][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 233.098436][ T32] usb 5-1: config 1 has no interface number 0 [ 233.149013][ T32] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.175657][ T32] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.199126][ T32] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 233.239031][ T32] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 233.252541][ T9002] loop1: detected capacity change from 0 to 32768 [ 233.269379][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.299086][ T9002] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.2141 (9002) [ 233.342715][ T32] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 233.391278][ T9002] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 233.446983][ T9002] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 233.490052][ T9002] BTRFS info (device loop1): enabling ssd optimizations [ 233.497136][ T9002] BTRFS info (device loop1): not using ssd optimizations [ 233.535091][ T32] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 233.559308][ T32] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 233.566855][ T32] snd_usb_pod: probe of 5-1:1.1 failed with error -90 [ 233.574030][ T9002] BTRFS info (device loop1): metadata ratio 3 [ 233.594312][ T9002] BTRFS info (device loop1): turning off barriers [ 233.620471][ T9002] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 233.643607][ T9002] BTRFS info (device loop1): use lzo compression, level 0 [ 233.693195][ T9002] BTRFS info (device loop1): using free space tree [ 233.743508][ T14] usb 5-1: USB disconnect, device number 9 [ 234.145010][ T4251] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 234.214734][ T9024] loop2: detected capacity change from 0 to 32768 [ 234.239985][ T9024] XFS: noikeep mount option is deprecated. [ 234.282080][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2161'. [ 234.292040][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2161'. [ 234.700338][ T9024] XFS (loop2): Mounting V5 Filesystem [ 234.733533][ T9074] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.795952][ T9024] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 234.829270][ T9024] XFS (loop2): Starting recovery (logdev: internal) [ 234.855649][ T9024] XFS (loop2): Ending recovery (logdev: internal) [ 235.091823][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2169'. [ 235.099390][ T4261] XFS (loop2): Unmounting Filesystem [ 235.202699][ T9088] loop0: detected capacity change from 0 to 1024 [ 235.430798][ T4258] hfsplus: bad catalog entry type [ 235.999801][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 236.267403][ T4357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.425700][ T4357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.551940][ T4357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.768448][ T4357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.838574][ T9132] loop2: detected capacity change from 0 to 256 [ 236.900667][ T9136] loop4: detected capacity change from 0 to 256 [ 236.993743][ T9136] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 237.407161][ T9145] loop3: detected capacity change from 0 to 1024 [ 237.634929][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.651875][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.676198][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.684566][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.701815][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.709506][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.809917][ T9145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.980396][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 238.537396][ T9185] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2214'. [ 238.556799][ T9185] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 238.801267][ T4318] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 238.993673][ T9202] loop1: detected capacity change from 0 to 1764 [ 239.002053][ T9204] loop4: detected capacity change from 0 to 256 [ 239.018995][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 239.025670][ T9204] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.027069][ T4318] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 239.081732][ T9204] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 239.141326][ T4318] usb 4-1: config 0 has no interfaces? [ 239.159745][ T4318] usb 4-1: config 0 has no interfaces? [ 239.191277][ T4318] usb 4-1: config 0 has no interfaces? [ 239.215189][ T9209] loop2: detected capacity change from 0 to 256 [ 239.222918][ T9204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 239.224299][ T4318] usb 4-1: config 0 has no interfaces? [ 239.291822][ T4318] usb 4-1: config 0 has no interfaces? [ 239.357130][ T4318] usb 4-1: config 0 has no interfaces? [ 239.364653][ T4318] usb 4-1: config 0 has no interfaces? [ 239.405166][ T4318] usb 4-1: config 0 has no interfaces? [ 239.436583][ T4318] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 239.496041][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=150 [ 239.523605][ T9150] chnl_net:caif_netlink_parms(): no params data found [ 239.524965][ T4318] usb 4-1: Product: syz [ 239.555024][ T4318] usb 4-1: Manufacturer: syz [ 239.569089][ T4318] usb 4-1: SerialNumber: syz [ 239.588648][ T4318] r8152-cfgselector 4-1: config 0 descriptor?? [ 239.759218][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 239.867764][ T4318] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 239.915877][ T9221] loop4: detected capacity change from 0 to 4096 [ 239.941235][ T9221] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 239.968447][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2227'. [ 239.981654][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2227'. [ 240.077824][ T4325] usb 4-1: USB disconnect, device number 10 [ 240.366670][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 240.396262][ T9234] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2233'. [ 240.447151][ T9234] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 240.665540][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.700358][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.738490][ T9150] device bridge_slave_0 entered promiscuous mode [ 240.819113][ T4357] device hsr_slave_0 left promiscuous mode [ 240.877663][ T4357] device hsr_slave_1 left promiscuous mode [ 240.896342][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.906328][ T9251] loop1: detected capacity change from 0 to 64 [ 240.926805][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.954599][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.992026][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.020002][ T4357] bridge0: port 3(dummy0) entered disabled state [ 241.064293][ T4357] device bridge_slave_1 left promiscuous mode [ 241.087710][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.146870][ T4357] device bridge_slave_0 left promiscuous mode [ 241.185612][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.312526][ T4357] device veth1_macvtap left promiscuous mode [ 241.324207][ T4357] device veth0_macvtap left promiscuous mode [ 241.340837][ T4357] device veth1_vlan left promiscuous mode [ 241.355211][ T4357] device veth0_vlan left promiscuous mode [ 241.839184][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 242.167712][ T9276] loop1: detected capacity change from 0 to 32768 [ 242.259150][ T4357] bond2 (unregistering): Released all slaves [ 242.276254][ T9276] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 242.284933][ T4357] bond1 (unregistering): Released all slaves [ 242.299217][ T9276] XFS (loop1): Mounting V5 Filesystem [ 242.386014][ T9276] XFS (loop1): Ending clean mount [ 242.427393][ T9276] XFS (loop1): Quotacheck needed: Please wait. [ 242.491566][ T9276] XFS (loop1): Quotacheck: Done. [ 242.585806][ T4251] XFS (loop1): Unmounting Filesystem [ 243.182965][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 243.234977][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 243.288828][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.341688][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.919226][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 243.948974][ T4357] bond0 (unregistering): Released all slaves [ 244.046695][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.054107][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.062342][ T9150] device bridge_slave_1 entered promiscuous mode [ 244.076024][ T9247] IPv6: NLM_F_REPLACE set, but no existing node found! [ 244.135147][ T9290] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2250'. [ 244.179603][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.245723][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.465352][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2254'. [ 244.512287][ T9150] team0: Port device team_slave_0 added [ 244.571217][ T9150] team0: Port device team_slave_1 added [ 244.673430][ T9306] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2255'. [ 244.699762][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.734307][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.889024][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.935416][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.971789][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.092756][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.113693][ T9319] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2262'. [ 245.161237][ T9321] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 245.301761][ T9150] device hsr_slave_0 entered promiscuous mode [ 245.338492][ T9150] device hsr_slave_1 entered promiscuous mode [ 245.384164][ T9150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.412035][ T52] block nbd1: Attempted send on invalid socket [ 245.418822][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.440417][ T93] block nbd1: Attempted send on invalid socket [ 245.446667][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.456530][ T93] block nbd1: Attempted send on invalid socket [ 245.462800][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.473347][ T93] block nbd1: Attempted send on invalid socket [ 245.479642][ T93] I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.489401][ T52] block nbd1: Attempted send on invalid socket [ 245.495638][ T52] I/O error, dev nbd1, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.510374][ T9150] Cannot create hsr debugfs directory [ 245.522552][ T93] block nbd1: Attempted send on invalid socket [ 245.528833][ T93] I/O error, dev nbd1, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.543661][ T9331] VFS: unable to find oldfs superblock on device nbd1 [ 245.920038][ T9344] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 246.004543][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 246.134875][ T9150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.217601][ T9150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.253760][ T9150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.302475][ T9360] xt_nfacct: accounting object `syz0' does not exists [ 246.322560][ T9150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.704875][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.731261][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.759885][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.805100][ T9150] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.854540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.897547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.920150][ T4325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.947828][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.955153][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.991695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.031759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.048349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.088186][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.095412][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.140915][ T4325] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.157699][ T4325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.171194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.190772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.191830][ T4325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.258093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.271138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.276111][ T4325] usb 4-1: config 1 has no interface number 0 [ 247.282784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.285876][ T4325] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 247.302425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.314930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.322276][ T4325] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 247.331500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.346864][ T4325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.367139][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.375615][ T4325] usb 4-1: Product: syz [ 247.391047][ T9398] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2292'. [ 247.404973][ T4325] usb 4-1: Manufacturer: syz [ 247.415783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.423315][ T4325] usb 4-1: SerialNumber: syz [ 247.434135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.490132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.507305][ T9150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.688393][ T9408] loop2: detected capacity change from 0 to 512 [ 247.741383][ T9408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.865858][ T9408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.878675][ T4325] usb 4-1: USB disconnect, device number 11 [ 247.949228][ T9408] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.103382][ T4318] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.321373][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 248.326381][ T9429] loop4: detected capacity change from 0 to 128 [ 248.362989][ T9429] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 248.436627][ T9429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.597956][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 248.766017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.785799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.849193][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.871407][ T9444] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 249.098079][ T9452] loop3: detected capacity change from 0 to 2048 [ 249.275008][ T9461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.791291][ T9479] netlink: 'syz.4.2318': attribute type 3 has an invalid length. [ 250.380108][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.398225][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.439288][ T4833] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.478833][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.517442][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.551582][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.595376][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.637250][ T9150] device veth0_vlan entered promiscuous mode [ 250.645309][ T4833] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 250.678682][ T9150] device veth1_vlan entered promiscuous mode [ 250.688361][ T4833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.714988][ T4833] usb 4-1: config 0 descriptor?? [ 250.884612][ T9150] device veth0_macvtap entered promiscuous mode [ 250.909410][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.985483][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.001596][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.020550][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.083028][ T9150] device veth1_macvtap entered promiscuous mode [ 251.108011][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.135734][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.160586][ T4833] ath6kl: Failed to read usb control message: -71 [ 251.169111][ T4833] ath6kl: Unable to read the bmi data from the device: -71 [ 251.176390][ T4833] ath6kl: Unable to recv target info: -71 [ 251.220883][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.239581][ T4833] ath6kl: Failed to init ath6kl core: -71 [ 251.282598][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.329001][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.378919][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.398299][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.428947][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.460897][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.498927][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.524892][ T4833] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 251.533947][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.566835][ T4833] usb 4-1: USB disconnect, device number 12 [ 251.582273][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.621880][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.637165][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.665434][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.677059][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.714337][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.744344][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.792201][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.822746][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.847708][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.872823][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.896276][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.919188][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.955528][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.019881][ T9535] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 252.033268][ T9150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.069018][ T9150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.077922][ T9150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.129010][ T9150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.159161][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 252.168219][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'. [ 252.296933][ T9557] loop2: detected capacity change from 0 to 64 [ 252.319258][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'. [ 252.504479][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.540473][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.625942][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.671010][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.686258][ T9567] netlink: 'syz.2.2351': attribute type 21 has an invalid length. [ 252.696502][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.709046][ T9564] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 252.899849][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.103500][ T9577] openvswitch: netlink: Message has 8 unknown bytes. [ 253.449588][ T9592] loop4: detected capacity change from 0 to 256 [ 253.517440][ T9592] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 253.849021][ T9605] xt_l2tp: v2 doesn't support IP mode [ 253.930032][ T9607] xt_hashlimit: max too large, truncated to 1048576 [ 254.158543][ T9617] loop1: detected capacity change from 0 to 1024 [ 254.533717][ T9628] netlink: 'syz.5.2377': attribute type 21 has an invalid length. [ 254.548249][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2378'. [ 254.589105][ T9628] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2377'. [ 255.402342][ T9659] loop1: detected capacity change from 0 to 128 [ 255.513401][ T9659] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550) [ 255.569032][ T9659] FAT-fs (loop1): Filesystem has been set read-only [ 255.642422][ T9662] loop5: detected capacity change from 0 to 16 [ 255.686149][ T9662] erofs: (device loop5): mounted with root inode @ nid 36. [ 255.761062][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767520][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806305][ T4251] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550) [ 255.826835][ T9634] loop3: detected capacity change from 0 to 32768 [ 255.927917][ T9634] (syz.3.2380,9634,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.966435][ T9638] loop2: detected capacity change from 0 to 32768 [ 256.014513][ T9634] (syz.3.2380,9634,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.047707][ T9670] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 256.057981][ T9638] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2381 (9638) [ 256.065800][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2394'. [ 256.128763][ T9638] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 256.162001][ T9634] JBD2: Ignoring recovery information on journal [ 256.200781][ T9638] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 256.238213][ T9638] BTRFS info (device loop2): force zlib compression, level 3 [ 256.304239][ T9638] BTRFS info (device loop2): force clearing of disk cache [ 256.312308][ T9638] BTRFS info (device loop2): setting nodatasum [ 256.318551][ T9638] BTRFS info (device loop2): use zlib compression, level 3 [ 256.364370][ T9638] BTRFS info (device loop2): allowing degraded mounts [ 256.381455][ T9634] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.432021][ T9638] BTRFS info (device loop2): enabling disk space caching [ 256.493283][ T9638] BTRFS info (device loop2): disk space caching is enabled [ 256.629935][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 257.019012][ T9638] BTRFS info (device loop2): enabling ssd optimizations [ 257.032741][ T9638] BTRFS info (device loop2): rebuilding free space tree [ 257.033538][ T9711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2403'. [ 257.229351][ T9717] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2405'. [ 257.248509][ T9638] BTRFS info (device loop2): disabling free space tree [ 257.261858][ T9638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.326194][ T9638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.486344][ T9638] BTRFS error (device loop2): target device is invalid! [ 257.679554][ T4261] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 257.949023][ T4363] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop2 scanned by udevd (4363) [ 257.993858][ T9740] loop5: detected capacity change from 0 to 2048 [ 258.102438][ T9740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.223364][ T26] audit: type=1800 audit(2000000057.065:80): pid=9740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2414" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 258.930210][ T4318] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.964216][ T9778] netlink: 'syz.1.2424': attribute type 9 has an invalid length. [ 259.153747][ T4318] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 259.174945][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.216456][ T4318] usb 6-1: Product: syz [ 259.242983][ T4318] usb 6-1: Manufacturer: syz [ 259.265432][ T4318] usb 6-1: SerialNumber: syz [ 259.268252][ T9783] loop2: detected capacity change from 0 to 4096 [ 259.302348][ T4318] usb 6-1: config 0 descriptor?? [ 259.357651][ T9783] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 259.477875][ T9783] ntfs3: loop2: failed to convert "c46c" to cp857 [ 259.528747][ T4303] usb 6-1: USB disconnect, device number 2 [ 259.698478][ T9796] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 259.778500][ T9801] device netdevsim0 entered promiscuous mode [ 259.821150][ T9801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 259.963897][ T9806] loop1: detected capacity change from 0 to 256 [ 259.975005][ T9805] libceph: resolve '0' (ret=-3): failed [ 260.043848][ T9806] FAT-fs (loop1): Directory bread(block 64) failed [ 260.084367][ T9806] FAT-fs (loop1): Directory bread(block 65) failed [ 260.109053][ T9806] FAT-fs (loop1): Directory bread(block 66) failed [ 260.136162][ T9806] FAT-fs (loop1): Directory bread(block 67) failed [ 260.169675][ T9806] FAT-fs (loop1): Directory bread(block 68) failed [ 260.176575][ T9806] FAT-fs (loop1): Directory bread(block 69) failed [ 260.200407][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2438'. [ 260.239411][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.265228][ T9806] FAT-fs (loop1): Directory bread(block 70) failed [ 260.288009][ T9806] FAT-fs (loop1): Directory bread(block 71) failed [ 260.299503][ T9806] FAT-fs (loop1): Directory bread(block 72) failed [ 260.306272][ T9806] FAT-fs (loop1): Directory bread(block 73) failed [ 260.574551][ T9820] loop4: detected capacity change from 0 to 4096 [ 260.589069][ T3699] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 260.597858][ T9820] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 260.736461][ T9820] ntfs: volume version 3.1. [ 260.747944][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'. [ 260.819271][ T3699] usb 4-1: Using ep0 maxpacket: 32 [ 260.828516][ T3699] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 260.870134][ T3699] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 260.914357][ T3699] usb 4-1: config 0 has no interface number 1 [ 260.937261][ T3699] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 260.981078][ T3699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.003127][ T3699] usb 4-1: Product: syz [ 261.007397][ T3699] usb 4-1: Manufacturer: syz [ 261.040910][ T3699] usb 4-1: SerialNumber: syz [ 261.067647][ T3699] usb 4-1: config 0 descriptor?? [ 261.087429][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'. [ 261.182659][ T3699] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 261.270762][ T3699] vmk80xx 4-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 261.336486][ T3699] usb 4-1: USB disconnect, device number 13 [ 261.348508][ T9843] loop2: detected capacity change from 0 to 512 [ 261.379984][ T9843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.424004][ T9843] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 261.477410][ T9843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 261.490545][ T9843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 261.497158][ T9843] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 261.589096][ T9843] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.649016][ T9843] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 261.673879][ T9843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2450: bg 0: block 40: padding at end of block bitmap is not set [ 261.764854][ T9843] EXT4-fs (loop2): Remounting filesystem read-only [ 261.788995][ T9843] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 261.828596][ T9843] EXT4-fs (loop2): Remounting filesystem read-only [ 261.882876][ T9843] EXT4-fs (loop2): 1 truncate cleaned up [ 261.888615][ T9843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.920880][ T9855] loop4: detected capacity change from 0 to 2048 [ 261.959154][ T9843] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.2450: bad symlink. [ 261.984769][ T9855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.200286][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 262.692400][ T9887] netlink: 'syz.3.2465': attribute type 6 has an invalid length. [ 262.790734][ T9879] loop1: detected capacity change from 0 to 4096 [ 262.849261][ T9879] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 262.981774][ T9879] ntfs3: loop1: failed to convert "c46c" to koi8-r [ 263.299187][ T4318] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 263.319543][ T3699] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 263.495298][ T4318] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 263.514305][ T4318] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 263.551275][ T3699] usb 3-1: Using ep0 maxpacket: 16 [ 263.554386][ T4318] usb 4-1: config 0 has no interface number 0 [ 263.562364][ T3699] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 263.589232][ T4318] usb 4-1: config 0 has no interface number 1 [ 263.619149][ T4318] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 263.646376][ T3699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.662741][ T4318] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 263.669578][ T3699] usb 3-1: Product: syz [ 263.716807][ T3699] usb 3-1: Manufacturer: syz [ 263.717421][ T4318] usb 4-1: config 0 interface 3 has no altsetting 0 [ 263.728790][ T3699] usb 3-1: SerialNumber: syz [ 263.744650][ T4318] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 263.748137][ T3699] usb 3-1: config 0 descriptor?? [ 263.769002][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.781320][ T3699] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 263.809492][ T4318] usb 4-1: config 0 descriptor?? [ 263.925173][ T9920] Invalid ELF header magic: != ELF [ 263.984848][ T3699] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 264.018081][ T4318] usb 4-1: Could not set interface, error -71 [ 264.025225][ T3699] visor: probe of 3-1:0.0 failed with error -5 [ 264.039911][ T4318] usb 4-1: selecting invalid altsetting 0 [ 264.045899][ T4318] usb 4-1: Could not set interface, error -22 [ 264.097643][ T4318] usb 4-1: USB disconnect, device number 14 [ 264.198264][ T4833] usb 3-1: USB disconnect, device number 12 [ 264.294800][ T9931] loop5: detected capacity change from 0 to 256 [ 264.374598][ T9931] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 264.474177][ T9931] loop5: Can't mount, would change RO state [ 264.957941][ T9950] tmpfs: Bad value for 'mpol' [ 265.396234][ T9972] netlink: 'syz.3.2505': attribute type 21 has an invalid length. [ 265.421391][ T9972] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.447024][ T9972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.454413][ T9972] IPv6: NLM_F_CREATE should be set when creating new route [ 265.461875][ T9972] IPv6: NLM_F_CREATE should be set when creating new route [ 265.469185][ T9972] IPv6: NLM_F_CREATE should be set when creating new route [ 265.487153][ T9974] loop5: detected capacity change from 0 to 2048 [ 265.524566][ T9974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.315299][T10002] loop1: detected capacity change from 0 to 16 [ 266.329053][ T4318] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.377652][T10002] erofs: (device loop1): mounted with root inode @ nid 36. [ 266.427825][T10002] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 266.470114][T10002] syz.1.2520: attempt to access beyond end of device [ 266.470114][T10002] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 266.522105][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 266.531698][ T4318] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 266.531747][ T4318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.531773][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.531799][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.531824][ T4318] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.531864][ T4318] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.531889][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.534482][T10002] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 266.534800][ T26] audit: type=1800 audit(2000000065.375:81): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2520" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 266.545459][T10001] loop5: detected capacity change from 0 to 8192 [ 266.569786][T10001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.569819][T10001] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 266.570558][T10001] REISERFS (device loop5): using ordered data mode [ 266.570572][T10001] reiserfs: using flush barriers [ 266.578161][T10001] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.578663][T10001] REISERFS (device loop5): checking transaction log (loop5) [ 266.620466][T10001] REISERFS (device loop5): Using r5 hash to sort names [ 266.811353][T10002] syz.1.2520 (10002) used greatest stack depth: 20752 bytes left [ 266.976340][ T4318] usb 5-1: USB disconnect, device number 10 [ 267.063452][T10001] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.103685][T10001] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 267.121780][T10021] loop2: detected capacity change from 0 to 256 [ 267.135735][T10001] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.157415][T10021] exfat: Deprecated parameter 'namecase' [ 267.200155][T10021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 267.984250][T10049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2541'. [ 268.015926][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2541'. [ 268.061124][T10049] device vlan0 entered promiscuous mode [ 268.138126][T10051] loop4: detected capacity change from 0 to 4096 [ 268.167130][T10051] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 268.551736][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2549'. [ 269.168951][ T4318] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 269.222702][T10062] loop2: detected capacity change from 0 to 32768 [ 269.248677][T10068] loop1: detected capacity change from 0 to 32768 [ 269.311113][T10068] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 269.333386][T10062] XFS (loop2): Mounting V5 Filesystem [ 269.350228][T10068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 269.379053][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 269.386619][ T4318] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.398356][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.416132][ T4318] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 269.426157][ T4318] usb 4-1: config 1 has no interface number 1 [ 269.432901][ T4318] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.446933][ T4318] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.473829][ T3699] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 269.484256][ T4318] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.505063][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.525185][ T4318] usb 4-1: Product: syz [ 269.534248][ T4318] usb 4-1: Manufacturer: syz [ 269.540747][ T3699] XFS (loop2): Unmount and run xfs_repair [ 269.544759][ T4318] usb 4-1: SerialNumber: syz [ 269.565823][ T3699] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 269.578044][ T3699] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 269.602225][T10068] (syz.1.2550,10068,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 269.629185][ T3699] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 269.644843][T10068] (syz.1.2550,10068,0):ocfs2_search_chain:1785 ERROR: status = -12 [ 269.659603][T10068] (syz.1.2550,10068,1):ocfs2_search_chain:1871 ERROR: status = -12 [ 269.667106][ T3699] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 269.691871][T10068] (syz.1.2550,10068,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 269.711274][T10068] (syz.1.2550,10068,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 269.712314][ T3699] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 269.745280][T10068] (syz.1.2550,10068,1):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 269.767859][ T3699] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 269.774680][T10068] (syz.1.2550,10068,1):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 269.796878][ T4318] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 269.798921][ T3699] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 269.821134][ T3699] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.830363][T10068] (syz.1.2550,10068,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 269.834774][ T4318] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 269.839637][T10068] (syz.1.2550,10068,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 269.839669][T10068] (syz.1.2550,10068,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 269.840784][T10068] (syz.1.2550,10068,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 269.878074][ T4318] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 269.897747][ T3699] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.914386][T10062] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 269.939453][T10062] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 269.948138][T10062] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 269.959257][ T4318] usb 4-1: USB disconnect, device number 15 [ 270.013585][T10068] (syz.1.2550,10068,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 270.026361][T10109] loop4: detected capacity change from 0 to 8 [ 270.032872][T10062] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 270.048612][T10068] (syz.1.2550,10068,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 270.061263][T10109] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 270.087490][T10062] XFS (loop2): Ending clean mount [ 270.100853][T10068] (syz.1.2550,10068,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 270.120010][T10062] XFS (loop2): Failed to initialize disk quotas. [ 270.143507][T10068] (syz.1.2550,10068,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 270.171736][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop4 [ 270.180808][T10062] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 270.189821][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'. [ 270.219537][T10068] (syz.1.2550,10068,0):ocfs2_mknod:357 ERROR: status = -12 [ 270.227766][T10068] (syz.1.2550,10068,0):ocfs2_mknod:502 ERROR: status = -12 [ 270.262150][T10068] (syz.1.2550,10068,0):ocfs2_mkdir:659 ERROR: status = -12 [ 270.284535][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop4 [ 270.306420][ T4261] XFS (loop2): Unmounting Filesystem [ 270.356305][T10113] MTD: Couldn't look up '': -22 [ 270.443217][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 270.795614][T10119] loop4: detected capacity change from 0 to 4096 [ 270.898990][ T4303] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.924654][T10124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2570'. [ 270.945266][T10124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2570'. [ 271.089029][ T4303] usb 4-1: Using ep0 maxpacket: 16 [ 271.098367][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 271.133814][ T4303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 271.176791][ T4303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.215657][ T4303] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 271.246509][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.273752][ T4303] usb 4-1: Product: syz [ 271.288512][ T4303] usb 4-1: Manufacturer: syz [ 271.305125][ T4303] usb 4-1: SerialNumber: syz [ 271.332951][ T4303] usb 4-1: config 0 descriptor?? [ 271.375386][T10117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.415427][T10117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.439531][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 271.447831][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 271.456522][ T4303] port100 4-1:0.0: NFC: Could not get supported command types [ 271.697134][ T4303] usb 4-1: USB disconnect, device number 16 [ 271.830514][T10145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 272.170657][T10155] loop1: detected capacity change from 0 to 64 [ 272.495730][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2589'. [ 273.155871][T10194] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 273.187475][T10194] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 273.314127][T10194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.412947][T10206] loop2: detected capacity change from 0 to 2048 [ 273.452533][T10209] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.791570][T10219] netlink: 'syz.5.2609': attribute type 28 has an invalid length. [ 274.028377][T10225] netlink: 'syz.3.2612': attribute type 2 has an invalid length. [ 274.094236][T10225] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 274.372897][T10240] loop5: detected capacity change from 0 to 256 [ 274.507319][T10240] FAT-fs (loop5): Directory bread(block 64) failed [ 274.540379][T10240] FAT-fs (loop5): Directory bread(block 65) failed [ 274.547444][T10240] FAT-fs (loop5): Directory bread(block 66) failed [ 274.562105][T10240] FAT-fs (loop5): Directory bread(block 67) failed [ 274.599041][T10240] FAT-fs (loop5): Directory bread(block 68) failed [ 274.605668][T10240] FAT-fs (loop5): Directory bread(block 69) failed [ 274.648523][T10249] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 274.662839][T10240] FAT-fs (loop5): Directory bread(block 70) failed [ 274.712562][T10240] FAT-fs (loop5): Directory bread(block 71) failed [ 274.753827][T10240] FAT-fs (loop5): Directory bread(block 72) failed [ 274.769972][T10240] FAT-fs (loop5): Directory bread(block 73) failed [ 276.100905][T10259] loop2: detected capacity change from 0 to 32768 [ 276.132974][T10259] (syz.2.2627,10259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.200520][T10259] (syz.2.2627,10259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.239262][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.296720][T10280] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 276.322287][T10259] (syz.2.2627,10259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 276.470859][T10259] JBD2: Ignoring recovery information on journal [ 276.625520][T10259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 276.807570][T10291] loop1: detected capacity change from 0 to 32768 [ 276.959966][T10291] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 276.976447][ T4261] ocfs2: Unmounting device (7,2) on (node local) [ 277.033581][T10291] (syz.1.2639,10291,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 277.077196][T10291] ocfs2: Unmounting device (7,1) on (node local) [ 277.106601][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2653'. [ 277.339202][ T4833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.515695][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 277.520383][ T4259] Bluetooth: hci0: command 0x0c20 tx timeout [ 277.539015][ T4833] usb 6-1: Using ep0 maxpacket: 16 [ 277.547374][ T4833] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 277.609295][T10340] netlink: 'syz.2.2657': attribute type 2 has an invalid length. [ 277.617286][T10340] netlink: 'syz.2.2657': attribute type 1 has an invalid length. [ 277.656757][ T4833] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.678210][T10340] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2657'. [ 277.688787][T10343] loop4: detected capacity change from 0 to 2048 [ 277.725966][ T4833] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.768044][T10343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.775228][ T4833] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.827949][ T4833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.899450][ T4833] usb 6-1: Product: syz [ 277.913933][ T4833] usb 6-1: Manufacturer: syz [ 277.918737][ T4833] usb 6-1: SerialNumber: syz [ 278.188103][ T4833] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 278.312564][ T4833] usb 6-1: USB disconnect, device number 3 [ 278.359616][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.540112][T10361] loop1: detected capacity change from 0 to 4096 [ 279.296897][T10386] loop1: detected capacity change from 0 to 4096 [ 279.893799][T10411] loop4: detected capacity change from 0 to 256 [ 279.984038][T10411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 280.049506][T10418] loop5: detected capacity change from 0 to 128 [ 280.325082][T10424] loop2: detected capacity change from 0 to 1764 [ 280.673727][T10425] loop3: detected capacity change from 0 to 4096 [ 280.753442][T10440] loop4: detected capacity change from 0 to 256 [ 281.122107][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 281.140680][ T4263] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 281.147289][ T4263] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 281.171338][T10447] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2699'. [ 281.206006][T10447] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2699'. [ 281.256450][T10447] netlink: 'syz.2.2699': attribute type 6 has an invalid length. [ 281.388387][T10454] netlink: 'syz.3.2702': attribute type 27 has an invalid length. [ 281.393032][T10455] loop1: detected capacity change from 0 to 512 [ 281.403868][T10454] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 281.486235][T10455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.544114][T10455] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.701203][ T4318] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 281.850461][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 281.919254][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 281.930025][ T4318] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 281.972926][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.019022][ T4318] usb 5-1: Product: syz [ 282.023278][ T4318] usb 5-1: Manufacturer: syz [ 282.038170][ T4318] usb 5-1: SerialNumber: syz [ 282.068787][ T4318] r8152-cfgselector 5-1: config 0 descriptor?? [ 282.077826][T10481] netlink: 'syz.5.2711': attribute type 1 has an invalid length. [ 282.316974][T10490] loop5: detected capacity change from 0 to 64 [ 282.329083][ T4303] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.336249][T10491] loop3: detected capacity change from 0 to 256 [ 282.415421][T10491] FAT-fs (loop3): Directory bread(block 64) failed [ 282.458532][T10491] FAT-fs (loop3): Directory bread(block 65) failed [ 282.487528][T10491] FAT-fs (loop3): Directory bread(block 66) failed [ 282.500439][ T4318] r8152-cfgselector 5-1: Unknown version 0x0000 [ 282.506788][T10491] FAT-fs (loop3): Directory bread(block 67) failed [ 282.528730][ T4318] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 282.540866][ T4303] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.566340][T10491] FAT-fs (loop3): Directory bread(block 68) failed [ 282.570394][ T4303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.618979][ T4303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.622057][T10491] FAT-fs (loop3): Directory bread(block 69) failed [ 282.645398][ T4303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.648796][T10496] loop2: detected capacity change from 0 to 164 [ 282.677363][T10491] FAT-fs (loop3): Directory bread(block 70) failed [ 282.679158][ T4303] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.694346][T10491] FAT-fs (loop3): Directory bread(block 71) failed [ 282.712338][T10498] ieee802154 phy0 wpan0: encryption failed: -90 [ 282.737774][ T4303] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.739218][T10491] FAT-fs (loop3): Directory bread(block 72) failed [ 282.781391][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.794334][T10491] FAT-fs (loop3): Directory bread(block 73) failed [ 282.820073][ T4303] usb 2-1: Product: syz [ 282.856769][ T4303] usb 2-1: Manufacturer: syz [ 282.896804][ T4303] cdc_wdm 2-1:1.0: skipping garbage [ 282.915102][ T4303] cdc_wdm 2-1:1.0: skipping garbage [ 282.969986][ T4303] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 283.019003][ T4303] cdc_wdm 2-1:1.0: Unknown control protocol [ 283.134507][T10480] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 283.174993][ T952] usb 2-1: USB disconnect, device number 14 [ 283.347452][T10507] libceph: resolve '40.' (ret=-3): failed [ 283.431145][T10513] loop5: detected capacity change from 0 to 4096 [ 283.490954][T10513] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 283.626321][T10513] ntfs3: loop5: failed to convert "c46c" to macromanian [ 283.820576][T10524] xt_TCPMSS: Only works on TCP SYN packets [ 284.214744][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 284.236388][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2733'. [ 284.267774][ T952] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.486214][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 284.495304][ T952] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 284.550713][ T952] usb 2-1: config 0 has no interface number 0 [ 284.556904][ T952] usb 2-1: config 0 interface 237 has no altsetting 0 [ 284.596335][ T952] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 284.626387][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.666885][ T952] usb 2-1: Product: syz [ 284.677004][ T952] usb 2-1: Manufacturer: syz [ 284.697299][ T952] usb 2-1: SerialNumber: syz [ 284.713966][ T952] usb 2-1: config 0 descriptor?? [ 284.748466][ T952] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 284.957421][ T952] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 284.993203][ T952] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 285.007233][T10568] loop2: detected capacity change from 0 to 512 [ 285.025188][ T952] snd_usb_podhd: probe of 2-1:0.237 failed with error -22 [ 285.085600][T10568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 285.105899][T10567] loop5: detected capacity change from 0 to 2048 [ 285.172472][ T952] usb 2-1: USB disconnect, device number 15 [ 285.430329][T10567] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 285.478749][T10568] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.2742: corrupted in-inode xattr [ 285.498033][T10567] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 285.519807][T10567] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 285.527735][T10567] UDF-fs: Scanning with blocksize 512 failed [ 285.575553][T10568] EXT4-fs (loop2): Remounting filesystem read-only [ 285.612914][T10568] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2742: couldn't read orphan inode 15 (err -117) [ 285.614480][T10567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.649245][T10568] EXT4-fs (loop2): Remounting filesystem read-only [ 285.686469][T10568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.974737][T10589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2749'. [ 286.020152][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 286.523189][T10605] loop5: detected capacity change from 0 to 256 [ 286.591702][T10613] x_tables: duplicate underflow at hook 2 [ 287.939286][T10661] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 287.948480][T10661] overlayfs: missing 'lowerdir' [ 288.308764][T10675] Lens B: ================= START STATUS ================= [ 288.338165][T10638] loop3: detected capacity change from 0 to 32768 [ 288.354547][T10675] Lens B: Focus, Absolute: 0 [ 288.384443][T10675] Lens B: ================== END STATUS ================== [ 288.387726][T10638] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 288.516300][T10638] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 288.606428][T10638] ocfs2: Unmounting device (7,3) on (node local) [ 289.547755][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 289.558317][T10721] kAFS: Can only specify source 'none' with -o dyn [ 289.729036][T10728] netlink: 'syz.3.2804': attribute type 20 has an invalid length. [ 289.856809][T10736] block nbd5: NBD_DISCONNECT [ 290.145914][T10743] loop4: detected capacity change from 0 to 1024 [ 290.343233][T10750] loop3: detected capacity change from 0 to 16 [ 290.413449][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 290.420567][T10750] erofs: (device loop3): mounted with root inode @ nid 36. [ 290.472482][T10750] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 290.509439][T10750] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 290.525068][T10753] loop1: detected capacity change from 0 to 1024 [ 290.544128][ T4267] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[4096, 0] out[8192] [ 290.569281][T10750] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[4096, 0] out[4096] [ 290.582529][ T26] audit: type=1800 audit(2000000089.425:82): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2813" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 290.589046][T10756] dlm: no locking on control device [ 290.742872][T10750] syz.3.2813 (10750) used greatest stack depth: 20424 bytes left [ 290.837951][ T75] hfsplus: b-tree write err: -5, ino 4 [ 290.961289][T10767] ERROR: device name not specified. [ 291.479817][T10789] dlm: no locking on control device [ 292.116020][T10812] loop1: detected capacity change from 0 to 2048 [ 292.177059][ T4363] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.208439][T10812] Invalid option length (0) for dns_resolver key [ 292.404393][T10824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.388492][T10860] loop4: detected capacity change from 0 to 256 [ 293.473444][T10860] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 293.522783][T10860] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.703540][T10844] loop3: detected capacity change from 0 to 32768 [ 294.313809][T10882] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.2877'. [ 294.395406][ T127] kernel write not supported for file /input/event2 (pid: 127 comm: kworker/1:2) [ 294.429068][ T4833] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.631015][ T4833] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 294.669097][ T4833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.720941][ T4833] usb 3-1: config 0 descriptor?? [ 294.731924][ T4833] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 294.830718][T10899] loop5: detected capacity change from 0 to 2048 [ 294.890852][T10899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.940945][ T4832] usb 3-1: USB disconnect, device number 13 [ 295.321260][T10916] netlink: 1020 bytes leftover after parsing attributes in process `syz.1.2893'. [ 295.332702][ T26] audit: type=1326 audit(2000000094.175:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 295.355200][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.367130][T10917] No such timeout policy "syz0" [ 295.453209][ T26] audit: type=1326 audit(2000000094.175:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 295.560177][ T26] audit: type=1326 audit(2000000094.175:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 295.650397][ T26] audit: type=1326 audit(2000000094.175:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98e929 code=0x7ffc0000 [ 295.672693][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.922078][T10937] loop3: detected capacity change from 0 to 8 [ 295.947843][ T4363] udevd[4363]: incorrect cramfs checksum on /dev/loop3 [ 295.963466][T10937] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 296.014495][T10937] cramfs: Error -3 while decompressing! [ 296.041989][ T4363] udevd[4363]: incorrect cramfs checksum on /dev/loop3 [ 296.053278][T10937] cramfs: ffffffff96b51568(26)->ffff8880506dc000(4096) [ 296.066195][T10937] cramfs: Error -3 while decompressing! [ 296.072529][T10937] cramfs: ffffffff96b51582(26)->ffff888050159000(4096) [ 296.081212][T10937] cramfs: Error -3 while decompressing! [ 296.087276][T10937] cramfs: ffffffff96b5159c(16)->ffff88804a863000(4096) [ 296.094676][T10937] cramfs: Error -3 while decompressing! [ 296.100903][T10937] cramfs: ffffffff96b51568(26)->ffff8880506dc000(4096) [ 296.187607][T10941] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.646541][T10953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2913'. [ 296.805346][T10933] loop4: detected capacity change from 0 to 40427 [ 296.813909][T10933] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 296.839182][T10933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 296.883605][T10933] F2FS-fs (loop4): invalid crc value [ 296.959043][T10933] F2FS-fs (loop4): Found nat_bits in checkpoint [ 297.148363][T10933] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 297.158759][T10933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 297.186048][T10974] loop2: detected capacity change from 0 to 8 [ 297.250695][T10974] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 297.262783][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop2 [ 297.285474][T10974] cramfs: Error -3 while decompressing! [ 297.334740][T10974] cramfs: ffffffff96b4d568(26)->ffff8880500e8000(4096) [ 297.363442][T10974] cramfs: Error -3 while decompressing! [ 297.380017][T10974] cramfs: ffffffff96b4d582(26)->ffff888050778000(4096) [ 297.420662][T10974] cramfs: Error -3 while decompressing! [ 297.464446][T10974] cramfs: ffffffff96b4d59c(16)->ffff88805077a000(4096) [ 297.480654][T10974] cramfs: Error -3 while decompressing! [ 297.499172][T10974] cramfs: ffffffff96b4d568(26)->ffff8880500e8000(4096) [ 298.382799][T11009] loop1: detected capacity change from 0 to 256 [ 298.455800][ T26] audit: type=1326 audit(2000000097.295:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1498e929 code=0x7ffc0000 [ 298.525709][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2939'. [ 298.555613][ T26] audit: type=1326 audit(2000000097.295:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4e1498e929 code=0x7ffc0000 [ 298.594034][T11017] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2940'. [ 298.668317][ T26] audit: type=1326 audit(2000000097.295:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1498e929 code=0x7ffc0000 [ 298.729164][ T26] audit: type=1326 audit(2000000097.295:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1498e929 code=0x7ffc0000 [ 298.783528][T11021] IPv6: sit1: Disabled Multicast RS [ 299.171169][T11031] loop3: detected capacity change from 0 to 2048 [ 299.203592][T11031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.373986][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 299.703680][T11045] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.757245][T11012] loop5: detected capacity change from 0 to 40427 [ 299.804862][T11012] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 299.817754][T11012] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 299.879478][T11012] F2FS-fs (loop5): invalid crc value [ 299.948254][T11012] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.083034][T11065] loop4: detected capacity change from 0 to 256 [ 300.148440][T11012] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 300.199098][T11012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.337920][T11068] loop2: detected capacity change from 0 to 2048 [ 300.467665][T11074] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.508217][T11068] syz.2.2964: attempt to access beyond end of device [ 300.508217][T11068] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 300.529257][T11068] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 300.590641][T11068] syz.2.2964: attempt to access beyond end of device [ 300.590641][T11068] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 300.722199][T11068] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 300.793617][T11068] NILFS (loop2): error -5 truncating bmap (ino=16) [ 301.027208][T11087] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 301.051044][T11091] i2c i2c-0: Invalid block write size 34 [ 301.528562][T11103] tmpfs: Bad value for 'mpol' [ 301.586771][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 301.800187][T11115] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 301.858651][T11110] loop4: detected capacity change from 0 to 4096 [ 301.988307][T11120] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.082157][T11124] i2c i2c-0: Invalid block write size 34 [ 302.643727][T11146] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 302.729210][ T4318] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 302.925436][T11154] loop2: detected capacity change from 0 to 4096 [ 302.932221][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 302.950457][ T4318] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 302.975839][ T4318] usb 5-1: config 0 has no interface number 0 [ 302.987263][ T4318] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 303.018352][ T4318] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 303.039621][ T4318] usb 5-1: config 0 interface 41 has no altsetting 0 [ 303.059877][ T4318] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 303.105833][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.130803][ T4318] usb 5-1: Product: syz [ 303.138946][T11161] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.175937][ T4318] usb 5-1: Manufacturer: syz [ 303.198979][ T4318] usb 5-1: SerialNumber: syz [ 303.219033][ T4318] usb 5-1: config 0 descriptor?? [ 303.224906][T11138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 303.248676][T11138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 303.376701][T11165] loop1: detected capacity change from 0 to 2048 [ 303.442314][T11165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.485466][T11138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 303.523496][T11138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 303.741205][ T4318] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 303.753741][ T4318] CoreChips: probe of 5-1:0.41 failed with error -71 [ 303.809189][ T4318] usb 5-1: USB disconnect, device number 12 [ 304.906746][T11221] loop4: detected capacity change from 0 to 1024 [ 305.169545][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 305.333844][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 305.663423][T11250] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 306.183096][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 306.331563][T11279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3065'. [ 306.341223][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3065'. [ 306.488191][T11286] loop4: detected capacity change from 0 to 256 [ 306.523210][T11286] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 306.539076][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 306.591596][T11286] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 306.734471][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 306.741786][ T4318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.762796][T11292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3079'. [ 306.778922][ T4318] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.790809][T11263] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 306.803811][T11292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3079'. [ 306.844538][ T4318] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 306.884734][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.903304][ T4318] usb 6-1: Product: syz [ 306.907592][ T4318] usb 6-1: Manufacturer: syz [ 306.968917][ T4318] usb 6-1: SerialNumber: syz [ 307.010322][ T4318] usb 6-1: config 0 descriptor?? [ 307.037568][T11300] loop4: detected capacity change from 0 to 64 [ 307.096110][T11305] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 307.223591][ T4318] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 307.236999][ T4318] ea af d9 87 ad fc c9 53 [ 307.272892][ T4318] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 307.433929][ T4832] usb 6-1: USB disconnect, device number 4 [ 307.515220][T11319] loop3: detected capacity change from 0 to 256 [ 307.567954][T11319] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 307.651474][T11319] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 307.848118][T11322] loop1: detected capacity change from 0 to 4096 [ 307.905292][T11322] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 308.211057][ T46] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 308.235171][ T4251] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 308.249005][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.258256][T11340] loop2: detected capacity change from 0 to 64 [ 308.271815][ T4251] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 308.500254][T11346] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 309.368293][T11384] loop1: detected capacity change from 0 to 64 [ 309.430427][T11378] loop4: detected capacity change from 0 to 4096 [ 309.469107][ T4303] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 309.484764][T11378] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 309.658933][ T4303] usb 3-1: Using ep0 maxpacket: 32 [ 309.665962][ T4303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.729352][ T4303] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.763531][ T9] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 309.782273][ T4303] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 309.802536][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.814317][ T4252] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 309.828937][ T4303] usb 3-1: Product: syz [ 309.833182][ T4303] usb 3-1: Manufacturer: syz [ 309.837860][ T4303] usb 3-1: SerialNumber: syz [ 309.844429][ T4252] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 309.894528][ T4303] usb 3-1: config 0 descriptor?? [ 309.987927][T11398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.125391][ T4303] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 310.138944][ T4303] ea af d9 87 ad fc c9 53 [ 310.143544][ T4303] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 310.347526][ T4303] usb 3-1: USB disconnect, device number 14 [ 310.391179][T11387] loop3: detected capacity change from 0 to 32768 [ 310.412680][T11387] (syz.3.3108,11387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.489366][T11387] (syz.3.3108,11387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.533418][T11387] (syz.3.3108,11387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 310.576182][T11387] JBD2: Ignoring recovery information on journal [ 310.656252][T11387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 310.796082][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 310.858993][ T4833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.047107][T11426] x_tables: unsorted entry at hook 2 [ 311.052913][ T4833] usb 5-1: Using ep0 maxpacket: 8 [ 311.068327][ T4833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.109089][ T4833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 311.119347][ T4833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.153087][ T4833] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 311.198040][ T4833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.217837][ T4833] usb 5-1: Product: syz [ 311.222477][ T4833] usb 5-1: Manufacturer: syz [ 311.227158][ T4833] usb 5-1: SerialNumber: syz [ 311.240855][ T4833] usb 5-1: config 0 descriptor?? [ 311.255263][ T4833] radioshark 5-1:0.0: Invalid radioSHARK device [ 311.262151][ T4833] radioshark: probe of 5-1:0.0 failed with error -22 [ 311.294465][ T4833] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 311.503864][ T4832] usb 5-1: USB disconnect, device number 13 [ 312.347768][T11476] x_tables: unsorted entry at hook 2 [ 312.489077][ T4267] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 312.638218][T11487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.930563][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3156'. [ 313.119145][ T4303] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 313.253633][ T4267] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 313.329016][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 313.339853][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.395316][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 313.433196][ T4303] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.502801][ T4303] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 313.528941][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.559216][ T4303] usb 4-1: Product: syz [ 313.564533][ T4303] usb 4-1: Manufacturer: syz [ 313.569690][ T4303] usb 4-1: SerialNumber: syz [ 313.591010][ T4303] usb 4-1: config 0 descriptor?? [ 313.610748][ T4303] radioshark 4-1:0.0: Invalid radioSHARK device [ 313.623607][ T4303] radioshark: probe of 4-1:0.0 failed with error -22 [ 313.649770][ T4303] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 313.763379][T11531] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3175'. [ 313.790086][T11531] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3175'. [ 313.842212][ T127] usb 4-1: USB disconnect, device number 17 [ 314.180357][ T4303] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 314.202101][T11543] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.258619][T11527] loop5: detected capacity change from 0 to 32768 [ 314.296679][T11527] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.3172 (11527) [ 314.364508][T11527] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 314.382941][ T4303] usb 3-1: Using ep0 maxpacket: 32 [ 314.391509][T11527] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 314.392375][ T4303] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 314.412354][T11527] BTRFS info (device loop5): enabling ssd optimizations [ 314.449443][T11527] BTRFS info (device loop5): not using ssd optimizations [ 314.460307][ T4303] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 314.479216][ T4303] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 314.482190][T11527] BTRFS info (device loop5): metadata ratio 3 [ 314.504003][ T4303] usb 3-1: config 1 has no interface number 0 [ 314.526105][T11527] BTRFS info (device loop5): turning off barriers [ 314.527838][ T4303] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.559256][T11527] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 314.568547][T11527] BTRFS info (device loop5): use lzo compression, level 0 [ 314.604792][ T4303] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.646241][ T4303] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 314.649004][T11527] BTRFS info (device loop5): using free space tree [ 314.666778][T11551] loop3: detected capacity change from 0 to 1024 [ 314.699997][ T4303] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 314.751208][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.800426][ T4303] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 314.833718][ T4263] hfsplus: bad catalog entry type [ 314.976743][ T4303] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 314.985857][ T4303] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 315.001998][ T4303] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 315.219562][ T9150] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 315.235863][ T4325] usb 3-1: USB disconnect, device number 15 [ 315.355264][T11547] loop1: detected capacity change from 0 to 32768 [ 315.381649][T11547] XFS: noikeep mount option is deprecated. [ 315.411775][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 315.709231][T11547] XFS (loop1): Mounting V5 Filesystem [ 315.861830][T11547] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 315.881801][ T4357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.932910][T11547] XFS (loop1): Starting recovery (logdev: internal) [ 315.996078][T11588] [ 315.996359][T11547] XFS (loop1): Ending recovery (logdev: internal) [ 315.998473][T11588] ====================================================== [ 315.998481][T11588] WARNING: possible circular locking dependency detected [ 315.998502][T11588] 6.1.142-syzkaller #0 Not tainted [ 316.015307][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3189'. [ 316.019094][T11588] ------------------------------------------------------ [ 316.019103][T11588] syz-executor/11588 is trying to acquire lock: [ 316.019114][T11588] ffff8880718c8288 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_map_blocks+0x316/0x1b60 [ 316.056280][T11588] [ 316.056280][T11588] but task is already holding lock: [ 316.063675][T11588] ffff88807dc18990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 316.072956][T11588] [ 316.072956][T11588] which lock already depends on the new lock. [ 316.072956][T11588] [ 316.083492][T11588] [ 316.083492][T11588] the existing dependency chain (in reverse order) is: [ 316.092555][T11588] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.092555][T11588] -> #5 (jbd2_handle){++++}-{0:0}: [ 316.099902][T11588] start_this_handle+0x1f49/0x2150 [ 316.105580][T11588] jbd2__journal_start+0x2b7/0x5a0 [ 316.111258][T11588] jbd2_journal_start+0x26/0x30 [ 316.116684][T11588] ocfs2_start_trans+0x372/0x6c0 [ 316.122194][T11588] ocfs2_modify_bh+0xe5/0x460 [ 316.127436][T11588] ocfs2_local_read_info+0x13b1/0x16e0 [ 316.133548][T11588] dquot_load_quota_sb+0x756/0xac0 [ 316.139223][T11588] dquot_load_quota_inode+0x2d8/0x5d0 [ 316.139251][T11588] ocfs2_enable_quotas+0x1c3/0x440 [ 316.150821][T11588] ocfs2_fill_super+0x409f/0x4d00 [ 316.156406][T11588] mount_bdev+0x287/0x3c0 [ 316.161299][T11588] legacy_get_tree+0xe6/0x180 [ 316.166546][T11588] vfs_get_tree+0x88/0x270 [ 316.171529][T11588] do_new_mount+0x24a/0xa40 [ 316.176594][T11588] __se_sys_mount+0x2d6/0x3c0 [ 316.181829][T11588] do_syscall_64+0x4c/0xa0 [ 316.186810][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.193275][T11588] [ 316.193275][T11588] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 316.201835][T11588] down_read+0x42/0x2d0 [ 316.206550][T11588] ocfs2_start_trans+0x366/0x6c0 [ 316.212054][T11588] ocfs2_modify_bh+0xe5/0x460 [ 316.217299][T11588] ocfs2_local_read_info+0x13b1/0x16e0 [ 316.223322][T11588] dquot_load_quota_sb+0x756/0xac0 [ 316.229001][T11588] dquot_load_quota_inode+0x2d8/0x5d0 [ 316.234941][T11588] ocfs2_enable_quotas+0x1c3/0x440 [ 316.240610][T11588] ocfs2_fill_super+0x409f/0x4d00 [ 316.246195][T11588] mount_bdev+0x287/0x3c0 [ 316.251097][T11588] legacy_get_tree+0xe6/0x180 [ 316.256346][T11588] vfs_get_tree+0x88/0x270 [ 316.261335][T11588] do_new_mount+0x24a/0xa40 [ 316.266408][T11588] __se_sys_mount+0x2d6/0x3c0 [ 316.271652][T11588] do_syscall_64+0x4c/0xa0 [ 316.276645][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.283124][T11588] [ 316.283124][T11588] -> #3 (sb_internal#4){.+.+}-{0:0}: [ 316.290652][T11588] ocfs2_start_trans+0x267/0x6c0 [ 316.296163][T11588] ocfs2_acquire_dquot+0x66e/0xb10 [ 316.301837][T11588] dqget+0x778/0xeb0 [ 316.306292][T11588] __dquot_initialize+0x3b6/0xcb0 [ 316.312100][T11588] ocfs2_get_init_inode+0x138/0x1b0 [ 316.317867][T11588] ocfs2_symlink+0xc09/0x2650 [ 316.323113][T11588] vfs_symlink+0x247/0x3d0 [ 316.328106][T11588] do_symlinkat+0x1ae/0x3f0 [ 316.333169][T11588] __x64_sys_symlink+0x7a/0x90 [ 316.338492][T11588] do_syscall_64+0x4c/0xa0 [ 316.343474][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.349947][T11588] [ 316.349947][T11588] -> #2 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 316.358850][T11588] down_write+0x36/0x60 [ 316.363572][T11588] ocfs2_create_local_dquot+0x1a0/0x1790 [ 316.369771][T11588] ocfs2_acquire_dquot+0x7ae/0xb10 [ 316.375450][T11588] dqget+0x778/0xeb0 [ 316.379909][T11588] __dquot_initialize+0x3b6/0xcb0 [ 316.385493][T11588] ocfs2_get_init_inode+0x138/0x1b0 [ 316.391275][T11588] ocfs2_symlink+0xc09/0x2650 [ 316.396609][T11588] vfs_symlink+0x247/0x3d0 [ 316.401584][T11588] do_symlinkat+0x1ae/0x3f0 [ 316.406646][T11588] __x64_sys_symlink+0x7a/0x90 [ 316.411970][T11588] do_syscall_64+0x4c/0xa0 [ 316.416953][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.423416][T11588] [ 316.423416][T11588] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 316.431102][T11588] __mutex_lock+0x120/0xaf0 [ 316.436160][T11588] dquot_commit+0x5a/0x410 [ 316.441134][T11588] ext4_write_dquot+0x1f0/0x360 [ 316.446553][T11588] mark_all_dquot_dirty+0xf9/0x400 [ 316.452225][T11588] __dquot_free_space+0x7ec/0xbc0 [ 316.457812][T11588] ext4_free_blocks+0x1bab/0x2640 [ 316.463402][T11588] ext4_ext_remove_space+0x1dd3/0x4490 [ 316.469423][T11588] ext4_ext_truncate+0x211/0x370 [ 316.474929][T11588] ext4_truncate+0xa0b/0x1230 [ 316.480157][T11588] ext4_evict_inode+0xb35/0x1100 [ 316.485641][T11588] evict+0x485/0x870 [ 316.490098][T11588] do_unlinkat+0x377/0x560 [ 316.495070][T11588] __x64_sys_unlink+0x45/0x50 [ 316.500304][T11588] do_syscall_64+0x4c/0xa0 [ 316.505380][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.511840][T11588] [ 316.511840][T11588] -> #0 (&ei->i_data_sem/3){++++}-{3:3}: [ 316.519707][T11588] __lock_acquire+0x2cf8/0x7c50 [ 316.525118][T11588] lock_acquire+0x1b4/0x490 [ 316.530183][T11588] down_read+0x42/0x2d0 [ 316.534892][T11588] ext4_map_blocks+0x316/0x1b60 [ 316.540291][T11588] ext4_append+0x22b/0x560 [ 316.545265][T11588] ext4_init_new_dir+0x2b8/0x570 [ 316.550763][T11588] ext4_mkdir+0x47d/0xc50 [ 316.555641][T11588] vfs_mkdir+0x387/0x570 [ 316.560445][T11588] do_mkdirat+0x1d0/0x430 [ 316.565339][T11588] __x64_sys_mkdir+0x6a/0x80 [ 316.570489][T11588] do_syscall_64+0x4c/0xa0 [ 316.575471][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.581937][T11588] [ 316.581937][T11588] other info that might help us debug this: [ 316.581937][T11588] [ 316.592192][T11588] Chain exists of: [ 316.592192][T11588] &ei->i_data_sem/3 --> &journal->j_trans_barrier --> jbd2_handle [ 316.592192][T11588] [ 316.605949][T11588] Possible unsafe locking scenario: [ 316.605949][T11588] [ 316.613434][T11588] CPU0 CPU1 [ 316.618847][T11588] ---- ---- [ 316.624238][T11588] lock(jbd2_handle); [ 316.628322][T11588] lock(&journal->j_trans_barrier); [ 316.636138][T11588] lock(jbd2_handle); [ 316.642740][T11588] lock(&ei->i_data_sem/3); [ 316.647356][T11588] [ 316.647356][T11588] *** DEADLOCK *** [ 316.647356][T11588] [ 316.655603][T11588] 3 locks held by syz-executor/11588: [ 316.660980][T11588] #0: ffff88807dc04460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 316.670149][T11588] #1: ffff888073aa2c20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 316.680824][T11588] #2: ffff88807dc18990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 316.690507][T11588] [ 316.690507][T11588] stack backtrace: [ 316.696425][T11588] CPU: 0 PID: 11588 Comm: syz-executor Not tainted 6.1.142-syzkaller #0 [ 316.704765][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.714845][T11588] Call Trace: [ 316.718136][T11588] [ 316.721080][T11588] dump_stack_lvl+0x168/0x22e [ 316.725784][T11588] ? load_image+0x3b0/0x3b0 [ 316.730308][T11588] ? show_regs_print_info+0x12/0x12 [ 316.735531][T11588] ? print_circular_bug+0x12b/0x1a0 [ 316.740756][T11588] check_noncircular+0x274/0x310 [ 316.745740][T11588] ? add_chain_block+0x940/0x940 [ 316.750719][T11588] ? lockdep_lock+0xdc/0x1e0 [ 316.755332][T11588] ? mark_lock+0x94/0x320 [ 316.759685][T11588] ? _find_first_zero_bit+0xcf/0x100 [ 316.764987][T11588] __lock_acquire+0x2cf8/0x7c50 [ 316.769871][T11588] ? ext4_inode_csum+0x61a/0x800 [ 316.774846][T11588] ? verify_lock_unused+0x140/0x140 [ 316.780074][T11588] lock_acquire+0x1b4/0x490 [ 316.784602][T11588] ? ext4_map_blocks+0x316/0x1b60 [ 316.789642][T11588] ? __might_sleep+0xd0/0xd0 [ 316.794259][T11588] ? read_lock_is_recursive+0x10/0x10 [ 316.799665][T11588] ? rcu_is_watching+0x11/0xa0 [ 316.804450][T11588] down_read+0x42/0x2d0 [ 316.808629][T11588] ? ext4_map_blocks+0x316/0x1b60 [ 316.813705][T11588] ext4_map_blocks+0x316/0x1b60 [ 316.818579][T11588] ? ext4_reserve_inode_write+0x244/0x290 [ 316.824332][T11588] ? ext4_issue_zeroout+0x250/0x250 [ 316.829561][T11588] ? __ext4_new_inode+0x310a/0x3a20 [ 316.834784][T11588] ext4_append+0x22b/0x560 [ 316.839310][T11588] ? ext4_init_new_dir+0x570/0x570 [ 316.844443][T11588] ext4_init_new_dir+0x2b8/0x570 [ 316.849400][T11588] ext4_mkdir+0x47d/0xc50 [ 316.853784][T11588] ? ext4_symlink+0x9c0/0x9c0 [ 316.858476][T11588] ? inode_permission+0xef/0x480 [ 316.863467][T11588] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 316.868514][T11588] ? security_inode_mkdir+0xb3/0x100 [ 316.874265][T11588] vfs_mkdir+0x387/0x570 [ 316.878537][T11588] do_mkdirat+0x1d0/0x430 [ 316.882887][T11588] ? vfs_mkdir+0x570/0x570 [ 316.887407][T11588] ? getname_flags+0x206/0x500 [ 316.892184][T11588] __x64_sys_mkdir+0x6a/0x80 [ 316.896790][T11588] do_syscall_64+0x4c/0xa0 [ 316.901241][T11588] ? clear_bhb_loop+0x60/0xb0 [ 316.905938][T11588] ? clear_bhb_loop+0x60/0xb0 [ 316.910628][T11588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.916573][T11588] RIP: 0033:0x7fe424bc2597 [ 316.921024][T11588] Code: 44 00 00 48 8d 50 ff 83 c1 01 48 21 d0 75 f4 01 cf 48 83 c6 08 4c 39 c6 75 d9 89 f8 c3 31 ff 89 f8 c3 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.940659][T11588] RSP: 002b:00007ffd2bb92a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 316.949090][T11588] RAX: ffffffffffffffda RBX: 00007ffd2bb92bb2 RCX: 00007fe424bc2597 [ 316.957078][T11588] RDX: 000000000de887dd RSI: 00000000000001c0 RDI: 00007ffd2bb92ba0 [ 316.965067][T11588] RBP: f49998db0aa753ff R08: 0000000000000004 R09: 0000000000000001 [ 316.973058][T11588] R10: 000000a3eca7ac56 R11: 0000000000000246 R12: 8421084210842109 [ 316.981043][T11588] R13: 00007ffd2bb92bb2 R14: 00007fe424c4df00 R15: 000000000de887dd [ 316.989039][T11588] [ 317.119140][ T4251] XFS (loop1): Unmounting Filesystem [ 317.206466][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.212865][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.342499][ T4357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.510746][ T4357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.610542][ T4357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.318643][ T4357] device hsr_slave_0 left promiscuous mode [ 318.327751][ T4357] device hsr_slave_1 left promiscuous mode [ 318.335915][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.345514][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.356319][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.365917][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.373981][ T4357] device bridge_slave_1 left promiscuous mode [ 318.386445][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.395144][ T4357] device bridge_slave_0 left promiscuous mode [ 318.403592][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.415017][ T4357] device veth1_macvtap left promiscuous mode [ 318.421292][ T4357] device veth0_macvtap left promiscuous mode [ 318.427403][ T4357] device veth1_vlan left promiscuous mode [ 318.685920][ T4357] bond2 (unregistering): Released all slaves [ 318.741069][ T4357] bond1 (unregistering): Released all slaves [ 318.886312][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 318.916537][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 318.927960][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.960291][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.034422][ T4357] bond0 (unregistering): Released all slaves [ 319.548798][ T4357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.626603][ T4357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.684051][ T4357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.733946][ T4357] bridge0: port 3(netdevsim0) entered disabled state [ 319.743906][ T4357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.855241][ T4357] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.893862][ T4357] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.937887][ T4357] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.983370][ T4357] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.089969][ T4357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.165096][ T4357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.216064][ T4357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.253368][ T4357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.343663][ T4357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.384038][ T4357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.424556][ T4357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.484255][ T4357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.677734][ T4357] device hsr_slave_0 left promiscuous mode [ 321.684757][ T4357] device hsr_slave_1 left promiscuous mode [ 321.696725][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.704277][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.714932][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.722503][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.731994][ T4357] device bridge_slave_1 left promiscuous mode [ 321.738224][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.746361][ T4357] device bridge_slave_0 left promiscuous mode [ 321.752973][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.763492][ T4357] device hsr_slave_0 left promiscuous mode [ 321.769900][ T4357] device hsr_slave_1 left promiscuous mode [ 321.776142][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.783795][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.791825][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.799388][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.806904][ T4357] device bridge_slave_1 left promiscuous mode [ 321.813300][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.821329][ T4357] device bridge_slave_0 left promiscuous mode [ 321.827497][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.841092][ T4357] device hsr_slave_0 left promiscuous mode [ 321.847496][ T4357] device hsr_slave_1 left promiscuous mode [ 321.853919][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.861490][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.869190][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.876645][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.884511][ T4357] device bridge_slave_1 left promiscuous mode [ 321.890829][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.899045][ T4357] device bridge_slave_0 left promiscuous mode [ 321.905235][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.916367][ T4357] device hsr_slave_0 left promiscuous mode [ 321.922738][ T4357] device hsr_slave_1 left promiscuous mode [ 321.929121][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.936552][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.944200][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.951739][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.959439][ T4357] device bridge_slave_1 left promiscuous mode [ 321.965761][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.974206][ T4357] device bridge_slave_0 left promiscuous mode [ 321.980538][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.993770][ T4357] device veth1_macvtap left promiscuous mode [ 321.999908][ T4357] device veth0_macvtap left promiscuous mode [ 322.005998][ T4357] device veth1_vlan left promiscuous mode [ 322.011876][ T4357] device veth0_vlan left promiscuous mode [ 322.018385][ T4357] device veth1_macvtap left promiscuous mode [ 322.024678][ T4357] device veth0_macvtap left promiscuous mode [ 322.030850][ T4357] device veth1_vlan left promiscuous mode [ 322.036737][ T4357] device veth0_vlan left promiscuous mode [ 322.043523][ T4357] device veth1_macvtap left promiscuous mode [ 322.049619][ T4357] device veth0_macvtap left promiscuous mode [ 322.055717][ T4357] device veth1_vlan left promiscuous mode [ 322.062513][ T4357] device veth1_macvtap left promiscuous mode [ 322.068630][ T4357] device veth0_macvtap left promiscuous mode [ 322.075142][ T4357] device veth1_vlan left promiscuous mode [ 322.081164][ T4357] device veth0_vlan left promiscuous mode [ 322.415653][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 322.446402][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 322.474460][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.505218][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.556404][ T4357] bond0 (unregistering): Released all slaves [ 322.757138][ T4357] bond1 (unregistering): Released all slaves [ 322.868469][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 322.899997][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 322.929701][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.942357][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.994988][ T4357] bond0 (unregistering): Released all slaves [ 323.253560][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 323.283435][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 323.315227][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.350318][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.402316][ T4357] bond0 (unregistering): Released all slaves [ 323.613404][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 323.646281][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 323.676003][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.707192][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.758400][ T4357] bond0 (unregistering): Released all slaves